Apache Ambari Security Bypass Vulnerability

Apache Ambari is a set of tools for configuring, managing and monitoring Apache Hadoop clusters from the Apache Apache Software Foundation, USA. The tool supports visualization and analysis of job and task execution, support for system alerts, and more. A security bypass vulnerability exists in...

Linux Audit '/auparse/auparse.c' Security Bypass Vulnerability

Linux Audit is a set of graphical tools for viewing audit logs of Linux systems. A security bypass vulnerability exists in Linux Audit. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

SAP Netwaver XML External Entity Injection Vulnerability

SAP Netwaver is a professional standards-based integrated application platform from SAP. The platform provides components such as portals, application servers and business intelligence solutions. An XML external entity injection vulnerability exists in SAP Netwaver versions prior to 7.01. An...

Gummi Local Competitive Conditions Vulnerability

Gummi is a Dutch software developer Alexander van der Meij developed a Linux-based platform and the use of C and GTK + technology development of open-source Latex editor , it provides real-time preview , syntax highlighting , export to PDF, error correction / spell checking and preset templates a...

Moodle Security Bypass Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle. An attacker could use this...

Linux Kernel Local Security Bypass Vulnerability (CNVD-2015-06390)

Linux kernel is an open source operating system. Linux kernel has a security vulnerability that allows local attackers to bypass security restrictions and perform unauthorized operations...

Google Android Security Restriction Bypass Vulnerability

Android is an operating system based on the Linux open kernel and is a mobile operating system announced on November 5, 2007 by Google Inc. Google Android is implemented with a security restriction bypass vulnerability, which can be exploited by an attacker to bypass certain security restrictions...

vzctl local security bypass vulnerability

vzctl is a set of tools used to manage OpenVZ, an OS-level server virtualization solution for Linux-based platforms. A local security bypass vulnerability exists in vzctl. A local attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

HP ArcSight Logger Remote Authorized Access Vulnerability

HP ArcSight Logger is a log management software tool. A remote authorized access vulnerability exists in HP ArcSight Logger, which can be exploited by an attacker to bypass certain authorization restrictions and perform unauthorized operations...

Elasticsearch Logstash Security Bypass Vulnerability (CNVD-2015-05626)

Elasticsearch Logstash is a set of log analysis and monitoring tools from Elasticsearch Netherlands. The tool provides functions such as search, processing and management of logs or events. A security bypass vulnerability exists in Elasticsearch Logstash. An attacker can exploit this vulnerabilit...

PHP Kobo Photo Gallery CMS for PC/smartphone and feature phone Cross-Site Request Forgery Vulnerability

PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone is a photo gallery content management system CMS for PC, smartphone and feature phone from PHP Kobo Japan. A cross-site request forgery vulnerability exists in the admin.php script in PHP Kobo Photo Gallery CMS for PC, smartphone and...

Security Bypass Vulnerability in Multiple Huawei ME906 Products

Huawei ME906 is a mobile internet module with M.2 which supports LTE, WCDMA, EVDO and GSM. Multiple Huawei ME906 products insecurely use CRC16 for escalation checking, allowing remote attackers to exploit the vulnerability to bypass security restrictions and perform unauthorized operations in the...

Multiple Vulnerabilities in Basware Maksuliikenne

Basware Maksuliikenne is a suite of software from the Finnish company Basware that establishes connections with banks to manage their own finances. An information disclosure vulnerability and a security bypass vulnerability exist in Basware Maksuliikenne. An attacker could use these vulnerabiliti...

Apache Ranger Access Bypass Vulnerability

Apache Ranger is the Apache Software Foundation's architecture for implementing comprehensive security measures for Hadoop clusters, providing centralized security policy management for core enterprise security requirements such as authorization, billing, and data protection. An access bypass...

IPPUSBXD 'ippusbxd.c' Local Security Bypass Vulnerability

IPPUSBXD is a daemon for the IPP-over-USB printer support program. A local security bypass vulnerability exists in IPPUSBXD. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

GNOME Clutter Local Security Bypass Vulnerability

GNOME Clutter is an open source graphics library GUI and a collection of CAPIs developed by the GNOME project team that uses OpenGL for graphics rendering and is cross-platform and multi-language. A local security bypass vulnerability exists in GNOME Clutter. An attacker can exploit this...

ownCloud for iOS Security Bypass Vulnerability

ownCloud for iOS is a free and open source personal cloud storage solution based on the iOS platform created by German KDE developer Frank Karlitschek. The program offers file management, music storage, calendars, and more. A security bypass vulnerability exists in ownCloud for iOS. An attacker c...

Koha Cross-Site Request Forgery Vulnerability

Koha is the first open source library automation system. Koha suffers from a cross-site request forgery vulnerability that could be exploited by an attacker to perform unauthorized operations...

Drupal OSF for Drupal module cross-site request forgery vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community. osf for Drupal is one of the middle-tier modules that allows customization tools and data display for internally structured data RDF and related vocabularies ontologies. A cross-site...

zf-oauth2 security bypass vulnerability

OAuth is an open web standard for authorization that is widely used around the world and is currently in version 2.0. A security bypass vulnerability exists in zf-oauth2, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations...