Powerlogic / Schneider Electric IONXXXX CSRF / Missing Access Controls

Powerlogic/Schneider Electric IONXXXX series Smart Meters - Multiple security issues Impacted devices: ION7300 and potentially all IONXXXX models based off of Powerlogic For example, Power Measurement Ltd. Meter ION 7330V283 ETH ETH7330V274...

CVE-2016-1484

Cisco WebEx Meetings Server 2.6 allows remote attackers to bypass intended access restrictions and obtain sensitive application information via unspecified vectors, aka Bug ID CSCuy92724...

WSO2 Carbon 4.4.5 - Persistent Cross-Site Scripting

Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WSO2-CARBON-v4.4.5-PERSISTENT-XSS-COOKIE-THEFT.txt + ISR: ApparitionSec Vendor: ============= www.wso2.com Product: ================== Ws02Carbon v4.4.5 WSO2 Carbon is the...

Google Chrome DevTools Access Restriction Vulnerability (CNVD-2016-06146)

Google Chrome is a web browsing tool developed by Google. Google Chrome has a security vulnerability. Due to incorrect handling of the hostname of a script path, it allows remote attackers to bypass intended access restrictions via URLs. Unlike CVE-2016-5143...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, allow attackers to circumvent restrictions on the execution of JavaScript APIs.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, are related to lack of access control mechanisms. Exploiting these vulnerabilities can allow a malicious actor to...

The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions

The vulnerability of the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions by using the default method...

The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions

The vulnerability of the MultiPageValidator implementation in the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass existing access restrictions by modifying page parameters remotely...

UBUNTU-CVE-2016-4178

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors...

Android Qualcomm component security bypass vulnerability (CNVD-2016-04817)

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies used in the Qualcomm devices. Qualcomm is a Qualcomm device-specific component us...

The vulnerability of the HP NonStop Safegguard Security protection mechanism allows attackers to escalate their privileges.

The vulnerability of the HP NonStop Safegguard Security information protection tool is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to enhance their privileges by utilizing extended access control...

The vulnerability of the SeaMonkey software allows a malicious actor to compromise the confidentiality and integrity of protected information.

The vulnerability in the implementation of XrayWrapper in Mozilla Firefox and SeaMonkey allows malicious actors to bypass access restrictions by using a specially crafted web page, provided that the user visits it through a debugger. This enables operations such as unwrapping and calling DOM...

Vulnerability of Adobe AIR software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information

The vulnerability in Adobe AIR allows attackers to circumvent access restrictions...

The vulnerability of the Cisco Wireless LAN Controller 4100 software allows for circumventing access restrictions.

Vulnerability exists in Cisco Wireless LAN Controller WLC devices due to the widespread use of the Aironet IOS software. This leads to a state where the controller acts as an administrative HTTP server. Exploiting this vulnerability allows malicious actors to bypass access restrictions by...

The vulnerability of Adobe Pepper Flash software for Google Chrome allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Adobe Pepper Flash for Google Chrome allows attackers to circumvent access restrictions...

The vulnerability of the Flash Player software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Adobe Flash Player allows attackers to circumvent access restrictions...

The vulnerability of the Flash Player software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Adobe Flash Player allows attackers to circumvent access restrictions...

The vulnerability of Adobe Pepper Flash software for Google Chrome allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Adobe Pepper Flash for Google Chrome allows attackers to circumvent access restrictions...

The vulnerability of Adobe Pepper Flash software for Google Chrome allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Adobe Pepper Flash for Google Chrome allows attackers to circumvent access restrictions...

The vulnerability of the Flash Player software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Adobe Flash Player allows attackers to circumvent access restrictions...

The vulnerability of the Flash Player software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Adobe Flash Player allows attackers to circumvent access restrictions...