12838 matches found
RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.2.5 on RHEL 7 (RHSA-2019:4019)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:4019 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...
The vulnerability of the Netlogon service in the Windows operating system allows a hacker to circumvent existing security restrictions.
The vulnerability of the Netlogon service in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using a specially crafted request...
Moxa AWK-3121 Series ICSA-19-337-02 Multiple Security Vulnerabilities
Description Moxa AWK-3121 Series is prone to the following security vulnerabilities: 1. Multiple information-disclosure vulnerabilities 2. A security-bypass vulnerability 3. Multiple buffer-overflow vulnerabilities 4. A cross-site request-forgery vulnerability 5. Multiple command-injection...
Ansible nxos_file_copy module input validation error vulnerability
Ansible is a computer system configuration manager from the American company Ansible. The product can be used to distribute, manage, and program computer systems. nxosfilecopy is one of the modules that supports copying files to remote NXOS devices. An input validation error vulnerability exists ...
CVE-2019-14812
A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. A specially crafted PostScript file could disable security protection and then have access to the...
Multiple F5 Products CVE-2019-6665 Man in the Middle Security Bypass Vulnerability
Description Multiple F5 Products are prone to a security-bypass vulnerability. Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks. The following products are vulnerable: BIG-IP ASM 15.0.0 throu...
CVE-2011-3624
Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server headers in requests, which might allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted...
Design/Logic Flaw
UI spoofing in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof security UI via a crafted HTML page...
Multiple Kaspersky Products Multiple Security Vulnerabilities
Description Multiple Kaspersky Products are prone to the following security vulnerabilities: 1. Multiple arbitrary command-execution vulnerabilities 2. An information-disclosure vulnerability 3. A security-bypass vulnerability An attacker can exploit these issues to execute arbitrary commands,...
CVE-2012-4524
xlockmore before 5.43 'dclock' security bypass vulnerability...
CVE-2019-17650
Fortinet FortiClient for macOS is affected by CVE-2019-17650: a local command-injection vulnerability in a root process that allows a local user to execute arbitrary code with root privileges by bypassing a security check. Impact is local, no user interaction required, and the issue enables full ...
CVE-2012-4524
CVE-2012-4524 affects Xlockmore (pre-5.43) in dclock mode. The vulnerability arises from how arguments are passed to localtime(), enabling a Denial of Service and potentially exposing the graphical session to compromise. Public advisories (GLSA 201309-03) and related vendor notes describe the iss...
Unspecified vulnerability in Moodle (CNVD-2019-43889)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle that can be exploited by attackers to bypass security restrictions and perform unauthorized...
KLA11627 SB vulnerability in Apache Tomcat
Unspecified vulnerability was found in Apache Tomcat. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories http://tomcat.apache.org/security-9.html http://tomcat.apache.org/security-8.html http://tomcat.apache.org/security-7.html Related products...
Cisco Email Security Appliance CVE-2019-15971 Remote Security Bypass Vulnerability
Description Cisco Email Security Appliance is prone to a remote security-bypass vulnerability. An attacker can exploit this issue to bypass security restrictions and perform unauthorized actions. This may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCvh88851. Technologies...
Cisco Email Security Appliance CVE-2019-15988 Remote Security Bypass Vulnerability
Description Cisco Email Security Appliance is prone to a remote security-bypass vulnerability. An attacker can exploit this issue to bypass security restrictions and perform unauthorized actions. This may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCvq09347. Technologies...
Cisco IOS XR Software CVE-2019-15998 Security Bypass Vulnerability
Description Cisco IOS XR Software is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass the access control list and perform unauthorized actions. This issue is being tracked by Cisco Bug ID CSCvp91299. Technologies Affected Cisco IOS XR Software 6.5.1 Cisco IOS...
Google Android Camera CVE-2019-2234 Multiple Security Bypass Vulnerabilities
Description Google Android is prone to multiple security-bypass vulnerabilities. An attacker can exploit these issues to bypass certain security restrictions and perform unauthorized actions, or gain access to sensitive information; this may lead to further attacks. Technologies Affected Google...
