SO Planning Security Bypass Vulnerability

SO Planning is a free and open source set of online project production and management tools. A security bypass vulnerability exists in SO Planning. The vulnerability can be exploited to conduct an offline brute force attack via a GET URL in ICAL Calendar to obtain a user's password...

McAfee ePolicy Orchestrator SSL/TLS Certificate Validation Security Bypass Vulnerability (SB10120)

According to its self-reported version, the McAfee ePolicy Orchestrator ePO running on the remote host is affected by a security bypass vulnerability due to a failure to properly validate server and Certificate Authority names in X.509 certificates from SSL servers. A man-in-the-middle attacker, ...

Cisco Unified MeetingPlace Web Conferencing Unauthorized Password Change Security Bypass

According to its self-reported version number, the installation of Cisco Unified MeetingPlace Web Conferencing hosted on the remote web server is potentially affected by a security bypass vulnerability due to the lack of validation of the current password and HTTP session ID during a password...

Fortinet FortiGate FortiOS Security Bypass Vulnerability

Fortinet FortiGate running FortiOS is a set of security operating system developed by American Fitta Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security feature...

zf-oauth2 security bypass vulnerability

OAuth is an open web standard for authorization that is widely used around the world and is currently in version 2.0. A security bypass vulnerability exists in zf-oauth2, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations...

Fortinet FortiOS Security Bypass Vulnerability

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. A security bypas...

Elasticsearch Logstash Security Bypass Vulnerability

Elasticsearch Logstash is a set of log analysis and monitoring tools from Elasticsearch Netherlands. The tool provides functions such as search, processing and management of logs or events. A security bypass vulnerability exists in Elasticsearch Logstash. An attacker can exploit this vulnerabilit...

Multiple vulnerabilities in php File Manager

php File Manager is a suite of applications for managing web sites using PHP scripts. Cross-site scripting vulnerabilities, information disclosure vulnerabilities, arbitrary file upload vulnerabilities, backdoor vulnerabilities, security bypass vulnerabilities, and cross-site request forgery...

Linux kernel 'x86/entry/entry_64.S' local security bypass vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local security bypass vulnerability exists in the Linux kernel. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized...

CentOS 7 : clutter (CESA-2015:1510)

Updated clutter packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fro...

Research Artisan Lite Security Bypass Vulnerability

Research Artisan Lite is a set of tools developed by the Research Artisan project in Japan for statistical analysis of website visits. A security vulnerability exists in Research Artisan Lite prior to version 1.18, which is caused by the program failing to properly perform authentication. A remot...

Adobe Acrobat and Reader Security Bypass (APSB15-15: CVE-2015-4447)

A security bypass vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while parsing a specially crafted PDF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted PDF file...

WordPress Cross-Site Scripting Vulnerability (CNVD-2015-05009)

WordPress is a blogging platform developed using the PHP language. Versions of Wordpress prior to 4.2.3 have a cross-site scripting vulnerability in the implementation that allows users with Contributor or Author privileges to exploit this vulnerability to embed well-constructed HTML, JavaScript,...

Apache Tomcat 7.0.x < 7.0.59 / 8.0.x < 8.0.17 Security Manager Bypass

Binary data 8832.pasl...

OpenSSH Login Handling Security Bypass Vulnerability

OpenSSH is an open source implementation of the SSH protocol. A login processing security bypass vulnerability exists in OpenSSH, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations...

Adobe AIR < 17.0.0.172 Multiple Vulnerabilities (APSB15-06)

Binary data 8834.prm...

Flash Player < 13.0.0.281 / 17.0.0.169 Multiple Vulnerabilities (APSB15-06)

Binary data 8815.prm...

The vulnerability of the microprogramming software of the Cisco Nexus 1000V virtual switch allows a remote attacker to bypass the device’s security mechanisms.

The vulnerability in the key generator implementation util/keygen.c allows a malicious individual to discover the key through brute-force attacks...

Moodle 'mod/forum:canposttomygroups' security bypass vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle. An attacker could exploit this...

Ansible Bypass Security Restrictions Vulnerability

Ansible is a newly emerged operation and maintenance tool that is based on Python and combines the advantages of many old operation and maintenance tools to achieve batch operating system configuration, batch program deployment, batch running commands and other functions. A security vulnerability...