Apple macOS Sierra EAP-TLS Certificate Validation Vulnerability

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. A certificate validation vulnerability exists in Apple macOS EAP-TLS, which can be exploited by remote attackers to bypass security restrictions and obtain sensitive information...

Sophos Cyberoam UTM CR25iNG Security Bypass Vulnerability

Sophos Cyberoam UTM CR25iNG is a network security appliance. A security bypass vulnerability exists in Sophos Cyberoam UTM CR25iNG, which can be exploited by remote attackers to submit a special request to bypass security restrictions and elevate privileges...

Tenda FH1202/F1202 and F1200 Routers Security Bypass Vulnerability

The Tenda FH1202, F1202 and F1200 are all wireless router products from Tenda China. A security bypass vulnerability exists in the Tenda FH1202, F1202, and F1200 routers using firmware prior to version 1.2.0.20. An attacker can exploit the vulnerability by sending shell commands directly and...

Apple iOS Security Security Bypass Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices, of which Security is an information security and privacy component. A security bypass vulnerability exists in the Security component of Apple iOS versions prior to 10.3.2. An attacker can exploit this vulnerability to...

Security Bypass Via Signature Spoofing

simplesamlphp is vulnerable to security bypass via signature spoofing attacks. The attacks are possible because the SimpleSAMLXMLValidator incorrectly checks the return values in the signature validation, thereby allowing an attacker to spoof an invalid signature as valid. This flaw can also lead...

CVE-2017-2498

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. The issue involves the "Security" component. It allows attackers to bypass intended access restrictions via an untrusted certificate...

Ipswitch MOVEit Transfer Security Bypass Vulnerability

Ipswitch MOVEit Transfer formerly DMZ an automated file transfer system from Ipswitch USA. The system supports the control, management, and viewing of all business-critical file transfer activities through a single, secure system. A security bypass vulnerability exists in Ipswitch MOVEit Transfer...

WordPress < 4.7.5 Multiple Security Vulnerabilities - Linux

WordPress is prone to the following security vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress...

SolarWinds Log & Event Manager Security Bypass Vulnerability

SolarWinds Log and Event Manager LEM is a log and event manager from SolarWinds, Inc. that provides real-time log analysis, memory event correlation, and threat attack response. A security vulnerability exists in SolarWinds LEM versions prior to 6.3.1 Hotfix 4. An attacker could exploit the...

Apple iOS < 10.3.2 Multiple Vulnerabilities

Binary data appleios1032check.nbin...

Security Bypass Vulnerability in Multiple Samsung Phones

Samsung SM-G920F Galaxy S6 and others are smartphones released by the South Korean company Samsung Samsung. A security bypass vulnerability exists in several Samsung phones. An attacker can use the vulnerability to make a call, send a text message or issue a command...

Security Bypass Vulnerability in Multiple Samsung Phones (CNVD-2017-07192)

Samsung SM-G920F Galaxy S6 and others are smartphones released by the South Korean company Samsung Samsung. A security bypass vulnerability exists in several Samsung phones. An attacker can exploit the vulnerability to modify Android settings with the help of AT access...

Google Chrome Security Bypass Vulnerability (CNVD-2017-07170)

Google Chrome is a web browser developed by the American company Google Google. A security bypass vulnerability exists in Google Chrome, which originates when the program caches a TLS session before validating a certificate. An attacker can exploit the vulnerability to decrypt TLS sessions...

KLA11013 Buffer overflow vulnerability in Apple iTunes

A buffer overflow vulnerability was found in WebKit component of Apple iTunes versions earlier than 12.6.1. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed web content. Original advisories Apple...

CVE-2017-0248

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."...

OnePlus 3/3T OxygenOS SELinux Security Bypass(CVE-2017-5554)

Products OnePlus 3T OnePlus 3 Vulnerable Version OxygenOS prior to 4.0.2 Technical Details The attacker can reboot a OnePlus 3/3T device into the fastboot mode, which could be done without any authentication. A physical attacker can press the “Volume Up” button during device boot, where an attack...

Microsoft .NET Framework Security Bypass Vulnerability (4019113)

This host is missing an important security update according to Microsoft KB4019113 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft .NET Framework Security Bypass Vulnerability (4019114)

This host is missing an important security update according to Microsoft KB4019114 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Internet Explorer Security Restriction Bypass Vulnerability

Internet Explorer is a web browser from Microsoft. A security feature bypass vulnerability exists in Microsoft Internet Explorer versions 9 through 11, which could allow a remote attacker to bypass the mixed content warning and load insecure content...

Microsoft .NET Framework Security Bypass Vulnerability (4019115)

This host is missing an important security update according to Microsoft KB4019115 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...