CVE-2016-9752

Serendipity (PHP weblog engine) is affected by CVE-2016-9752 in versions before 2.0.5, where an attacker can bypass SSRF protection by supplying a malformed IP address (for example, http://127.1) or triggering a 30x redirect. The vulnerability enables bypass of server-side request forgery protect...

Apple Safari Multiple Vulnerabilities (Dec 2016) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

SIEMENS SICAM PAS Local Security Bypass Vulnerability

SICAM PAS is an energy automation solution for the operation of substation equipment. It has open communication interfaces for power system control and control of industrial power supply equipment. A local security bypass vulnerability exists in SIEMENS SICAM PAS. An authenticated local attacker...

Cisco ATA 187 Analog Telephone Adapter Unauthorized Access Security Bypass Vulnerability (cisco-sa-20130206-ata187)

Cisco ATA-187 is prone to a security bypass vulnerability because it allows attackers to gain unauthorized access to the device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Fortinet FortiOS 5.x < 5.4.2 Flow-mode Detection Bypass

The remote FortiGate device is running a version of FortiOS that is 5.x prior to 5.4.2. It is, therefore, affected by a security bypass vulnerability when reloading the scanning engine after an update that results in active network sessions no longer being monitored by flow-mode detection. An...

Fortinet FortiOS Security Bypass Vulnerability (CNVD-2016-11690)

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. A security bypas...

Multiple Security Bypass Vulnerabilities in CakePHP

CakePHP is the United States Cake Software Foundation of a MVC-based architecture , open source Web development framework. The framework has a flexible view caching , automatic generation of CRUD code and other features . CakePHP has multiple security bypass vulnerabilities that can be exploited ...

Security Bypass Vulnerability in Huawei's Secure Storage Trusted Application for Some Phones

Huawei P9, P9 Lite, P8 Lite are Huawei smartphones. A security bypass vulnerability exists in the Secure Storage Trusted App SSTA of some Huawei phones. An attacker who has gained root privileges on Android can exploit the vulnerability to read and write user-state memory data in any location in...

CVE-2016-6708

An elevation of privilege in the System UI in Android 7.0 before 2016-11-01 could enable a local malicious user to bypass the security prompt of your work profile in Multi-Window mode. This issue is rated as High because it is a local bypass of user interaction requirements for any developer or...

CVE-2016-2988

IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware aka Spectrum Protect for Virtual Environments 6.4.x before 6.4.3.4 and 7.1.x before 7.1.6 allows remote authenticated users to bypass a TSM credential requirement and obtain administrative access by leveraging multiple...

TYPO3 Remote Security Bypass Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. A remote security bypass vulnerability exists in TYPO3, which can be exploited by attackers to bypass security restrictions and perform unauthorized operations...

Avast Endpoint Protection Suite Sandbox Escape Security Bypass Vulnerability

Avast Endpoint Protection Suite is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Avast Endpoint Protection Suite Plus Sandbox Escape Security Bypass Vulnerability

Avast Endpoint Protection Suite Plus is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Avast Endpoint Protection Plus Sandbox Escape Security Bypass Vulnerability

Avast Endpoint Protection Plus is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Moodle Security Bypass Vulnerability (CNVD-2016-11545)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle, which can be exploited by attackers ...

Moodle Security Bypass Vulnerability (CNVD-2016-11543)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle, which can be exploited by attackers ...

Security Bypass Vulnerabilities in Multiple IBM Products

IBM Cloud Orchestrator is a suite of cloud management, accelerated software and infrastructure delivery solutions for IT services from IBM, U.S.A. IBM SmartCloud Orchestrator is a new offering in the IBM Cloud family of products. A security bypass vulnerability exists in multiple IBM products. An...

Google Android '/native/libs/binder/Parcel.cpp' Security Bypass Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A security bypass vulnerability exists in Google Android '/native/libs/binder/Parcel.cpp'. The vulnerability allows attackers to bypass certain security restrictions and perform...

Apple iOS and Mac OS Security Bypass Vulnerability

Apple iOS and macOS are both operating systems from Apple Inc. Apple iOS is developed for mobile devices; macOS is developed for Mac computers. A security vulnerability exists in IDS-Connectivity in Apple iOS versions prior to 10.1 and Apple macOS versions prior to 10.12.1. An attacker could use...

Apple iOS and Mac OS Security Bypass Vulnerability (CNVD-2016-11549)

Apple iOS and macOS are both operating systems from Apple Inc. Apple iOS is developed for mobile devices; macOS is developed for Mac computers. A security vulnerability exists in FaceTime in Apple iOS versions prior to 10.1 and Apple macOS versions prior to 10.12.1. An attacker could exploit the...