WordPress < 2.8.3 'wp-admin' Multiple Security Bypass Vulnerabilities

According to its self-reported version number, the WordPress application running on the remote web server is prior to 2.8.3. It is, therefore, affected by multiple security bypass vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...

Dnsmasq Security Bypass Vulnerability

Dnsmasq is the software developer Simon Kelley developed a use of C language written in open source lightweight DNS forwarding and DHCP, TFTP server . A security bypass vulnerability exists in the DNSSEC implementation in Dnsmasq 2.78 and earlier versions. An attacker could exploit this...

FasterXML jackson-databind Security Bypass Vulnerability

FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . Jackson-databind is one of the components with data binding capabilities . A security bypass vulnerability exists in FasterXML jackson-databind versions 2.8.11 and earlier and versions 2.9.x through 2.9.3. An attacker...

KLA11185 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface, obtain sensitive information and perform cross-site scripting attack. Below ...

CVE-2018-1043

The data points to CVE-2018-1043 affecting Moodle 3.x: the blocked hosts list can be bypassed using multiple A-record hostnames. The related metrics indicate a CVSS v3 base score of 6.5 (I=High, A=None, C=None; network attack, low complexity, low privileges required, no user interaction). No expl...

KLA11183 Memory corruption vulnerabilities in Microsoft Office

Memory corruption vulnerabilities was found in Microsoft Office software. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited via specially crafted file to execute arbitrary code. Original advisories CVE-2018-0849 CVE-2018-0862...

CVE-2017-12197

CVE-2017-12197 affects libpam4j (Java PAM wrapper) up to and including 1.8, where authentication did not correctly enforce account status because pam_acct_mgmt() was not called. A user with a valid password for a disabled/deactivated account could bypass restrictions and access sensitive informat...

Arbitrary user login vulnerability in DeDecms cookie.helper.php file

Weaving dream content management system DedeCms is a PHP open source website management system. There is an arbitrary user login vulnerability in the DeDecms cookie.helper.php file. Attackers can use the vulnerability to bypass the security checks , login any user...

Cheetah Mobile Armorfly Browser&Downloader Security Bypass Vulnerability

Cheetah Mobile Armorfly Browser&Downloader is a browser with download function from Cheetah Mobile China. A security bypass vulnerability exists in Cheetah Mobile Armorfly Browser&Downloader version 1.1.05.0010. An attacker can exploit this vulnerability to bypass the same-origin policy...

HPE NonStop Server L-Series, J-Series, and H-series Products Local Security Bypass Vulnerability

HPE NonStop Server L-Series, J-Series, and H-series are all different families of fault-tolerant server products from Hewlett Packard Enterprise HPE. A local security bypass vulnerability exists in the HPE NonStop Server L-Series, J-Series, and H-series products. A local attacker could exploit th...

GLSA-201801-11 : PySAML2: Security bypass

The remote host is affected by the vulnerability described in GLSA-201801-11 PySAML2: Security bypass It was found that the PySAML2 relies on an assert statement to check the users password. A python optimizations might remove this assertion. Impact : A remote attacker could bypass security...

PySAML2: Security bypass

Background PySAML2 is a pure python implementation of SAML2 Description It was found that the PySAML2 relies on an assert statement to check the user’s password. A python optimizations might remove this assertion. Impact A remote attacker could bypass security restrictions and access any...

CVE-2018-0818

Microsoft ChakraCore allows an attacker to bypass Control Flow Guard CFG in conjunction with another vulnerability to run arbitrary code on a target system, due to how the Chakra scripting engine handles accessing memory, aka "Scripting Engine Security Feature Bypass"...

CVE-2018-0786

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Core 1.0 and 2.0, and PowerShell Core 6.0.0 allow a security feature bypass vulnerability due to the way certificates are validated, aka ".NET Security Feature Bypass Vulnerability."...

KLA11177 Multiple vulnerabilities in VMware products

Multiple serious vulnerabilities have been found in VMware Workstation and VMware Fusion. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled can...

CPP-Ethereum JSON-RPC Security Bypass Vulnerability

CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. A security bypass vulnerability exists in the adminaddPeer API for JSON-RPC in CPP-Ethereum commit version...

Discuz! DiscuzX Security Bypass Vulnerability

Discuz! DiscuzX is an online forum system. A security bypass vulnerability exists in Discuz! DiscuzX X3.4. A remote attacker can exploit this vulnerability to bypass the attachment deletion restriction with the help of the modified 'aid' parameter...

Microsoft .NET Framework and .NET Core Security Bypass Vulnerability

NET Framework and .NET Core are both products of Microsoft Corporation.Microsoft .NET Framework is a comprehensive and consistent programming model and development platform for building applications for Windows, Windows Store, Windows Server, and Microsoft Azure. NET Framework is a comprehensive...

Security and Quality Rollup for .NET Framework (January 2018)

The .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A Denial of Service vulnerability exists when .NET, and .NET core, improperly process XML documents. An attacker who successfully exploited this...

Microsoft Excel 2013 Service Pack 1 Remote Code Execution Vulnerability (KB4011639)

This host is missing an important security update according to Microsoft KB4011639 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...