13603 matches found
IBM Tivoli Storage Manager Operations Center Security Bypass Vulnerability
IBM Tivoli Storage Manager Operations Center is a next-generation solution from IBM USA that simplifies backup management. The solution provides a centralized view of backup issues across multiple TSM servers and extends features such as DB2 databases. A security bypass vulnerability exists in IB...
Red Hat FreeIPA Insecure File Permissions Vulnerability
Red Hat FreeIPA is an integrated security information management solution from Red Hat, Inc. The solution provides an easy-to-manage identity, policy and audit IPA suite for Linux and Unix computer networks. An insecure file permission vulnerability exists in Red Hat FreeIPA. An attacker could...
Multiple Cisco Intercloud Fabric Security Bypass Vulnerabilities
Cisco Intercloud Fabric for Business and Intercloud Fabric for Providers are both products of the American company Cisco. The former is a service for managing hosting deployments and the latter is a virtual appliance for deploying and managing cloud providers. A security vulnerability exists in...
The vulnerability of the Flash Player software platform, which allows a violator to bypass the security measures
The vulnerability of the Flash Player software is related to the implementation of domain restriction rules. Exploiting this vulnerability allows a malicious actor to bypass the security mechanisms...
OpenSSH Security Bypass Vulnerability
OpenSSH OpenBSD Secure Shell is a set of connection tools maintained by the OpenBSD Project Group for secure access to remote computers. A security bypass vulnerability exists in OpenSSH. An attacker could use the vulnerability to bypass certain security restrictions and perform unauthorized...
OpenSSH authentication security bypass Vulnerability, CVE-2016-10012）
No description provided by source...
CVE-2016-7266
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, and Excel 2016 for Mac mishandle a registry check, which allows user-assisted remote attackers to execute arbitrary commands via crafted embedded content in a...
CVE-2016-7262
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka "Microsoft Office Security Feature...
Security feature bypass
Microsoft Excel 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 misparses file formats, which makes it easier for remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Security Feature Bypass Vulnerability."...
CVE-2016-7266
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, and Excel 2016 for Mac mishandle a registry check, which allows user-assisted remote attackers to execute arbitrary commands via crafted embedded content in a...
SAP NetWeaver Security Bypass Vulnerability (CNVD-2016-13027)
SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A security bypass vulnerability exists in SAP NetWeaver, which can be exploited by an attacker to bypass securit...
SAP HANA Remote Security Bypass Vulnerability
SAP HANA is a high-performance real-time data analytics platform from SAP. The platform provides data query functions, users can directly query and analyze a large amount of real-time business data. A remote security bypass vulnerability exists in SAP HANA. An attacker could exploit this issue to...
Microsoft Windows UAC Protection Security Bypass Vulnerability
Microsoft Windows is a set of operating systems developed by Microsoft Corporation in the United States. A security bypass vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to perform unauthorized operations bypassing security constraints...
Cisco AsyncOS Software Man-in-the-Middle Security Bypass Vulnerability
Cisco AsyncOS for Cisco Email Security Appliances ESAs is a set of operating systems used in email security appliances ESAs from Cisco USA. A man-in-the-middle security bypass vulnerability exists in Cisco AsyncOS Software. The vulnerability allows attackers to perform unauthorized operations by...
SimpleSAMLphp Security Bypass Vulnerability (CNVD-2016-13109)
SimpleSAMLphp is a PHP authentication application that implements the SAML 2.0 Service Provider and Identity Provider features. A security bypass vulnerability exists in SimpleSAMLphp. An attacker could exploit this issue to bypass certain security restrictions and perform unauthorized operations...
Input validation
Google Chrome prior to 54.0 for iOS had insufficient validation of URLs for windows open by DOM, which allowed a remote attacker to bypass restrictions on navigation to certain URL schemes via crafted HTML pages...
CVE-2016-5192
Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypass cross-origin restrictions via crafted HTML pages...
KLA10914 Multiple vulnerabilities in Google Chrome
Multiple serious vulnerabilities have been found in Google Chrome prior to 54.0.2840.59. Malicious users can exploit these vulnerabilities to bypass security restrictions, spoof user interface, inject code or possibly cause denial of service. Below is a complete list of vulnerabilities: 1. Missed...
openSUSE Security Update : flash-player (openSUSE-2016-1484)
This update for flash-player fixes the following issues : - Security update to 24.0.0.186 bsc1015379 APSB16-39 : - These updates resolve use-after-free vulnerabilities that could have lead to code execution CVE-2016-7872, CVE-2016-7877, CVE-2016-7878, CVE-2016-7879, CVE-2016-7880, CVE-2016-7881,...