Security Bypass Via Unauthorised Overriding Security Groups

tile-generator is vulnerable to security bypass via unauthorized overriding of security groups. The vulnerability exists because applyopensecuritygroup is set to true which allows the overriding of security groups set by the operator...

Git: Security bypass

Background Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Description Timo Schmid discovered that the Git restricted shell incorrectly filtered allowed commands. Impact A remote attacker...

Zabbix 2.0.x < 2.0.21 / 2.2.x < 2.2.18 / 3.0.x < 3.0.9 / 3.2.x < 3.2.5 Multiple Vulnerabilities

According to its self-reported version number, the instance of Zabbix running on the remote host is 2.0.x prior to 2.0.21, 2.2.x prior to 2.2.18, 3.0.x prior to 3.0.9, or 3.2.x prior to 3.2.5. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists ...

Fastspot BigTree CMS Security Bypass Vulnerability

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A security bypass vulnerability exists in Fastspot BigTree CMS versions 4.2.18 and earlier. An attacker can exploit this vulnerability by sending the 'force' parameter to t...

Phoenix Broadband Technologies LLC PowerAgent SC3 Site Controller Security Bypass Vulnerability

Phoenix Broadband Technologies LLC PowerAgent SC3 is an American company Phoenix Technologies LLC has launched a monitoring product. A security bypass vulnerability exists in the Phoenix Broadband Technologies LLC PowerAgent SC3 Site Controller, which can be exploited by an attacker to bypass...

HPE Aruba ClearPass Policy Manager Security Bypass Vulnerability

HPE Aruba ClearPass Policy Manager is a network access control solution from Hewlett Packard Enterprise HPE. A security bypass vulnerability exists in versions of HPE Aruba ClearPass Policy Manager prior to 6.6.5. An attacker could exploit this vulnerability to bypass security restrictions...

Laravel Security Bypass Vulnerability

Laravel is a PHP development framework for developing web applications and provides syntax highlighting, documentation and extension packages. A security bypass vulnerability exists in Laravel version 5.4.x before 5.4.22. A remote attacker could exploit this vulnerability to conduct a phishing...

Eclipse Mosquitto Security Bypass Vulnerability

Eclipse Mosquitto is an open source messaging agent software from the Eclipse Foundation . A security bypass vulnerability exists in Eclipse Mosquitto versions 0.15 through 1.4.11. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Apache Hive Security Bypass Vulnerability

Apache Hive is a set of Hadoop Distributed Systems Infrastructure based data warehouse software from the Apache Apache Software Foundation in the United States. The software provides a data integration approach and a high-level query language to support large-scale data analysis on Hadoop. A...

Google Chrome Security Updates (stable-channel-update-for-desktop_29-2016-09) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

OpenStack Magnum Security Bypass Vulnerability

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration and Rackspace, Inc. Magnum is a container resource management component. A security bypass vulnerability exists in OpenStack Magnum. An attacker could use this vulnerability to bypass...

Multiple vulnerabilities in FortiPortal (CNVD-2017-10725)

FortiPortal is Fortinet's advanced, feature-rich hosted security analytics and management enabler that serves as an MSP for VM software solutions/products that can be deployed on hosted service infrastructures. FortiPortal has multiple security vulnerabilities. The vulnerabilities can be exploite...

Security Bypass Vulnerability in Multiple OnePlus Devices

The OnePlus One, among others, are smartphones from China's OnePlus Technology OnePlus.OxygenOS and HydrogenOS are its own operating systems. A security bypass vulnerability exists in multiple OnePlus devices. An attacker can exploit the vulnerability to launch further attacks by performing a...

Phoenix Contact mGuard Security Bypass and Denial of Service Vulnerability

Phoenix Contact mGuard is a security device from Phoenix Contact that protects systems from unauthorized access and installation. A security bypass and denial of service vulnerability exists in Phoenix Contact mGuard. An attacker could exploit this vulnerability to perform an unauthorized operati...

Red Hat spacewalk-backend security bypass vulnerability

spacewalk is an open source free linux system management solution. It can be used to manage system information , install and update the software in the system , collect and distribute customized packages in the system to manageable groups , provide and manage configuration files in the system and...

Pivotal Cloud Foundry Elastic Runtime Security Bypass Vulnerability (CNVD-2017-10990)

Pivotal Cloud Foundry PCF is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.Elastic Runtime is a runtime environment for Pivotal Cloud Foundry. Elastic Runtime is a...

OnePlus X and One device security bypass vulnerability

The OnePlusX and One are both smartphones from China's OnePlus Technology OnePlus.OxygenOS and HydrogenOS are the operating systems that come with them. A security bypass vulnerability exists in OnePlusX and One. An attacker could use this vulnerability to launch further attacks by performing a...

Bubblewrap Security Bypass Vulnerability

bubblewrap is a set of tools for running containers. A security bypass vulnerability exists in Bubblewrap. An attacker could use this vulnerability to perform unauthorized operations bypassing security restrictions...

Nextcloud Unauthorized Access Vulnerability

Nextcloud is a suite of open source self-hosted file synchronization and sharing communication application platform. An unauthorized access vulnerability exists in Nextcloud. An attacker could use this vulnerability to bypass certain security restrictions and obtain sensitive information, leading...

SAP GUI Security Bypass Vulnerability

SAP GUI is a graphical user interface client from SAP, Germany. A security bypass vulnerability exists in SAP GUI. A remote attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...