Untangle NGFW has multiple vulnerabilities

Untangle NGFW is a set of firewall platforms from the United States Untangle Corporation. Untangle NGFW 12.1.0 and earlier versions contain security bypass vulnerabilities and command injection vulnerabilities that can be exploited by attackers to conduct man-in-the-middle attacks, bypass securit...

KLA10855 Memory corruption vulnerability in Apache OpenOffice

An unspecified vulnerability was found in Apache OpenOffice Impress. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed .ODP and .OTP files. Technical details An exploitable...

Multiple vulnerabilities in Drupal REST JSON module

Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community.REST JSON is one of the interface modules used to expose Drupal content. The Drupal REST JSON module version 7.x-1.x has a 1. security bypass vulnerability 2. user enumeration...

Flash Player < 11.2.202.626 / 18.0.0.366 / 22.0.0.209 Multiple Vulnerabilities

Binary data 9411.prm...

Pivotal Software RabbitMQ for PCF Security Bypass Vulnerability

Pivotal Software RabbitMQ for PCF is an open source messaging server from Pivotal Software, Inc. that is used to support global datacasting and high-capacity data monitoring. A security bypass vulnerability in Pivotal Software RabbitMQ for PCF versions 1.6.0 through 1.6.3 can be exploited by an...

KDE KArchive Security Bypass Vulnerability

KDE is a free and open source X desktop management program for Linux and Unix workstations, KDE provides support for various network protocols through the KIO subsystem.KDE KArchive is one of the document managers. A security bypass vulnerability exists in KDE KArchive 5.23.0 and earlier versions...

Huawei P8 and Mate S Local Security Bypass Vulnerability

Huawei P8 and Mate S is a Huawei Huawei smartphone product. A local security bypass vulnerability exists in Huawei P8 and Mate S, which can be exploited by attackers to bypass security restrictions or launch other attacks...

LG NAS N1A1 has multiple security vulnerabilities

The LG NAS N1A1 is a network storage device developed by the South Korean Lakin LG Group. Arbitrary file upload/download, security bypass, SQL injection, and unauthorized operation vulnerabilities exist in the Familycast service in the LG NAS N1A1 version 10119, which can be exploited by an...

Multiple Vulnerabilities in HPE StoreEver MSL6480 Tape Library

The HPE StoreEver MSL6480 Tape Library is a tape library from Hewlett Packard Enterprise HPE that provides tape backup, disaster recovery, or low-cost long-term archiving, among other features. An insecure default password vulnerability, a security bypass vulnerability, and a cross-site request...

Avast! Antivirus Security Bypass Vulnerability

Avast! Antivirus is a suite of antivirus programs from the Czech company Avast. A security bypass vulnerability exists in Avast! Antivirus, which can be exploited by attackers to bypass security restrictions and perform unauthorized operations...

Apache Qpid Proton Security Bypass Vulnerability

Apache Qpid Proton is the United States Apache Apache Software Foundation developed a high-performance, lightweight messaging library. A security bypass vulnerability exists in Apache Qpid Proton versions 0.8 through 0.13.0, which can be exploited by an attacker to conduct a man-in-the-middle...

SugarCRM 'MySugar::addDashlet()' Function Security Bypass Vulnerability

SugarCRM is an open source Customer Relationship Management CRM system from SugarCRM USA. The system supports differentiated marketing, management and distribution of sales leads for different customer needs, and enables information sharing and tracking of sales representatives. A security bypass...

Local Security Bypass Vulnerability in mod_nss Module

modnss is a module that provides encryption for the Apache HTTP server based on the Secure Sockets Layer SSL and Transport Layer Security TLS protocols and uses the Network Security Services NSS security library to provide encryption. A local security bypass vulnerability exists in the modnss...

Multiple Vulnerabilities in Schneider Electric Automation Server Series

Schneider Electric Automation Server is a multifunctional automation deployment server from Schneider Electric France. Schneider Electric Automation Server Series 1.7 and earlier versions contain a security bypass vulnerability, an operating system command injection vulnerability, and a privilege...

SaltStack Salt Security Bypass Vulnerability (CNVD-2016-05108)

SaltStack Salt aka SaltStack is a set of open source tools for managing infrastructure from SaltStack, Inc. in the United States. The tool provides configuration management, remote execution and other functions , able to manage tens of thousands of servers , with the ability to quickly complete t...

Open-Xchange OX Guard Security Bypass Vulnerability

Open-Xchange OX Guard is a suite of security protection software for e-mail and files from Open-Xchange USA. A security bypass vulnerability exists in versions 2.0 and 2.2.0 of Open-Xchange OX Guard, which can be exploited by attackers to bypass security restrictions and perform unauthorized...

KLA10849 Multiple vulnerabilities in Oracle Java SE

An unspecified vulnerabilities were found in Oracle Java SE. By exploiting these vulnerabilities malicious users can cause denial of service affect integrity or obtain sensitive information. These vulnerabilities can be exploited remotely or locally. Technical details These vulnerabilities relate...

Multiple vulnerabilities in WAGO IO PLCs (CNVD-2016-05505)

The WAGO IO PLC 758-870 and 750-849 are bus editable logic controller modules from WAGO Germany. A security bypass vulnerability and a power lifting vulnerability exists in the WAGO IO PLC 758-870 and 750-849 versions, which can be exploited by an attacker to execute arbitrary code, bypass securi...

Multiple Vulnerabilities in WAGO IO PLCs

The WAGO IO PLC 758-870 and 750-849 are bus editable logic controller modules from WAGO Germany. A security bypass vulnerability and a power lifting vulnerability exists in the WAGO IO PLC 758-870 and 750-849 versions, which can be exploited by an attacker to execute arbitrary code, bypass securi...

Multiple Pivotal Product Security Bypass Vulnerabilities

Pivotal Cloud Foundry CF is a suite of open source Platform-as-a-Service PaaS cloud computing platforms from Pivotal Software in the United States, which provides container scheduling, continuous delivery, and automated service deployment. cf-release is a release of CF. Elastic Runtime is CF's...