NTT DOCOMO Shoplat App for iOS SSL Certificate Validation Security Bypass Vulnerability

NTT DOCOMO Shoplat is a set of O2O e-commerce platform based on acoustic indoor positioning technology from NTT DOCOMO in Japan. The platform supports pushing reward points, e-coupons and other content information to users.Shoplat App for iOS is a set of Shoplat apps based on iOS platform. A...

Sensio Labs Symfony Predictable Random Number Generation Vulnerability

Sensio Labs Symfony is a free French Sensio Labs , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . A predictable random number generation vulnerability exist...

NTP Security Bypass Vulnerability (CNVD-2016-00817)

NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security bypass vulnerability exists in NTP. An attacker can exploit this vulnerability to gain access to sensitive information and perform unauthorized operations...

NTP Security Bypass Vulnerability (CNVD-2016-00818)

NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security bypass vulnerability exists in NTP. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Kaspersky Total Security Security Bypass Vulnerability

Kaspersky Total security is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-7546

The identity service in OpenStack Identity Keystone before 2015.1.3 Kilo and 8.0.x before 8.0.2 Liberty and keystonemiddleware formerly python-keystoneclient before 1.5.4 Kilo and Liberty before 2.3.3 does not properly invalidate authorization tokens when using the PKI or PKIZ token providers,...

Tinyproxy < 1.8.3 Multiple Security Bypass Vulnerabilities

Tinyproxy is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

Mozilla Firefox Multiple Vulnerabilities (Jan 2016) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox Multiple Vulnerabilities (Jan 2016) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Google Chrome Omnibox Security Bypass Vulnerability

Google Chrome is a web browser. Google V8 is one of the open source JavaScript engines. A security vulnerability in Google Chrome's Omnibox implementation allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing and falsifying the origin o...

Ruby on Rails jquery-ujs和jquery-rails安全绕过漏洞

Impact In the scenario where an attacker might be able to control the href attribute of an anchor tag or the action attribute of a form tag that will trigger a POST action, the attacker can set the href or action to " https://attacker.com" note the leading space that will be passed to JQuery, who...

KLA10749 Multiple vulnerabilities in MariaDB

Multiple serious vulnerabilities have been found in MariaDB. Malicious users can exploit these vulnerabilities to cause denial of service, affect integrity, bypass security restrictions or execute arbitrary code. Below is a complete list of vulnerabilities 1. Improper server hostname verification...

Lenovo ShareIT Information Disclosure / Hardcoded Password

Advisory Information Title: Lenovo ShareIT Multiple Vulnerabilities Advisory ID: CORE-2016-0002 Advisory URL: http://www.coresecurity.com/advisories/lenovo-shareit-multiple-vulnerabilities Date published: 2016-01-25 Date of last update: 2016-01-22 Vendors contacted: Lenovo Release mode:...

Lenovo ShareIT Multiple Vulnerabilities

Advisory ID Internal CORE-2016-0002 1. Advisory Information Title: Lenovo ShareIT Multiple Vulnerabilities Advisory ID: CORE-2016-0002 Date published: 2016-01-25 Date of last update: 2016-01-22 Vendors contacted: Lenovo Release mode: Coordinated release 2. Vulnerability Information Class: Use of...

Oracle WebLogic Server Multiple Vulnerabilities (January 2016 CPU)

Binary data oracleweblogicservercpujan2016.nbin...

IBM Jazz Reporting Service-Rational-CLM Security Bypass Management Task Execution Vulnerability

IBM Jazz Reporting Service is a suite of applications for discovering cross-project reports from IBM in the U.S. Report Builder is one of the tools used to quickly create reports. A security vulnerability in Report Builder for IBM Jazz Reporting Service allows remote attackers to exploit the...

IBM Jazz Reporting Service-Rational-CLM Security Mechanism Bypass Vulnerability

IBM Jazz Reporting Service is a suite of applications for discovering cross-project reports from IBM in the U.S. Report Builder is one of the tools used to quickly create reports. A security vulnerability in Report Builder for IBM Jazz Reporting Service allows remote attackers to exploit the...

Oracle WebCenter Sites Apache Xalan-Java Library Security Bypass (January 2016 CPU)

The version Oracle WebCenter Sites installed on the remote host is missing a security patch from the January 2016 Critical Patch Update CPU. It is, therefore, affected by a security bypass vulnerability in the Apache Xalan-Java library due to a failure to properly restrict access to certain...

IBM WebSphere Application Server Security Bypass Vulnerability (Jan 2016)

IBM WebSphere Application Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cisco Web Security Appliance Security Bypass Vulnerability

A vulnerability in the proxy engine of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to bypass security restrictions. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...