The vulnerability of the Adobe AIR software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe AIR software platform arises from the ability to access resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by manipulating data types...

McAfee Agent (MA) Resource Access Bypass Vulnerability

McAfee Agent is prone to resource access bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mcafee:mcafeeagent...

McAfee VirusScan Enterprise Resource Access Bypass Vulnerability

McAfee VirusScan Enterprise is prone to resource access bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VulnCheck KEV: CVE-2016-4117

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution...

Chamilo LMS SQL Injection Vulnerability

Chamilo LMS is an open source online learning and collaboration system developed by the Chamilo Association. The system supports the creation of instructional content, distance training and online question and answer sessions. Chamilo LMS suffers from SQL injection vulnerabilities that stem from...

CVE-2016-0735

Apache Ranger 0.5.x before 0.5.2 allows remote authenticated users to bypass intended parent resource-level access restrictions by leveraging mishandling of a resource-level exclude policy...

McAfee VirusScan Enterprise < 8.8 Patch 7 Protected Resource Access Bypass (SB10151)

The version of McAfee VirusScan Enterprise VSE installed on the remote Windows host is prior to 8.8 Patch 7. It is, therefore, affected by a flaw in its self-protection mechanism when applying rules to access settings, which are used to determine what applications and associated actions can be...

Moderate: Red Hat Security Advisory: kubernetes security update

Updated kubernetes packages that fix two security issues are now available for Red Hat OpenShift Enterprise 3.0.2. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

UBUNTU-CVE-2015-5174

Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory via a /.. slash dot dot in a pathname used by a web...

jakarta-taglibs-standard: XXE and RCE via XSL extension in JSTL XML tags

It was found that the Java Standard Tag Library JSTL allowed the processing of untrusted XML documents to utilize external entity references, which could access resources on the host system and, potentially, allowing arbitrary code execution...

CVE-2016-1905

The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object...

CVE-2015-6317

Cisco Identity Services Engine ISE before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926...

Design/Logic Flaw

Cisco Identity Services Engine ISE before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926...

CVE-2015-6317

Cisco Identity Services Engine (ISE) versions prior to 2.0 are vulnerable to an unauthorized access flaw where a low-privileged, authenticated user can bypass web-resource access restrictions by requesting resources directly. The root cause is improper filtering of web resources for administrativ...

Information disclosure

The importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0 allows remote attackers to bypass the Same Origin Policy by triggering use of the no-cors mode in the fetch API to attempt resource access that throws an exception, leading to information disclosure...

CVE-2014-8912

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF18, and 8.5.0 before CF08 improperly restricts resource access, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated b...

RedHat Update for jakarta-taglibs-standard RHSA-2015:1695-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to the ability to access resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to the ability to access resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Adobe AIR software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe AIR software platform arises from the ability to access resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by manipulating data types...