4758 matches found
The vulnerability of Adobe Acrobat’s PDF editing software allows a hacker to circumvent existing access restrictions.
The vulnerability of Adobe Acrobat’s PDF editing software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions from a remote location...
The vulnerability of the Adobe Reader PDF viewer program allows a hacker to circumvent access restrictions.
The vulnerability of the Adobe Reader PDF viewer program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass restrictions on access to the JavaScript API...
Apache ap_some_auth_required() Security Bypass Vulnerability
Apache is an open source HTTPD service program. An unspecified security vulnerability exists in the Apache apsomeauthrequired function, where the Require directive is still used for authorization settings and displayed in the configuration because the program does not require authentication. A...
PT-2015-2779
Name of the Vulnerable Software and Affected Versions IBM DB2 versions 9.7 through FP10 IBM DB2 versions 9.8 through FP5 IBM DB2 version 10.1 before FP5 IBM DB2 versions 10.5 through FP5 Description The issue is related to the Data Movement implementation in IBM DB2, which has inadequate access...
Adobe Reader and Acrobat Information Disclosure Vulnerability (CNVD-2015-04605)
Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. An information disclosure vulnerability exists in Adobe Reader and Acrobat that could allow an attacker to bypass predetermined access restrictions and obtain sensitive informatio...
Adobe Reader and Acrobat Information Disclosure Vulnerability (CNVD-2015-04609)
Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. An information disclosure vulnerability exists in Adobe Reader and Acrobat that could allow an attacker to bypass predetermined access restrictions and obtain sensitive informatio...
Adobe Reader and Acrobat Information Disclosure Vulnerability (CNVD-2015-04610)
Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. An information disclosure vulnerability exists in Adobe Reader and Acrobat that could allow an attacker to bypass predetermined access restrictions and obtain sensitive informatio...
Adobe Reader and Acrobat Information Disclosure Vulnerability (CNVD-2015-04604)
Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. An information disclosure vulnerability exists in Adobe Reader and Acrobat that could allow an attacker to bypass predetermined access restrictions and obtain sensitive informatio...
php: regressions in 5.4+
It was found that certain PHP functions did not properly handle file names containing a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions...
PT-2015-3402
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 6.9 Description The issue is related to the x11 open helper function in channels.c in ssh, which lacks a check of the refusal deadline for X connections when ForwardX11Trusted mode is not used. This makes it easier fo...
Mozilla Firefox/Firefox ESR/Thunderbird Security Restriction Bypass Vulnerability
Mozilla Firefox/Thunderbird is a web browser/email client released by Mozilla. A security restriction bypass vulnerability exists in Mozilla Firefox/Firefox ESR/Thunderbird. An attacker can exploit the vulnerability to bypass targeted access restrictions...
USN-2652-1 oxide-qt vulnerabilities
It was discovered that Chromium did not properly consider the scheme when determining whether a URL is associated with a WebUI SiteInstance. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass security restrictions. CVE-2015-1266 ...
Cisco Unified Communications Domain Manager Information Disclosure Vulnerability
A vulnerability in the web framework of Cisco Unified Communications Domain Manager Application Software could allow an unauthenticated, remote attacker to access content in the bvsmweb directory. The vulnerability is due to insufficient access controls. An attacker could exploit this vulnerabili...
PT-2015-3343
Name of the Vulnerable Software and Affected Versions Apache Storm version 0.10.0 Description The issue is related to the UI daemon in Apache Storm, which has insufficient access controls. This allows remote attackers to execute arbitrary code. With Kerberos authentication, this could potentially...
Igreks MilkyStep Light and Professional Access Restriction Bypass Vulnerability
Igreks MilkyStep is a CGI for pushing magazines through the email system. A security vulnerability in the user-information management feature of Igreks MilkyStep Light and Professional allows remote attackers to bypass access restrictions and modify administrator credentials...
CVE-2015-2125
Unspecified vulnerability in HP WebInspect 7.x through 10.4 before 10.4 update 1 allows remote authenticated users to bypass intended access restrictions via unknown vectors...
The vulnerability of the Adobe Reader text viewer program, which allows a violator to circumvent access restrictions
The vulnerability of the Adobe Reader text viewer arises when using the JavaScript API, and it could allow a remote attacker to circumvent current access control rules...
The vulnerability of the Acrobat text viewing program allows a violator to circumvent access restrictions.
The vulnerability of the Acrobat text viewing program arises when using the JavaScript API, and it could allow a malicious actor to circumvent current access control regulations remotely...
The vulnerability of the Adobe Reader text viewer program, which allows a violator to circumvent access restrictions
The vulnerability of the Adobe Reader text viewer arises when using the JavaScript API, and it could allow a remote attacker to circumvent current access control rules...
The vulnerability of the Acrobat text viewing program allows a violator to circumvent access restrictions.
The vulnerability of the Acrobat text viewing program arises when using the JavaScript API, and it could allow a malicious actor to circumvent current access control regulations remotely...