Lepide Software Active Directory Self Service Password Reset Vulnerability

Lepide Software Active Directory Self Service is a web-based self-service solution for Active Directory Active Directory Services. Lepide Software Active Directory Self Service does not properly restrict the use of the password reset feature, allowing remote attackers to exploit vulnerabilities t...

Python pip security bypass vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. pip is a set of tools for installing and managing Python packages. A security bypass vulnerability exists in Python pip. An attacker could use this vulnerability to bypass security restrictions and...

OpenSolution Quick.Cart 'admin.php' Cross-Site Request Forgery Vulnerability

OpenSolution Quick.Cart is a PHP-based open source e-commerce software from OpenSolution Poland. The software supports engine optimization , module extensions and so on. OpenSolution Quick.Cart version 6.6 and cross-site request forgery vulnerability. An attacker can exploit the vulnerability to...

HP HPE Helion Eucalyptus Unauthorized Access Vulnerability

HP HPE Helion Eucalyptus is an open source for building Amazon Web Services AWS compatible private cloud solutions from Hewlett-Packard HP. An unauthorized access vulnerability exists in HP HPE Helion Eucalyptus. An attacker could use this vulnerability to bypass security restrictions, gain...

Atlassian JIRA Security Bypass Vulnerability (CNVD-2015-085068)

Atlassian JIRA is a defect tracking management system. A security bypass vulnerability exists in Atlassian JIRA that could be exploited by remote attackers to bypass security restrictions and perform unauthorized operations...

eWON Cross-Site Request Forgery Vulnerability

eWON is an industrial router product from eWON Belgium. A cross-site request forgery vulnerability exists in eWON using firmware versions prior to 10.1s0. An attacker could exploit this vulnerability to perform unauthorized operations with user privileges...

eWON Information Disclosure Vulnerability

eWON is an industrial router product from eWON Belgium. A security vulnerability exists in eWON using firmware versions prior to 10.1s0, which originates from a program that uses an insecure GET HTML command instead of a POST command. An attacker could exploit the vulnerability to perform...

Avast! Antivirus 'JetDb::IsExploited4x' Security Bypass Vulnerability

Avast! Antivirus is a suite of antivirus programs from the Czech company Avast. A security vulnerability exists in Avast! Antivirus 'JetDb::IsExploited4x' that allows attackers to bypass security restrictions and perform unauthorized operations...

OpenStack Ironic Security Bypass Vulnerability

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration and Rackspace, Inc. Ironic is a component that provides bare-metal and virtual machine hypervisor interaction. A security bypass vulnerability exists in OpenStack Ironic. An attacker...

Huawei LogCenter Elevation of Privilege Vulnerability

Huawei LogCenter is a set of log management software from Huawei, China. An elevation of privilege vulnerability exists in Huawei LogCenter. An attacker can exploit this vulnerability to obtain elevated privileges and perform unauthorized operations...

LXDM 'X Server' Local Authentication Bypass Vulnerability

LXDM is a lightweight display manager product for the LXDE desktop environment. A local authentication bypass vulnerability exists in LXDM. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Belkin N150 Wireless Home Router Cross-Site Request Forgery Vulnerability

Belkin N150 Wireless Home is a wireless router product from Belkin USA. A cross-site request forgery vulnerability exists in the Belkin N150 Wireless Home Router. The vulnerability can be exploited by an attacker to bypass security restrictions and authentication mechanisms and perform unauthoriz...

PHPMailer 'class.phpmailer.php' Security Bypass Vulnerability

PHPMailer is a package of PHP functions for sending e-mail . A security bypass vulnerability exists in PHPMailer. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

KeePassX Security Bypass Vulnerability

KeePassX is an open source cross-platform password management tool . A security vulnerability exists in KeePassX that allows local attackers to bypass security restrictions and perform unauthorized operations...

Huawei Video Content Management Elevation of Privilege Vulnerability

Huawei Video Content Management is a video content management system from Huawei, China. A security vulnerability exists in Huawei Video Content Management that could be exploited by attackers to elevate privileges and perform unauthorized operations...

Elasticsearch Kibana Cross-Site Request Forgery Vulnerability

Elasticsearch Kibana formerly known as elasticsearch-dashboard is a suite of open-source, browser-based analytics and search Elasticsearch dashboard tools from the Dutch company Elasticsearch. A cross-site request forgery vulnerability exists in Elasticsearch Kibana versions prior to 4.1.3 and...

OpenStack Glance Security Bypass Vulnerability

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration and Rackspace, Inc. Glance is a project that stores, queries and retrieves virtual machine images. A security bypass vulnerability exists in OpenStack Glance, which can be exploited by ...

CloudBees Jenkins CI Security Bypass Vulnerability

CloudBees Jenkins CI formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A security bypass vulnerability exists in CloudBees Jenkins CI, which can be exploited by attackers to bypass security restrictions and perfo...

Huawei VP9660 Remote Security Bypass Vulnerability

Huawei VP9660 is a new generation of professional full HD video conferencing endpoints from Huawei, China. A remote security bypass vulnerability exists in the Huawei VP9660. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Moodle Security Bypass Vulnerability (CNVD-2015-07732)

Moodle is a free, open source e-learning software platform. A security bypass vulnerability exists in Moodle. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...