Baxter SIGMA Spectrum Infusion System Local Security Bypass Vulnerability

The Baxter SIGMA Spectrum Infusion System is an intelligent infusion system from Baxter. A local security bypass vulnerability exists in the Baxter SIGMA Spectrum Infusion System. A local attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Dwango niconico for iOS security bypass vulnerability

Dwango niconico for iOS is a suite of online pop-up video sharing website applications based on the iOS platform by Japanese company Dwango. A security bypass vulnerability exists in Dwango niconico for iOS version 6.37 and earlier. An attacker can exploit the vulnerability to conduct a...

Squid Security Bypass Vulnerability (CNVD-2015-07339)

Squid full name Squid Cache is a suite of proxy server and Web caching server software. A security bypass vulnerability exists in Squid. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Firefox < 42 Multiple Vulnerabilities

The version of Firefox installed on the remote Windows host is prior to 42. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exist due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these issues, via ...

Firefox < 42 Multiple Vulnerabilities (Mac OS X)

The version of Firefox installed on the remote Mac OS X host is prior to 42. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues exist due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these issues, via...

Adways Party Track SDK for iOS Security Bypass Vulnerability

Adways Party Track SDK for iOS is an iOS-based system for monitoring the effectiveness of mobile app ads from Adways. A security bypass vulnerability exists in Adways Party Track SDK for iOS. The vulnerability can be exploited by an attacker to conduct a man-in-the-middle attack or impersonate a...

Techno Project Japan Enisys Gw Security Bypass Vulnerability

Techno Project Japan Enisys Gw is an open source groupware software from Techno Project Japan. A security vulnerability exists in Techno Project Japan Enisys Gw that can be exploited by remote attackers to bypass security restrictions and read arbitrary web ROOT files...

IBM WebSphere Portal Access Bypass Vulnerability

IBM WebSphere Portal is a suite of enterprise portal software. The software creates a platform that connects an organization internally and externally, allowing employees, customers, suppliers, etc. to access internal data through the platform. A security vulnerability in IBM WebSphere Portal...

Kaspersky Internet Security Bypass Vulnerability

Kaspersky Internet Security is a suite of security software that combines antivirus and firewall features. A security bypass vulnerability exists in Kaspersky Internet Security. This vulnerability can be exploited by attackers to bypass security restrictions and perform unauthorized operations...

Openpgp.js 's2k.js' Security Bypass Vulnerability

Openpgp.js is a library that implements the OpenPGP encryption algorithm in JavaScript. A security bypass vulnerability exists in Openpgp.js, which allows remote attackers to exploit the vulnerability to obtain sensitive information and perform unauthorized operations...

Baxter Wireless Battery Module Security Bypass Vulnerability (CNVD-2015-07228)

The Baxter SIGMA Spectrum Infusion System is an intelligent infusion system, and the Baxter Wireless Battery WBM is one of the wireless power modules. A security vulnerability exists in the Baxter WBM that could be exploited by a remote attacker to gain unauthorized access and sensitive...

CVE-2004-1063

PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safemodeexecdir restrictions and execute commands outside of the intended safemodeexecdir via shell metacharacters in the current directory name. NOTE: this issue was...

CVE-2010-0747

drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725...

CVE-2004-2343

Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. NOTE: the vendor has disputed this issue, since the .htaccess mechanism is only intended to restri...

Adobe Flash Player Security Bypass (APSB15-25: CVE-2015-7628)

A security bypass vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insufficient security restrictions while handling specially crafted SWF files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file using...

Apple iOS X.509 Certificate Validation Vulnerability

IOS is an operating system developed by Apple for mobile devices. A certificate validation vulnerability exists in Apple iOS X.509, which allows attackers to bypass security restrictions to obtain sensitive information, execute arbitrary code, or launch other attacks such as denial of service...

Linux Audit '/auparse/auparse.c' Security Bypass Vulnerability

Linux Audit is a set of graphical tools for viewing audit logs of Linux systems. A security bypass vulnerability exists in Linux Audit. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Moodle Security Bypass Vulnerability (CNVD-2015-07117)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle. An attacker could use this...

Moodle Security Bypass Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle. An attacker could use this...

Moodle Security Bypass Vulnerability (CNVD-2015-07096)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle. An attacker could use this...