Multiple vulnerabilities in several TP-Link routers

The TP-LINK Archer C20i/C2 is a router from China P&L. A denial of service, security bypass, and command injection vulnerability exists in multiple TP-Link routers. An attacker could use this vulnerability to bypass some security restrictions to perform unauthorized operations, cause a denial of...

HP OfficeConnect Network Switches Local Security Bypass Vulnerability

The HP OfficeConnect 1820 is a switch product from Hewlett-Packard HP in the United States. A local security bypass vulnerability exists in HP OfficeConnect Network Switches. An attacker could exploit this vulnerability to bypass certain security restrictions and perform unauthorized operations...

Riverbed RiOS Local Security Bypass Vulnerability

Riverbed Steelhead are hardware appliances used to optimize and accelerate network traffic. Implemented as TLS endpoints, they have a secure repository that stores the server's private TLS certificates. A local security bypass vulnerability exists in Riverbed RiOS. An attacker could use this...

OpenStack Nova-LXD Security Bypass Vulnerability

Nova is the compute organization controller in the OpenStack cloud. All activities that support the lifecycle of instances in an OpenStack cloud are handled by Nova. A security bypass vulnerability exists in OpenStack Nova-LXD, which can be exploited by an attacker to bypass security restrictions...

SAP GRC Access Control EAM Security Bypass Vulnerability

SAP GRC is a suite of governance, risk management and compliance solutions from SAP Germany. A security bypass vulnerability exists in SAP GRC. An attacker could use this vulnerability to bypass certain security restrictions and gain unauthorized access to the application...

SAP HANA has multiple vulnerabilities

SAP HANA is a high-performance real-time data analytics platform from SAP. The platform provides data query functions, users can directly query and analyze a large amount of real-time business data. SAP HANA has multiple vulnerabilities that allow attackers to bypass security restrictions and...

Mozilla Firefox for Android Security Bypass Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox for Android. The vulnerability can be exploited by attackers to perform unauthorized operations and launch further attacks by bypassing...

Adobe Campaign Security Bypass Vulnerability

Adobe Campaign is a set of marketing management solutions from the American company Audobee Adobe. A security bypass vulnerability exists in Adobe Campaign. An attacker could exploit the vulnerability to upload and execute a malicious file, resulting in read and write operations to the affected...

Apple Safari WebKit Security Bypass Vulnerability (CNVD-2017-01669)

Apple Safari is an American web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability in Apple Safari WebKit Handling Page Load allows remote attackers to exploit the vulnerability to build malicious WEB pages that can ...

Apple Safari WebKit Security Bypass Vulnerability (CNVD-2017-01633)

Apple Safari is an American web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security bypass vulnerability exists in Apple Safari WebKit, which can be exploited by remote attackers to construct a malicious WEB page that can be tricke...

D-Link DWR-932B Router Vulnerable

D-Link DWR-932B router is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DWR-932B router using firmware version 02.02eu. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...

KLA10960 Code execution vulnerabilities in Adobe Flash Player

Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A type confusion vulnerability related to the MessageChannel class can be exploited remotely to...

D-Link DWR-932B router vulnerable (CNVD-2017-01664)

D-Link DWR-932B router is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DWR-932B router using firmware version 02.02eu. An attacker could exploit the vulnerability to bypass security restrictions...

VMWare Airwatch Inbox for Android Local Security Bypass Vulnerability

VMWare Airwatch Inbox for Android is a suite of email clients for the Android platform from VMware. A security bypass vulnerability exists in VMWare Airwatch Inbox for Android. A local attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Apple Safari WebKit Security Bypass Vulnerability (CNVD-2017-01776)

Apple Safari is a web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems.WebKit is a set of open source web browser engines developed by the KDE community. A security bypass vulnerability exists in Apple Safari WebKit, which can be exploited ...

CloudBees Jenkins Security Bypass Vulnerability (CNVD-2017-01680)

CloudBees Jenkins is a U.S. CloudBees company based on Java development of open source , sustainable integration automation server . CloudBees Jenkins has a security vulnerability that allows remote attackers to submit special requests to bypass security restrictions and perform unauthorized...

SVG Salamander Server-Side Request Forgery Security Bypass Vulnerability

SVG Salamander is a JAVA renderer and animator. A security bypass vulnerability exists in SVG Salamander. An attacker could use this vulnerability to bypass security constraints to perform unauthorized operations and launch further attacks...

PostfixAdmin Session Management Security Bypass Vulnerability

PostfixAdmin is a web-based administration tool for Postfix mail delivery servers. A security bypass vulnerability exists in PostfixAdmin. An attacker could use this vulnerability to bypass security restrictions to obtain sensitive information or perform unauthorized operations to launch further...

Apache Ranger Security Bypass Vulnerability (CNVD-2017-01460)

Apache Ranger is a set of architectures for implementing comprehensive security measures for Hadoop clusters, providing centralized security policy management for core enterprise security requirements such as authorization, billing and data protection. A security bypass vulnerability exists in...

phpMyAdmin server-side request forgery security bypass vulnerability (CNVD-2017-01509)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...