CVE-2016-4606

CVE-2016-4606 affects curl before 7.49.1 on Apple OS X versions prior to macOS Sierra 10.12. The vulnerability allows remote or local attackers to execute arbitrary code, obtain sensitive information, cause denial-of-service, bypass security restrictions, and perform unauthorized actions. Root ca...

Security feature bypass

OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions...

CVE-2013-4454

WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities...

Security feature bypass

WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities...

CVE-2013-4454

CVE-2013-4454 affects WordPress Portable phpMyAdmin Plugin 1.4.1. Connected sources indicate multiple security bypass vulnerabilities in this plugin, without explicit exploit details in the provided documents. The NVD entry lists MEDIUM to CRITICAL severities across CVSS v2/v3, with network-based...

CVE-2013-4454

WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities...

PT-2020-6969 · Ge Healthcare · Logiq +6

Name of the Vulnerable Software and Affected Versions: GE HealthCare Ultrasound Products versions all versions Vivid products versions all versions LOGIQ versions all versions, excluding LOGIQ 100 Pro Voluson versions all versions Versana Essential versions all versions Invenia ABUS Scan station...

chromium-browser: Inappropriate implementation in AppCache

Inappropriate implementation in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass AppCache security restrictions via a crafted HTML page...

CVE-2020-8843

An issue was discovered in Istio 1.3 through 1.3.6. Under certain circumstances, it is possible to bypass a specifically configured Mixer policy. Istio-proxy accepts the x-istio-attributes header at ingress that can be used to affect policy decisions when Mixer policy selectively applies to a...

KLA11721 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A implementation...

Security feature bypass

Internet TRiLOGI Server unknown versions could allow a local user to bypass security and create a local user account...

CVE-2013-6927

CVE-2013-6927 : Internet TRiLOGI Server (unknown versions) could allow a local user to bypass security and create a local user account. The available documents confirm the local-access impact but do not provide product version affected, root cause, or concrete remediation steps. No exploitation d...

CVE-2013-1401

Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll...

Security feature bypass

Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll...

CVE-2013-1401

Cardoza WordPress Poll plugin for WordPress (versions around 34.05/34.5) contains multiple vulnerable functions (editAnswer, deleteAnswer, addAnswer, deletePoll) that can be reached via external AJAX calls. The issues enable remote attackers to manipulate polls (add/edit/delete answers, delete po...

CVE-2013-1401

Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 for WordPress allow a remote attacker to add, edit, and delete an answer and delete a poll...

KLA11675 Authorization check vulnerability in PostgreSQL

Authorization check vulnerability was found in PostgreSQL. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories https://www.postgresql.org/about/news/2011/ Related products PostgreSQL CVE list CVE-2020-1720 warning Solution Update to the latest versi...

Default credentials

Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root password in shaman. The next time shaman is run, root privileges are granted despite the fact that the user never entered the root password...

KLA11691 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to inject malicious code, cause denial of service, obtain sensitive information, execute arbitrary code, read local files. Below is a complete list of vulnerabilities: 1. ‘Copy as cURL’ featu...

CVE-2020-0696

A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'...