Multiple vulnerabilities in TYPO3 Ajax mail subscription extension

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the TYPO3 Association in Switzerland.Ajax mail subscription is one of the plugins to add a subscription to an email newsletter. Authentication bypass vulnerabilities and security bypass vulnerabilities exist...

Hesiod has multiple vulnerabilities

Hesiod is a suite of DNS-based directory storage applications. Security bypass vulnerabilities and elevation of privilege vulnerabilities exist in Hesiod. An attacker could use these vulnerabilities to bypass security restrictions and gain unauthorized access or elevate privileges...

OwnCloud Android Local Security Bypass Vulnerability

OwnCloud is a free and open source personal cloud storage solution from the German company OwnCloud.OwnCloud for Android is one of the Android versions. A local security bypass vulnerability exists in OwnCloud for Android versions prior to 1.9.1. A local attacker can exploit this vulnerability to...

nginx security bypass vulnerability

nginx is an HTTP and reverse proxy server developed by Russian software developer Igor Sysoev, which can also be used as a mail proxy server. A security bypass vulnerability exists in nginx. An attacker can exploit this vulnerability to perform unauthorized operations...

Apache HTTP Server mod_fcgid Module Security Bypass Vulnerability

Apache HTTP Server is an open source web server from the Apache Apache Software Foundation in the United States. modfcgid is one of the modcgi and modcgid alternatives Apache modules. A security bypass vulnerability exists in the modfcgid module in Apache HTTP Server. An attacker could exploit th...

ASUS 'asio.sys' Security Bypass Vulnerability

ASUS asio.sys is a sound card driver product from ASUS. A security bypass vulnerability exists in the ASUS asio.sys driver, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations in the affected application...

Google Chrome Security Updates (stable-channel-update-2016-07) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Linux kernel 'entry_64_compat.S' local security bypass vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local security bypass vulnerability exists in Linux kernel 'entry64compat.S'. An attacker could use this vulnerability to bypass security restrictions and perform unauthoriz...

Memory Corruption Vulnerability in Multiple Apple Products

Apple iOS, OS X, tvOS and watchOS are all products of Apple Inc. Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. A security vulnerability exists in...

Juniper Junos Certificate Validation Bypass (JSA10755)

According to its self-reported version number, the remote Juniper Junos device is affected by a security bypass vulnerability due to improper validation of self-signed certificates used for IKE and IPsec. An unauthenticated, remote attacker can exploit this, via a specially crafted self-signed...

Untangle NGFW has multiple vulnerabilities

Untangle NGFW is a set of firewall platforms from the United States Untangle Corporation. Untangle NGFW 12.1.0 and earlier versions contain security bypass vulnerabilities and command injection vulnerabilities that can be exploited by attackers to conduct man-in-the-middle attacks, bypass securit...

KLA10855 Memory corruption vulnerability in Apache OpenOffice

An unspecified vulnerability was found in Apache OpenOffice Impress. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed .ODP and .OTP files. Technical details An exploitable...

Multiple vulnerabilities in Drupal REST JSON module

Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community.REST JSON is one of the interface modules used to expose Drupal content. The Drupal REST JSON module version 7.x-1.x has a 1. security bypass vulnerability 2. user enumeration...

Flash Player < 11.2.202.626 / 18.0.0.366 / 22.0.0.209 Multiple Vulnerabilities

Binary data 9411.prm...

Pivotal Software RabbitMQ for PCF Security Bypass Vulnerability

Pivotal Software RabbitMQ for PCF is an open source messaging server from Pivotal Software, Inc. that is used to support global datacasting and high-capacity data monitoring. A security bypass vulnerability in Pivotal Software RabbitMQ for PCF versions 1.6.0 through 1.6.3 can be exploited by an...

KDE KArchive Security Bypass Vulnerability

KDE is a free and open source X desktop management program for Linux and Unix workstations, KDE provides support for various network protocols through the KIO subsystem.KDE KArchive is one of the document managers. A security bypass vulnerability exists in KDE KArchive 5.23.0 and earlier versions...

Huawei P8 and Mate S Local Security Bypass Vulnerability

Huawei P8 and Mate S is a Huawei Huawei smartphone product. A local security bypass vulnerability exists in Huawei P8 and Mate S, which can be exploited by attackers to bypass security restrictions or launch other attacks...

LG NAS N1A1 has multiple security vulnerabilities

The LG NAS N1A1 is a network storage device developed by the South Korean Lakin LG Group. Arbitrary file upload/download, security bypass, SQL injection, and unauthorized operation vulnerabilities exist in the Familycast service in the LG NAS N1A1 version 10119, which can be exploited by an...

Multiple Vulnerabilities in HPE StoreEver MSL6480 Tape Library

The HPE StoreEver MSL6480 Tape Library is a tape library from Hewlett Packard Enterprise HPE that provides tape backup, disaster recovery, or low-cost long-term archiving, among other features. An insecure default password vulnerability, a security bypass vulnerability, and a cross-site request...

Avast! Antivirus Security Bypass Vulnerability

Avast! Antivirus is a suite of antivirus programs from the Czech company Avast. A security bypass vulnerability exists in Avast! Antivirus, which can be exploited by attackers to bypass security restrictions and perform unauthorized operations...