vzctl local security bypass vulnerability

vzctl is a set of tools used to manage OpenVZ, an OS-level server virtualization solution for Linux-based platforms. A local security bypass vulnerability exists in vzctl. A local attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Firefox < 41 Multiple Vulnerabilities

The version of Firefox installed on the remote Windows host is prior to 41. It is, therefore, affected by the following vulnerabilities : - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. A remote attacker can exploit these issues to corrupt...

Mozilla Thunderbird < 38.1 Multiple Vulnerabilities (Logjam)

Binary data 8879.prm...

CVE-2015-4519

Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended access restrictions and discover a redirect's target URL via crafted JavaScript code that executes after a drag-and-drop action of an image into a TEXTBOX element...

flash -- multiple vulnerabilities

Adobe reports: These updates resolve a type confusion vulnerability that could lead to code execution CVE-2015-5573. These updates resolve use-after-free vulnerabilities that could lead to code execution CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682. These updates...

KLA10671 Flash Player update for Google Chrome

Google Chrome was updated to address vulnerabilities in Flash Player. For details look at KLA10670. Original advisories Blog entry Exploitation Public exploits exist for this vulnerability. Related products Google-Chrome CVE list CVE-2015-5573 critical CVE-2015-5574 critical CVE-2015-5575 critica...

ADH-Web IP Camera Access Bypass

Advisory Information Title: ADH-Web Server IP-Cameras Improper Access Restrictions Date published: 2015-09-19 Date of last update: 2015-09-19 Vendors contacted: ADH-Web Author: Glaysson dos Santos Release mode: User release 2. Vulnerability Information Class: Information Exposure CWE-200 Impact:...

KLA10670 Multiple vulnerabilities in Adobe products

Multiple serious vulnerabilities have been found in Adobe products. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Type confusion,...

Symantec Web Gateway Security Bypass Vulnerability

Symantec Web Gateway is a suite of web content filtering software. The software provides web content filtering and data leakage protection. A security bypass vulnerability exists in Symantec Web Gateway that could be exploited by an attacker to bypass security restrictions and submit a special...

Drupal Fieldable Panels Panes module security bypass vulnerability

Drupal is a free and open source content management system developed in PHP. Drupal Fieldable Panels Panes fails to check the edit permissions of Fieldable Panels Panes entities, allowing remote attackers to edit panes with the permissions of the edit panel...

Drupal Twitter Module Security Bypass Vulnerability

Drupal is a free and open source content management system developed in PHP. The Drupal Twitter module failed to properly check access permissions, allowing a remote attacker to post tweets to arbitrary accounts with the 'post to twitter' permission...

ADH-Web Server IP-Cameras - Multiple Vulnerabilities

Exploit for hardware platform in category web applications 1. Advisory Information Title: ADH-Web Server IP-Cameras Improper Access Restrictions Date published: 2015-09-19 Date of last update: 2015-09-19 Vendors contacted: ADH-Web Author: Glaysson dos Santos Release mode: User release 2...

Google Android Lock Screen Bypass Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A local security bypass vulnerability exists in Android. An attacker can exploit this vulnerability to bypass the lock screen with the help of physical access rights...

phpMyAdmin 4.3.x < 4.3.13.2 / 4.4.x < 4.4.14.1 reCaptcha Bypass (PMASA-2015-4)

According to its self-reported version number, the phpMyAdmin application hosted on the remote web server is 4.3.x prior to 4.3.13.2 or 4.4.x prior to 4.4.14.1. It is, therefore, affected by a security bypass vulnerability related to reCaptcha processing. An unauthenticated, remote attacker can...

HP ArcSight Logger < 6.0 P2 Multiple Vulnerabilities

According to its self-reported version number, the version of HP ArcSight Logger installed on the remote host is prior to 6.0 P2. It is, therefore, affected by multiple vulnerabilities : - An authorization bypass vulnerability exists that allows an authenticated, remote attacker to bypass...

CVE-2014-8778

Checkmarx CxSAST formerly CxSuite before 7.1.8 allows remote authenticated users to bypass the CxQL sandbox protection mechanism and execute arbitrary C code by asserting the 1 System.Security.Permissions.PermissionState.Unrestricted or 2 System.Security.Permissions.SecurityPermissionFlag.AllFlag...

Microsoft Outlook RTF Embedded Object Security Bypass (CVE-2004-0503)

A security bypass vulnerability exists in Microsoft Outlook. The vulnerability is due to a lack of validation for certain OLE objects attached to RTF messages. A successful exploitation may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-locati...

Mozilla Firefox < 38.0 Multiple Vulnerabilities

Binary data 8865.prm...

Microsoft Windows - NtUserGetClipboardAccessToken Token Leak (MS15-023)

Source: https://code.google.com/p/google-security-research/issues/detail?id=461 Windows: NtUserGetClipboardAccessToken Token Leak Redux Platform: Windows 8.1 Update, Windows 10 Build 10130 Class: Security Bypass/EoP Summary: The NtUserGetClipboardAccessToken win32k system call exposes the access...

Microsoft Windows - NtUserGetClipboardAccessToken Token Leak (MS15-023)

Microsoft Windows - NtUserGetClipboardAccessToken Token Leak MS15-023 Source: https://code.google.com/p/google-security-research/issues/detail?id=461 Windows: NtUserGetClipboardAccessToken Token Leak Redux Platform: Windows 8.1 Update, Windows 10 Build 10130 Class: Security Bypass/EoP Summary: Th...