Object Property Tampering

valib is vulnerable to object property tampering. The usage of the built-in functions hasOwnProperty with unsafe user-input to examine an object allows bypass of several inspection functions and overwriting of the function to manipulate the inspection results to bypass security checks...

The vulnerability of the TransferFromImageBitmap method in Thunderbird email clients and Firefox and Firefox ESR browsers relates to the ability to read canvas elements, ignoring security policies that would prevent unauthorized access to information.

The vulnerability of the TransferFromImageBitmap method in Thunderbird email clients and Firefox and Firefox ESR browsers is related to the ability to read canvas elements, while ignoring security policies. Exploiting this vulnerability can allow an attacker who operates remotely to gain...

Security Bulletin: Bypass security restrictions in WAS Liberty

Summary IBM MobileFirst Platform Foundation has addressed the following vulnerability. Bypass security restrictions in WAS Liberty . Vulnerability Details CVEID: CVE-2019-4304 DESCRIPTION: IBM WebSphere Application Server - Liberty could allow a remote attacker to bypass security restrictions...

WordPress Flexible Checkout Fields for WooCommerce plugin <= 2.3.1 - Security Bypass vulnerability

Security Bypass vulnerability discovered by NinTechNet in WordPress Flexible Checkout Fields for WooCommerce plugin versions = 2.3.1. Solution Update the WordPress Flexible Checkout Fields for WooCommerce to the latest available version at least 2.3.2...

CVE-2016-4606

Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other attacks...

Design/Logic Flaw

Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other attacks...

CVE-2016-4606

CVE-2016-4606 affects curl before 7.49.1 on Apple OS X versions prior to macOS Sierra 10.12. The vulnerability allows remote or local attackers to execute arbitrary code, obtain sensitive information, cause denial-of-service, bypass security restrictions, and perform unauthorized actions. Root ca...

Security feature bypass

OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions...

CVE-2013-4454

WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities...

Security feature bypass

WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities...

CVE-2013-4454

WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities...

CVE-2013-4454

CVE-2013-4454 affects WordPress Portable phpMyAdmin Plugin 1.4.1. Connected sources indicate multiple security bypass vulnerabilities in this plugin, without explicit exploit details in the provided documents. The NVD entry lists MEDIUM to CRITICAL severities across CVSS v2/v3, with network-based...

PT-2020-6969 · Ge Healthcare · Logiq +6

Name of the Vulnerable Software and Affected Versions: GE HealthCare Ultrasound Products versions all versions Vivid products versions all versions LOGIQ versions all versions, excluding LOGIQ 100 Pro Voluson versions all versions Versana Essential versions all versions Invenia ABUS Scan station...

chromium-browser: Inappropriate implementation in AppCache

Inappropriate implementation in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass AppCache security restrictions via a crafted HTML page...

CVE-2020-8843

An issue was discovered in Istio 1.3 through 1.3.6. Under certain circumstances, it is possible to bypass a specifically configured Mixer policy. Istio-proxy accepts the x-istio-attributes header at ingress that can be used to affect policy decisions when Mixer policy selectively applies to a...

KLA11721 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A implementation...

Security feature bypass

Internet TRiLOGI Server unknown versions could allow a local user to bypass security and create a local user account...

CVE-2013-6927

CVE-2013-6927 : Internet TRiLOGI Server (unknown versions) could allow a local user to bypass security and create a local user account. The available documents confirm the local-access impact but do not provide product version affected, root cause, or concrete remediation steps. No exploitation d...

CVE-2013-1401

Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll...

Security feature bypass

Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll...