Drupal Administration Views Module Access Privilege Bypass Vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Administration Views is one of the modules used to replace the administration overview or list pages. An access rights bypass vulnerability exists in the Drupal Administration Views...

Drupal Panelizer Module Access Privilege Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Panelizer is one of the modules that applies Panels to any node or entity. An access privilege bypass vulnerability exists in the Drupal Panelizer module. An attacker could use this...

IBM BigFix Platform Cross-Site Request Forgery Vulnerability

IBM BigFix formerly known as IBM Endpoint Manager, Tivoli Endpoint Manager is a set of system management software from the American company IBM. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other function...

Rockwell Automation MicroLogix Remote Lift Vulnerability

Rockwell Automation MicroLogix 1400 1766-L32BXBA and others are programmable logic controllers PLCs from Rockwell Automation. A remote elevation vulnerability exists in Rockwell Automation MicroLogix 1400. An attacker could use this vulnerability to gain elevated privileges and perform unauthoriz...

IBM Connections Security Bypass Vulnerability

BM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A security bypass...

Ultra VNC Security Bypass Vulnerability

Ultra VNC is a suite of open source remote terminal control software. A security bypass vulnerability exists in Ultra VNC. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

vBulletin Server-Side Request Forgery Security Bypass Vulnerability

vBulletin is the United States Internet Brands and vBulletin Solutions, Inc. jointly developed an open source commercial Web forum program . A security bypass vulnerability exists in vBulletin versions 5.2.2 and earlier, 4.2.3, and 3.8.9 and earlier. An attacker can exploit this vulnerability to...

Cisco Prime Infrastructure Cross-Frame Scripting Vulnerability

Cisco Prime Infrastructure PI is a wireless management solution through Cisco Prime LAN Management Solution and Cisco Prime Network Control System technologies. A cross-frame scripting vulnerability exists in Cisco Prime Infrastructure. Allowing an attacker to bypass the homology policy and perfo...

Authentication Bypass Vulnerability in Multiple Vicon Network Cameras Products

Vicon V920D and SN663V etc. are the V9XX and SN6XX series of network camera products from Vicon Industries, USA. An authentication bypass vulnerability exists in multiple Vicon Network Cameras products, which can be exploited by an attacker to bypass the authentication mechanism and perform...

Perixx PERIDUO-710W Security Bypass Vulnerability

The Perixx PERIDUO-710W is a wireless desktop kit that includes a mouse and keyboard from Perixx Germany. A security bypass vulnerability exists in Perixx PERIDUO-710W. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Logitech Wireless Combo MK520 Security Bypass Vulnerability

The Logitech Wireless Combo MK520 is a wireless desktop kit that includes a mouse and keyboard from Logitech USA. A security bypass vulnerability exists in Logitech Wireless Combo MK520. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Cisco Email Security Appliance File Type Filtering Vulnerability

Cisco Email Security Appliance ESA is a set of e-mail security appliances from the American company Cisco Cisco. The appliance provides spam protection, email encryption, data loss prevention and other features. A file type filtering vulnerability exists in Cisco ESA. An attacker could exploit th...

Autobahn Python Security Bypass Vulnerability

Autobahn Python is a set of frameworks created in Python for the implementation of WebSocket and WAMP client-side and server-side . A security bypass vulnerability exists in Autobahn Python versions prior to 0.15.0. An attacker can exploit this vulnerability to perform unauthorized operations...

Multiple CHICKEN Egg product security bypass vulnerabilities (CNVD-2016-05836)

CHICKEN is a compiler for the CHICKEN programming language.CHICKEN Spiffy is a web server library for use in the Chicken Scheme system.CHICKEN http-client is one of the HTTP client libraries. A security bypass vulnerability exists in multiple CHICKEN Egg products and can be exploited by an attack...

SAP TREX Directory Traversal Vulnerability

SAP TREX is a search engine from SAP for the SAP NetWeaver integrated technology platform. A directory traversal vulnerability exists in SAP TREX because the program fails to adequately filter user-submitted input. An attacker could leverage the directory traversal character '...' The vulnerabili...

Pivotal Cloud Foundry Elastic Runtime Security Bypass Vulnerability

Pivotal Cloud Foundry is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.Elastic Runtime is a runtime environment for Pivotal Cloud Foundry. A security bypass...

CloudBees Jenkins Cucumber Reports Plugin Security Bypass Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Jenkin...

SAP HANA Security Bypass Vulnerability

SAP HANA is a high-performance real-time data analytics platform from SAP. The platform provides data query functions, users can directly query and analyze a large amount of real-time business data. A security bypass vulnerability exists in SAP HANA. An attacker could exploit this vulnerability t...

Moodle Security Bypass Vulnerability (CNVD-2016-05815)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle. An attacker could use this...

Moodle email-header injection vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. An email-header injection vulnerability exists in Moodle. An attacker can exploit this...