12886 matches found
Zammad Security Bypass Vulnerability (CNVD-2017-04305)
Zammad is a web-based, open-source helpdesk/customer support system from the German company Zammad, with many features to manage customer communication through multiple channels such as phone calls. A security bypass vulnerability exists in Zammad. A remote attacker could exploit the vulnerabilit...
Zammad Security Bypass Vulnerability
Zammad is a web-based, open-source helpdesk/customer support system from the German company Zammad, with many features to manage customer communication through multiple channels such as phone calls. A security bypass vulnerability exists in Zammad. An attacker could exploit the vulnerability to...
Microsoft Edge CVE-2017-0066 Security Bypass Vulnerability
Description Microsoft Edge is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Edge Recommendations Block external acces...
Microsoft Edge CVE-2017-0140 Security Bypass Vulnerability
Description Microsoft Edge is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Edge Recommendations Block external acces...
Microsoft Edge CVE-2017-0135 Security Bypass Vulnerability
Description Microsoft Edge is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Edge Recommendations Block external acces...
Google Chrome < 57.0.2987.98 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 57.0.2987.98. It is, therefore, affected by multiple vulnerabilities as referenced in the 201703stable-channel-update-for-desktop advisory. - An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac,...
Microsoft Lync for Mac CVE-2017-0129 SSL Certificate Validation Security Bypass Vulnerability
Description Microsoft Lync for Mac is prone to a security-bypass vulnerability that affects the IP-HTTPS server component. Successful exploits may allow attackers to perform man-in-the-middle attacks or impersonate trusted clients, which will aid in further attacks. Technologies Affected Microsof...
Google Chrome < 57.0.2987.98 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 57.0.2987.98. It is, therefore, affected by multiple vulnerabilities as referenced in the 201703stable-channel-update-for-desktop advisory. - An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac,...
KLA10985 Privilege escalation vulnerabilities in Windows kernel-mode drivers
Multiple cases of improper handling of objects in memory have been found in the Windows kernel-mode Win32k driver. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a specially designed application by an attacker who has already...
dnaLIMS Multiple Security Vulnerabilities
dnaLIMS is prone to the following security vulnerabilities: 1. A command-injection vulnerability 2. An directory traversal vulnerability 3. An insecure password storage vulnerability 4. A session-hijacking vulnerability 5. Multiple cross-site scripting vulnerabilities 6. A security bypass...
WordPress Security Bypass Vulnerability (CNVD-2017-03617)
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from a security bypass vulnerability. An attacker can exploit this vulnerability to bypass certain security...
Google Chrome Security Updates (stable-channel-update-for-desktop-2017-03) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Google Chrome < 59.0.3071.104 Multiple Vulnerabilities
Binary data 700135.pasl...
Google Chrome Security Updates (stable-channel-update-for-desktop-2017-03) - Linux
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Security Bypass
Apache Ranger is vulnerable to a security bypass vulnerability. This is because the ranger policy engine incorrectly matches paths in certain conditions when a policy does not contain wildcards and has recursion flag set to true...
KLA11036 Multiple vulnerabilities in VMware products
Multiple serious vulnerabilities have been found in VMware Workstation Pro and VMware Workstation Player. Malicious users can exploit these vulnerabilities to gain privileges or cause a denial of service. Below is a complete list of vulnerabilities: 1. A DLL loading vulnerability can be exploited...
RHEL 6 : Red Hat JBoss Web Server 3.1.0 (RHSA-2017:0455)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0455 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the...
ImageMagick Security Restriction Bypass Vulnerability
ImageMagick is an open source image viewing and editing tool for Unix/Linux platforms. A security vulnerability exists in ImageMagick where the coders/tiff.c/ReadGROUP4Image function does not check the return value of the fwrite function. An attacker could use this issue to bypass certain securit...
Siemens SINUMERIK Integrate Operate Clients Man-in-the-Middle Security Bypass Vulnerability
Siemens SINUMERIK Integrate Operate Clients is a standard HMI system client for SINUMERIK digital controls from Siemens. A man-in-the-middle security bypass vulnerability exists in Siemens SINUMERIK Integrate Operate Clients. An attacker could use this vulnerability to conduct a man-in-the-middle...
