Moodle Security Bypass Vulnerability (CNVD-2016-08241)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle. An attacker could use this...

Apple OS X Perl Security Bypass Vulnerability

Apple OS X is a special operating system developed by Apple for Mac computers. Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall. A security bypass vulnerability exists in Perl in Apple OS X versions prior to 10.12, which can be exploited ...

Google Chrome Protocol Processor Security Bypass Vulnerability

Google Chrome is a popular web browser. A security bypass vulnerability exists in the Google Chrome protocol processor. An attacker could exploit this vulnerability to bypass security restrictions...

OpenStack Glance Security Bypass Vulnerability (CNVD-2016-08222)

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration and Rackspace, Inc. Glance is a project that stores, queries and retrieves virtual machine images. A remote security bypass vulnerability exists in OpenStack Glance. An attacker could u...

Ruby OpenSSL Library Security Bypass Vulnerability

Ruby is a cross-platform, object-oriented, dynamically-typed programming language developed by Japanese software developer Yukihiro Matsumoto , Ruby OpenSSL Library is one of the open source able to implement the Secure Sockets Layer SSL v2/v3 and Secure Transport Layer TLS v1 protocols of the...

Multiple Vulnerabilities in BINOM3 Electric Power Quality Meter

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. Cross-site scripting vulnerabilities, HTML injection vulnerabilities, security bypass vulnerabilities, and information disclosure vulnerabilities exist in BINOM3 Electric...

Oracle MySQL 'my.conf' Security Bypass Vulnerability - Windows

Oracle MySQL is prone to a security bypass vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

MariaDB 'my.conf' Security Bypass Vulnerability - Windows

MariaDB is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb";...

MariaDB 'my.conf' Security Bypass Vulnerability - Linux

MariaDB is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb";...

Oracle MySQL 'my.conf' Security Bypass Vulnerability - Linux

Oracle MySQL is prone to a security bypass vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

KLA10877 Multiple vulnerabilities in iTunes

Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions or obtain sensitive information. Below is a complete list of vulnerabilities 1. Multiple unknown...

CodeIgniter: Link sanitation bypass in xss_clean()

Hi there, While researching a website that uses your framework xssclean function to sanitize user's input in comments, I was able to bypass it and could trigger XSS payloads using javascript links in allowed tags such as anchors. This could be achieved by using the new HTML5 standard entities suc...

Moxa Active OPC Server Local Path Enumeration Vulnerability

Moxa Active OPC Server is an OPC driver software package for operating HMI or SCADA systems. A local path enumeration vulnerability exists in Moxa Active OPC Server, which allows local attackers to bypass security restrictions and elevate privileges...

IBM Security Privileged Identity Manager Virtual Appliance Security Bypass Vulnerability (CNVD-2016-08137)

IBM Security Privileged Identity Manager is an identity management product within the IBM Identity Governance and Management solution that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security. IBM Security Privileged Identity...

IBM Spectrum Control and IBM Storage Insights Security Bypass Vulnerabilities

IBM Spectrum Control and IBM Storage Insights are both storage resource management software from IBM USA. A security bypass vulnerability exists in IBM Spectrum Control versions 5.2.8 through 5.2.10.1 and IBM Storage Insights. An attacker could exploit the vulnerability to edit restricted propert...

Cisco IOS and IOS XE Software ZBFW Feature Security Bypass Vulnerability

Cisco IOS and IOS XE Software are operating systems developed by Cisco for its network devices.Zone-Based Firewall ZBFW is one of the policy firewall components. A security bypass vulnerability exists in the ZBFW feature in Cisco IOS and IOS XE Software, which stems from the program failing to...

IBM Security Privileged Identity Manager Virtual Appliance Security Bypass Vulnerability

IBM Security Privileged Identity Manager is an identity management product within the IBM Identity Governance and Management solution that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security. IBM Security Privileged Identity...

3Pixels Media Administration Page Bypass Vulnerability

3Pixels is a media software that combines technology and consulting services. A security bypass vulnerability exists in 3Pixels Media. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Microsoft Windows Kerberos - Security Feature Bypass (MS16-101)

Microsoft Windows Kerberos - Security Feature Bypass MS16-101 Exploit Title: Kerberos Security Feature Bypass Vulnerability Kerberos to NTLM Fallback Date: 22-09-2016 Exploit Author: Nabeel Ahmed Tested on: Windows 7 Professional x32/x64 and Windows 10 x64 CVE : CVE-2016-3237 Category: Local...

Apache Tomcat Security Bypass Vulnerability (CNVD-2016-08082)

Apache Tomcat is a lightweight Web application server , it is mainly used for the development and debugging of JSP programs for small and medium-sized systems . Apache Tomcat fails to properly create log files when processing initialization scripts, allowing remote attackers to exploit the...