Adobe Reader and Acrobat Security Bypass (APSB16-26 : CVE-2016-4215)

This vulnerability is an instance of same-origin policy violation. An attacker can exploit this vulnerability by enticing a user to open a maliciously crafted PDF file. Successful exploitation can trick embedded JavaScript code to run in the wrong context, potentially leading to a security bypass...

Debian DSA-3627-1 : phpmyadmin - security update

Several vulnerabilities have been fixed in phpMyAdmin, the web-based MySQL administration interface. - CVE-2016-1927 The suggestPassword function relied on a non-secure random number generator which makes it easier for remote attackers to guess generated passwords via a brute-force approach. -...

Drupal Organic groups module access bypass vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Organic groups is one of the modules that allows users to create and manage their own groups. A security vulnerability exists in the Drupal Organic groups module that could be exploited...

Apple iOS and OS X Security Bypass Vulnerabilities

Apple iOS is an operating system developed for mobile devices; OS X is a specialized operating system developed for Mac computers. A security vulnerability exists in Apple iOS and OS X that could be exploited by a remote attacker to execute arbitrary code or bypass security restrictions, as well ...

Juniper Protect-RE Firewall Filter Security Bypass Vulnerability

Juniper Protect-RE Firewall Filter is a suite of firewall filtering software. A security bypass vulnerability exists in Juniper Protect-RE Firewall Filter, which can be exploited by remote attackers to bypass security restrictions and perform unauthorized operations...

Design/Logic Flaw

WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to bypass the Same Origin Policy and obtain image date from an unintended web site via a timing attack involving an SVG document...

Multiple vulnerabilities in TYPO3 Ajax mail subscription extension

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the TYPO3 Association in Switzerland.Ajax mail subscription is one of the plugins to add a subscription to an email newsletter. Authentication bypass vulnerabilities and security bypass vulnerabilities exist...

Samsung SW Update Tool Security Bypass Vulnerability

Samsung SW Update Tool is a set of system update tools from Samsung South Korea. A security bypass vulnerability exists in Samsung SW Update Tool version 2.2.5.16. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Hesiod has multiple vulnerabilities

Hesiod is a suite of DNS-based directory storage applications. Security bypass vulnerabilities and elevation of privilege vulnerabilities exist in Hesiod. An attacker could use these vulnerabilities to bypass security restrictions and gain unauthorized access or elevate privileges...

Python Twisted Security Bypass Vulnerability

Python Twisted is a set of event-driven network engine based framework implemented in Python. A security bypass vulnerability exists in Python Twisted. An attacker can exploit this vulnerability to perform unauthorized operations...

OwnCloud Android Local Security Bypass Vulnerability

OwnCloud is a free and open source personal cloud storage solution from the German company OwnCloud.OwnCloud for Android is one of the Android versions. A local security bypass vulnerability exists in OwnCloud for Android versions prior to 1.9.1. A local attacker can exploit this vulnerability to...

nginx security bypass vulnerability

nginx is an HTTP and reverse proxy server developed by Russian software developer Igor Sysoev, which can also be used as a mail proxy server. A security bypass vulnerability exists in nginx. An attacker can exploit this vulnerability to perform unauthorized operations...

ASUS 'asio.sys' Security Bypass Vulnerability

ASUS asio.sys is a sound card driver product from ASUS. A security bypass vulnerability exists in the ASUS asio.sys driver, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations in the affected application...

Apache HTTP Server mod_fcgid Module Security Bypass Vulnerability

Apache HTTP Server is an open source web server from the Apache Apache Software Foundation in the United States. modfcgid is one of the modcgi and modcgid alternatives Apache modules. A security bypass vulnerability exists in the modfcgid module in Apache HTTP Server. An attacker could exploit th...

Google Chrome Security Updates (stable-channel-update-2016-07) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Linux kernel 'entry_64_compat.S' local security bypass vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local security bypass vulnerability exists in Linux kernel 'entry64compat.S'. An attacker could use this vulnerability to bypass security restrictions and perform unauthoriz...

Memory Corruption Vulnerability in Multiple Apple Products

Apple iOS, OS X, tvOS and watchOS are all products of Apple Inc. Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. A security vulnerability exists in...

Juniper Junos Certificate Validation Bypass (JSA10755)

According to its self-reported version number, the remote Juniper Junos device is affected by a security bypass vulnerability due to improper validation of self-signed certificates used for IKE and IPsec. An unauthenticated, remote attacker can exploit this, via a specially crafted self-signed...

Untangle NGFW has multiple vulnerabilities

Untangle NGFW is a set of firewall platforms from the United States Untangle Corporation. Untangle NGFW 12.1.0 and earlier versions contain security bypass vulnerabilities and command injection vulnerabilities that can be exploited by attackers to conduct man-in-the-middle attacks, bypass securit...

KLA10855 Memory corruption vulnerability in Apache OpenOffice

An unspecified vulnerability was found in Apache OpenOffice Impress. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed .ODP and .OTP files. Technical details An exploitable...