Ansible Security Bypass Vulnerability (CNVD-2017-10573)

Ansible is a computer system configuration manager that can be used to publish, manage, and orchestrate computer systems. A security bypass vulnerability exists in Ansible. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

LightDM Security Bypass Vulnerability

LightDM is a set of desktop display managers for Linux desktops. A security bypass vulnerability exists in LightDM. An attacker could use this vulnerability to bypass established security restrictions and perform unauthorized operations...

Palo Alto Networks PAN-OS Security Bypass Vulnerability (CNVD-2017-10697)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security bypass vulnerability exists in Palo Alto Networks PAN-OS. An attacker could use this vulnerability to bypass certain security restrictions and perform unauthorized...

Pivotal PCF Tile Generator Security Bypass Vulnerability

Pivotal PCF Tile GeneratorA set of tools from Pivotal Software to help you develop, package, test and deploy services and other add-ons to Pivotal Cloud Foundry. A security bypass vulnerability exists in Pivotal PCF Tile Generator. An attacker could use this vulnerability to bypass certain securi...

Apple iCloud/iTunes for Windows Security Bypass Vulnerability

Apple iCloud for Windows is a Windows-based cloud service from Apple that supports the storage of music, photos, apps, contacts, etc. Apple iTunes is a suite of media player applications from Apple that are primarily used for the playback and management of digital music and video files. It is use...

Git Security Bypass Vulnerability

Git is an open source distributed version control system that can handle versioning from very small to very large projects efficiently and at high speed. A security bypass vulnerability exists in Git. An attacker could exploit this vulnerability to perform unauthorized operations bypassing securi...

Sophos Cyberoam UTM CR25iNG Security Bypass Vulnerability

Sophos Cyberoam UTM CR25iNG is a network security appliance. A security bypass vulnerability exists in Sophos Cyberoam UTM CR25iNG, which can be exploited by remote attackers to submit a special request to bypass security restrictions and elevate privileges...

Apple macOS Sierra EAP-TLS Certificate Validation Vulnerability

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. A certificate validation vulnerability exists in Apple macOS EAP-TLS, which can be exploited by remote attackers to bypass security restrictions and obtain sensitive information...

Tenda FH1202/F1202 and F1200 Routers Security Bypass Vulnerability

The Tenda FH1202, F1202 and F1200 are all wireless router products from Tenda China. A security bypass vulnerability exists in the Tenda FH1202, F1202, and F1200 routers using firmware prior to version 1.2.0.20. An attacker can exploit the vulnerability by sending shell commands directly and...

Apple iOS Security Security Bypass Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Security is an information security and privacy component. A security bypass vulnerability exists in the Security component of Apple iOS versions prior to 10.3.2. An attacker can exploit this vulnerability to...

Security Bypass Via Signature Spoofing

simplesamlphp is vulnerable to security bypass via signature spoofing attacks. The attacks are possible because the SimpleSAMLXMLValidator incorrectly checks the return values in the signature validation, thereby allowing an attacker to spoof an invalid signature as valid. This flaw can also lead...

CVE-2017-2498

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. The issue involves the "Security" component. It allows attackers to bypass intended access restrictions via an untrusted certificate...

Ipswitch MOVEit Transfer Security Bypass Vulnerability

Ipswitch MOVEit Transfer formerly DMZ an automated file transfer system from Ipswitch USA. The system supports the control, management, and viewing of all business-critical file transfer activities through a single, secure system. A security bypass vulnerability exists in Ipswitch MOVEit Transfer...

WordPress < 4.7.5 Multiple Security Vulnerabilities - Linux

WordPress is prone to the following security vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress...

SolarWinds Log & Event Manager Security Bypass Vulnerability

SolarWinds Log and Event Manager LEM is a log and event manager from SolarWinds, Inc. that provides real-time log analysis, memory event correlation, and threat attack response. A security vulnerability exists in SolarWinds LEM versions prior to 6.3.1 Hotfix 4. An attacker could exploit the...

Apple iOS < 10.3.2 Multiple Vulnerabilities

Binary data appleios1032check.nbin...

Security Bypass Vulnerability in Multiple Samsung Phones

Samsung SM-G920F Galaxy S6 and others are smartphones released by the South Korean company Samsung Samsung. A security bypass vulnerability exists in several Samsung phones. An attacker can use the vulnerability to make a call, send a text message or issue a command...

Security Bypass Vulnerability in Multiple Samsung Phones (CNVD-2017-07192)

Samsung SM-G920F Galaxy S6 and others are smartphones released by the South Korean company Samsung Samsung. A security bypass vulnerability exists in several Samsung phones. An attacker can exploit the vulnerability to modify Android settings with the help of AT access...

Google Chrome Security Bypass Vulnerability (CNVD-2017-07170)

Google Chrome is a web browser developed by the American company Google Google. A security bypass vulnerability exists in Google Chrome, which originates when the program caches a TLS session before validating a certificate. An attacker can exploit the vulnerability to decrypt TLS sessions...

KLA11013 Buffer overflow vulnerability in Apple iTunes

A buffer overflow vulnerability was found in WebKit component of Apple iTunes versions earlier than 12.6.1. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed web content. Original advisories Apple...