Multiple WAGO products certified to bypass vulnerability

WAGO 750-8202/PFC200 etc. are bus editable logic controller modules from WAGO Germany. An authentication bypass vulnerability exists in multiple WAGO products. An attacker could use this vulnerability to bypass the authentication mechanism and perform unauthorized operations...

Red Hat FreeIPA Insecure File Permissions Vulnerability

Red Hat FreeIPA is an integrated security information management solution from Red Hat, Inc. The solution provides an easy-to-manage identity, policy and audit IPA suite for Linux and Unix computer networks. An insecure file permission vulnerability exists in Red Hat FreeIPA. An attacker could...

OpenSSH Security Bypass Vulnerability

OpenSSH OpenBSD Secure Shell is a set of connection tools maintained by the OpenBSD Project Group for secure access to remote computers. A security bypass vulnerability exists in OpenSSH. An attacker could use the vulnerability to bypass certain security restrictions and perform unauthorized...

Microsoft Windows UAC Protection Security Bypass Vulnerability

Microsoft Windows is a set of operating systems developed by Microsoft Corporation in the United States. A security bypass vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to perform unauthorized operations bypassing security constraints...

Asterisk Open Source and Certified Asterisk 'chan_sip' authentication bypass vulnerability

Digium Asterisk Open Source is an open source telephone exchange PBX system software from Digium. The software supports voicemail, multi-party voice conferencing, interactive voice response IVR and so on. A security vulnerability exists in Digium Asterisk Open Source. An attacker could exploit th...

PHP FormMail Generator Security Bypass Vulnerability (CNVD-2016-12386)

PHP FormMail Generator is a suite of PHP applications for generating standard web forms for inclusion in PHP or WordPress websites. A security bypass vulnerability exists in PHP FormMail Generator. A remote attacker can exploit this vulnerability to inject PHP code or perform unauthorized...

Sauter NovaWeb Web HMI Authentication Bypass Vulnerability

Sauter is a leading provider in the building, room automation, energy management and facility management sectors. An authentication bypass vulnerability exists in Sauter NovaWeb Web HMI, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations...

Cisco Email Security Appliance Security Bypass Vulnerability (CNVD-2016-12543)

Cisco Email Security Appliance is a Cisco email security appliance. A security vulnerability exists in the content filtering feature of the Cisco Email Security Appliance, which allows remote attackers to exploit the vulnerability to bypass user filtering restrictions and perform unauthorized...

Cisco Web Security Appliance Remote Security Bypass Vulnerability (CNVD-2016-12243)

Web Security Appliance WSA is a product of the American company Cisco Cisco, which is a set of network security appliances. A remote security bypass vulnerability exists in Web Security Appliance. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorize...

McAfee Application Control and Endpoint Security Security Bypass Vulnerability

McAfee Application Control MAC and Endpoint Security are both products of the U.S. company McAfee McAfee. The former is a set of program control software, the latter is a set of endpoint security software to provide intelligent threat defense. MAC and Endpoint Security have a local security bypas...

Google Chrome Blink Security Bypass Vulnerability (CNVD-2016-12106)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security bypass vulnerability exists in Blink in versions of Google Chrome prior to 55.0.2883.75. An attacker could use this...

Arista Networks CloudVision Portal Security Bypass Vulnerability

Arista Networks CloudVision Portal CVP is a web-based GUI portal system for the CloudVision platform from Arista Networks, USA. The system provides a solution for automating network operations including network device configuration, change management and network monitoring. A security bypass...

Docker Security Bypass Vulnerability (CNVD-2016-12185)

Docker is an open source application container engine from the American company Docker. A security bypass vulnerability exists in versions of Docker prior to 1.8.3. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

IBM Integration Bus and WebSphere Message Broker Local Security Bypass Vulnerability

BM Integration Bus and WebSphere Message Broker are both enterprise service bus ESB products from IBM, USA. The products provide connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. A local security bypass vulnerability exists i...

Biesta Billing has multiple vulnerabilities

Biesta Billing is an application and billing software for e-commerce websites. Biesta Billing 4.0 Beta suffers from cross-site request forgery and directory traversal vulnerabilities that stem from a failure to properly validate user input, which can be exploited by remote attackers to perform...

Android system_server code loading bypass vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. systemserver is one of the system servers. A code loading bypass vulnerability exists in systemserver in Android, which can be exploited by an attacker to bypass security...

Linux kernel out-of-bounds read/write vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. The Linux kernel suffers from an out-of-bounds read-write vulnerability. An attacker could exploit this vulnerability to cause a denial of service condition or perform...

Apple macOS Security Bypass Vulnerability

Apple macOS is a specialized operating system developed by Apple for Mac computers. A security bypass vulnerability exists in Apple macOS. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

phpMyAdmin security bypass vulnerability (CNVD-2016-11855)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...

phpMyAdmin security bypass vulnerability (CNVD-2016-11856)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...