Apache CXF Fediz Security Bypass Vulnerability

Apache CXF is the United States Apache Apache Software Foundation of an open source Web services framework. The framework supports a variety of Web services standards , a variety of front-end programming APIs , etc. Apache CXF Fediz is one of the subprojects , mainly used to provide authenticatio...

Microsoft Internet Explorer CVE-2016-3353 Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a security-bypass vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. This could allow the attacker to bypass certain security restrictions. This may lead to othe...

Adobe Flash Player for Mac <= 22.0.0.211 Multiple Vulnerabilities (APSB16-29)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 22.0.0.211. It is, therefore, affected by multiple vulnerabilities : - Multiple security bypass vulnerabilities exist that allow an unauthenticated, remote attacker to disclose sensitive...

GnuTLS Security Bypass Vulnerability (CNVD-2016-07565)

GnuTLS is a free secure communications library for implementing the SSL, TLS and DTLS protocols developed by Nikos Mavrogiannopoulos of Belgium and Simon Josefsson of Sweden, software developers. A security bypass vulnerability exists in GnuTLS versions 3.3.24 and earlier, 3.4.14 and earlier, and...

Adobe Flash Player <= 22.0.0.211 Multiple Vulnerabilities (APSB16-29)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 22.0.0.211. It is, therefore, affected by multiple vulnerabilities : - Multiple security bypass vulnerabilities exist that allow an unauthenticated, remote attacker to disclose sensitive informatio...

Design/Logic Flaw

server/notification/NotificationManagerService.java in the Notification Manager Service in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 lacks uid checks, which allows attackers to bypass intended restrictions on method calls via a crafted application, aka internal bug 29421441...

CVE-2016-3889

Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism by accessing 1 an external tile from a system application, 2 the help feature, or 3 the Settings application during a pre-setup stage, aka...

KLA10995 Multiple arbitrary code execution vulnerabilities in Microsoft office

Multiple serious vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. An improper validation of input before loading DLL files can be exploited remotely via a specially...

cURL/libcURL Certificate Validation Security Bypass Vulnerability

cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A security bypass vulnerability exists in cURL/libcURL certificate validation, which allows attackers to bypass security restrictions and perform unauthorized operations...

Google Chrome Security Updates (stable-channel-update-for-desktop_31-2016-08) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Unspecified Security Bypass Vulnerability in Multiple Fireeye NX Products

FireEye NX 4300 and others are threat protection platforms for defense against Web network attacks from FireEye USA. An unspecified security bypass vulnerability exists in multiple Fireeye NX products. An attacker could exploit this vulnerability to bypass certain security restrictions and perfor...

Google Chrome Security Updates (stable-channel-update-for-desktop_31-2016-08) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Arbitrary Code Execution Vulnerability (CNVD-2016-07195)

Google Chrome is a web browser developed by the American company Google Google. An arbitrary code execution vulnerability exists in versions of Google Chrome Extensions prior to 53.0.2785.89. An attacker can exploit this vulnerability to execute arbitrary code in the context of the browser, bypas...

Drupal Flag Module Security Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A security bypass vulnerability exists in the Drupal Flag module, which allows attackers to bypass security restrictions and perform unauthorized operations...

CryptWare CryptoPro Secure Disk for Bitlocker Local Security Bypass Vulnerability

CryptWare CryptoPro Secure Disk for Bitlocker is a secure disk product from CryptWare IT Security, Germany, that centrally manages Microsoft BitLocker! disk encryption utility through its own Pre-Boot Authentication PBA feature. A local security bypass vulnerability exists in CryptWare CryptoPro...

IBM Tivoli Storage Manager for Virtual Environments Security Bypass Vulnerability

IBM Tivoli Storage Manager for Virtual Environments TSMVE is a VM backup and recovery solution from IBM USA. The solution protects VMware vSphere virtual machines by offloading backup workloads to a central server. A security bypass vulnerability exists in IBM TSMVE versions 7.1.0.0 through 7.1.4...

Shopify: Open redirect allows changing iframe content in *.myshopify.com/admin/themes/<id>/editor

Hi , I managed to bypass the fix you deployed to the issue I reported in 159522. Apparently this is what the fix does: - Redirecting to https://checkout.shopify.com/ / only is allowed. - For example: victim.myshopify.com/account/logout?returnurl=https://checkout.shopify.com// will work - but...

OpenSSH CBC Padding Weak Password Vulnerability

OpenSSH is a set of connection tools maintained by the OpenBSD Project Group for secure access to remote computers. A weak password vulnerability exists in OpenSSH CBC Padding, which allows an attacker to bypass security restrictions and obtain sensitive information...

OwnCloud Restore Actions Security Bypass Vulnerability

OwnCloud is a free and open source personal cloud storage solution from German company OwnCloud. The solution offers file management, music storage, calendars and more. A security bypass vulnerability exists in OwnCloud Restore Actions, which allows attackers to bypass security restrictions and...

Security Bypass Vulnerabilities in Multiple Fortinet Products

Fortinet FortiManager and Fortinet FortiAnalyzer are products of Fortinet, a centralized network security management solution; Fortinet FortiAnalyzer is a centralized network security reporting solution. Fortinet FortiManager is a centralized network security management solution; Fortinet...