Subsonic Server-Side Request Forgery Vulnerability

Subsonic is a media streaming server that allows users to save music or collect videos on the server. Subsonic suffers from a server-side request forgery vulnerability. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Cross-Site Request Forgery Vulnerability in 08CMS Real Estate System

08CMS Real Estate System is a PHP+MYSQL based, professional and secure operation solution for local real estate portals. 08cms version 7.0 real estate system has a cross-site request forgery vulnerability, which can be exploited by attackers to perform unauthorized operations...

Oracle Database Server Authentication Bypass Vulnerability

Oracle Database Server is an object-relational database management system. It provides an open, comprehensive, and integrated approach to information management. An authentication bypass vulnerability exists in Oracle Database Server. An attacker could use this vulnerability to bypass the...

Eclipse Mosquitto Security Bypass Vulnerability

Eclipse Mosquitto is an open source messaging agent software from the Eclipse Foundation . A security bypass vulnerability exists in Eclipse Mosquitto versions 0.15 through 1.4.11. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

OpenStack Magnum Security Bypass Vulnerability

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration and Rackspace, Inc. Magnum is a container resource management component. A security bypass vulnerability exists in OpenStack Magnum. An attacker could use this vulnerability to bypass...

LightDM Security Bypass Vulnerability

LightDM is a set of desktop display managers for Linux desktops. A security bypass vulnerability exists in LightDM. An attacker could use this vulnerability to bypass established security restrictions and perform unauthorized operations...

Man-in-the-middle attack vulnerability in multiple OnePlus products

The OnePlus 3T, among others, is a smart device from China's OnePlus Technology OnePlus. A security vulnerability exists in several OnePlus products. An attacker can exploit the vulnerability to perform a man-in-the-middle attack to bypass security restrictions and perform unauthorized operations...

Pivotal Cloud Foundry Elastic Runtime Security Bypass Vulnerability (CNVD-2017-10990)

Pivotal Cloud Foundry PCF is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.Elastic Runtime is a runtime environment for Pivotal Cloud Foundry. Elastic Runtime is a...

SAP SNOTE Unauthorized Operation Vulnerability

SAP Notes is an SAP knowledge base from SAP, Germany, which is a solution provided by SAP for a specific problem, operation, or configuration, and is made available to the customer in the form of a document. An unspecified security vulnerability exists in SAP SNOTE. An attacker could exploit this...

Ansible Security Bypass Vulnerability (CNVD-2017-10573)

Ansible is a computer system configuration manager that can be used to publish, manage, and orchestrate computer systems. A security bypass vulnerability exists in Ansible. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

OnePlus X and One device security bypass vulnerability

The OnePlusX and One are both smartphones from China's OnePlus Technology OnePlus.OxygenOS and HydrogenOS are the operating systems that come with them. A security bypass vulnerability exists in OnePlusX and One. An attacker could use this vulnerability to launch further attacks by performing a...

Palo Alto Networks PAN-OS Security Bypass Vulnerability (CNVD-2017-10697)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security bypass vulnerability exists in Palo Alto Networks PAN-OS. An attacker could use this vulnerability to bypass certain security restrictions and perform unauthorized...

Drupal Linkit Module Access Bypass Vulnerability

Drupal is a free and open source content management system developed in PHP. An access bypass vulnerability exists in the Drupal Linkit module. An attacker can exploit this vulnerability to perform unauthorized operations bypassing some security restrictions...

Security Bypass Vulnerability in Multiple OnePlus Devices

The OnePlus One, among others, are smartphones from China's OnePlus Technology OnePlus.OxygenOS and HydrogenOS are its own operating systems. A security bypass vulnerability exists in multiple OnePlus devices. An attacker can exploit the vulnerability to launch further attacks by performing a...

Red Hat spacewalk-backend security bypass vulnerability

spacewalk is an open source free linux system management solution. It can be used to manage system information , install and update the software in the system , collect and distribute customized packages in the system to manageable groups , provide and manage configuration files in the system and...

Bubblewrap Security Bypass Vulnerability

bubblewrap is a set of tools for running containers. A security bypass vulnerability exists in Bubblewrap. An attacker could use this vulnerability to perform unauthorized operations bypassing security restrictions...

Foreman Remote Lift Vulnerability (CNVD-2017-10574)

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A remote privilege extraction vulnerability exists in Foreman. An attacker could use this vulnerability ...

Phoenix Contact mGuard Security Bypass and Denial of Service Vulnerability

Phoenix Contact mGuard is a security device from Phoenix Contact that protects systems from unauthorized access and installation. A security bypass and denial of service vulnerability exists in Phoenix Contact mGuard. An attacker could exploit this vulnerability to perform an unauthorized operati...

Git Security Bypass Vulnerability

Git is an open source distributed version control system that can handle versioning from very small to very large projects efficiently and at high speed. A security bypass vulnerability exists in Git. An attacker could exploit this vulnerability to perform unauthorized operations bypassing securi...

Drupal Shibboleth authentication module access bypass vulnerability

Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community.Shibboleth Authentication is one of the user login and get access to the authentication module . An access bypass vulnerability exists in the Drupal Shibboleth authentication module...