57 matches found
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2024-56339 DESCRIPTION: IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 could allow a remote attacker...
The vulnerability of the Large Scale VPN (LSVPN) module of the PAN-OS operating system, which allows a intruder to disclose protected information
The vulnerability of the Large Scale VPN LSVPN module of the PAN-OS operating system is related to the incorrect elimination of certain elements in the output data. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms remotely...
CVE-2026-5516
IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Server Liberty could allow a remote attacker to bypass security under limited conditions by exploiting a specific timing window...
The vulnerability of the PAN-OS operating system’s web interface allows attackers to circumvent security restrictions and execute arbitrary commands.
The vulnerability of the PAN-OS operating system’s web interface is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary commands remotely...
The vulnerability of the Synology-chat module of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) allows a hacker to bypass existing security mechanisms.
The vulnerability of the Synology-chat module of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...
(Pwn2Own) Samsung Galaxy S25 Samsung Members Security Feature Bypass Vulnerability
This vulnerability allows remote attackers to bypass a security feature on affected installations of Samsung Galaxy S25. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Samsung Members application. The issue results from the exposure of a resource...
Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to remote security bypass due to Node.js package
Summary Node.js is used by the DataStage on Cloud Pak for Data ds-canvas service as part of Javascript processing. Vulnerability Details CVEID:CVE-2023-39331 DESCRIPTION: Node.js could allow a remote attacker to bypass security restrictions, caused by a path traversal bypass when verifying file...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B, arises from lack of access control mechanisms. This allows attackers to bypass security restrictions.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to lack of access control mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restrictions remote...
The vulnerability of Microsoft Edge browser on Android, related to access control deficiencies, allows attackers to circumvent existing security restrictions.
The vulnerability of Microsoft Edge browser on Android is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
ROS-2-1721
2.1721 Multiple vulnerabilities in Mozilla Thunderbird CVE-2021-29957, CVE-2021-29956 1. Vulnerability Description: The vulnerability allows a remote attacker to bypass the security restrictions imposed.Identifier of the Information Security Threats Data Bank of the FSTEC of Russia :...
cURL CVE-2019-15601 Remote Security Bypass Vulnerability
Description cURL is prone to a remote security-bypass vulnerability. An attacker can leverage this issue to bypass security restrictions and perform unauthorized actions. This may aid in further attacks. cURL versions prior to 7.68.0 are vulnerable. Technologies Affected Haxx Curl 7.34.0 Haxx Cur...
Cisco AnyConnect Secure Mobility Client CVE-2019-16007 Remote Security Bypass Vulnerability
Description Cisco AnyConnect Secure Mobility Client is prone to a remote security-bypass vulnerability. An attacker can exploit this issue to bypass security restrictions and perform unauthorized actions. This may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCvr67149...
Samba CVE-2019-14870 Remote Security Bypass Vulnerability
Description Samba is prone to a security-bypass vulnerability. Successful exploit may allow attackers to bypass certain security restrictions and gain unauthorized access to resources. Samba 4.x versions prior to 4.11.3, 4.10.11 and 4.9.17 are vulnerable. Technologies Affected Samba Samba 4.0.0...
Cisco Email Security Appliance CVE-2019-15971 Remote Security Bypass Vulnerability
Description Cisco Email Security Appliance is prone to a remote security-bypass vulnerability. An attacker can exploit this issue to bypass security restrictions and perform unauthorized actions. This may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCvh88851. Technologies...
Multiple Dell EMC Products CVE-2019-3765 Remote Security Bypass Vulnerability
Description Multiple Dell EMC products are prone to a remote security-bypass vulnerability. An attacker can exploit this issue to obtain sensitive information, bypass security restrictions and perform unauthorized actions. This may aid in further attacks. The following products are vulnerable: De...
Cisco Email Security Appliance CVE-2019-12706 Remote Security Bypass Vulnerability
Description Cisco Email Security Appliance is prone to a remote security-bypass vulnerability. An attacker can exploit this issue to bypass security restrictions and perform unauthorized actions. This may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCvq35034. Cisco AsyncO...
The vulnerability of the org.slf4j.ext.EventData component in the slf4j-ext library of SLF4J allows attackers to circumvent existing security restrictions.
The vulnerability of the org.slf4j.ext.EventData component in the slf4j-ext library of SLF4J lies in the possibility of memory corruption due to an unreliable data structure. Exploiting this vulnerability allows a remote attacker to circumvent existing security restrictions...
Microsoft Internet Explorer Remote Security Bypass Vulnerability
Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote security bypass vulnerability exists in Microsoft IE 10 and 11. A remote attacker could exploit the vulnerability by leveraging a specially crafted URL and...
Microsoft Windows Device Guard CVE-2018-8449 Remote Security Bypass Vulnerability
Description Microsoft Windows is prone to a remote security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit System...
Microsoft MSR JavaScript Cryptography Library CVE-2018-8319 Remote Security Bypass Vulnerability
Description Microsoft MSR JavaScript Cryptography Library is prone to a remote security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft MSR JavaScrip...