12833 matches found
KLA11675 Authorization check vulnerability in PostgreSQL
Authorization check vulnerability was found in PostgreSQL. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories https://www.postgresql.org/about/news/2011/ Related products PostgreSQL CVE list CVE-2020-1720 warning Solution Update to the latest versi...
Default credentials
Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root password in shaman. The next time shaman is run, root privileges are granted despite the fact that the user never entered the root password...
KLA11691 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to inject malicious code, cause denial of service, obtain sensitive information, execute arbitrary code, read local files. Below is a complete list of vulnerabilities: 1. ‘Copy as cURL’ featu...
CVE-2020-0696
A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'...
Security feature bypass
YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability...
Revive Adserver: bypass old password with array in /admin/account-user-email.php
Short Description - attacker maybe change email or password without enter old password with array param. - version:revive-adserver-5.0.4 - os :window POC F712486 Impact attacker maybe change email or password without enter old password...
KLA11665 SB vulnerability in Microsoft Device
A security feature bypass vulnerability was found in Microsoft Device. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2020-0702 Related products Microsoft-Surface CVE list CVE-2020-0702 warning KB list 4537765 Solution Install necessary...
KLA11670 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, perform cross-site scripting attack. Below is a complete list of vulnerabilities: 1. A write-operation memory vulnerability can be...
KLA11668 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, cause denial of service. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability can be exploited to...
KLA11663 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Excel can be...
macOS 10.15.x < 10.15.3 / 10.14.x < 10.14.6 / 10.13.x < 10.13.6
The remote host is running a version of macOS / Mac OS X that is 10.15.x prior to 10.15.3, 10.13.x prior to 10.13.6, 10.14.x prior to 10.14.6. It is, therefore, affected by multiple vulnerabilities: - In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain...
Google Chrome Security Bypass Vulnerability (CNVD-2020-04000)
Google Chrome is a web browser of Google Google.Swiftshader is one of the open source 3D rendering tool. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...
Google Chrome Security Bypass Vulnerability (CNVD-2020-04001)
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...
Google Chrome Security Bypass Vulnerability (CNVD-2020-04002)
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...
CVE-2013-2681
Cisco Linksys E4200 1.0.05 Build 7 devices contain a Security Bypass Vulnerability which could allow remote attackers to gain unauthorized access...
Security feature bypass
Cisco Linksys E4200 1.0.05 Build 7 devices contain a Security Bypass Vulnerability which could allow remote attackers to gain unauthorized access...
CVE-2013-2681
CVE-2013-2681 affects Cisco Linksys E4200 devices running firmware 1.0.05 Build 7, describing a Security Bypass Vulnerability that could allow remote attackers to gain unauthorized access. The connected documents consistently reference the same device and firmware context, noting a remote-access ...
CVE-2013-2681
Cisco Linksys E4200 1.0.05 Build 7 devices contain a Security Bypass Vulnerability which could allow remote attackers to gain unauthorized access...
Security Bulletin: Multiple Apache Struts Vulnerabilities Affect IBM Sterling B2B Integrator
Summary IBM Sterling B2B Integrator Standard Edition has addressed the following multiple vulnerabilities caused by Apach Struts 1.1 Vulnerability Details CVEID: CVE-2008-2025 DESCRIPTION: Apache Struts is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A...