CVE-2023-25681 IBM Spectrum Virtualize security bypass

LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authenticate to the CIM interface using only username and password. This does not affect local users with MFA configured or remote users authenticating via single sign-on. IBM X-Force ID...

Security Bulletin: IBM Transformation Extender Advanced vulnerable to LDAP security bypass due to Apache Derby [CVE-2022-46337]

Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine, includes and supports Apache Derby as a pre-production database for developers. LDAP for Apache Derby is not supported in production deployment of IBM Transformation Extender Advanced. This bulletin...

Mozilla Thunderbird 安全漏洞

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. Mozilla Thunderbird suffers from a security bypass vulnerability that is caused by the...

Google Chrome Security Bypass Vulnerability (CNVD-2024-38807)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability previously existed in Google Chrome version 122.0.6261.57, which stemmed from a mal-implementation issue in the Navigation module. An attacker could exploit this vulnerability to bypass security...

MOXA EDS-4000/G4000 Series Security Bypass Vulnerability

MOXA EDS-4000/G4000 Series is a series of industrial managed Ethernet switches from MOXA, China. A security bypass vulnerability exists in MOXA EDS-4000/G4000 Series prior to version 3.2, which originates from a user-deactivatable IP forwarding feature, and can be exploited by an attacker to bypa...

Google Chrome Security Bypass Vulnerability (CNVD-2024-13762)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that is due to an improper implementation in site isolation. An attacker can exploit this vulnerability to bypass security restrictions...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2024-12548)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a security bypass vulnerability that originates from the use of a combination of exit fullscreen mode and requestPointerLock to cause the user's mouse to be accidentally...

Google Chrome Security Bypass Vulnerability (CNVD-2024-16936)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome that stems from an improper implementation of the Content Security Policy module. An attacker can exploit this vulnerability to bypass security restrictions...

CVE-2023-44342

Adobe InDesign versions ID18.5 and earlier and ID17.4.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

Vulnerabilities fixed in Cisco Nexus

Cisco has fixed vulnerabilities in NX-OS, as in use on various Nexus platforms. A malicious party could exploit them to bypass security measures to allow allow unauthorized network traffic to pass through, or to cause a denial-of-service attack. Cisco has released updates to fix the vulnerabiliti...

Adobe FrameMaker Publishing Server Authentication Error Vulnerability

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. An authentication error vulnerability exists in Adobe FrameMaker Publishing Server, which can be exploited by an...

The vulnerability of the Azure Site Recovery disaster recovery tool, related to deficiencies in access control, allows attackers to bypass existing security restrictions and enhance their privileges.

The vulnerability of the Azure Site Recovery recovery mechanism is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to bypass existing security restrictions and enhance their privileges...

Tenable Identity Exposure < 3.59.4 Multiple Vulnerabilities (TNS-2024-04)

The version of Tenable Identity Exposure formerly Tenable.ad installed on the remote host is prior to 3.59.4. It is, therefore, affected by multiple vulnerabilities in the bundled .NET core component as referenced in the TNS-2024-04 advisory. - .NET, .NET Framework, and Visual Studio Security...

USN-6666-1: libuv vulnerability

It was discovered that libuv incorrectly truncated certain hostnames. A remote attacker could possibly use this issue with specially crafted hostnames to bypass certain checks...

CVE-2023-49932

An issue was discovered in Couchbase Server before 7.2.4. An attacker can bypass SQL++ N1QL cURL host restrictions...

PT-2024-10098 · Drupal · Node Access Rebuild Progressive

Name of the Vulnerable Software and Affected Versions: Node Access Rebuild Progressive versions 7.X-1.0 through 7.X-1.2 Description: The issue is related to improper ownership management in Node Access Rebuild Progressive, allowing target influence via framing. This can be exploited by a remote...

Simple School Managment System Security Bypass Vulnerability

Simple School Managment System is Code-projects open source a simple school management system . Simple School Managment System has a security bypass vulnerability that can be exploited by attackers to bypass authentication...

The vulnerability of the Microsoft Outlook email client, related to deficiencies in access control, allows attackers to circumvent existing security restrictions and enhance their privileges.

The vulnerability of the Microsoft Outlook email client is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and enhance their privileges...

The vulnerability of the Google ChromeOS operating system’s kernel allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of the Google ChromeOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a hacker to bypass security restrictions and increase their privileges...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to deficiencies in access control, allows attackers to circumvent security restrictions (CODE OWNERS).

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions CODE OWNERS...