CVE-2019-16453

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-16453

Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier, 2017.011.30155 and earlier version, 2017.011.30152 and earlier, and 2015.006.30505 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution...

Sudo Multiple Security Bypass Vulnerabilities

Description Sudo is prone to multiple security-bypass vulnerabilities. Attackers can exploit these issues to bypass security restrictions and perform unauthorized actions. Sudo versions through 1.8.29 are vulnerable. Technologies Affected Todd Miller Sudo 1.3.5 Todd Miller Sudo 1.5 Todd Miller Su...

Cloud Foundry Cloud Controller API CVE-2019-11294 Access Control Security Bypass Vulnerability

Description Cloud Foundry Cloud Controller API is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks. Cloud Foundry Cloud Controller API 1.88.0 is vulnerable...

Multiple Trend Micro Products CVE-2019-19693 Local Security Bypass Vulnerability

Description Multiple Trend Micro Products are prone to a local security-bypass vulnerability. Attackers can exploit this issue to obtain sensitive information, bypass security restrictions and perform unauthorized actions or cause denial-of-service conditions. Technologies Affected Trend Micro...

Django CVE-2019-19844 Security Bypass Vulnerability

Description Django is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Djangoproject Django 1.11 Djangoproject Django 1.11.1 Djangoproject...

Atlassian Jira Improper Authorization Check Vulnerability

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An improper authorization checking vulnerability exists in Atlassian Jira versions prior to 7.13.12, 8.0.0 and later fixed in...

CVE-2019-19675

In Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges can bypass Managed Application Security by leveraging an unspecified attack vector in Workspace Preferences, when it is enabled. As a result, the attacker can start applications that should be blocked...

CVE-2019-19675

CVE-2019-19675 affects Ivanti Workspace Control (before 10.3.180.0). A locally authenticated user with low privileges can bypass Managed Application Security via an unspecified attack vector in Workspace Preferences, enabling the launching of applications that should be blocked. This is the scope...

CVE-2019-19675

In Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges can bypass Managed Application Security by leveraging an unspecified attack vector in Workspace Preferences, when it is enabled. As a result, the attacker can start applications that should be blocked...

The vulnerability of the FortiMail email protection system, related to deficiencies in access control, allows attackers to bypass existing security restrictions and download a backup of the system.

The vulnerability of the FortiMail email security system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and download a backup of the system...

CVE-2019-19774

An issue was discovered in Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110. By running "select hostdetails from hostdetails" at the /event/runquery.do endpoint, it is possible to bypass the security restrictions that prevent even administrative users from viewing credential data...

Default credentials

An issue was discovered in Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110. By running "select hostdetails from hostdetails" at the /event/runquery.do endpoint, it is possible to bypass the security restrictions that prevent even administrative users from viewing credential data...

CVE-2019-19774

CVE-2019-19774 affects Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110. An authenticated user can bypass access controls via the /event/runquery.do endpoint by executing the query select hostdetails from hostdetails, bypassing restrictions that prevent viewing credential data and ...

CVE-2014-1867

suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution...

CVE-2014-1867

suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution...

Security feature bypass

suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution...

CVE-2014-1867

CVE-2014-1867 affects suPHP prior to 0.7.2. The vulnerability stems from the source-highlighting feature, which enables a security bypass and could lead to arbitrary code execution. Public references (NVD, CVE listings) describe the issue, but exploitation details and concrete patches are not pro...

CVE-2014-1867

suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution...

Adobe Acrobat < 2015.006.30508 / 2017.011.30156 / 2019.021.20058 Multiple Vulnerabilities (APSB19-55)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30508, 2017.011.30156, or 2019.021.20058. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions , 2019.021.20056 and earlier, 2017.011.30152 and earlier,...