PostgreSQL 'libpq' Security Bypass Vulnerability (Aug 2018) - Windows

PostgreSQL is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postgresql:postgresql";...

PostgreSQL 'libpq' Security Bypass Vulnerability (Aug 2018) - Linux

PostgreSQL is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postgresql:postgresql";...

KLA11300 Multiple vulnerabilities in PostgreSQL

Multiple serious vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to bypass security restrictions and obtain sensitive information. Below is a complete list of vulnerabilities: 1. An unspecified vulnerability in libpq can be exploited remotely to bypass...

UBUNTU-CVE-2018-10915

A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "host" or "hostaddr" connection parameters from untrusted input, attackers could bypass client-side...

IBM WebSphere MQ Security Bypass Vulnerability (CNVD-2018-24615)

IBM WebSphere MQ is a messaging middleware product from IBM, USA. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A security vulnerability exists in IBM WebSphere MQ versions 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3. An...

Adobe Experience Manager server-side request forgery vulnerability (CNVD-2018-14949)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

Sensio Labs Symfony Security Bypass Vulnerability (CNVD-2018-21473)

Sensio Labs Symfony is a free French Sensio Labs , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . A security bypass vulnerability exists in Http Foundation ...

CVE-2018-7072

A remote bypass of security restrictions vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24...

KLA11299 Multiple vulnerabilities in Mozilla Thunderbird

Multiple serious vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions and obtain sensitive information. Below is a complete list of vulnerabilities: 1. A buffer overflow vulnerability can be...

Symfony Flaw Leaves Drupal Sites Vulnerable to Hackers—Patch Now

It's time to update your Drupal websites. Drupal, the popular open-source content management system, has released a new version of its software to patch a security bypass vulnerability that could allow a remote attacker to take control of the affected websites. The vulnerability, tracked as...

Security Bulletin: z/TPF is affected by the OpenSSL error state security vulnerability

Summary z/TPF has addressed the OpenSSL error state mechanism security bypass vulnerability. Vulnerability Details CVEID: CVE-2017-3737 DESCRIPTION: OpenSSL could allow a remote attacker to bypass security restrictions, caused by a flaw in the "error state" mechanism when directly calling SSLread...

Apache Tomcat 'Hostname Verification' Security Bypass Vulnerability - Windows

Apache Tomcat is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat";...

Apache Tomcat 'Hostname Verification' Security Bypass Vulnerability - Linux

Apache Tomcat is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat";...

Apache Kafka Security Bypass Vulnerability

Apache Kafka is an open source distributed streaming platform developed by the Apache Apache Software Foundation in the United States. The platform is capable of acquiring real-time data for building applications that react in real time to changes in the data stream. A security bypass vulnerabili...

CVE-2018-6686

Authentication Bypass vulnerability in TPM autoboot in McAfee Drive Encryption MDE 7.1.0 and above allows physically proximate attackers to bypass local security protection via specific set of circumstances...

Xen Project Local Security Bypass Vulnerability (XSA-266)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a local security bypass vulnerability. Note that Nessus has checked the changeset versions based on the xen.git change log. Nessus did not check guest hardware configurations or if patche...

Apache Tomcat Security Restriction Bypass Vulnerability (CNVD-2018-15543)

Tomcat server is a free and open source web application server that is a lightweight application server. A security bypass vulnerability exists in Apache Tomcat versions 7.0.25 through 7.0.88, 8.5.0 through 8.5.31, and 9.0.0.M1 and 9.0.9. A remote attacker could use this vulnerability to bypass...

Google Chrome Security Updates (stable-channel-update-for-desktop-2018-07) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2018-12802

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Security Bypass vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2018-12802

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Security Bypass vulnerability. Successful exploitation could lead to privilege escalation...