Cisco IOS Software Tunnel Interfaces Security Bypass Vulnerability (cisco-sa-20151112-ios2)

A vulnerability in Cisco devices running IOS Software configured with access control lists ACLs could allow an unauthenticated, remote user connected to a tunnel interface to bypass configured ACLs on tunnel interfaces if the ACL on the physical interface permits the traffic to pass...

Cisco Application Policy Infrastructure Controller Enterprise Module Security Bypass Vulnerability

The Cisco Application Policy Infrastructure Controller Enterprise Module is a suite of applications that provide policy-based use for automated configuration of end-to-end infrastructure controllers. A security bypass vulnerability exists in the API of the Cisco Application Policy Infrastructure...

Firefox < 46 Multiple Vulnerabilities (Mac OS X)

The version of Firefox installed on the remote Mac OS X host is prior to 46. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an attacker to corrupt memory, resulting in the execution of arbitrary code. CVE-2016-2804, CVE-2016-2806,...

Firefox < 46 Multiple Vulnerabilities

The version of Firefox installed on the remote Windows host is prior to 46. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an attacker to corrupt memory, resulting in the execution of arbitrary code. CVE-2016-2804, CVE-2016-2806,...

Palo Alto Networks PAN-OS HTTP Header Handling URL Filter Bypass (PAN-SA-2016-0006)

The Palo Alto Networks PAN-OS running on the remote host is version 5.0.x, 6.0.x, 6.1.x, 7.0.x, or 7.1.x prior to 7.1.1. It is, therefore, affected by a security bypass vulnerability in the URL filtering mechanism, which is triggered when handling a specially crafted HTTP header. An attacker can...

Content provider permission bypass allows malicious application to access data — Mozilla

Security researcher Ken Okuyama reported an issue on Firefox for Android where a previously installed malicious application can access content provider permissions for Firefox in order to read data. This data includes browser history and locally saved passwords. This issue occurs when a list of...

Joyent Node.js validator security bypass vulnerability (CNVD-2016-02545)

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js validator allows remote attackers to bypass filters by submitting special input...

Joyent Node.js validator security bypass vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js validator allows remote attackers to bypass filters by submitting special input...

Joyent Node.js validator security bypass vulnerability (CNVD-2016-02548)

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js validator allows remote attackers to bypass filters by submitting special input...

Adobe Analytics AppMeasurement for Flash Library Patch

Adobe today patched a vulnerability in the Adobe Analytics AppMeasurement for Flash library, which can be added to Flash projects to measure the usage of Flash-based content. The vulnerability is a DOM-based cross-site scripting flaw that can be abused for cookie theft, said researcher Randy...

IBM Bluemix Liberty for Java Security Bypass Vulnerability

IBM Bluemix Liberty for Java is a set of dynamic application server runtime environments based on IBM Bluemix Platform as a Service, PaaS products from IBM in the United States. A security bypass vulnerability exists in Liberty for Java in versions prior to IBM Bluemix 2.7-20160321-1358, which ca...

Symantec IT Management Suite Security Bypass Vulnerability

Symantec IT Management Suite is a suite designed to reduce the cost and complexity of enterprise IT asset management. Symantec IT Management Suite failed to properly handle blacklisted applications, allowing a local attacker to exploit the vulnerability to bypass security restrictions and run...

Cacti Security Bypass Vulnerability

Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti Group. A security bypass vulnerability exists in the authlogin.php file in versions of Cacti prior to 0.8.8g, which can be exploited by a remote attacker to bypass established access restrictions by loggi...

The vulnerability of the Android operating system, which allows a hacker to bypass security measures

The vulnerability of the LISTPOISON function include/linux/poison.h in the kernel is related to errors in handling the mmapminaddr variable. Exploiting this vulnerability allows a remote attacker to bypass security measures by calling an uninitialized list of entries...

Microsoft Windows Client-Server Run-time Subsystem Security Bypass Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A security bypass vulnerability exists in the Client Server Runtime Subsystem CSRSS of Microsoft Windows, which arises from a program's failure to properly manage process tokens in memory. A local...

Samba NTLMSSP Security Bypass Vulnerability

Samba is a set of free software that enables the UNIX family of operating systems to connect to the SMB/CIFS network protocol of the Microsoft Windows operating system. A security vulnerability exists in Samba's NTLMSSP implementation. An attacker could use this vulnerability to conduct a...

CVE-2016-2313

authlogin.php in Cacti before 0.8.8g allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user not in the cacti database...

KLA10783 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, spoof user interface, inject arbitrary code, cause denial of service or obtain sensitive information. Below is a complete list of vulnerabilities 1...

Microsoft Windows RPC Downgrade CVE-2016-0128 Man in the Middle Security Bypass Vulnerability

Description Microsoft Windows is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow attackers to gain elevated privileges and perform unauthorized actions by conducting a man-in-the-middle attack. This may lead to other attacks. Technologies Affected Microsoft...

PostgreSQL Security Bypass Vulnerability (CNVD-2016-02169)

PostgreSQL is a free object-relational database management system developed by the PostgreSQL development group. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. A security bypass vulnerability exists in PostgreSQL...