Input validation

IBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker to bypass security restrictions caused by improper validation of environment variables. IBM X-Force ID: 168863...

CVE-2019-4620

IBM MQ Appliance 8.0 and 9.0 LTS could allow a local attacker to bypass security restrictions caused by improper validation of environment variables. IBM X-Force ID: 168863...

CVE-2013-3960

Easytime Studio Easy File Manager 1.1 has a HTTP request security bypass...

Design/Logic Flaw

Easytime Studio Easy File Manager 1.1 has a HTTP request security bypass...

CVE-2013-3960

Technical details for CVE-2013-3960 are not publicly provided in the supplied documents; available references only reiterate a security bypass in Easytime Studio Easy File Manager 1.1. Monitor for updates.

CVE-2013-3960

Easytime Studio Easy File Manager 1.1 has a HTTP request security bypass...

Security feature bypass

Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability...

CVE-2013-6792

Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability...

Authorization Bypass

secureheaders is vulnerable to authorization bypass. A semicolon character can be used to inject additional values and override arbitrary directives in the Content-Security-Policy header via append/overridecontentsecuritypolicydirectives...

KLA11720 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in speech recognizer can be exploited to...

The vulnerability in the programming interface of the Windows CryptoAPI (Crypt32.dll) on Windows operating systems allows attackers to circumvent existing security restrictions and execute a type of “man-in-the-middle” attack.

The vulnerability of the Windows CryptoAPI Crypt32.dll programming interface on Windows operating systems is related to errors in authenticating ECC certificates. Exploiting this vulnerability allows a remote attacker to circumvent existing security restrictions and execute a type of...

Unspecified Vulnerability in HPE Superdome Flex Server

HPE Superdome Flex Server is a modular server product from Hewlett Packard Enterprise HPE. An unspecified vulnerability exists in HPE Superdome Flex Server that originates from the program not properly validating input for administrator commands. An attacker could exploit the vulnerability to...

Trend Micro Security 2019 Security Bypass Protected Service Tampering

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-SECURITY-BYPASS-PROTECTED-SERVICE-TAMPERING.txt + ISR: ApparitionSec Vendor www.trendmicro.com Product Trend Micro Security 2019 Consumer...

Trend Micro Maximum Security 2019 - Arbitrary Code Execution

Trend Micro Maximum Security 2019 - Arbitrary Code Execution Exploit Title: Trend Micro Maximum Security 2019 - Arbitrary Code Execution Date: 2020-1-16 Exploit Author: hyp3rlinx Vendor Homepage: www.trendmicro.com Version: Platform Microsoft Windows, Premium Security 2019 v15, Maximum Security...

CVE-2019-11998

The CVE-2019-11998 entry applies to HPE Superdome Flex Server. Affected component: input validation of administrator commands leading to bypass of security restrictions and exposure to multiple remote vulnerabilities (information disclosure, DoS). Impact details are as described in the sources: r...

KLA11719 Use after free vulnerability in Opera

Use after free vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Changelog for opera 66 Stable Channel Update for Desktop Related products Opera CVE list CVE-2020-6377 high Solution Update to the latest version Downloa...

CVE-2014-6448

Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access...

CVE-2020-0654

A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerprint requirements of the App.The security update addresses the vulnerability by correcting the way Microsoft OneDrive App for Android handles sharing...

CVE-2020-0621

A security feature bypass vulnerability exists in Windows 10 when third party filters are called during a password update, aka 'Windows Security Feature Bypass Vulnerability'...

Security feature bypass

A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode or fingerprint requirements of the App.The security update addresses the vulnerability by correcting the way Microsoft OneDrive App for Android handles sharing...