Moodle Security Bypass Vulnerability (CNVD-2015-07731)

Moodle is a free, open source e-learning software platform. A security bypass vulnerability exists in Moodle, which can be exploited by remote attackers to bypass security restrictions and perform unauthorized operations...

The vulnerability of the Android operating system allows a perpetrator to bypass security mechanisms and gain access to protected information.

The vulnerability of the Android operating system’s mediaserver component is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass security mechanisms and gain access to protected information...

Moodle Security Bypass Vulnerability (CNVD-2015-07729)

Moodle is a free, open source e-learning software platform. A security bypass vulnerability exists in Moodle. The vulnerability allows attackers to bypass security restrictions and perform unauthorized operations...

Kaspersky Antivirus Security Bypass Vulnerability

Kaspersky Antivirus is an antivirus program from Kaspersky Labs. A security bypass vulnerability exists in Kaspersky Antivirus. It allows remote attackers to bypass intended security restrictions and perform unauthorized operations...

Multiple Adobe Products Server-Side Request Forgery Security Bypass Vulnerabilities

Adobe ColdFusion is a dynamic Web server, its CFML is a programming language, similar to the current JSP in the JSTL. Adobe LiveCycle Data Services is the United States Odo than Adobe the company's set of deployed in the application server and the integration of the RIA applications and J2EE and...

Cisco IOS Virtual PPP Interfaces Security Bypass

The remote Cisco device is affected by a security bypass vulnerability due to physical-interface ACLs superseding virtual PPP interface ACLs. An authenticated, remote attacker connected to an authenticated PPP session can exploit this to bypass intended network-traffic restrictions. C Tenable...

Cisco IOS Tunnel Interfaces Security Bypass

The remote Cisco device is affected by a security bypass vulnerability due to physical-interface ACLs superseding tunnel-interface ACLs. An authenticated, remote attacker connected to a tunnel interface can exploit this to bypass intended network-traffic restrictions. C Tenable Network Security,...

Microsoft Windows安全机制绕过漏洞（CNVD-2015-07598）

No description provided by source...

Linux kernel securelevel/secureboot 本地安全绕过漏洞

No description provided by source...

Cisco MSE <= 8.0.120.7 Multiple Vulnerabilities

According to its self-reported version number, the Cisco MSE version installed on the remote host is prior to 8.0.120.7. It is, therefore, affected by multiple vulnerabilities : - A local privilege escalation vulnerability exists due to the program using insecure permissions for binary files duri...

Multiple Vulnerabilities in Long Term Evolution Devices

Long Term Evolution LTE is a 4G wireless broadband technology developed by the Third Generation Partnership Project 3GPP project team. Authentication bypass, security bypass, and session fixation vulnerabilities exist in LTE Devices. An attacker could exploit these vulnerabilities to gain...

Palo Alto Networks PAN-OS API Key Persistence Security Bypass (PAN-SA-2015-0006)

The Palo Alto Networks PAN-OS running on the remote host is a version prior to 6.1.7 or 7.x prior to 7.0.2. It is, therefore, affected by a security bypass vulnerability due to a failure to invalidate the local administrator API keys after a password change has been performed, the old keys being...

ManageEngine AssetExplorer Multiple Vulnerabilities

The version of ManageEngine AssetExplorer running on the remote web server is affected by multiple vulnerabilities : - A security bypass vulnerability exists due to a misconfiguration in web.xml that allows access to the URL /workorder/FileDownload.jsp without requiring authentication. - A path...

FreeBSD : flash -- multiple vulnerabilities (547fbd98-8b1f-11e5-b48b-bcaec565249c)

Adobe reports : These updates resolve a type confusion vulnerability that could lead to code execution CVE-2015-7659. These updates resolve a security bypass vulnerability that could be exploited to write arbitrary data to the file system under user permissions CVE-2015-7662. These updates resolv...

ManageEngine ServiceDesk Plus Multiple Vulnerabilities

The version of ManageEngine ServiceDesk Plus running on the remote web server is affected by multiple vulnerabilities : - A security bypass vulnerability exists due to a misconfiguration in web.xml that allows access to the URL /workorder/FileDownload.jsp without requiring authentication. - A pat...

Cisco IOS Software Virtual PPP Interfaces Security Bypass Vulnerability

A vulnerability in Cisco devices that are running Cisco IOS Software Release 15.204M or Cisco IOS Software Release 15.403M and are configured to use access control lists ACLs could allow a user who is connected to an authenticated PPP session to bypass ACLs that are configured on virtual PPP...

Adobe Flash Player & Compiler Security Mechanism Bypass Vulnerability

Adobe Flash Player, Adobe AIR SDK, and Adobe AIR SDK & Compiler are products of Adobe, Incorporated.Adobe Flash Player is a multimedia player; Adobe AIR SDK and Adobe AIR SDK & Compiler are standard development kits for Adobe AIR a cross-OS runtime environment. Adobe Flash Player is a multimedia...

Google Chrome PDF Viewer Security Bypass Vulnerability (Nov 2015) - Windows

Google Chrome is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

Microsoft Windows Security Mechanism Bypass Vulnerability (CNVD-2015-07598)

Microsoft Windows is a series of operating systems designed for personal computer and server users from the American company Microsoft. Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and...

Google Chrome PDF Viewer Security Bypass Vulnerability (Nov 2015) - Linux

Google Chrome is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...