Apache Struts Security Update (S2-026)

Apache Struts is prone to a security bypass vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

OpenSSL 'OOB read' Security Bypass Vulnerability - Linux

OpenSSL is prone to an SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl"; ifdescription...

Google Chrome Security Updates (stable-channel-update-for-desktop-2017-08) - Mac OS X

Google Chrome is prone to an unknown vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Security Updates (stable-channel-update-for-desktop-2017-08) - Windows

Google Chrome is prone to an unknown vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

OpenSSL Security Bypass Vulnerability (CNVD-2017-30659)

OpenSSL is an open source capable of implementing the Secure Sockets Layer and Secure Transport Layer protocols for a common cryptographic library. A security vulnerability exists in OpenSSL that allows a remote attacker to exploit the vulnerability to submit special requests, bypass security...

Google Chrome Security Updates (stable-channel-update-for-desktop-2017-08) - Linux

Google Chrome is prone to an unknown vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

AIX bind Advisory : bind_advisory16.asc (IV98826) (IV98827)

The version of bind installed on the remote AIX host is affected by the following vulnerabilities : - A security bypass exists in the way BIND handles TSIG authentication for dynamic updates. A remote, unauthenticated attacker can exploit this, via a specially crafted request packet containing a...

CVE-2014-9483

Emacs 24.4 allows remote attackers to bypass security restrictions...

CVE-2014-9483

Emacs 24.4 allows remote attackers to bypass security restrictions...

Red Hat Satellite Security Bypass Vulnerability

Red Hat Satellite is a suite of system management platforms from Red Hat, Inc. that can be used to extend Linux infrastructures and provide system management functions such as administration, configuration, and monitoring. A security bypass vulnerability exists in Red Hat Satellite. A remote...

CloudBees Jenkins Periodic Backup Plugin Security Bypass Vulnerability

CloudBees Jenkins is a set of U.S. CloudBees continuous integration tools based on Java development , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Periodic Backup Plugin is one of the file regular backup...

tomcat: Security constrained bypass in error page mechanism

A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error page...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2017-222740)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security bypass vulnerability exists in versions of Mozilla Firefox prior to 55. A remote attacker could use this vulnerability to bypass security restrictions and perform unauthorized...

Drupal Views Refresh Security Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Views Refresh is one of the page view refresh modules. A security bypass vulnerability exists in Drupal Views Refresh versions prior to 7.x-1.2. A remote attacker can exploit this...

Multiple Vulnerabilities in Kguard Digital Video Recorder

The Kguard Digital Video Recorder DVR is a digital hard disk recorder from Kguard. Kguard DVR suffers from security bypass, information disclosure, denial of service, and command injection vulnerabilities. An attacker can exploit these vulnerabilities to execute arbitrary commands in the context ...

Attic 'attic/archiver.py' security bypass vulnerability

Attic is a Python based data backup program that uses deduplication technology. A security bypass vulnerability exists in Attic. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2017-222739)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security bypass vulnerability exists in versions of Mozilla Firefox prior to 55. A remote attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized...

Amazon Linux AMI : tomcat7 (ALAS-2017-873)

Security constrained bypass in error page mechanism : While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7.0.75 did not use the appropriate facade object. When running an...

Cisco ASR 5000 Series Aggregated Services Routers StarOS Security Bypass Vulnerability

Cisco ASR 5000 Series Aggregated Services Routers are the ASR 5000 series of integrated services router products from Cisco.StarOS is the set of operating systems that run on them.CLI is one of the command-line programs. A security bypass vulnerability exists in the CLI for StarOS in Cisco ASR 50...

Drupal REST API Security Bypass Vulnerability

Drupal core is a free, open source content management system developed in PHP and maintained by the Drupal community. A security bypass vulnerability exists in version 8.x of the Drupal REST API prior to 8.3.7. An attacker can exploit this vulnerability to bypass security restrictions and perform...