Multiple EMC Product Privilege Bypass Vulnerabilities

EMC Documentum WebTop is a suite of products that allow users to access Documentum repositories and content management services in a standard browser application.Documentum Administrator is a set of Web-based development tools for performing Documentum system administration tasks. Documentum...

Siemens S7300/400 PLC has a Privilege Bypass Downtime Vulnerability

The Siemens S7300/400 PLC is a modular general-purpose controller from Siemens for the manufacturing industry. A privilege bypass downtime vulnerability exists in the Siemens S7300/400 PLC. An attacker can exploit the vulnerability by sending a specific message to change the PLC from the RUN stat...

Mozilla Firefox Privilege Bypass Vulnerability

Mozilla Firefox on Android is an open source web browser based on the Android platform from the US-based Mozilla Foundation. A privilege bypass vulnerability exists in Mozilla Firefox versions prior to 46.0 on Android platforms prior to version 5.0. An attacker can exploit this vulnerability to...

LOCKON EC-CUBE Access Privilege Vulnerability (CNVD-2016-02686)

LOCKON EC-CUBE is an open source e-commerce website building platform developed by Japan LOCKON Co. The platform supports product login, user evaluation, artwork layout and so on. An access privilege vulnerability exists in LOCKON EC-CUBE versions 3.0.0 through 3.0.9. A remote attacker can exploi...

Ecava IntegraXor Privilege Bypass Vulnerability

Ecava IntegraXor is a set of Web-based tools for creating and running HMI interfaces for SCADA systems. Ecava IntegraXor fails to properly check for user authorization when processing user access to sensitive web pages, allowing remote attackers to exploit the vulnerability to bypass security...

Ecava IntegraXor HMI Privilege Bypass Vulnerability

Ecava IntegraXor is a set of Web-based tools for creating and running HMI interfaces for SCADA systems. The Ecava IntegraXor HMI fails to properly process specific elements of input, allowing remote attackers to exploit the vulnerability to bypass security restrictions...

RedHat Update for tomcat6 RHSA-2016:0492-01

The remote host is missing an update for the Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Siemens SIMATIC S7-1200 CPU Privilege Bypass Vulnerability

The Siemens SIMATIC S7-1200 CPU device is a small programmable controller from Siemens that meets the needs of small and medium-sized automation systems. A privilege bypass vulnerability exists in Siemens SIMATIC S7-1200 CPU versions prior to 4.0, which can be exploited by an attacker to bypass t...

CVE-2015-8467

Samba CVE-2015-8467 affects the samldb_check_user_account_control_acl in dsdb/samdb/ldb_modules/samldb.c, with improper administrative privilege checks during machine account creation. A remote authenticated user could cause a denial of service by exposing Windows DCs in the same domain when a do...

GNU C Library Name Service Switch Privilege Bypass Vulnerability

GNU C Library is an open source, free C compiler released under the LGPL license. A security vulnerability in the 'getcontents' function in the nssfiles/files-XXX.c file in the Name Service Switch NSS of the GNU C Library allows a local attacker to exploit a specially crafted NSS file database to...

Apple OS X Privilege Bypass Vulnerability

Apple OS X is an operating system developed by Apple Inc. A security vulnerability exists in Apple OS X zlib, which allows an attacker to exploit the vulnerability to install configuration profile files without administrator privileges...

ZTE ZXHN H108N R1A权限绕过漏洞

No description provided by source...

ZTE ZXHN H108N R1A Privilege Bypass Vulnerability

The ZTE ZXHN H108N R1A is a wireless router product from China's ZTE Corporation. A security vulnerability exists in ZTE ZXHN H108N R1A ZTE.bhs.ZXHNH108NR1A.hPE that allows remote attackers to authenticate using a pre-existing account and perform unauthorized operations by manipulating a paramete...

ZTE ZXHN H108N R1A Default Account Privilege Bypass Vulnerability

The ZTE ZXHN H108N R1A is a wireless router product from China's ZTE Corporation. ZTE ZXHN H108N R1A ZTE.bhs.ZXHNH108NR1A.hPE The root account uses the 'root' password, which can be exploited by a remote attacker to take full control of the device when the system is enabled with Telnet service...

CVE-2008-4097

MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed wh...

Apple OS X Elevation of Privilege Vulnerability

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. Apple OS X suffers from an elevation of privilege vulnerability. A remote attacker, through a constructed app, can exploit this vulnerability to bypass target privilege restrictions an...

2345 Ace Input Method Local Elevation of Privilege Vulnerability

2345 Ace Input Method is a Chinese input software for PC launched by Shanghai 2,3,4,5 Network Technology Co. The system service installed by 2345 Ace Input Method provides the ability to create an elevated privilege process, but a vulnerability exists in the validation process. Due to improper...

IBM WebSphere eXtreme Scale Access Privilege Bypass Vulnerability

IBM WebSphere eXtreme Scale is a distributed caching solution. IBM WebSphere Extreme Scale does not invalidate pre-existing session identifiers, allowing remote attackers to exploit the vulnerability to gain access to other users...

Mozilla Firefox and Firefox ESR updater.exe Privilege Bypass Vulnerability

Mozilla Firefox is an open source web browser. A security vulnerability exists in the Mozilla Firefox updater.exe file that allows local attackers to perform a symbolic link attack to write arbitrary files at program startup...

Adobe Acrobat And Reader JavaScript API code execution (APSB15-15: CVE-2015-5085)

A Restrictions Bypass Privileged JavaScript API Execution Vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the use of trusted function which provides certain privileges that allows overwriting objects. A remote attacker can exploit this vulnerability by enticing the...