13012 matches found
Symantec Norton Password Manager CVE-2019-19545 Cross-Origin Security Bypass Vulnerability
Description Symantec Norton Password Manager is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Versions prior to Symantec Norton Password Manager...
Symantec Norton Password Manager CVE-2019-18381 Cross-Origin Security Bypass Vulnerability
Description Symantec Norton Password Manager is prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Versions prior to Symantec Norton Password Manager...
KLA11615 PE vulnerability in PostgreSQL
Multiple serious vulnerabilities have been found in PostgreSQL. Vulnerabilities in core server and contrib module components can be exploit remotely to gain privileges. Original advisories https://www.postgresql.org/about/news/1998/ Related products PostgreSQL CVE list CVE-2019-3466 high Solution...
Multiple Linux Distributions CVE-2019-14899 Security Bypass Vulnerability
Description Multiple Linux Distributions are prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Apple iOS Apple macOS Archlinux Linux 2019.05...
AZL-36963 CVE-2016-1000104 affecting package mod_fcgid 2.3.9-21
A security Bypass vulnerability exists in the FcgidPassHeader Proxy in modfcgid through 2016-07-07...
AZL-7290 CVE-2016-1000104 affecting package mod_fcgid 2.3.9-21
A security Bypass vulnerability exists in the FcgidPassHeader Proxy in modfcgid through 2016-07-07...
CVE-2016-1000104
A security Bypass vulnerability exists in the FcgidPassHeader Proxy in modfcgid through 2016-07-07...
Security feature bypass
A security Bypass vulnerability exists in the FcgidPassHeader Proxy in modfcgid through 2016-07-07...
CVE-2016-1000104
A security Bypass vulnerability exists in the FcgidPassHeader Proxy in modfcgid through 2016-07-07...
389 security update
CentOS Errata and Security Advisory CESA-2019:3981 An update for 389-ds-base is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
KLA11611 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Incorrectly image loading...
The vulnerability in the implementation of the WebUSB protocol of Google Chrome allows a perpetrator to circumvent security restrictions.
The vulnerability of the WebUSB protocol implementation in Google Chrome is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...
KLA11612 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Race condition vulnerability in Resist Fingerprinting can...
The vulnerability of the XSLT C library, libxslt, related to access control deficiencies, allows attackers to bypass security mechanisms and execute an XXE attack.
The vulnerability of the XSLT C library, libxslt, is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass security measures and carry out an XXE attack...
The vulnerability of the Netlogon service in the Windows operating system allows a hacker to circumvent existing security restrictions.
The vulnerability of the Netlogon service in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using a specially crafted request...
RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.2.5 on RHEL 7 (RHSA-2019:4019)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:4019 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...
Moxa AWK-3121 Series ICSA-19-337-02 Multiple Security Vulnerabilities
Description Moxa AWK-3121 Series is prone to the following security vulnerabilities: 1. Multiple information-disclosure vulnerabilities 2. A security-bypass vulnerability 3. Multiple buffer-overflow vulnerabilities 4. A cross-site request-forgery vulnerability 5. Multiple command-injection...
Ansible nxos_file_copy module input validation error vulnerability
Ansible is a computer system configuration manager from the American company Ansible. The product can be used to distribute, manage, and program computer systems. nxosfilecopy is one of the modules that supports copying files to remote NXOS devices. An input validation error vulnerability exists ...
CVE-2019-14812
A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. A specially crafted PostScript file could disable security protection and then have access to the...
Multiple F5 Products CVE-2019-6665 Man in the Middle Security Bypass Vulnerability
Description Multiple F5 Products are prone to a security-bypass vulnerability. Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks. The following products are vulnerable: BIG-IP ASM 15.0.0 throu...