Cisco Web Security Appliance Security Bypass Vulnerability

A vulnerability in the proxy engine of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to bypass security restrictions. The vulnerability is due to improper handling of malformed HTTP methods. An attacker could exploit this vulnerability by crafting an imprope...

The vulnerability of the Android operating system allows a perpetrator to obtain confidential information and bypass security mechanisms.

The vulnerability of the Android operating system’s kernel is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or bypass security mechanisms...

Adobe Acrobat Multiple Vulnerabilities - 01 (Jan 2016) - Mac OS X

Adobe Acrobat is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat"; ifdescription...

McAfee VirusScan Enterprise Security Bypass Vulnerability (Jan 2016) - Windows

McAfee VirusScan Enterprise is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat Multiple Vulnerabilities - 01 (Jan 2016) - Windows

Adobe Acrobat is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat"; ifdescription...

Adobe Reader Multiple Vulnerabilities - 01 (Jan 2016) - Mac OS X

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Adobe Reader Multiple Vulnerabilities - 01 (Jan 2016) - Windows

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

CVE-2015-7469

Report Builder in IBM Jazz Reporting Service JRS 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to bypass intended read-only restrictions by leveraging a JazzGuest role...

CVE-2015-7468

Report Builder in IBM Jazz Reporting Service JRS 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to bypass intended restrictions on administrator tasks via unspecified vectors...

CVE-2015-7468

Report Builder in IBM Jazz Reporting Service JRS 5.x before 5.0.2-Rational-CLM-ifix011 and 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to bypass intended restrictions on administrator tasks via unspecified vectors...

RubyGems rack-attack 'ActionDispatch' security bypass vulnerability

RubyGems is a Ruby package manager from the RubyGems organization that is used to distribute and manage Ruby packages. rack-attack is one of the middleware used to block abusive requests. A security vulnerability in RubyGems rack-attack allows remote attackers to bypass security restrictions and...

Silent Circle Blackphone Security Bypass Vulnerability

Silent Circle Blackphone is a smartphone that offers privacy protection features. A security vulnerability exists in Silent Circle Blackphone that allows an attacker to bypass security restrictions and perform unauthorized operations...

HP HPE ArcSight Logger Certificate Upload Security Bypass Vulnerability

HP HPE ArcSight Logger is a suite of log management software. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A vulnerability in the HP HPE ArcSight Logger client certificate upload processing...

HP HPE ArcSight Logger Certificate Upload Security Bypass Vulnerability (CNVD-2016-00362)

HP HPE ArcSight Logger is a suite of log management software. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A vulnerability in the HP HPE ArcSight Logger client certificate upload processing...

Cisco Adaptive Security Appliance Software Security Bypass Vulnerability

Cisco Adaptive Security Appliances is a set of firewall appliances from Cisco in the United States. The appliance also includes IPS, SSL VPN, IPSec VPN, anti-spam and other features. A security bypass vulnerability exists in Cisco Adaptive Security Appliance Software, which allows remote attacker...

Microsoft SharePoint Security Bypass Vulnerability

Microsoft Office is an office software suite based on the Windows operating system. A security feature bypass vulnerability exists in Microsoft SharePoint, which can be exploited by remote attackers to bypass target ACP restrictions and conduct XSS attacks by modifying the webpart...

KLA10742 Security bypass vulnerability in Gajim

An unspecified vulnerability was found in Gajim. By exploiting this vulnerability malicious users can modify roster and intercept messages. This vulnerability can be exploited remotely via a specially designed roster-push IQ stanza. Original advisories - Related products Gajim CVE list...

Microsoft Office Security Mechanism Bypass Vulnerability

Microsoft Office is a suite of office software developed by Microsoft Corporation for the Microsoft Windows and Apple Macintosh operating systems. A security bypass vulnerability exists in Microsoft Office, which can be exploited by remote attackers to bypass the ASLR protection mechanism and...

CVE-2016-0019

The Remote Desktop Protocol RDP service implementation in Microsoft Windows 10 Gold and 1511 allows remote attackers to bypass intended access restrictions and establish sessions for blank-password accounts via a modified RDP client, aka "Windows Remote Desktop Protocol Security Bypass...

CVE-2016-0019

The Remote Desktop Protocol RDP service implementation in Microsoft Windows 10 Gold and 1511 allows remote attackers to bypass intended access restrictions and establish sessions for blank-password accounts via a modified RDP client, aka "Windows Remote Desktop Protocol Security Bypass...