Mozilla Firefox MFSA has multiple vulnerabilities (CNVD-2017-04171)

Mozilla Firefox is an open source web browser. Multiple vulnerabilities exist in Mozilla Firefox. An attacker could use this vulnerability to bypass security restrictions to perform unauthorized operations, obtain sensitive information, execute arbitrary script code in the affected application's...

Cisco Wireless LAN Controller Remote Security Bypass Vulnerability

Cisco Wireless LAN Controller is a wireless LAN controller from Cisco. A remote security bypass vulnerability exists in Cisco Wireless LAN Controller. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations, resulting in further attacks...

OpenBSD Man-in-the-Middle Security Bypass Vulnerability

OpenBSD is the popular BSD operating system, a derivative of Unix. A security bypass vulnerability exists in OpenBSD. An attacker can exploit this vulnerability by performing a man-in-the-middle attack to bypass certain security restrictions and perform unauthorized operations, leading to other...

FTP Voyager Scheduler Cross-Site Request Forgery Vulnerability

FTP Voyager Scheduler is a program that starts or stops the scheduler when a user creates a directory or uploads or downloads a file by creating a task or command. A cross-site request forgery vulnerability exists in FTP Voyager Scheduler that stems from a failure to properly validate HTTP...

Microsoft Edge Security Bypass Vulnerability (CNVD-2017-03533)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security bypass vulnerability exists in Microsoft Edge. An attacker exploits the vulnerability to bypass security restrictions and perform unauthorized operatio...

Microsoft Internet Explorer and Edge Spoofing Vulnerability

Microsoft Internet Explorer and Edge are both web browsers developed by the American company Microsoft and are the default browsers that come with the Windows operating system. A security vulnerability exists in Microsoft Internet Explorer and Edge, which can be exploited by attackers to perform...

Apache NiFi Security Bypass Vulnerability

Apache NiFi is an automated solution for data transfer between systems. A security bypass vulnerability exists in Apache NiFi. An attacker could use this vulnerability to bypass security restrictions, perform unauthorized operations, and launch further attacks...

Zammad Security Bypass Vulnerability

Zammad is a web-based, open-source helpdesk/customer support system from the German company Zammad, with many features to manage customer communication through multiple channels such as phone calls. A security bypass vulnerability exists in Zammad. An attacker could exploit the vulnerability to...

WordPress Security Bypass Vulnerability (CNVD-2017-03617)

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from a security bypass vulnerability. An attacker can exploit this vulnerability to bypass certain security...

Multiple Vulnerabilities in Wordpress Themes Qualifire

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A file upload and cross-site request forgery vulnerability exists in Wordpress Themes Qualifire, which can be exploited by remote attackers ...

Drupal Views module access bypass vulnerability (CNVD-2017-03395)

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An access bypass vulnerability exists in the Drupal Views module. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized...

TYPO3 Remote Privilege Bypass Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. A privilege bypass vulnerability exists in TYPO3 Table Configuration Queue TCA, which can be exploited by remote attackers to bypass authentication and perform unauthorized...

Sawmill Enterprise Authentication Bypass Vulnerability

sawmill is a set of log analysis reporting tools, can support more than 800 kinds of devices or application logs. Through a variety of network transmission methods to read and cut the log file, stored in the back-end database for analysis. An authentication bypass vulnerability exists in Sawmill...

HP OfficeConnect Network Switches Local Security Bypass Vulnerability

The HP OfficeConnect 1820 is a switch product from Hewlett-Packard HP in the United States. A local security bypass vulnerability exists in HP OfficeConnect Network Switches. An attacker could exploit this vulnerability to bypass certain security restrictions and perform unauthorized operations...

IBM Security Key Lifecycle Manager Security Bypass Vulnerability

IBM Security Key Lifecycle Manager formerly known as Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. A security bypass vulnerability exist...

Drupal RESTful Module Access Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.RESTful is one of the modules that provides REST services. An access bypass vulnerability exists in the Drupal RESTful module. An attacker can exploit the vulnerability to bypass certai...

Drupal Storage API stream wrappers module authentication bypass vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Storage API is one of the framework modules for managing file storage and serving. An authentication bypass vulnerability exists in the Drupal Storage API stream wrappers module. An...

Riverbed RiOS Local Security Bypass Vulnerability

Riverbed Steelhead are hardware appliances used to optimize and accelerate network traffic. Implemented as TLS endpoints, they have a secure repository that stores the server's private TLS certificates. A local security bypass vulnerability exists in Riverbed RiOS. An attacker could use this...

OpenStack Nova-LXD Security Bypass Vulnerability

Nova is the compute organization controller in the OpenStack cloud. All activities that support the lifecycle of instances in an OpenStack cloud are handled by Nova. A security bypass vulnerability exists in OpenStack Nova-LXD, which can be exploited by an attacker to bypass security restrictions...

Drupal OAuth Module Access Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.OAuth is one of the third-party modules that enables you to authenticate requests using the OAuth 1.a protocol. An access bypass vulnerability exists in the Drupal OAuth module. An...