Microsoft Windows Local Security Bypass Vulnerability (CNVD-2017-12996)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local security bypass vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Microsoft Edge Security Bypass Vulnerability (CNVD-2017-12104)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security bypass vulnerability exists in Microsoft Edge. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2017-12787)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to obtain sensitive information, bypass security restrictions, and perform...

Microsoft Outlook for Mac Spoofing Vulnerability

Microsoft Outlook for Mac is an email client software bundled with the Office suite for the Mac-based platform from Microsoft USA. The software manages email, contacts, calendars, and more. A security vulnerability exists in Microsoft Outlook for Mac. An attacker can exploit this vulnerability to...

Microsoft Windows Device Guard Local Security Bypass Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local security bypass vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Subsonic Server-Side Request Forgery Vulnerability

Subsonic is a media streaming server that allows users to save music or collect videos on the server. Subsonic suffers from a server-side request forgery vulnerability. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Cross-Site Request Forgery Vulnerability in 08CMS Real Estate System

08CMS Real Estate System is a PHP+MYSQL based, professional and secure operation solution for local real estate portals. 08cms version 7.0 real estate system has a cross-site request forgery vulnerability, which can be exploited by attackers to perform unauthorized operations...

Oracle Database Server Authentication Bypass Vulnerability

Oracle Database Server is an object-relational database management system. It provides an open, comprehensive, and integrated approach to information management. An authentication bypass vulnerability exists in Oracle Database Server. An attacker could use this vulnerability to bypass the...

Eclipse Mosquitto Security Bypass Vulnerability

Eclipse Mosquitto is an open source messaging agent software from the Eclipse Foundation . A security bypass vulnerability exists in Eclipse Mosquitto versions 0.15 through 1.4.11. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

OpenStack Magnum Security Bypass Vulnerability

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration and Rackspace, Inc. Magnum is a container resource management component. A security bypass vulnerability exists in OpenStack Magnum. An attacker could use this vulnerability to bypass...

Man-in-the-middle attack vulnerability in multiple OnePlus products

The OnePlus 3T, among others, is a smart device from China's OnePlus Technology OnePlus. A security vulnerability exists in several OnePlus products. An attacker can exploit the vulnerability to perform a man-in-the-middle attack to bypass security restrictions and perform unauthorized operations...

Drupal Shibboleth authentication module access bypass vulnerability

Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community.Shibboleth Authentication is one of the user login and get access to the authentication module . An access bypass vulnerability exists in the Drupal Shibboleth authentication module...

Pivotal Cloud Foundry Elastic Runtime Security Bypass Vulnerability (CNVD-2017-10990)

Pivotal Cloud Foundry PCF is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.Elastic Runtime is a runtime environment for Pivotal Cloud Foundry. Elastic Runtime is a...

Security Bypass Vulnerability in Multiple OnePlus Devices

The OnePlus One, among others, are smartphones from China's OnePlus Technology OnePlus.OxygenOS and HydrogenOS are its own operating systems. A security bypass vulnerability exists in multiple OnePlus devices. An attacker can exploit the vulnerability to launch further attacks by performing a...

Phoenix Contact mGuard Security Bypass and Denial of Service Vulnerability

Phoenix Contact mGuard is a security device from Phoenix Contact that protects systems from unauthorized access and installation. A security bypass and denial of service vulnerability exists in Phoenix Contact mGuard. An attacker could exploit this vulnerability to perform an unauthorized operati...

Red Hat spacewalk-backend security bypass vulnerability

spacewalk is an open source free linux system management solution. It can be used to manage system information , install and update the software in the system , collect and distribute customized packages in the system to manageable groups , provide and manage configuration files in the system and...

SAP SNOTE Unauthorized Operation Vulnerability

SAP Notes is an SAP knowledge base from SAP, Germany, which is a solution provided by SAP for a specific problem, operation, or configuration, and is made available to the customer in the form of a document. An unspecified security vulnerability exists in SAP SNOTE. An attacker could exploit this...

OnePlus X and One device security bypass vulnerability

The OnePlusX and One are both smartphones from China's OnePlus Technology OnePlus.OxygenOS and HydrogenOS are the operating systems that come with them. A security bypass vulnerability exists in OnePlusX and One. An attacker could use this vulnerability to launch further attacks by performing a...

Bubblewrap Security Bypass Vulnerability

bubblewrap is a set of tools for running containers. A security bypass vulnerability exists in Bubblewrap. An attacker could use this vulnerability to perform unauthorized operations bypassing security restrictions...

Drupal Linkit Module Access Bypass Vulnerability

Drupal is a free and open source content management system developed in PHP. An access bypass vulnerability exists in the Drupal Linkit module. An attacker can exploit this vulnerability to perform unauthorized operations bypassing some security restrictions...