Ubuntu AppArmor Security Bypass Vulnerability

AppArmor is a Linux system security application that protects the operating system and applications from threats from the inside out, as well as setting access control permissions on an executable program. A security bypass vulnerability exists in Ubuntu AppArmor. An attacker could use the...

cURL/libcURL incomplete fix for remote security bypass vulnerability

Haxx curl and libcurl are both products of the Swedish company Haxx. curl is a set of file transfer tools that utilize URL syntax to work at the command line. libcurl is a free, open source client-side URL transfer library. A remote security bypass vulnerability exists in Haxx curl and libcurl. A...

Linux kernel security bypass vulnerability (CNVD-2017-05575)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. The Linux kernel suffers from a security bypass vulnerability in which the program fails to detect the zero value of data. A local attacker can exploit this vulnerability by...

OnePlus 3 and 3T OxygenOS security bypass vulnerability

The OnePlus 3 and 3T are both smartphones from China's OnePlus Technology OnePlus.OxygenOS is the operating system that comes with the device. A security bypass vulnerability exists in OxygenOS in OnePlus 3 and 3T. An attacker can exploit the vulnerability to open an ADB session and disclose...

Nextcloud Server and ownCloud Server Security Bypass Vulnerability (CNVD-2017-05314)

ownCloud is a free and open source personal cloud storage solution from German company ownCloud. nextcloud is an open source self-hosted file synchronization and sharing communication application platform. ownCloud Server and Nextcloud Server are both a server version of one of them. A security...

Security Bypass Vulnerabilities in Multiple Game Engine Products

ioquake3 and others are open source, free, cross-platform Quake 3-based FPS game engines. A security vulnerability exists in the auto-downloading feature in several game engine products, which stems from the program's failure to adequately restrict content. An attacker can exploit the vulnerabili...

Cloudera Navigator Security Bypass Vulnerability

Cloudera Navigator is a suite of data management tools for Hadoop platform integration from Cloudera, USA. The tool provides features such as auditing data access and validating access rights, searching metadata, and visualization. A security bypass vulnerability exists in Cloudera Navigator. An...

Cloudera CDH Security Bypass Vulnerability

Cloudera CDH is the United States Cloudera company's set of open source for running Apache Hadoop platform. JobHistory Server is one of the history of the task storage , viewing services. A security bypass vulnerability exists in JobHistory Server in Cloudera CDH. A remote attacker could exploit...

Cloudera CDH Apache Hadoop Security Bypass Vulnerability

Cloudera CDH is an open source platform for running Apache Hadoop from Cloudera Inc. Apache Hadoop is an open source distributed systems infrastructure that enables distributed processing of large amounts of data with high reliability, high scalability, high fault tolerance and other features. A...

ownCloud Server and Nextcloud Server Security Bypass Vulnerability

ownCloud is a free and open source personal cloud storage solution from German company ownCloud. nextcloud is an open source self-hosted file synchronization and sharing communication application platform. ownCloud Server and Nextcloud Server are both a server version of one of them. A security...

Nextcloud Server and ownCloud Server Security Bypass Vulnerability

ownCloud is a free and open source personal cloud storage solution from German company ownCloud. nextcloud is an open source self-hosted file synchronization and sharing communication application platform. ownCloud Server and Nextcloud Server are both a server version of one of them. A security...

USN-3236-1 oxide-qt vulnerabilities

Multiple vulnerabilities were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to obtain sensitive information, spoof application UI by causing the security status API or webview URL to indicate the wrong values,...

Siemens RUGGEDCOM ROX I Security Bypass Vulnerability

Siemens RuggedCom ROX-based firewall devices are used for device connectivity in harsh environments, such as substations, traffic management chassis, and more. A security bypass vulnerability exists in Siemens RUGGEDCOM ROX I, which can be exploited by an attacker to bypass the access restriction...

phpMyAdmin PMASA-2017-8 Security Bypass Vulnerability

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...

Firejail Security Bypass Vulnerability

Firejail is a set of SUID programs written in C that reduces the risk of security vulnerabilities by restricting the operating environment of untrusted applications using Linux namespaces and seccomp-bpf, a sandboxing mechanism. A security bypass vulnerability exists in Firejail. An attacker coul...

Novell eDirectory Security Bypass Vulnerability

Novell eDirectory is an identity management infrastructure platform that combines identity management architecture and directory services technology from Novell, USA. The platform provides authentication policies, data backup and recovery services, data disaster recovery and other functions. A...

SAP NetWeaver Log Viewer Security Bypass Vulnerability

SAP NetWeaver is the German SAP SAP company developed a set of service-oriented integrated application platform. The platform can provide a development and operation environment for SAP applications. A security bypass vulnerability exists in SAP NetWeaver. A remote attacker could exploit the...

Multiple Security Bypass Vulnerabilities in Multiple LG Android Mobile Devices

lg mobile is an android smartphone from LG. Multiple security bypass vulnerabilities exist in multiple LG Android Mobile Devices. An attacker can exploit the vulnerabilities to bypass certain security restrictions and perform unauthorized operations...

LastPass for Firefox Security Bypass Vulnerability

LastPass LastPass Password Manager is a free cross-platform online password management tool developed by LastPass Inc. in the United States. The tool can be integrated with the browser and provides it with password management, autofill forms and other features, support for random password...

MySQL Man-in-the-Middle Security Bypass Vulnerability

MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. A security bypass vulnerability exists in MySQL. An attacker can exploit this vulnerability by performing a man-in-the-middle attack...