13018 matches found
Open-source Ticket Request System Help Desk Privilege Vulnerability
Open-source Ticket Request System OTRS is an open-source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the...
KLA11521 Multiple vulnerabilities in Oracle VirtualBox
Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities in Core component of Oracle VM VirtualBox can be...
Philips Holter 2010 Plus Access Control Error Vulnerability
Philips Holter 2010 Plus is a suite of ambulatory ECG monitoring software from Philips Europe. A security bypass vulnerability exists in Philips Holter 2010 Plus all versions. A local attacker can exploit this vulnerability to bypass security restrictions and gain unauthorized access to disabled...
KLA11799 Security vulnerability in Zoom
Security vulnerability was found in Zoom. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories Zoom Security CVE-2019-13450 CVE-2019-13450 Exploitation Malware exists for this vulnerability. Usually such malware is...
Cisco Nexus 9000 Series Fabric Switches ACI Mode Fabric Infrastructure VLAN Unauthorized Access Vulnerability
According to its self-reported version, the Cisco NX-OS Software in ACI mode is affected by a security bypass vulnerability. An unauthenticated, adjacent attacker could exploit this vulnerability to connect an unauthorized server to the highly privileged infrastructure VLAN. Please see the includ...
Microsoft Windows 10.0.17134.648 - HTTP - SMB NTLM Reflection Leads to Privilege Elevation
Microsoft Windows 10.0.17134.648 - HTTP - SMB NTLM Reflection Leads to Privilege Elevation VULNERABILITY DETAILS It's possible to use the NTLM reflection attack to escape a browser sandbox in the case where the sandboxed process is allowed to create TCP sockets. In particular, I was able to combi...
Mozilla Firefox Security Bypass Vulnerability (CNVD-2019-22628)
Mozilla Firefox is a product of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security bypass vulnerability exists in Mozilla Firefox, which could be exploited by an attacker to bypass...
The vulnerability of Microsoft Edge’s Mark of the Web Tagging (MOTW) mechanism allows attackers to circumvent existing security restrictions and compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Mark of the Web Tagging MOTW mechanism in Microsoft Edge browser relates to bypassing security features. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and compromise the confidentiality, integrity, and accessibility of...
CVE-2019-13337
WESEEK GROWI prior to 3.5.0 is affected. A flaw in site-wide basic authentication allows bypass by supplying the URL parameter access_token (the API parameter). No valid token is validated by the backend, enabling the website to be browsed as if authentication were not required. The core issue is...
KLA11516 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, perform cross-site scripting attack, spoof user interface, obtain sensitive information, execute arbitrary code. Below is a...
KLA11513 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security...
Microsoft Windows ADFS CVE-2019-0975 Security Bypass Vulnerability
Description Microsoft Windows is prone to a security-bypass vulnerability. An attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows Server 1803 Microsoft Windows Server 1903 Microsoft Windows Server 2016...
Security feature bypass
A vulnerability in the fabric infrastructure VLAN connection establishment of the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an unauthenticated, adjacent attacker to bypass security validations and connect an unauthorized server to the...
Google Chrome Security Bypass Vulnerability (CNVD-2019-21124)
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome versions prior to 67.0.3396.79, which stems from the program failing to properly handle CSP packet headers. A remote attacker could use this vulnerability to bypass security...
Microsoft Outlook Security Feature Bypass (CVE-2017-11774)
...
FaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosure
Summary FaceSentry 5AN is a revolutionary smart identity management appliance that offers entry via biometric face identification, contactless smart card, staff ID, or QR-code. The QR-code upgrade allows you to share an eKey with guests while you're away from your Office and monitor all activity...
KLA11586 Linux Kernel TCP SACK Denial of Service Vulnerability
Various vulnerabilities was found in Linux Kernel. Microsoft adresses the various effects of these vulnerabilities and provides links to more information: 1. If you are running a Linux kernel in your Azure environment, you should contact the provider of that Linux kernel to understand their...
PHP GD Extension Input Validation Error Vulnerability
PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language jointly maintained by the PHPGroup and the open source community. The language is mainly used for Web development and supports a variety of databases and operating systems.EXIF extension is one of the...
Input validation
Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...
