SAP NetWeaver Security Bypass Vulnerability (CNVD-2016-09869)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A security bypass vulnerability exists in SAP NetWeaver version 7.4, which can be exploited by attackers to bypa...

SAP NetWeaver Security Bypass Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A security bypass vulnerability exists in SAP NetWeaver version 7.40, which can be exploited by an attacker to...

X.Org libXrandr Privilege Bypass Vulnerability

X.Org libXrandr is an X11 RandR extension library operated by the X.Org Foundation. A security vulnerability exists in X.Org libXrandr 1.5.0 and earlier versions that can be exploited by an attacker to bypass security restrictions and perform unauthorized operations...

X.Org libXtst Integer Overflow Vulnerability

X.Org libXtst is an Xlib-based client API proprietary to the XTEST & RECORD extension operated by the X.Org Foundation. An integer overflow vulnerability exists in X.Org libXtst 1.2.2 and earlier versions that can be exploited by an attacker to perform unauthorized operations...

Cybozu Office Security Bypass Vulnerability

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A security bypass vulnerability exists in Cybozu Office versions 9.0.0 through 10.4.0. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...

SPIP Cross-Site Request Forgery Vulnerability

SPIP is a free Web-based content publishing system. The system is primarily used for online collaboration. A cross-site request forgery vulnerability exists in SPIP versions 1.9.2-SPIP 3.0.7, which can be exploited by an attacker to perform unauthorized operations...

GE Bently Nevada 3500/22M Security Bypass Vulnerability

The GE Bently Nevada 3500/22M is a vibration monitoring system. A security bypass vulnerability exists in the GE Bently Nevada 3500/22M. Allowing an attacker to perform unauthorized operations...

LG Electronics L-04D Cross-Site Request Forgery Vulnerability

The LG Electronics L-04D is a wireless router from LG Electronics of South Korea. A cross-site request forgery vulnerability exists in LG Electronics L-04D firmware versions V10a and V10b. An attacker can exploit this vulnerability to perform unauthorized operations...

SetucoCMS Cross-Site Request Forgery Vulnerability

SetucoCMS is a content management system CMS. A cross-site request forgery vulnerability exists in SetucoCMS. An attacker could exploit this vulnerability to perform unauthorized operations...

BaserCMS Cross-Site Request Forgery Vulnerability (CNVD-2016-08860)

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions, which stems from the program failing to adequately filter user-submitted input. An attacker can exploit this vulnerability to perform unauthorize...

HP Network Automation Local Security Bypass Vulnerability

HP Network Automation is a suite of automated network configuration management tools from Hewlett-Packard HP. The tool automates configuration changes, software updates, compliance audits, and tracking and control of widely distributed, multi-vendor network devices. A local security bypass...

ZOHO ManageEngine ServiceDesk Plus Security Bypass Vulnerability

ZOHO ManageEngine ServiceDesk is the United States ZhuoHao ZOHO company's set of web-based help desk HelpDesk and asset management software. A security bypass vulnerability exists in ManageEngine ServiceDesk Plus 9.2 and prior versions, which can be exploited by an attacker to bypass security...

Node.js Security Bypass Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

Trend Micro Internet Security Security Bypass Vulnerability

Trend Micro Internet Security is a set of Trend Micro Trend Micro integrated with personal firewall, anti-virus, anti-spam and other features in one network security software. A security bypass vulnerability exists in versions 8 and 10 of Trend Micro Internet Security, which could be exploited by...

IBM Connections Cross-Site Request Forgery Vulnerability (CNVD-2016-08264)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site request...

Huawei HiSuite Man-in-the-Middle Security Bypass Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A man-in-the-middle security bypass vulnerability exists in Huawei HiSuite, which could be exploited by attackers to bypass security restrictions and perform unauthorized operations, or conduct man-in-the-middle...

Red Hat Enterprise Linux Local Security Bypass Vulnerability

Red Hat Enterprise Linux RHEL is a set of Linux operating systems maintained and distributed by Red Hat for business users. A local security bypass vulnerability exists in RHEL version 7.2, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations...

OpenStack Glance Security Bypass Vulnerability (CNVD-2016-08222)

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration and Rackspace, Inc. Glance is a project that stores, queries and retrieves virtual machine images. A remote security bypass vulnerability exists in OpenStack Glance. An attacker could u...

3Pixels Media Administration Page Bypass Vulnerability

3Pixels is a media software that combines technology and consulting services. A security bypass vulnerability exists in 3Pixels Media. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Canoas Web Hosting Administration Page Bypass Vulnerability

A security vulnerability exists in the Canoas web hosting administration page. Due to a failure to filter the Login and Senha parameters in the admin/login.php page. This allows an attacker to bypass login restrictions and perform unauthorized operations...