IBM Jazz for Service Management Cross-Site Request Forgery Vulnerability (CNVD-2017-37866)

IBM Jazz for Service Management JazzSM is an integrated service management product from IBM that provides visibility into the service management environment. A cross-site request forgery vulnerability exists in IBM Jazz for Service Management version 1.1.3. A remote attacker could exploit this...

OpenSSL Security Restriction Bypass Vulnerability

OpenSSL is an open source implementation of SSL used to implement strong encryption for network communications. A security restriction bypass vulnerability exists in OpenSSL version 1.0.2, which can be exploited by an attacker to bypass security mechanisms and perform unauthorized operations...

Mozilla Firefox Private Browsing Mode Security Bypass Vulnerability

Mozilla Firefox is a popular WEB browser. A security bypass vulnerability exists in Mozilla Firefox Private Browsing mode, which can be exploited by a remote attacker to submit a special WEB page that can be tricked into parsing by the user, bypassing security restrictions and performing...

Multiple Vulnerabilities in Pivotal Cloud Foundry cf-deployment

Pivotal Cloud Foundry CF is a suite of open source Platform-as-a-Service PaaS cloud computing platforms from Pivotal Software in the United States, which provides container scheduling, continuous delivery, and automated service deployment, among other features. cf-release is a release version of...

Hitachi Vantara Pentaho Business Analytics Platform Cross-Site Request Forgery Vulnerability

Hitachi Vantara Pentaho Business Analytics BA Platform is an open source Business Intelligence BI system from Hitachi Vantara Japan that provides data integration, OLAP services, reporting, dashboards, data mining, and ETL capabilities. A cross-site request forgery vulnerability exists in Hitachi...

Fortinet FortiWebManager Security Feature Bypass Vulnerability

Fortinet FortiWebManager is a web application firewall. A security feature bypass vulnerability exists in Fortinet FortiWebManager, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

SAP KERNEL Trusted RFC connection security bypass vulnerability

SAP KERNEL is a set of basic technology platforms written in C from SAP in Germany. The platform is a support platform between the underlying layer and the business layer.32 NUC and so on are different versions of it.Trusted RFC connection is one of the RFC connection components. A security...

SAP HANA Extended Application Services Security Bypass Vulnerability

SAP HANA is a high-performance real-time data analytics platform from SAP, which provides data query functions that allow users to directly query and analyze a large amount of real-time business data.Extended Application Services XS is a development environment for application servers, Web server...

Security Bypass Vulnerabilities in Multiple Adobe Products (CNVD-2017-36612)

Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center provides...

Multiple Dahua Product Access Validation Vulnerabilities

Dahua NVR50XX and so on are network hard disk camera products of China Dahua Dahua company. A security vulnerability exists in several Dahua products. The vulnerability can be exploited by an attacker to perform other operations by forging json messages...

CMS Security Bypass Vulnerability in Joomla!

Joomla! is a content management system. A security bypass vulnerability exists in Joomla! CMS that could be exploited by remote attackers to submit a special request, bypass certain security restrictions, and perform unauthorized operations...

chromium-browser content security bypass vulnerability

chromium-browser is an open source web browser project started by Google to provide source code for the proprietary Google Chrome browser. A content security bypass vulnerability exists in chromium-browser. An attacker can exploit the vulnerability to bypass security restrictions and perform...

KeystoneJS Cross-Site Request Forgery Vulnerability

KeystoneJS is an open source framework for developing database-driven websites, applications and APIs. A security vulnerability exists in versions of KeystoneJS prior to 4.0.0-beta.7. An attacker can exploit the vulnerability to bypass cross-site request forgery protection and perform unauthorize...

Ametys CMS 4.0.2 - Password Reset

Vulnerability Summary The following advisory describes a password reset vulnerability found in Ametys CMS version 4.0.2 Ametys is “a free and open source content management system CMS written in Java. It is based on JSR-170 for content storage, Open Social for gadget rendering and a XML oriented...

Apache HTTP Server Security Bypass Vulnerability (CNVD-2017-34237)

Apache HTTP Server is the United States Apache Apache Software Foundation, an open source web server. The server is fast, reliable and can be expanded through a simple API. A security bypass vulnerability exists in Apache HTTP Server. A remote attacker can exploit this vulnerability to bypass...

Pivotal Spring-LDAP Authentication Bypass Vulnerability

Pivotal Spring-LDAP is the U.S. Pivotal Software, Inc. to simplify LDAP programming in Java in a library . An authentication bypass vulnerability exists in Pivotal Spring-LDAP versions 1.3.0 through 2.3.1. A remote attacker can exploit this vulnerability to bypass the authentication mechanism and...

phpMyFAQ admin/news.php file cross-site request forgery vulnerability

phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...

SAP Point of Sale Xpress Server Authentication Bypass Vulnerability

SAP Point of Sale POS is the German SAP SAP company's set of sales management system. Xpress Server is one of the Xpress server. A security vulnerability exists in the Xpress Server in SAP POS, which stems from the program's failure to require authentication. An attacker could use this...

SAP Customer Relationship Management Java Component Cross-Site Request Forgery Vulnerability

SAP Customer Relationship Management CRM is a set of customer relationship management solutions from SAP. The program includes modules for sales management, marketing management, customer service system , etc. Java component is one of the Java components. A cross-site request forgery vulnerabilit...

Microsoft Edge Content Security Policy Security Bypass Vulnerability

Microsoft Windows 10 is a set of next-generation cross-platform operating systems released by Microsoft Corporation in the U.S. It is available for PCs and laptops, tablets, and cell phones, among other devices.Microsoft Edge is one of the default browsers that comes with the system. Microsoft Ed...