12950 matches found
Joyent Node.js validator security bypass vulnerability (CNVD-2016-02548)
Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js validator allows remote attackers to bypass filters by submitting special input...
Adobe Analytics AppMeasurement for Flash Library Patch
Adobe today patched a vulnerability in the Adobe Analytics AppMeasurement for Flash library, which can be added to Flash projects to measure the usage of Flash-based content. The vulnerability is a DOM-based cross-site scripting flaw that can be abused for cookie theft, said researcher Randy...
IBM Bluemix Liberty for Java Security Bypass Vulnerability
IBM Bluemix Liberty for Java is a set of dynamic application server runtime environments based on IBM Bluemix Platform as a Service, PaaS products from IBM in the United States. A security bypass vulnerability exists in Liberty for Java in versions prior to IBM Bluemix 2.7-20160321-1358, which ca...
Symantec IT Management Suite Security Bypass Vulnerability
Symantec IT Management Suite is a suite designed to reduce the cost and complexity of enterprise IT asset management. Symantec IT Management Suite failed to properly handle blacklisted applications, allowing a local attacker to exploit the vulnerability to bypass security restrictions and run...
Cacti Security Bypass Vulnerability
Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti Group. A security bypass vulnerability exists in the authlogin.php file in versions of Cacti prior to 0.8.8g, which can be exploited by a remote attacker to bypass established access restrictions by loggi...
The vulnerability of the Android operating system, which allows a hacker to bypass security measures
The vulnerability of the LISTPOISON function include/linux/poison.h in the kernel is related to errors in handling the mmapminaddr variable. Exploiting this vulnerability allows a remote attacker to bypass security measures by calling an uninitialized list of entries...
Microsoft Windows Client-Server Run-time Subsystem Security Bypass Vulnerability
Microsoft Windows is a series of operating systems released by the American company Microsoft. A security bypass vulnerability exists in the Client Server Runtime Subsystem CSRSS of Microsoft Windows, which arises from a program's failure to properly manage process tokens in memory. A local...
Samba NTLMSSP Security Bypass Vulnerability
Samba is a set of free software that enables the UNIX family of operating systems to connect to the SMB/CIFS network protocol of the Microsoft Windows operating system. A security vulnerability exists in Samba's NTLMSSP implementation. An attacker could use this vulnerability to conduct a...
CVE-2016-2313
authlogin.php in Cacti before 0.8.8g allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user not in the cacti database...
KLA10783 Multiple vulnerabilities in Google Chrome
Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, spoof user interface, inject arbitrary code, cause denial of service or obtain sensitive information. Below is a complete list of vulnerabilities 1...
Microsoft Windows RPC Downgrade CVE-2016-0128 Man in the Middle Security Bypass Vulnerability
Description Microsoft Windows is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow attackers to gain elevated privileges and perform unauthorized actions by conducting a man-in-the-middle attack. This may lead to other attacks. Technologies Affected Microsoft...
PostgreSQL Security Bypass Vulnerability (CNVD-2016-02169)
PostgreSQL is a free object-relational database management system developed by the PostgreSQL development group. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. A security bypass vulnerability exists in PostgreSQL...
Adobe Flash Player Use After Free Code Execution (APSB15-32: CVE-2015-8822)
A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient security restrictions while handling specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file using...
KLA10785 Code execution vulnerability in Microsoft Office
Multiple unspecified vulnerabilities was found in Microsoft Office. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed content. Technical details You can mitigate this vulnerability via using Microsoft...
Microsoft Windows Client-Server Run-time Subsystem CVE-2016-0151 Local Security Bypass Vulnerability
Description Microsoft Windows is prone to a local security-bypass vulnerability. A local attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based...
Adobe Flash Player Security Bypass (APSB16-10: CVE-2016-1006)
A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient security restrictions while handling specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file using...
Apache OFBiz Security Bypass Vulnerability
Apache OFBiz also known as Apache Open For Business Project is the United States Apache Apache Software Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. A security bypass vulnerability exists in Apache...
MS16-050: Security Update for Adobe Flash Player (3154132)
The remote Windows host is missing KB3154132. It is, therefore, affected by multiple vulnerabilities : - An Address Space Layout Randomization ASLR bypass vulnerability exists that allows an attacker to predict memory offsets in the call stack. CVE-2016-1006 - Multiple use-after-free errors exist...
