GE iFix Unauthorized Operation Vulnerability

iFIX is a GE Intelligent Platform GE-IP providing automation hardware and software solutions. A security vulnerability exists in the Gigasoft component of GE iFix. An attacker could exploit the vulnerability to perform unauthorized operations...

Debian DLA-1513-1 : openafs security update

Several security vulnerabilities were discovered in OpenAFS, a distributed file system. CVE-2018-16947 The backup tape controller process accepts incoming RPCs but does not require or allow for authentication of those RPCs. Handling those RPCs results in operations being performed with...

Microsoft Windows Device Guard Security Bypass Vulnerability (CNVD-2018-24938)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote security bypass vulnerability exists in Microsoft Windows. An attacker could use this vulnerability to bypass certain security restrictions and perform unauthorized operations. This could...

Hefei City, a new software development limited liability company a new housing provident fund series of software with ultra vires access vulnerability

Hefei City, a new software development limited liability company is a computer software development, promotion and provide business management consulting services based on high-tech companies. A vulnerability exists in the Hefei Yixin Software Development Limited Liability Company's Yixin Housing...

Philips e-Alert Cross-Site Request Forgery Vulnerability

Philips e-Alert is an electronic alert solution for MRI systems from Philips in the Netherlands, which is used to monitor and alert on MRI system performance. A cross-site request forgery vulnerability exists in Philips e-Alert R2.1 and prior versions. An attacker could exploit this vulnerability...

FlightAirMap Cross-Site Scripting Vulnerability

FlightAirMap is a free, open source application developed using PHP for displaying flights on a map. A cross-site scripting vulnerability exists in the GET variable on the Registration sub-menu page in FlightAirMap 1.0-beta.21 and earlier versions. A remote attacker can exploit this vulnerability...

Microsoft Windows ADFS Security Bypass Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A security bypass vulnerability exists in Microsoft Windows. An attacker could exploit this issue to bypass certain security restrictions and perform unauthorized operations...

Oracle MySQL Server Component Unauthorized Operation Vulnerability

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. A security vulnerability exists in the Server: Options subcomponent of the MyS...

Google Chrome Same Origin Policy Bypass Vulnerability (CNVD-2018-17051)

Google Chrome is a web browser developed by the American company Google Google. A same-origin policy bypass vulnerability exists in ServiceWorker in Google Chrome. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...

Google Chrome Same Origin Policy Bypass Vulnerability (CNVD-2018-17046)

Google Chrome is a web browser developed by the American company Google Google. A same-origin policy bypass vulnerability exists in ServiceWorker in Google Chrome. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...

CVE-2017-0919

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the GitLab import component resulting in an attacker being able to perform operations under a group in which they were previously unauthorized...

CVE-2017-0919

Removed by vendor...

Micro Focus Universal Configuration Management Database Server Cross-Site Request Forgery Vulnerability

Micro Focus Universal Configuration Management Database UCMDB is a suite of database software from Micro Focus UK that stores, controls and manages software and infrastructure components and their interrelationships.UCMDB Server is one of the UCMDB Server is one of the server applications. A...

Micro Focus Universal Configuration Management Database Browser Cross-Site Request Forgery Vulnerability

Micro Focus Universal Configuration Management Database UCMDB is a suite of database software from Micro Focus, UK, that stores, controls and manages software and infrastructure components and their interrelationships.UCMDB Browser is one of the browsers used to access the UCMDB data. UCMDB Brows...

IBM Robotic Process Automation with Automation Anywhere Cross-Site Request Forgery Vulnerability

IBM Robotic Process Automation with Automation Anywhere is a process automation solution developed by IBM USA and Automation Anywhere. A cross-site request forgery vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 10.0. A remote attacker can exploit this...

Google Android elevation of privilege vulnerability (CNVD-2018-11480)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed source is one of the closed source components developed by Qualcomm. An elevation of privilege vulnerability exists in the Qualcomm closed source component in Android....

EasyService Billing Cross-Site Request Forgery Vulnerability

EasyService Billing is a PHP-based service-oriented consumer business management system . A cross-site request forgery vulnerability exists in EasyService Billing version 1.0. A remote attacker can exploit this vulnerability to perform unauthorized operations with...

Linux kernel driver safety bypass vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. kernel drivers are one of the kernel drivers. A security vulnerability in the implementation of random seed numbers in versions of the Linux kernel driver prior to...

Apache Tomcat CORS Filter Security Bypass Vulnerability

Apache Tomcat is the United States Apache Apache Software Foundation under the Jakarta project of a lightweight Web application server , it is mainly used for the development and debugging of JSP programs for small and medium-sized systems.CORS Filter is one of the components to provide...

SAP Mobile BI has multiple unspecified vulnerabilities

SAP BI Business Intelligence Business Intelligence, is a data warehouse solution from SAP. It will come from the source system data can be SAP R3, can also be other transaction processing systems, text files, databases, or other BW / BI system, after the extraction, conversion, uploaded to the BI...