Drupal netFORUM Authentication Module Access Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community. netFORUM Authentication is one of the modules that implements external authentication for users . An access bypass vulnerability exists in the Drupal netFORUM Authentication module. An...

Oracle Financial Services Applications Financial Services Basel Regulatory Capital Internal Ratings Based Approach Component Unauthorized Operation Vulnerability

Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Financial Services Basel Regulatory Capital Internal Ratings Based Approach is one of the components of the Basel Regulatory Capital...

GPU memory module security bypass vulnerability

A GPU Graphics Processing Unit memory module is a GPU memory module. A security vulnerability exists in the GPU memory module. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations by using the JavaScript WebGL API...

Apple MacOS Privilege Vulnerability

macOS is Apple's proprietary operating system for the Mac line of products. Apple MacOS suffers from a power lifting vulnerability, which can be exploited by attackers to perform unauthorized operations and gain elevated privileges...

McAfee Network Security Management Cross-Site Request Forgery Vulnerability

McAfee Network Security Management NSM is a suite of network security solutions from McAfee that enables real-time monitoring of deployed McAfee intrusion prevention systems across the network. A cross-site request forgery vulnerability exists in the web interface of McAfee NSM. This vulnerabilit...

Apache HTTP Server Remote Security Bypass Vulnerability

Apache HTTP Server is an open source web server from the Apache Software Foundation. A security bypass vulnerability exists in Apache httpd versions 2.2.0 through 2.4.29, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations via trailing newline...

Audi Travel App has a Bursting Vulnerability

Audi Travel App is a travel service software. Audi Travel APP is vulnerable to a blasting vulnerability. An attacker can log in to any user account and perform unauthorized operations by grabbing packets and bursting them...

NetIQ Access Manager Identity Server Component Cross-Site Request Forgery Vulnerability

NetIQ Access Manager NAM is a set of resource access control solutions from American NetIQ. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users.Identity Server is one of the authentication servers. A cross-site request forgery...

Dell EMC Isilon OneFS Cross-Site Request Forgery Vulnerability

DELL EMC Isilon is a horizontally scalable storage system for unstructured data from Dell.OneFS is the operating system that runs on it. A cross-site request forgery vulnerability exists in Dell EMC Isilon OneFS. A remote attacker could exploit this vulnerability to perform unauthorized operation...

Logic Flaw Vulnerability in YXCMS

YXCMS is an efficient website management system built on PHP+MYSQL. A logic flaw vulnerability exists in YXCMS version 1.4.7, which can be exploited by attackers to perform unauthorized operations, such as modifying the price and quantity of products...

SAP NetWeaver System Landscape Directory Authentication Bypass Vulnerability

SAP NetWeaver is a service-oriented, integrated application platform from SAP that provides a development and runtime environment for SAP applications. The platform provides a development and runtime environment for SAP applications, and the System Landscape Directory SLD is one of the components...

Duo Network Gateway Authentication Bypass Vulnerability

Duo Network Gateway DNG is an access control software for accessing internal Web applications from Duo Corporation in the United States. An authentication bypass vulnerability exists in DNG. A remote attacker could use this vulnerability to bypass the authentication mechanism and perform...

Novell libzypp Security Bypass Vulnerability

libzypp also known as ZYPP is the U.S. Novell-sponsored open source set of manageable engines, drivers eg: Linux applications YaST, Zypper tools. A security vulnerability exists in libzypp. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized...

Linux Kernel Local Security Bypass Vulnerability (CNVD-2018-06547)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local security bypass vulnerability exists in the Linux kernel. An attacker could exploit the vulnerability to bypass security restrictions and perform unauthorized operatio...

Apache Cordova For Android Security Bypass Vulnerability (CNVD-2018-03755)

Apache Cordova For Android is the United States Apache Apache Software Foundation of a set of HTML, CSS and JavaScript can be used to develop mobile applications based on Android platform , but also to drive the core engine of PhoneGap. A security bypass vulnerability exists in Apache Cordova 6.1...

CVE-2017-15091

An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly...

Directory Traversal Vulnerability in Shun.com Wireless Routing

Shunnet Wireless Route is a management tool for preventing idle users from rubbing the Internet when WiFi is shared. A directory traversal vulnerability exists in Shunnet Wireless Route, which can be exploited by attackers to conduct unauthorized operations on Shunnet Wireless Route...

CODESYS Runtime plclinux_rt Multiple Authentication Bypass Vulnerabilities

CoDeSys is a powerful PLC software programming tool, which supports IEC61131-3 standard IL, ST, FBD, LD, CFC, SFC six PLC programming languages. CODESYS Runtime plclinuxrt has multiple authentication bypass vulnerabilities. An attacker could use these issues to bypass the authentication mechanism...

IBM Jazz for Service Management Cross-Site Request Forgery Vulnerability (CNVD-2017-37866)

IBM Jazz for Service Management JazzSM is an integrated service management product from IBM that provides visibility into the service management environment. A cross-site request forgery vulnerability exists in IBM Jazz for Service Management version 1.1.3. A remote attacker could exploit this...

IBM Jazz for Service Management Cross-Site Request Forgery Vulnerability (CNVD-2017-37857)

IBM Jazz for Service Management JazzSM is an integrated service management product from IBM that provides visibility into the service management environment. A cross-site request forgery vulnerability exists in IBM Jazz for Service Management version 1.1.3. A remote attacker could exploit this...