Mozilla Firefox权限许可和访问控制问题漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation, U.S. Mozilla Firefox is vulnerable to permission and access control issues that could be exploited by remote attackers to bypass implemented security restrictions...

KLA12369 Multiple vulnerabilities in Apache HTTP Server

Multiple vulnerabilities were found in Apache HTTP Server. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Heap overflow vulnerability in modsession can be exploited via special crafted...

KLA12193 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, spoof user interface, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A securit...

GLSA-202105-07 : Telegram: Security bypass

The remote host is affected by the vulnerability described in GLSA-202105-07 Telegram: Security bypass It was discovered that Telegram failed to invalidate a recently active session. Impact : Please review the referenced CVE identifiers for details. Workaround : There is no known workaround at th...

KLA12192 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, spoof user interface, execute arbitrary code, cause denial of service, obtain sensitive information, gain privileges. Below is a complete list of...

Security Bulletin: Security Bypass Vulnerability in PostgreSQL Affects IBM Connect:Direct Web Services ( CVE-2021-3393)

Summary Security bypass vulnerability in PostgreSQL versions used by IBM Connect:Direct Web Services. IBM Connect:Direct Web Services has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2021-3393 DESCRIPTION: PostgreSQL could allow a remote authenticated attacker to obtain sensiti...

Security Bulletin: Security Bypass Vulnerability in PostgreSQL Affects IBM Connect:Direct Web Services (CVE-2020-10733)

Summary Security bypass vulnerability in PostgreSQL versions used by IBM Connect:Direct Web Services. IBM Connect:Direct Web Services has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-10733 DESCRIPTION: PostgreSQL could allow a local authenticated attacker to execute...

KLA12188 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A use after free vulnerability in File API can be...

CVE-2016-20011

libgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds, allowing remote attackers to manipulate the contents of feeds without detection. This occurs because of the default behavior of SoupSessionSync...

3S-Smart Software Solutions CODESYS V2 Web-Server 安全漏洞

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. A security check bypass vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker to bypas...

Apple tvOS 权限许可和访问控制问题漏洞

Apple tvOS is an operating system for Smart TVs from Apple. A vulnerability exists in Apple tvOS due to a permissions licensing and access control issue, which arises from an application not properly imposing security restrictions in the "crash report" component. The vulnerability allows native...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in the TCC component of Apple macOS, which stems from improper privilege management in TCC. A native application can send unauthorized Apple events to the Finder...

Apple tvOS 安全特征问题漏洞

Apple tvOS is an operating system for Smart TVs from Apple Inc. in the United States. Apple tvOS suffers from a security signature issue vulnerability that originates from a logic issue in LaunchServices. The vulnerability allows native applications to bypass implemented security restrictions...

CVE-2021-29686

IBM Security Identity Manager 7.0.2 could allow an authenticated user to bypass security and perform actions that they should not have access to. IBM X-Force ID: 200015...

Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr

💥 BUG Stored xss bypassing xss filter 💥 SUMMURY There are many different user with different role . Here using this xss bug lower level user can make xss attack against higher level user 💥 PAYLOAD XSS15 💥 STEP TO REPRODUCE 1. First goto your account and edit a product . Now put above xss payload ...

KLA12185 Multiple vulnerabilities in Mozilla Thunderbird

Security bypass vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit this vulnerabilities to bypass security restrictions. Original advisories MFASA2021-22 Related products Mozilla-Thunderbird CVE list CVE-2021-29957 warning CVE-2021-29956 warning Solution Update to the...

Security Bulletin: Security Bypass Vulnerability in Spring Framework Affects IBM Control Center (CVE-2020-5421)

Summary Spring Framework vunerability could allow a remote attacker to bypass security restrictions, caused by improper input validation. Vulnerability Details CVEID: CVE-2020-5421 DESCRIPTION: VMware Tanzu Spring Framework could allow a remote attacker to bypass security restrictions, caused by...

Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.9.0 ESR +  CVE-2020-26974) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF13 + CP4MCM2.2

Summary Synthetic Playback Agent has addressed the following vulnerabilities: CVE-2020-26974, CVE-2020-35111, CVE-2020-26973, CVE-2020-26978, CVE-2020-26971, CVE-2020-35112, CVE-2020-35113 Vulnerability Details CVEID: CVE-2020-26974 DESCRIPTION: Mozilla Firefox could allow a remote attacker to...

Ivanti Avalanche目录遍历漏洞

SSD Advisory – Ivanti Avalanche Directory Traversal May 11, 2021 SSD Disclosure / Technical Lead Uncategorized TL;DR Find out how a directory traversal vulnerability in Ivanti Avalanche allows remote unauthenticated user to access files that reside outside the ‘image’ folder. Vulnerability Summar...

KLA12217 SB vulnerability in Apache Tomcat

A security bypass vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories Apache Tomcat 8.5.x vulnerabilities Apache Tomcat 9.x vulnerabilities Apache Tomcat 10.0.x vulnerabilities Related products Apache-Tomcat...