GLSA-201707-03 : phpMyAdmin: Security bypass

The remote host is affected by the vulnerability described in GLSA-201707-03 phpMyAdmin: Security bypass A vulnerability was discovered where the restrictions caused by $cfgServers$iAllowNoPassword = false are bypassed under certain PHP versions. This can lead compromised user accounts, who have ...

Apache Solr Security Bypass Vulnerability

Apache Solr is an enterprise-ready, Lucene-based search server. A security bypass vulnerability exists in Apache Solr. An attacker could use this issue to bypass certain security restrictions and perform unauthorized operations...

GLSA-201707-11 : RoundCube: Security bypass

The remote host is affected by the vulnerability described in GLSA-201707-11 RoundCube: Security bypass Authenticated users can arbitrarily reset passwords due to a problem caused by an improperly restricted exec call in the virtualmin and sasl drivers of the password plugin. Impact : Authenticat...

phpMyAdmin: Security bypass

Background phpMyAdmin is a web-based management tool for MySQL databases. Description A vulnerability was discovered where the restrictions caused by “$cfg‘Servers’$i‘AllowNoPassword’ = false” are bypassed under certain PHP versions. This can lead compromised user accounts, who have no passwords...

Important: tomcat8

Issue Overview: Security constrained bypass in error page mechanism: A vulnerability was discovered in the error page mechanism in Tomcat's DefaultServlet implementation. A crafted HTTP request could cause undesired side effects, possibly including the removal or replacement of the custom error...

Cisco ASA Security Bypass Vulnerability

The Cisco ASA 5500 Series Adaptive Security Appliances are modular platforms for delivering security and VPN services, providing firewall, IPS, anti-X, and VPN services. A security bypass vulnerability exists in the Cisco ASA. Allows an attacker to bypass certain security restrictions and perform...

Cisco AsyncOS for Email Security Appliance Attachment MIME Header Handling Filter Bypass (cisco-sa-20170607-esa1)

According to its self-reported version, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by a security bypass vulnerability in the email message scanning functionality due to improper validation of emails with attachments and a modified Multipurpose Internet...

Google Android WideVine DRM Security Bypass Vulnerability (CNVD-2017-13521)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A buffer overflow vulnerability exists in the WideVine DRM in Android, which allows an attacker to exploit the vulnerability to submit a special request to perform an unauthorized...

Multiple Unspecified Vulnerabilities in HP Network Node Manager i (NNMi) Software

HP Network Node Manager i NNMi is a suite of network management software from Hewlett Packard Enterprise HPE. The software unifies the management of network faults, availability and performance in a single, centralized console, and helps users extend network uptime, improve performance, and...

IBM Security Guardium Security Bypass Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes easy UI customization, report management and discovery and a streamlined audit process builder. A security bypass vulnerability exists in IBM Security...

Google Android WideVine DRM Security Bypass Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in the WideVine DRM in Android, which allows an attacker to exploit the vulnerability to submit a special request to perform an unauthorized operation...

Security Bypass Vulnerability in Multiple Dell Products

Dell is a Londrak, Texas-based business. A security bypass vulnerability exists in multiple Dell products. An attacker could exploit the vulnerabilities to bypass authentication mechanisms and gain unauthorized access...

KLA11065 Multiple vulnerabilities in Foxit Reader

Multiple serious vulnerabilities have been found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service and obtain sensitive information. Below is a complete list of vulnerabilities: 1. An use-after-free vulnerability in the...

ISC BIND Security Bypass Vulnerability (CNVD-2017-12537)

BIND is an open source implementation of the DNS Domain Name System protocol that contains all the software needed to query and respond to domain names. It is the most widely used type of DNS server on the Internet. A security bypass vulnerability exists in ISC BIND. An attacker can exploit this...

Weblate: Password token validation in Weblate Bypass #2

Hi, I also found the bypass to 229987 and 243842. Reproduction Steps: 1. Add multiple emails to an account 2. Request password reset for all emails 3. Use the link in each to make the change 4. All link works! Shuaib...

Cisco Unified Contact Center Express Security Bypass Vulnerability

Cisco Unified Contact Center Express is a single-server, integrated contact center for formal and informal contact centers. A security bypass vulnerability exists in the Extensible Messaging and Presence Protocol XMPP service for Cisco Unified Contact Center Express UCCx, which can be exploited b...

Kaspersky Anti-Virus File Server 8.0.3.297 XSS / CSRF / Code Execution

Advisory Information Title: Kaspersky Anti-Virus File Server Multiple Vulnerabilities Advisory ID: CORE-2017-0003 Advisory URL: http://www.coresecurity.com/advisories/Kaspersky-Anti-Virus-File-Server-Multiple-Vulnerabilities Date published: 2017-06-28 Date of last update: 2017-06-28 Vendors...

GLSA-201706-27 : FreeRADIUS: Security bypass

The remote host is affected by the vulnerability described in GLSA-201706-27 FreeRADIUS: Security bypass It was discovered that the implementation of TTLS and PEAP in FreeRADIUS skips inner authentication when it handles a resumed TLS connection. The affected versions of FreeRADIUS fails to...

CVE-2017-1328

IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of the api, caused by improper handling of security policy. By crafting a suitable request, an attacker could exploit this vulnerability to bypass security and use the vulnerable API. IBM X-Force ID:...

CVE-2017-1328

IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of the api, caused by improper handling of security policy. By crafting a suitable request, an attacker could exploit this vulnerability to bypass security and use the vulnerable API. IBM X-Force ID:...