CVE-2011-2102: Undefined Security Weakness

Unspecified vulnerability in Adobe Reader and Acrobat before 10.1 on Windows and Mac OS X allows attackers to bypass intended access restrictions via unknown vectors...

PT-2011-3419

Name of the Vulnerable Software and Affected Versions HP Service Manager versions 7.02, 7.11, 9.20, 9.21 HP Service Center version 6.2.8 Description The issue allows local users to bypass intended access restrictions. The exact vectors used for the bypass are not specified. Recommendations For HP...

CVE-2011-1858: Undefined Security Weakness

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows local users to bypass intended access restrictions via unknown vectors...

CVE-2011-1857: Undefined Security Weakness

Unspecified vulnerability in HP Service Manager 7.02, 7.11, 9.20, and 9.21 and Service Center 6.2.8 allows remote authenticated users to bypass intended access restrictions via unknown vectors...

PT-2011-3418

Name of the Vulnerable Software and Affected Versions HP Service Manager versions 7.02, 7.11, 9.20, 9.21 HP Service Center version 6.2.8 Description The issue allows remote authenticated users to bypass intended access restrictions. The exact vectors used for the bypass are not specified...

CVE-2011-1812

Removed by vendor...

CVE-2011-1812: Undefined Security Weakness

Google Chrome before 12.0.742.91 allows remote attackers to bypass intended access restrictions via vectors related to extensions...

CVE-2011-2329: Undefined Security Weakness

The ramparttimestamptokenvalidate function in util/ramparttimestamptoken.c in Apache Rampart/C 1.3.0 does not properly calculate the expiration of timestamp tokens, which allows remote attackers to bypass intended access restrictions by leveraging an expired token, a different vulnerability than...

PT-2011-1752

Name of the Vulnerable Software and Affected Versions IBM Web Content Manager versions 6.1.5, 7.0.0.1 before CF003 Description The issue allows remote authenticated users to bypass intended access restrictions on draft creation by leveraging certain resource editor privileges. Recommendations For...

CVE-2010-4806: Undefined Security Weakness

The authoring tool in IBM Web Content Manager WCM 6.1.5, and 7.0.0.1 before CF003, allows remote authenticated users to bypass intended access restrictions on draft creation by leveraging certain resource editor privileges...

CVE-2011-2166: Undefined Security Weakness

script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticated users to bypass intended access restrictions by leveraging a script...

CVE-2011-1582

Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests. NOTE: this vulnerability exists because of an...

CVE-2011-1582: Undefined Security Weakness

Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests. NOTE: this vulnerability exists because of an...

Multiple Vendor RPC portmapper Access Restriction Bypass

The RPC portmapper running on the remote host possibly included with EMC Legato Networker, IBM Informix Dynamic Server, or AIX has an access restriction bypass vulnerability. The service will only process pmapset and pmapunset requests that have a source address of '127.0.0.1'. Since communicatio...

PT-2011-3100

Name of the Vulnerable Software and Affected Versions Mahara versions prior to 1.3.6 Description The issue allows remote authenticated users to bypass intended access restrictions. This can lead to various unauthorized actions such as suspending a user account, editing or visiting a view, editing...

CVE-2011-0076: Undefined Security Weakness

Unspecified vulnerability in the Java Embedding Plugin JEP in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, on Mac OS X allows remote attackers to bypass intended access restrictions via unknown vectors...

openSUSE Security Update : libsvn_auth_gnome_keyring-1-0 (openSUSE-SU-2010:1042-1)

when using 'SVNPathAuthz shortcircuit' moddavsvn didn't properly enforce access restrictions CVE-2010-3315. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsvnauthgnomekeyring-1-0-3423. The...

CVE-2011-1843

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers...

PT-2011-3339

Name of the Vulnerable Software and Affected Versions FreeBSD versions 7.4 through 8.2 Description The issue arises from the makemask function in mountd.c, which does not correctly handle a -network field specifying a CIDR block with a prefix length that is not an integer multiple of 8. This allo...

CVE-2011-1843: Undefined Security Weakness

Integer overflow in conf.c in Tinyproxy before 1.8.3 might allow remote attackers to bypass intended access restrictions in opportunistic circumstances via a TCP connection, related to improper handling of invalid port numbers...