Cisco Email Security Appliance Security Bypass Vulnerability (CNVD-2016-11330)

Cisco Email Security Appliance ESA is a set of e-mail security appliances from the American company Cisco Cisco. The appliance provides spam protection, email encryption, data loss prevention and other features. A security bypass vulnerability exists in the Cisco Email Security Appliance, which c...

New Hack: How to Bypass iPhone Passcode to Access Photos and Messages

Setting a passcode on your iPhone is the first line of defense to help prevent other people from accessing your personal details. However, it's pretty much easy for anyone with access to your iPhone to bypass the passcode protection doesn't matter if you configured Touch ID or not and access your...

Apple iTunes < 12.5.1 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.5.1. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper handling of error prototypes. An unauthenticated, remote attacker can exploit this, by...

Mozilla Network Security Services Security Bypass Vulnerability (CNVD-2016-11323)

Mozilla Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled, multi-dimensional client and server applications. A security bypass vulnerability exists in Mozilla Network Security Services, which can be exploited by an attacker ...

KLA11272 Multiple vulnerabilities in Mozilla Firefox

Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, obtain sensitive information and spoof user interface. Below is a complete list of vulnerabilities: 1. A heap buffer overflow...

Docker Security Bypass Vulnerability

Docker is an open source application container engine from Docker Inc. in the United States, which supports the creation of a container lightweight virtual machine and deployment and running applications on Linux systems, as well as automated installation, deployment and upgrading of applications...

Docker Security Bypass Vulnerability (CNVD-2016-11230)

Docker is an open source application container engine from Docker Inc. in the United States, which supports the creation of a container lightweight virtual machine and deployment and running applications on Linux systems, as well as automated installation, deployment and upgrading of applications...

Python Cryptography Security Bypass Vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security bypass vulnerability in Python Cryptography versions prior to 1.5.3 allows attackers to bypass...

Palo Alto Networks PAN-OS Security Bypass Vulnerability (CNVD-2016-11097)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security bypass vulnerability exists in Palo Alto Networks PAN-OS, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operation...

Adobe Flash Player Security Bypass (APSB16-18: CVE-2016-4140)

A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to insecure library loading while handling certain files. A remote attacker could exploit this issue by enticing a user to open a legitimate file that will insecurely load a specially crafted D...

Phoenix Contact ILC Security Bypass Vulnerability

Phoenix Contact ProConOs and MultiProg are programmable logic controllers PLCs for use in industrial PCs from the Phoenix Contact group. A security bypass vulnerability exists in the Phoenix Contact ILC PLCs, which can be exploited by an unauthenticated attacker to access read and write PLC...

Fortinet FortiWLC Hard-Coded Security Bypass Vulnerability

Fortinet FortiWLC is a wireless controller from Fortinet. A security bypass vulnerability exists in the hardcoding of the Fortinet FortiWLC, which could be exploited by an attacker to gain access to the system and obtain sensitive information...

KLA10903 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Heap corruption at FFmpeg can be exploited remote...

Microsoft Windows Boot Manager CVE-2016-7247 Local Security Bypass Vulnerability

Description Microsoft Windows is prone to a local security-bypass vulnerability. A local attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...

Apple Mac OS X Security Bypass Vulnerability (CNVD-2016-10774)

Apple Mac OS X is a specialized operating system developed by Apple for Mac computers. A security bypass vulnerability exists in Apple Mac OS X version 10.12. An attacker can exploit this vulnerability to execute arbitrary code, obtain sensitive information, cause a denial of service, bypass...

phpMyAdmin security bypass vulnerability (CNVD-2016-10814)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...

MS16-140: Security update for boot manager: November 8, 2016

Resolves a vulnerability in Windows that could allow security feature bypass if a physically-present attacker installs an affected boot policy.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow a security feature bypass if a physically present...

KLA10901 Multiple vulnerabilities in Microsoft SQL Server

Multiple serious vulnerabilities have been found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to gain privileges or obtain sensitive information. Below is a complete list of vulnerabilities 1. An improper pointer casting handling can be exploited by remotely...

Ansible Security Bypass Vulnerability (CNVD-2016-10736)

Ansible is a newly emerged operation and maintenance tool that is based on Python and combines the advantages of many old operation and maintenance tools to achieve batch operating system configuration, batch program deployment, batch running commands and other functions. A security bypass...

Red Hat OpenShift Enterprise Security Bypass Vulnerability

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, U.S. OpenShift Enterprise is an open source version of the private cloud. A security bypass vulnerability exists in Red Hat OpenShift Enterprise that could be exploited by an attacker to bypass certain securi...