Palo Alto Networks PAN-OS 6.1.x < 6.1.11 Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is 6.1.x 6.1.11. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists that allows an authenticated, remote attacker to access potentially sensitive information in the system logs. - A security...

Vulnerability of Adobe AIR software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information

Vulnerability exists in Adobe AIR due to the possibility of accessing information related to memory addresses. Exploiting this vulnerability allows an attacker to bypass the ASLR Address Space Layout Randomization protection mechanism...

The vulnerability of the Windows operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the Remote Procedure Call LRPC of Microsoft allows attackers to circumvent security restrictions. This vulnerability relates to the leakage of messages sent by the LRPC server to clients, if those messages contain data that is not intended for such messages. RPC considers suc...

Vulnerabilities of the Oracle Database database management system, which allow a remote attacker to compromise the accessibility of protected information

The numerous vulnerabilities in the current Oracle allow malicious actors operating remotely to circumvent security restrictions, execute arbitrary SQL commands, and gain access to confidential data...

The vulnerabilities in Acrobat software allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Acrobat allows attackers to bypass the security mechanisms of PDF documents...

Vulnerability of Adobe Reader software, which allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The vulnerability in Adobe Reader allows attackers to bypass the security mechanisms of PDF documents...

The vulnerability of the Internet Explorer browser allows a malicious attacker to compromise the confidentiality and integrity of protected information.

A vulnerability that allows bypassing security mechanisms exists in Internet Explorer and is related to the improper implementation of requirements for high-security SSL certificates, particularly regarding the prohibition on using group certificates. Exploiting this vulnerability enables a...

Vulnerabilities of the Oracle Database database management system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The numerous vulnerabilities in the current Oracle allow malicious actors operating remotely to circumvent security restrictions, execute arbitrary SQL commands, and gain access to confidential data...

Lenovo Notebook now UEFI zero-day vulnerabilities the hacker can be attack-vulnerability warning-the black bar safety net

According to foreign media reports, the Security Institute Dymtro Oleksiuk said that hackers can bypass Windows basic security Protocol of the United Nations want the computer to attack, the reason is Lenovo PC drivers from Intel directly copy and paste. And other OEM vendors such as HP also exis...

CVE-2016-4433

Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a crafted request...

Default configuration

Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks by leveraging a default method...

CVE-2016-4433

Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers to bypass intended access restrictions and conduct redirection attacks via a crafted request...

Huawei Mate 8 Security Bypass Vulnerability

Huawei Mate 8 is a smartphone product of Huawei, China. A security bypass vulnerability exists in Huawei Mate 8. An attacker can exploit the vulnerability to build a specially crafted application to bypass permission checks and control some module functions...

DEBIAN-CVE-2016-2141

It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information...

Apache Httpd < 2.4.23 : TLS/SSL X.509 client certificate auth bypass with HTTP/2

For configurations enabling support for HTTP/2, SSL client certificate validation was not enforced if configured, allowing clients unauthorized access to protected resources over HTTP/2. This issue affected releases 2.4.18 and 2.4.20 only...

PT-2016-5024 · Red Hat +1 · Jgroups +1

Name of the Vulnerable Software and Affected Versions: JGroups versions prior to 4.0 JGroups versions 3.6.x prior to 3.6.10.Final JGroups versions 3.2.x prior to 3.2.16.Final Description: The issue allows remote attackers to bypass security restrictions by not requiring necessary headers for the...

CVE-2016-1237

nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c...

Red Hat JBoss Enterprise Application Platform Security Bypass Vulnerability

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. A security bypass vulnerability exists in Red Hat JBoss EAP version 5, which can be exploited by an attacker to bypass security restrictions and cau...

Citrix XenServer Active Directory Authentication Incorrect Host Management Security Bypass (CTX213549, CTX213769)

The version of Citrix XenServer running on the remote host is 7.x prior to 7.0 hotfix XS70E003. It is, therefore, affected by a security bypass vulnerability due to incorrect handling of Active Directory AD credentials. An unauthenticated, remote attacker on the management network with AD...

Cisco IOS-XE Zone-Based Firewall Feature Security Bypass (CSCun96847)

According to its self-reported version, the Cisco IOS-XE software running on the remote device is affected by a security bypass vulnerability in the Zone-Based Firewall feature due to insufficient zone checking for traffic belonging to existing sessions. An unauthenticated, remote attacker can...