OpenBSD stack guard page security bypass vulnerability

OpenBSD is a BSD-based UNIX-like operating system. A security vulnerability in the implementation of the OpenBSD stack guard page allows an attacker to exploit the vulnerability to submit special requests, bypass security restrictions, and execute arbitrary code...

IBM BigFix Compliance Analytics Security Bypass Vulnerability

IBM BigFix Security Compliance Analytics is a suite of systems management software from IBM in the United States. The software provides remote control, patch management, software distribution, operating system deployment, network access protection and other functions. A security bypass...

Adobe Captivate < 10.0.0.192 Multiple Vulnerabilities (APSB17-19) - Windows

Adobe Captivate is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:captivate";...

NetBSD Security Bypass Vulnerability

NetBSD is a BSD-based operating system. A security bypass vulnerability exists in NetBSD. An attacker could exploit this issue to bypass certain security restrictions and perform unauthorized operations...

Linux Kernel 'offset2lib' Local Security Bypass Vulnerability

Linux kernel is an open source operating system. A local security bypass vulnerability exists in Linux Kernel 'offset2lib', which allows local attackers to exploit the vulnerability to submit special requests and bypass restrictions...

PAX Linux Security Bypass Vulnerability

pax is a set of archiving tools developed by Debian's QA group that can read and write tar and cpio formats. A security bypass vulnerability exists in PAX Linux. A remote attacker could exploit this issue to bypass certain security restrictions and perform unauthorized operations...

Linux kernel local security bypass vulnerability (CNVD-2017-15533)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local security bypass vulnerability exists in the Linux kernel. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized...

CVE-2017-1000364

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over the stack guard page is bypassed, this affects Linux Kernel versions 4.11.5 and earlier the stackguard page was introduced in 2010...

389 Directory Server Information Disclosure Vulnerability (CNVD-2017-15524)

389 Directory Server is an enterprise-class Linux directory server. A security vulnerability exists in 389 Directory Server that allows remote attackers to submit specially crafted requests to bypass security restrictions and obtain sensitive information...

IBM Clustered Data ONTAP Man-in-the-Middle Security Bypass Vulnerability

IBM Clustered Data ONTAP is the IBM Extreme Bus Schedule. A security bypass vulnerability exists in IBM Clustered Data ONTAP. An attacker could perform unauthorized operations by conducting a man-in-the-middle attack...

Atlassian Confluence CVE-2017-9505 Security Bypass Vulnerability

Atlassian Confluence is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Security Updates (stable-channel-update-for-desktop_15-2017-06) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2017-8555

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to trick a user into loading a page with malicious content when the Edge Content Security Policy CSP fails to properly validate certain specially crafted documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ...

CVE-2017-8493

Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to set variables that are either read-only or require authentication when Windows fails to enforce case sensitivity for certain variable checks, aka...

CVE-2017-8508

A security feature bypass vulnerability exists in Microsoft Office software when it improperly handles the parsing of file formats, aka "Microsoft Office Security Feature Bypass Vulnerability"...

CVE-2017-0173

Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass...

CVE-2017-0216

Microsoft Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Featu...

CVE-2017-0219

Microsoft Windows 10 Gold, Windows 10 1511, Windows 10 1607, and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Poli...

CVE-2017-8530

Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016 is affected by CVE-2017-8530: an attacker can trick a user into loading a page with malicious content due to Edge not properly enforcing same-origin policies. This is a vulnerability in Edge’s handling of same-origin co...

CVE-2017-8530

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when Microsoft Edge does not properly enforce same-origin policies, aka "Microsoft Edge Security Feature Bypass Vulnerability"...