The vulnerability of the iOS operating system allows a hacker to bypass existing mechanisms for restricting local access and gain access to information about notifications.

The vulnerability of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating locally, to circumvent existing mechanisms for restricting local access and gain access to information about notifications by...

DEBIAN-CVE-2016-2048

Django 1.9.x before 1.9.2, when ModelAdmin.saveas is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option when editing objects and leveraging the "change" permission...

CAREL PlantVisorEnhanced Access Restriction Bypass Vulnerability

CAREL PlantVisor Enhanced is a suite of monitoring and remote maintenance software for CAREL instrument-controlled refrigeration and air conditioning systems. A security vulnerability in CAREL PlantVisor Enhanced allows a remote attacker to bypass established access restrictions by sending a dire...

The vulnerability of the Windows operating system allows a perpetrator to circumvent existing access restrictions or establish a connection for an account with a empty password.

The vulnerability of the RDP service implementation in the Windows operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions or establish a connection for an account with a empty password using a...

The vulnerability of microprogrammed software in HP networking switches allows attackers to circumvent existing access restrictions.

The vulnerability of microprogrammed software in HP Networking switches is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder operating locally to circumvent existing access restrictions...

Microsoft SharePoint Server Security Mechanism Bypass Vulnerability

Microsoft SharePoint Server is the U.S. Microsoft Microsoft company launched the integrated suite of server functionality to provide comprehensive WEB-based information sharing and document collaboration technology content management and enterprise search, accelerate the sharing of business...

Microsoft SharePoint Security Bypass Vulnerability

Microsoft Office is an office software suite based on the Windows operating system. A security feature bypass vulnerability exists in Microsoft SharePoint, which can be exploited by remote attackers to bypass target ACP restrictions and conduct XSS attacks by modifying the webpart...

HP Networking Products and H3C Comware Devices Denial of Service Vulnerability

H3C Comware is H3C's core software platform that builds the foundation of its IP network products. A security vulnerability exists in H3C Comware 5/7 devices, which can be exploited by remote attackers to bypass target access restrictions or cause a denial of service through virtual routing and...

Cisco Prime Network Services Controller Arbitrary Command Execution Vulnerability

Cisco Prime Network Services Controller is a set of cloud automation network management software from Cisco Cisco. An arbitrary command execution vulnerability exists in Cisco Prime Network Services Controller 3.0. It allows a local user to bypass predefined access restrictions and execute...

Cisco Application Policy Infrastructure Controller Insecure Credentials Vulnerability

A vulnerability in the boot process of the Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, local attacker to access the APIC as the root user. The vulnerability is due to improper implementation of access controls in the APIC system. An attacker could exploit...

The vulnerability of Microsoft Exchange Server allows attackers to circumvent existing access restrictions and redirect network traffic.

The vulnerability of Microsoft Exchange Server web applications is related to code errors. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and redirect network traffic through a specially crafted request...

Cisco Prime Service Catalog Web Interface Unauthorized Access Vulnerability

A vulnerability in the web interface of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to perform limited configuration changes. The vulnerability is due to missing access controls in some of the web pages that allow configuration changes. An attacker could exploit th...

Security Bypass Vulnerabilities in Multiple IBM Products (CNVD-2015-07939)

IBM Maximo Asset Management is a product of IBM Corporation.Maximo Asset Management and Maximo Asset Management Essentials are comprehensive asset lifecycle and maintenance management solutions.SmartCloud Control Desk SCCD is a unified asset and service management software.Tivoli IT Asset...

Cisco UCS Central Software Server-Side Request Forgery Vulnerability

A vulnerability in the Cisco Unified Computing System UCS Central software could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery SSRF on a targeted system. The vulnerability is due to improper validation of user-supplied input on the...

The vulnerabilities of Adobe Integrated Runtime and Flash Player allow a perpetrator to circumvent access restrictions for recording files.

The vulnerability of Adobe Integrated Runtime and Flash Player is related to deficiencies in access control for files. Exploiting this vulnerability can allow a malicious actor to bypass access restrictions on file writing...

The vulnerability of the Cisco Secure Access Control System allows a perpetrator to bypass access restrictions and read log files as well as device status information.

The vulnerability of the report generation web interface of the Solution Engine component of the Cisco Secure Access Control System relates to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to bypass access restrictions and read l...

The vulnerability of the Android operating system allows attackers to circumvent existing access restrictions, breach data confidentiality, or cause service failures.

The vulnerability of the Android operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions, compromise data confidentiality, or cause service failures through a specially creat...

The vulnerability of the Firefox browser allows a violator to circumvent domain restrictions and breach data confidentiality.

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access controls and compromise data confidentiality using a specially crafted HTML document...

CVE-2015-7910

Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body...

The vulnerability of the web application for data synchronization with ownCloud allows a hacker to circumvent existing access restrictions and gain access to users’ files.

The vulnerability of the virtual file system of the web application for data synchronization with ownCloud is related to the lack of data validation during data retrieval. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and gain access to user files b...