13055 matches found
Security update for chromium (important)
This update to Chromium 63.0.3239.84 fixes the following security issues: - CVE-2017-5124: UXSS with MHTML - CVE-2017-5125: Heap overflow in Skia - CVE-2017-5126: Use after free in PDFium - CVE-2017-5127: Use after free in PDFium - CVE-2017-5128: Heap overflow in WebGL - CVE-2017-5129: Use after...
OpenSSL Security Bypass Vulnerability (Dec 2017) - Windows
OpenSSL is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...
OpenSSL Security Bypass Vulnerability (Dec 2017) - Linux
OpenSSL is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...
Palo Alto Networks PAN-OS Security Bypass Vulnerability (CNVD-2017-37959)
Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security bypass vulnerability exists in the Configuration File Export for Applications, Spyware, and Vulnerable Objects feature of the web interface in Palo Alto Networks PAN-OS...
Microsoft Windows Defender - Controlled Folder Bypass Through UNC Path
Microsoft Windows Defender - Controlled Folder Bypass Through UNC Path / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1418 Windows Defender: Controlled Folder Bypass through UNC Path Platform: Windows 10 1709 + Antimalware client version 4.12.16299.15 Class: Security Feature...
CVE-2017-14018
Affected product : Ethicon Endo-Surgery Generator Gen11 (all versions released before 2017-11-29). Vulnerability : Improper Authentication (CWE-287) where the security mechanism between Gen11 and single-patient use products can be bypassed, allowing unauthorized devices to connect and potentially...
CVE-2017-14018
An improper authentication issue was discovered in Johnson & Johnson Ethicon Endo-Surgery Generator Gen11, all versions released before November 29, 2017. The security authentication mechanism used between the Ethicon Endo-Surgery Generator Gen11 and single-patient use products can be bypassed,...
Mozilla Firefox Security Bypass Vulnerability (MFSA2017-27) - Mac OS X
Mozilla Firefox is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
Mozilla Firefox Security Bypass Vulnerability (MFSA2017-27) - Windows
Mozilla Firefox is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
Mozilla Firefox Private Browsing Mode Security Bypass Vulnerability
Mozilla Firefox is a popular WEB browser. A security bypass vulnerability exists in Mozilla Firefox Private Browsing mode, which can be exploited by a remote attacker to submit a special WEB page that can be tricked into parsing by the user, bypassing security restrictions and performing...
PostgreSQL Security Bypass Vulnerability (Dec 2017) - Windows
PostgreSQL is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postgresql:postgresql";...
PostgreSQL Security Bypass Vulnerability (Dec 2017) - Linux
PostgreSQL is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:postgresql:postgresql";...
Splunk Enterprise Splunk Web Security Bypass Vulnerability
Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze machine-generated data, including data generated by all IT systems and infrastructures physical, virtual, and cloud.Splunk Enterprise is...
USN-3477-3 firefox regressions
USN-3477-1 fixed vulnerabilities in Firefox. The update introduced various minor regressions. This update fixes the problems. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafte...
PT-2017-4252
Name of the Vulnerable Software and Affected Versions Cisco Umbrella Virtual Appliance versions prior to 2.1.0 Cisco Umbrella affected versions not specified Description The issue is related to errors in resource release in the web interface of the Cisco Umbrella security service. Exploitation of...
Fortinet FortiWebManager Security Feature Bypass Vulnerability
Fortinet FortiWebManager is a web application firewall. A security feature bypass vulnerability exists in Fortinet FortiWebManager, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...
Ethicon Endo-Surgery Generator G11 Security Bypass Vulnerability
The Ethicon Endo-Surgery Generator G11 is a host of ultrasound high-frequency surgical integrated systems deployed in the healthcare and public health sectors. A security bypass vulnerability exists in the Ethicon Endo-Surgery Generator G11 that could allow unauthorized devices to connect to the...
CVE-2015-7269
Seagate ST500LT015 hard disk drives, when operating in eDrive mode on Lenovo ThinkPad W541 laptops with BIOS 2.21, allow physically proximate attackers to bypass self-encrypting drive SED protection by attaching a second SATA connector to exposed pins, maintaining an alternate power source, and...
The vulnerability of the restrictssh function in the SolarWinds Log & Event Manager software allows a malicious actor to execute commands with root privileges.
The vulnerability of the restrictssh function in the SolarWinds Log & Event Manager software management tool is related to the lack of measures taken to protect data at the administrative level. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions, gain higher...
