Splunk Enterprise Server-Side Request Forgery Vulnerability

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. A request forgery vulnerability exists on the server side of Splunk Enterprise. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Unspecified Security Bypass Vulnerability in Drupal JavaScript Callback Handler

Drupal is the Drupal community maintained by a set of free , open source content management system developed in PHP language . JavaScript Callback Handler is an efficient Ajax Callback module . An unspecified security bypass vulnerability exists in the Drupal JavaScript Callback Handler module. A...

CVE-2016-9865

An issue was discovered in phpMyAdmin. Due to a bug in serialized string parsing, it was possible to bypass the protection offered by PMAsafeUnserialize function. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to 4.0.10.18 are affected...

Cisco Web Security Appliance Remote Security Bypass Vulnerability (CNVD-2016-12243)

Web Security Appliance WSA is a product of the American company Cisco Cisco, which is a set of network security appliances. A remote security bypass vulnerability exists in Web Security Appliance. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorize...

MariaDB 10.1.0 < 10.1.18 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.18. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.18 advisory. - Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before...

SimpleSAMLphp Security Bypass Vulnerability

SimpleSAMLphp is an application written in native PHP for handling validation.The SAML2Utils class provides a series of methods to validate XML digital signatures against given keywords. A security bypass vulnerability exists in SimpleSAMLphp. An attacker can bypass security constraints to perfor...

McAfee Application Control and Endpoint Security Security Bypass Vulnerability

McAfee Application Control MAC and Endpoint Security are both products of the U.S. company McAfee McAfee. The former is a set of program control software, the latter is a set of endpoint security software to provide intelligent threat defense. MAC and Endpoint Security have a local security bypas...

MariaDB 5.5.0 < 5.5.52 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.52. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.52 advisory. - Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.5...

Arista Networks CloudVision Portal Security Bypass Vulnerability

Arista Networks CloudVision Portal CVP is a web-based GUI portal system for the CloudVision platform from Arista Networks, USA. The system provides a solution for automating network operations including network device configuration, change management and network monitoring. A security bypass...

Docker Security Bypass Vulnerability (CNVD-2016-12185)

Docker is an open source application container engine from the American company Docker. A security bypass vulnerability exists in versions of Docker prior to 1.8.3. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

IBM Integration Bus and WebSphere Message Broker Local Security Bypass Vulnerability

BM Integration Bus and WebSphere Message Broker are both enterprise service bus ESB products from IBM, USA. The products provide connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. A local security bypass vulnerability exists i...

Android system_server code loading bypass vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. systemserver is one of the system servers. A code loading bypass vulnerability exists in systemserver in Android, which can be exploited by an attacker to bypass security...

WinAPI User Hunter: hunter

WinAPI User Hunter During Red Team engagements it is common to track/hunt specific users. Assuming we already have access to a desktop as a normal user no matter how, always “assume compromise” in a Windows Domain and we want to spread laterally. We want to know where the user is logged on, if he...

Apple OS X Server Information Disclosure And Security Bypass Vulnerabilities

Apple OS X Server is prone to information disclosure and security bypass vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Google Chrome Security Updates (stable-channel-update-for-desktop-2016-12) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Smiths-Medical CADD-Solis Medication Safety Software Security Bypass Vulnerability

Smiths-Medical, headquartered in Plymouth, Minnesota, is a subsidiary of Smiths Group, a company based in the U.K. CADD-Solis drug safety software, is an application used to set dose limits for infusion pumps. A security bypass vulnerability exists in Smiths-Medical CADD-Solis Medication Safety...

Symantec Norton App Lock Local Security Bypass Vulnerability

Norton App Lock is a series of security products under Symantec. A local security bypass vulnerability exists in Symantec Norton App Lock. A local attacker could use this issue to bypass certain security restrictions in order to perform unauthorized operations. This could facilitate further attac...

Mozilla Firefox < 50.0 Multiple Vulnerabilities

Binary data 9804.prm...

phpMyAdmin Security Bypass Vulnerability (CNVD-2016-11853)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...

phpMyAdmin security bypass vulnerability (CNVD-2016-11857)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...