MS16-140: Security update for boot manager: November 8, 2016

Resolves a vulnerability in Windows that could allow security feature bypass if a physically-present attacker installs an affected boot policy.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow a security feature bypass if a physically present...

KLA10901 Multiple vulnerabilities in Microsoft SQL Server

Multiple serious vulnerabilities have been found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to gain privileges or obtain sensitive information. Below is a complete list of vulnerabilities 1. An improper pointer casting handling can be exploited by remotely...

Ansible Security Bypass Vulnerability (CNVD-2016-10736)

Ansible is a newly emerged operation and maintenance tool that is based on Python and combines the advantages of many old operation and maintenance tools to achieve batch operating system configuration, batch program deployment, batch running commands and other functions. A security bypass...

Red Hat OpenShift Enterprise Security Bypass Vulnerability

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, U.S. OpenShift Enterprise is an open source version of the private cloud. A security bypass vulnerability exists in Red Hat OpenShift Enterprise that could be exploited by an attacker to bypass certain securi...

MS16-140: Security Update for Boot Manager (3193479)

The remote Windows host is missing a security update. It is, therefore, affected a security bypass vulnerability in Windows Secure Boot due to the use of an insecure boot policy in firmware. A local attacker can exploit this issue to disable code integrity checks, allowing test-signed executables...

cURL/libcURL Security Bypass Vulnerability (CNVD-2016-10788)

cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A security bypass vulnerability exists in cURL/libcURL, which allows attackers to bypass security restrictions and perform unauthorized operations...

Haxx cURL/libcURL Remote Security Bypass Vulnerability (CNVD-2016-10741)

Haxx curl and Libcurl are both products of the Swedish company Haxx. curl is a set of file transfer tools that work at the command line using URL syntax. libcurl is a free, open source client-side URL transfer library. A remote security bypass vulnerability exists in Haxx cURL/libcURL. An attacke...

cURL/libcURL Security Bypass Vulnerability (CNVD-2016-10793)

cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A security bypass vulnerability exists in cURL/libcURL due to a "" ending in an illegal url, which allows attackers to bypass security restrictions and perform unauthorized...

Haxx cURL/libcURL Remote Security Bypass Vulnerability

Haxx curl and Libcurl are both products of the Swedish company Haxx. curl is a set of file transfer tools that work at the command line using URL syntax. libcurl is a free, open source client-side URL transfer library. A remote security bypass vulnerability exists in Haxx cURL/libcURL. An attacke...

cURL/libcURL Security Bypass Vulnerability

cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A security bypass vulnerability exists in cURL/libcURL, which allows attackers to bypass security restrictions and perform unauthorized operations...

cURL Security Bypass Vulnerability (CNVD-2016-10792)

cURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A security bypass vulnerability exists in cURL that could be exploited by attackers to perform unauthorized operations...

cURL Security Bypass Vulnerability

cURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A security bypass vulnerability exists in cURL that could be exploited by attackers to perform unauthorized operations...

Schneider Electric ION Security Bypass Vulnerability

The Schneider Electric ION Power Meter is an electrical power meter. A security bypass vulnerability exists in the Schneider Electric ION Series. An attacker could exploit the vulnerability to perform unauthenticated operations by bypassing certain security mechanisms...

cURL/libcURL Cookie Injection Security Bypass Vulnerability

cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. A cookie injection security bypass vulnerability exists in cURL/libcURL, which allows attackers to bypass security restrictions and perform unauthorized operations...

GNU Tar Security Bypass Vulnerability

GNU Tar is a set of tools for creating files in tar format. A security bypass vulnerability exists in GNU Tar. An attacker could use this vulnerability to bypass certain security restrictions and perform certain unauthorized operations. This could potentially allow an attacker to conduct further...

Apache Tomcat 8.5.x < 8.5.5 / 9.0.0.x < 9.0.0.M10 Multiple Vulnerabilities

Binary data 9721.pasl...

Google Chrome Security Bypass Vulnerability (CNVD-2016-10733)

Google Chrome is a popular web browser. A security bypass vulnerability exists in Google Chrome. An attacker can exploit the vulnerability to obtain a bypass of certain security restrictions and perform unauthorized actions...

Cisco AsyncOS Remote Security Bypass Vulnerability

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. Cisco AsyncOS Remote Security Bypass Vulnerability. An attacker could use this vulnerability to bypass certain security mechanisms to perform unauthorized operations...

Django Security Bypass Vulnerability (CNVD-2016-10590)

Django is a set of Django Software Foundation based on the Python language open source Web application framework. The framework includes object-oriented mapper , view system , template system and so on. A security bypass vulnerability exists in Django. An attacker can exploit this vulnerability t...

Symantec Norton Mobile Security for Android Security Bypass Vulnerability

Symantec Norton Mobile Security for Android is the United States Symantec Symantec, Inc. based on the Android platform for mobile devices to provide security features of the software. A security bypass vulnerability exists in versions of Symantec Norton Mobile Security for Android prior to 3.16. ...