Apache Ranger Authentication Bypass Vulnerability

Apache Ranger is the Apache Software Foundation's architecture for implementing comprehensive security measures for Hadoop clusters, providing centralized security policy management for core enterprise security requirements such as authorization, billing, and data protection. An authentication...

ZOHO ManageEngine EventLog Analyzer Elevation of Privilege Vulnerability

ZOHO ManageEngine EventLog Analyzer is a set of system, event log analysis software. A security vulnerability exists in ZOHO ManageEngine EventLog Analyzer that could be exploited by an attacker to elevate privileges and perform unauthorized operations...

Drupal Open Atrium Module Security Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Open Atrium is one of the team collaboration and knowledge management system modules. A security bypass vulnerability exists in the Drupal Open Atrium module that can be exploited by...

Django Security Bypass Vulnerability (CNVD-2016-00884)

Django is a set of open source Web application framework based on the Python language . A security bypass vulnerability exists in Django that allows remote attackers to bypass security restrictions and perform unauthorized operations...

Ruby on Rails Active Model Security Bypass Vulnerability

Ruby on Rails is the Rails core team to develop and maintain a set of open source Web application framework based on the Ruby language . Active Model is one of the libraries containing various modules . A security vulnerability exists in Ruby on Rails Active Model that allows remote attackers to...

NTP Cronjob Script Local Privilege Vulnerability

The NTP Cronjob Script is a task script used to perform a purge operation on the statistics file generated by the NTP daemon running the statistics function. A security vulnerability exists in NTP Cronjob Script that can be exploited by attackers to gain root privileges and perform unauthorized...

NTP Security Bypass Vulnerability (CNVD-2016-00818)

NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security bypass vulnerability exists in NTP. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

phpMyAdmin Security Restriction Bypass Vulnerability

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A security vulnerability exists in phpMyAdmin due to a failure of the program to properly generate XSRF/CSRF tokens, which allows remote attackers to exploit the vulnerability by submitting special...

Cross-Site Request Forgery Vulnerability in Multiple Buffalo Devices

Buffalo BHR-4GRV2 and others are wireless router products from the Buffalo Group of Japan. A cross-site request forgery vulnerability exists in multiple Buffalo devices. A remote attacker could exploit this vulnerability to perform unauthorized operations...

Cisco Adaptive Security Appliance Software Security Bypass Vulnerability

Cisco Adaptive Security Appliances is a set of firewall appliances from Cisco in the United States. The appliance also includes IPS, SSL VPN, IPSec VPN, anti-spam and other features. A security bypass vulnerability exists in Cisco Adaptive Security Appliance Software, which allows remote attacker...

Kozea Radicale Security Bypass Vulnerability

Kozea Radicale is a free and open source CalDAV and CardDAV server solution. A security vulnerability exists in Kozea Radicale that could be exploited by remote attackers to bypass security restrictions and perform unauthorized operations...

RubyGems rack-attack 'ActionDispatch' security bypass vulnerability

RubyGems is a Ruby package manager from the RubyGems organization that is used to distribute and manage Ruby packages. rack-attack is one of the middleware used to block abusive requests. A security vulnerability in RubyGems rack-attack allows remote attackers to bypass security restrictions and...

NetApp SnapCenter Server Authentication Bypass Vulnerability

NetApp SnapCenter is a suite of applications that provide the ability to back up, verify, clone, and restore NetApp storage systems.NetApp SnapCenter Server is a server edition. A security vulnerability exists in NetApp SnapCenter Server that allows an attacker to bypass the authentication...

HP HPE ArcSight Logger Certificate Upload Security Bypass Vulnerability (CNVD-2016-00362)

HP HPE ArcSight Logger is a suite of log management software. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A vulnerability in the HP HPE ArcSight Logger client certificate upload processing...

Microsoft Office Security Mechanism Bypass Vulnerability

Microsoft Office is a suite of office software developed by Microsoft Corporation for the Microsoft Windows and Apple Macintosh operating systems. A security bypass vulnerability exists in Microsoft Office, which can be exploited by remote attackers to bypass the ASLR protection mechanism and...

Freebox OS Web interface cross-site request forgery vulnerability

The Freebox OS Web interface is a web interface for the ADSL modem Freebox operating system. A cross-site request forgery vulnerability exists in the Freebox OS Web interface version 3.0.2. An attacker could exploit this vulnerability by sending a specially crafted request to perform an...

OpenStack qemu-imge security bypass vulnerability

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration and Rackspace, Inc. OpenStack qemu-imge is one of the installation images. A security bypass vulnerability exists in OpenStack qemu-imge. An attacker could use this vulnerability to...

MediaWiki 'includes/User.php' Security Bypass Vulnerability

MediaWiki is a free and free web-based Wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers, which can be used to deploy in-house knowledge management and content management systems. A security bypass vulnerability exists in MediaWiki. An attacker could use th...

MediaWiki Remote Vulnerability

MediaWiki is a free and free web-based Wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers, which can be used to deploy in-house knowledge management and content management systems. A remote security vulnerability exists in MediaWiki. An attacker could exploi...

MediaWiki Security Bypass Vulnerability (CNVD-2016-00110)

MediaWiki is a free and free web-based Wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers, which can be used to deploy in-house knowledge management and content management systems. A security bypass vulnerability exists in MediaWiki. An attacker could use th...