Mozilla Firefox Unauthorized Access Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 47.0. An attacker can exploit the vulnerability to return incorrect privilege notifications and access restricted resources...

PT-2016-5669 · Red Hat · Red Hat Openshift Enterprise

Name of the Vulnerable Software and Affected Versions: Red Hat OpenShift Enterprise version 3.2 Description: The issue allows remote authenticated users to access network resources on restricted pods via an s2i build with a builder image that contains ONBUILD commands or does not contain a tar...

WordPress Simple Backup Plugin Unauthorized File Access

An Information Disclosure vulnerability exists in WordPress Simple Backup Plugin. Successful exploitation would allow a remote attacker to copy restricted files with privileged information from the affected system...

Apache Shiro Information Disclosure Vulnerability

Apache Shiro is the United States Apache Apache Software Foundation for the implementation of authentication , authorization , encryption and session management of the Java security framework . An information disclosure vulnerability exists in Apache Shiro versions 1.0.0 through 1.2.4, which stem...

[SECURITY] Fedora 23 Update: sudo-1.8.15-2.fc23

Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all commands and arguments. Sudo operates on a per-command basis. It is not a replacement for the shell. Features include: the ability to restrict...

Cybozu Garoon Directory Traversal Vulnerability (CNVD-2016-03722)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A directory traversal...

Cybozu Garoon Security Bypass Vulnerability (CNVD-2016-03725)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A security vulnerability exists ...

Cybozu Garoon Unauthorized Operation Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A security vulnerability exists in the 'Portlets'...

Red Hat OpenShift Enterprise Unauthorized Access Vulnerability Vulnerability

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform that builds, tests, deploys, and runs applications.OpenShift Enterprise is an open source version of the private cloud. A security vulnerability exists in Red Hat OpenShift Enterprise when the program is multi-tenant SDN...

HP System Management Homepage < 7.5.4.3 AddCertsToTrustCfgList DoS

The version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.5.4.3. It is, therefore, affected by a flaw in the AddCertsToTrustCfgList function within file modsmhconfig.so due to improper extraction of the common name in the subject when processing X.509...

Pornhub: [IDOR] post to anyone even if their stream is restricted to friends only

The researcher discovered a way to post to another user's stream even if you are not friends with them...

Microsoft Windows DirectX Graphics Kernel CVE-2016-0197 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsof...

CVE-2016-2352

The Accellion File Transfer Appliance FTA before FTA91240 allows remote authenticated users to execute arbitrary commands by leveraging the YUMCLIENT restricted-user role...

How to Publish Windows Explorer.exe with Specific Drives, Folders, or URLs

This article describes how to publish specific drives and folders as it is not recommended to publish Explorer.exe directly. Notes: Microsoft does NOTrecommend running Explorer.exe as a published application because the published Explorer.exe application runs as a separate process with restricted...

[20160801] - Core - ACL Violation

Inadequate ACL checks in comcontent provide potential read access to data which should be access restricted to users with editown level...

Plone Security Bypass Vulnerability

Plone is the United States Plone Foundation's set of free and open source content management system CMS built on the application server Zope. A security vulnerability exists in Plone's five.pt file, which can be exploited by an attacker to bypass restricted Python with PloneFormGen template editi...

HP System Management Homepage (SMH) AddXECert Remote DoS

The HP System Management Homepage SMH application running on the remote web server is affected by a denial of service vulnerability due to improper handling of the Common Name in a certificate uploaded via /proxy/AddXECert. An unauthenticated, remote attacker can exploit this, via a crafted...

HP Data Protector Remote Code Execution Vulnerability (CNVD-2016-02367)

HP Data Protector is a suite of unified data protection solutions from Hewlett-Packard HP in the United States. The solution protects data across all physical and virtual environments by utilizing an intelligent data management approach that provides three-party application source, standby server...

The vulnerability of microprogramming software in mobile storage devices like Wireless Plus Mobile Storage, Wireless Mobile Storage, LaCie FUEL, and GoFlex Satellite allows a perpetrator to read arbitrary files.

The vulnerability of microprogramming software in mobile storage devices like Wireless Plus Mobile Storage, Wireless Mobile Storage, LaCie FUEL, and GoFlex Satellite exists due to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability allows a maliciou...

HP Data Protector Remote Code Execution Vulnerability (CNVD-2016-02368)

HP Data Protector is a suite of unified data protection solutions from Hewlett-Packard HP in the United States. The solution protects data across all physical and virtual environments by utilizing an intelligent data management approach that provides three-party application source, standby server...