Microsoft Edge CVE-2016-3392 Security Bypass Vulnerability

Description Microsoft Edge is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Edge Recommendations Block external acces...

Adobe Flash Player <= 23.0.0.162 Multiple Vulnerabilities (APSB16-32)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 23.0.0.162. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows an unauthenticated, remote attacker to execute arbitrary code. CVE-2016-6992 -...

KLA10884 Code execution vulnerability in Microsoft Office

An improper RTF handling was found in Microsoft Office. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories CVE-2016-3263 CVE-2016-3209 CVE-2016-3262 CVE-2016-7182 CVE-2016-339...

Security feature bypass

Unspecified vulnerability in a Qualcomm component in Android before 2016-10-05 on Nexus 5X and 6P devices has unknown impact and attack vectors, aka internal bug 28823675...

shiro: Security constraint bypass

It was found that Apache Shiro uses a default cipher key for its "remember me" feature. An attacker could use this to devise a malicious request parameter and gain access to unauthorized content...

shiro: Security constraint bypass

It was found that Apache Shiro uses a default cipher key for its "remember me" feature. An attacker could use this to devise a malicious request parameter and gain access to unauthorized content...

Symantec Web Gateway Management Console Interface Command Injection

SUMMARY Symantec has released an update to address a Symantec Web Gateway SWG Management Console Interface command injection issue bypassing validation restrictions to add an unauthorized whitelist entry. AFFECTED PRODUCTS Symantec Web Gateway SWG --- CVE | Affected Versions | Remediation...

CVE-2016-7572

CVE-2016-7572 affects Drupal 8.x prior to 8.1.10, where the system.temporary route does not properly enforce the Export configuration permission, allowing remote authenticated users to bypass restrictions and read the full config export. Impact is sensitive information disclosure via an authentic...

Oracle MySQL 5.5.x < 5.5.49 X.509 Certificate Security Bypass

Binary data 9607.prm...

ZOHO ManageEngine ServiceDesk Plus Security Bypass Vulnerability

ZOHO ManageEngine ServiceDesk is the United States ZhuoHao ZOHO company's set of web-based help desk HelpDesk and asset management software. A security bypass vulnerability exists in ManageEngine ServiceDesk Plus 9.2 and prior versions, which can be exploited by an attacker to bypass security...

HP Network Automation Local Security Bypass Vulnerability

HP Network Automation is a suite of automated network configuration management tools from Hewlett-Packard HP. The tool automates configuration changes, software updates, compliance audits, and tracking and control of widely distributed, multi-vendor network devices. A local security bypass...

KLA10878 Denial of service vulnerability in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome before 53.0.2785.143. Malicious users can exploit these vulnerabilities to cause denial of service or possibly conduct other unknown impacts. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in V8 can be...

Node.js Security Bypass Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

Trend Micro Internet Security Security Bypass Vulnerability

Trend Micro Internet Security is a set of Trend Micro Trend Micro integrated with personal firewall, anti-virus, anti-spam and other features in one network security software. A security bypass vulnerability exists in versions 8 and 10 of Trend Micro Internet Security, which could be exploited by...

Huawei HiSuite Man-in-the-Middle Security Bypass Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A man-in-the-middle security bypass vulnerability exists in Huawei HiSuite, which could be exploited by attackers to bypass security restrictions and perform unauthorized operations, or conduct man-in-the-middle...

Moodle Security Bypass Vulnerability (CNVD-2016-08241)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle. An attacker could use this...

Apple OS X Perl Security Bypass Vulnerability

Apple OS X is a special operating system developed by Apple for Mac computers. Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall. A security bypass vulnerability exists in Perl in Apple OS X versions prior to 10.12, which can be exploited ...

Google Chrome Protocol Processor Security Bypass Vulnerability

Google Chrome is a popular web browser. A security bypass vulnerability exists in the Google Chrome protocol processor. An attacker could exploit this vulnerability to bypass security restrictions...

OpenStack Glance Security Bypass Vulnerability (CNVD-2016-08222)

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration and Rackspace, Inc. Glance is a project that stores, queries and retrieves virtual machine images. A remote security bypass vulnerability exists in OpenStack Glance. An attacker could u...

Ruby OpenSSL Library Security Bypass Vulnerability

Ruby is a cross-platform, object-oriented, dynamically-typed programming language developed by Japanese software developer Yukihiro Matsumoto , Ruby OpenSSL Library is one of the open source able to implement the Secure Sockets Layer SSL v2/v3 and Secure Transport Layer TLS v1 protocols of the...