ZOHO ManageEngine Password Manager Pro Security Bypass Vulnerability

ZOHO ManageEngine Password Manager Pro PMP is a set of password management software from ZOHO. The software can record general password information, website login passwords, software registration codes and Email account passwords. A security bypass vulnerability exists in ZOHO ManageEngine PMP. A...

Mod_Nss Security Bypass Vulnerability

modnss is a module that provides encryption for the Apache HTTP server based on the Secure Sockets Layer SSL and Transport Layer Security TLS protocols and uses the Network Security Services NSS security library to provide encryption. A security bypass vulnerability exists in modnss version 1.0.1...

Android Local Security Bypass Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A local security bypass vulnerability exists in Android, which can be exploited by local attackers to bypass security restrictions and perform unauthorized operations...

GoPivotal Spring Security and Spring Framework Security Bypass Vulnerability

GoPivotal Spring Securit and Spring Framework are both products of the U.S. company GoPivotal. The former is a set of Spring-based applications to provide illustrative security protection security framework, the latter is a set of open source Java, Java EE application framework. A security bypass...

Apache Archiva Cross-Site Request Forgery Vulnerability (CNVD-2016-04983)

Apache Archiva is a suite of software from the Apache Software Foundation in the United States for managing one or more remote stores. A cross-site request forgery vulnerability exists in Apache Archiva version 1.3.9, which can be exploited by an attacker to perform unauthorized operations...

GnuTLS Local Security Bypass Vulnerability

GnuTLS is a free secure communications library for implementing the SSL, TLS and DTLS protocols developed by Nikos Mavrogiannopoulos of Belgium and Simon Josefsson of Sweden, software developers. A local security bypass vulnerability exists in GnuTLS version 3.4.12, which can be exploited by an...

Pulp Security Bypass Vulnerability

Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. A security bypass vulnerability exists in Pulp. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized...

Symantec Endpoint Protection Manager Cross-Site Request Forgery Vulnerability

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. A cross-site request forgery vulnerability exists in SEPM version 12.1. An attacker coul...

Multiple Meteocontrol WEB'log Products Cross-Site Request Forgery Vulnerabilities

Meteocontrol WEB'log is a web-based SCADA system from Meteocontrol Germany that provides energy and power configuration management functions using different connected energy/industrial devices. A cross-site request forgery vulnerability exists in several Meteocontrol WEB'log products. A remote...

IBM Security Identity Manager Virtual Appliance Cross-Site Request Forgery Vulnerability

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

Moodle Assignment Plugin Cross-Site Request Forgery Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas in Australia.Assignment is one of the plug-ins used to develop new types of assignments. A cross-sit...

Microsoft Enhanced Mitigation Experience Toolkit Security Bypass Vulnerability

Microsoft Enhanced Mitigation Experience Toolkit is a security tool introduced in response to vulnerabilities. It protects users from attacks even when patches are not installed through technologies such as Data Execution Protection DEP, Structured Exception Handling Override Protection SEHOP, an...

GNU Libgcrypt Security Bypass Vulnerability

GNU Libgcrypt is a general-purpose cryptographic library developed by the GNU Project based on the GnuPG code. A security vulnerability exists in GNU Libgcrypt that allows attackers to perform unauthorized operations...

Ubuntu Wily 'programs/pt_chown.c' Security Bypass Vulnerability

Ubuntu is a desktop-oriented GNU/Linux operating system developed by Canonical and the Ubuntu Foundation, with Wily being a development code name for Ubuntu. A security bypass vulnerability exists in Ubuntu Wily. A local attacker could use this vulnerability to bypass security restrictions and...

Drupal Nodejs Module Access Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language maintained by the Drupal community.Node.js is one of the modules that provides real-time push updates. An access bypass vulnerability exists in the Drupal Nodejs module. This vulnerability allows attackers to...

Umbraco CMS Cross-Site Request Forgery Vulnerability

Umbraco CMS is a Danish Umbraco company using ASP.Net build , Mysql for data storage content management system CMS. The system supports customized templates , manage users , rights definition of content and so on. A cross-site request forgery vulnerability exists in Umbraco CMS. The vulnerability...

Huawei Policy Center Elevation of Privilege Vulnerability

Huawei Policy Center is a suite of policy management center software from Huawei. An elevation of privilege vulnerability exists in Huawei Policy Center. An attacker could use this vulnerability to obtain elevated privileges and perform unauthorized operations...

OpenStack Glance Security Bypass Vulnerability

OpenStack is a cloud platform management project. glance is one of the projects that can store, query and retrieve virtual machine images. A security vulnerability exists in OpenStack Glanc that allows an attacker to exploit the vulnerability to bypass security restrictions and perform unauthoriz...

IBM Java SDK Security Bypass Vulnerability (CNVD-2016-01228)

The IBM Java SDK is a Java implementation for AIX and Linux platforms and is a software development kit. A security bypass vulnerability exists in the IBM Java SDK. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations within the context of a...

WordPress Security Bypass Vulnerability (CNVD-2016-01224)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security bypass vulnerability exists in WordPress, which allows remote attackers to bypass security...