cURL/libcURL Security Bypass Vulnerability

cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A security bypass vulnerability exists in cURL/libcURL, which allows attackers to bypass security restrictions and perform unauthorized operations...

cURL Security Bypass Vulnerability (CNVD-2016-10792)

cURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A security bypass vulnerability exists in cURL that could be exploited by attackers to perform unauthorized operations...

cURL Security Bypass Vulnerability

cURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A security bypass vulnerability exists in cURL that could be exploited by attackers to perform unauthorized operations...

Schneider Electric ION Security Bypass Vulnerability

The Schneider Electric ION Power Meter is an electrical power meter. A security bypass vulnerability exists in the Schneider Electric ION Series. An attacker could exploit the vulnerability to perform unauthenticated operations by bypassing certain security mechanisms...

cURL/libcURL Cookie Injection Security Bypass Vulnerability

cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A cookie injection security bypass vulnerability exists in cURL/libcURL, which allows attackers to bypass security restrictions and perform unauthorized operations...

Apache Tomcat 8.5.x < 8.5.5 / 9.0.0.x < 9.0.0.M10 Multiple Vulnerabilities

Binary data 9721.pasl...

GNU Tar Security Bypass Vulnerability

GNU Tar is a set of tools for creating files in tar format. A security bypass vulnerability exists in GNU Tar. An attacker could use this vulnerability to bypass certain security restrictions and perform certain unauthorized operations. This could potentially allow an attacker to conduct further...

Google Chrome Security Bypass Vulnerability (CNVD-2016-10733)

Google Chrome is a popular web browser. A security bypass vulnerability exists in Google Chrome. An attacker can exploit the vulnerability to obtain a bypass of certain security restrictions and perform unauthorized actions...

Cisco AsyncOS Remote Security Bypass Vulnerability

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. Cisco AsyncOS Remote Security Bypass Vulnerability. An attacker could use this vulnerability to bypass certain security mechanisms to perform unauthorized operations...

Django Security Bypass Vulnerability (CNVD-2016-10590)

Django is a set of Django Software Foundation based on the Python language open source Web application framework. The framework includes object-oriented mapper , view system , template system and so on. A security bypass vulnerability exists in Django. An attacker can exploit this vulnerability t...

Symantec Norton Mobile Security for Android Security Bypass Vulnerability

Symantec Norton Mobile Security for Android is the United States Symantec Symantec, Inc. based on the Android platform for mobile devices to provide security features of the software. A security bypass vulnerability exists in versions of Symantec Norton Mobile Security for Android prior to 3.16. ...

ABB RobotWare Authentication Vulnerability

ABB is a global leader in power and automation technology, ranked among the top 500 companies in the world. An authentication vulnerability exists in ABB RobotWare, which could be exploited by an attacker to bypass certain security restrictions or execute arbitrary code...

Django Hardcoded Password Security Bypass Vulnerability

Django is a set of Django Software Foundation based on the Python language open source Web application framework. The framework includes object-oriented mapper , view system , template system and so on. Django has a hard-coded password security bypass vulnerability that can be exploited by an...

On the Joomla! Content management system vulnerability briefings-vulnerability warning-the black bar safety net

Recently, the national information security vulnerabilities library CNNVD received Beijing white cap Hui Technology Co., Ltd. on Joomla! Content management system there is a security bypass vulnerabilityCNNVD-2 0 1 6 1 0-7 3 9and the remote mention the right vulnerabilityCNNVD-2 0 1 6 1 0-7 4 0in...

Core Security Bypass Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other features.Joomla! Core is a Joomla! kernel . A security bypass vulnerability exists in Joomla! Core versions 3.4.4 through 3.6.3...

CVE-2016-7991

On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages resulting in remote unsolicited WAP Push SMS messages being accepted, parsed, and handled by the device, leading to unauthorized configuration changes, a subset of SVE-2016-6542...

Yandex Browser Security Bypass Vulnerability

Yandex Browser for desktop is a desktop browser from the Russian company Yandex.Yandex Browser Translator is one of the translation applications. A security bypass vulnerability exists in Yandex Browser for desktop. It allows attackers to bypass certain security restrictions and perform...

CVE-2016-5018

In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomcat utility method that was accessible to web applications...

InfraPower PPS-02-S Q213V1 Insecure Direct Object Reference Authorization Bypass

Summary InfraPower Manager PPS-02-S is a FREE built-in GUI of each IP dongle IPD-02-S only to remotely monitor the connected PDUs. Patented IP Dongle provides IP remote access to the PDUs by a true network IP address chain. Only 1xIP dongle allows access to max. 16 PDUs in daisy chain - which is ...

Joomla! 3.4.4 < 3.6.4 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is 3.4.4 or later but prior to 3.6.4. It is, therefore, affected by multiple vulnerabilities : - A privilege escalation vulnerability exists in the Joomla! core user registration component due...