PostfixAdmin Session Management Security Bypass Vulnerability

PostfixAdmin is a web-based administration tool for Postfix mail delivery servers. A security bypass vulnerability exists in PostfixAdmin. An attacker could use this vulnerability to bypass security restrictions to obtain sensitive information or perform unauthorized operations to launch further...

SVG Salamander Server-Side Request Forgery Security Bypass Vulnerability

SVG Salamander is a JAVA renderer and animator. A security bypass vulnerability exists in SVG Salamander. An attacker could use this vulnerability to bypass security constraints to perform unauthorized operations and launch further attacks...

Libgd Security Bypass Vulnerability

libGD also known as GD Graphics Library or libgd2 is an American software developer Thomas Boutell developed an open source for the dynamic creation of images library, which supports the creation of charts, graphs and thumbnails and so on. A security bypass vulnerability exists in Libgd. An...

Splunk Enterprise < 5.0.17 / 6.0.13 / 6.1.12 / 6.2.13 / 6.3.9 / 6.4.5 / 6.5.2 or Splunk Light < 6.5.2 Multiple Vulnerabilities

According to its self-reported version number, the version of Splunk Enterprise hosted on the remote web server is 5.0.x prior to 5.0.17, 6.0.x prior to 6.0.13, 6.1.x prior to 6.1.12, 6.2.x prior to 6.2.13, 6.3.x prior to 6.3.9, 6.4.x prior to 6.4.5, or 6.5.x prior to 6.5.2; or else it is Splunk...

Airwatch Agent for Android Security Bypass Vulnerability

VMWare Airwatch Agent for Android is a device management solution based on the Android platform from VMware. The solution supports monitoring and managing the entire smartphone fleet. A security bypass vulnerability exists in VMWare Airwatch Agent for Android. An attacker could use this...

IBM Tivoli Key Lifecycle Manager Security Bypass Vulnerability

IBM Security Key Lifecycle Manager formerly known as Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. A security bypass vulnerability exist...

Jenkins Security Bypass Vulnerability (CNVD-2017-01367)

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . A...

Design/Logic Flaw

The Norwegian Air Shuttle aka norwegian.com airline kiosk allows physically proximate attackers to bypass the intended "Please select booking identification" UI step, and obtain administrative privileges and network access on the underlying Windows OS, by accessing a touch-screen print icon to...

CVE-2017-5634

CVE-2017-5634 affects the Norwegian Air Shuttle airline kiosk. Affected component is the kiosk software used for bookings; root cause is an authentication bypass that lets physically proximate attackers manipulate the print dialog via the touch-screen print icon, bypassing the UI step and potenti...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, allow attackers to bypass security measures.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, exist due to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to bypass security...

IBM UrbanCode Deploy Security Bypass Vulnerability (CNVD-2017-01414)

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

IBM UrbanCode Deploy Security Bypass Vulnerability (CNVD-2017-01324)

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

IBM Forms Experience Builder Server-Side Request Forgery Security Bypass Vulnerability

IBM Forms Experience Builder is a set of U.S. IBM's Web forms for creating Web site applications. A server-side request forgery vulnerability exists in IBM Forms Experience Builder versions 8.5, 8.5.1, and 8.6. An attacker could exploit this vulnerability to obtain information about internal...

IBM DataPower Gateway < 7.5.2.2 Default Admin Password Security Bypass

According to its self-reported version, the IBM DataPower Gateway running on the remote host is prior to 7.5.2.2. It is, therefore, affected by a security bypass vulnerability due to the default password still being accepted as valid if the administrator logs in before the startup configuration i...

ownCloud Direct Request Security Bypass Vulnerability

OwnCloud is a free and open source personal cloud storage solution from German company OwnCloud, which provides file management, music storage, calendaring, etc. OwnCloud Server is a server version. A security vulnerability exists in versions of ownCloud server before 8.2.6 and version 9.x before...

D-Link DWR-932B Security Bypass Vulnerability (CNVD-2017-01142)

The D-Link DWR-932B is a popular router device. A security vulnerability exists in the D-Link DWR-932B /var/miniupnpd.conf device, which allows remote attackers to bypass security restrictions and perform unauthorized operations...

D-Link DWR-932B Security Bypass Vulnerability

The D-Link DWR-932B is a popular router device. A security vulnerability exists in the D-Link DWR-932B /var/miniupnpd.conf device, which allows remote attackers to bypass security restrictions and perform unauthorized operations...

EMC RSA BSAFE Crypto-J Security Bypass Vulnerability

EMC RSA BSAFE Crypto-J is a cryptographic toolkit from EMC Corporation that provides developers with the tools to add privacy and authentication capabilities to their applications. A security bypass vulnerability exists in versions of EMC RSA BSAFE Crypto-J prior to 6.2.2. An attacker could explo...

Cisco Firepower System Software Security Bypass Vulnerability (CNVD-2017-01166)

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. A security vulnerability exists in Cisco Firepower System Software. A remote attacker can exploit this vulnerability by adding malicious text to the end of a URL string to bypass security restrictions and perfo...

HP Printer Improper Access Control

HP Printers Wi-Fi Direct Improper Access Control -------------------------------------------------------------------------------- 1. Advisory Information Title: HP Printers Wi-Fi Improper Access Control Advisory ID: NESESO-2017-0111 Advisory URL: http://neseso.com/advisories/NESESO-2017-0111.pdf...