X.Org X Server Local Security Bypass Vulnerability

X.Org X Server is an X Window System display server from the X.Org Foundation. A local security bypass vulnerability exists in X.Org X Server. An attacker could use this vulnerability to bypass certain security restrictions and perform unauthorized operations...

Arbitrary Account Password Reset Vulnerability in OnStar iOS Client Server

OnStar iOS client is a smart driving system. An arbitrary account password reset vulnerability exists in the OnStar iOS client server. An attacker can reset the password of any client and perform unauthorized operations by intercepting the verification code in a packet...

IPython Cross-Site Request Forgery Vulnerability

IPython is an enhanced version of Python's native interactive shell developed by the IPython team.The REST API is one of the APIs that supports lightweight REST-style web scripting. A cross-site request forgery vulnerability exists in the REST API in IPython versions 2 and 3. A remote attacker...

Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability (CNVD-2017-34241)

Cisco Unified Intelligence Center is the United States Cisco Cisco company's set of Web-based reporting platform. The platform provides a comprehensive display of report-related business data and call center data and other functions. A cross-site request forgery vulnerability exists in Cisco...

Samba Man-in-the-Middle Attack Security Feature Bypass Vulnerability

Samba is a set of free software developed by the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. A man-in-the-middle...

Samba Man-in-the-Middle Attack Vulnerability (CNVD-2017-34207)

Samba is a set of free software developed by the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. There is a security...

There is a logic design flaw in the Kaiyen Gold app

Kaiyan Gold Service app is a financial management software. There is a logical design vulnerability in the Kaiyan Gold Service app. The vulnerability is due to the registration of not doing any verification restrictions, the attacker through the packet bursting and intercept the return of the...

DENX Software Engineering Das U-Boot Security Bypass Vulnerability

DENX Software Engineering Das U-Boot is a set of bootloaders from DENX Software Engineering, Germany, that can read device configurations from AES encrypted files. A security vulnerability exists in DENX Software Engineering Das U-Boot. An attacker could exploit the vulnerability to perform...

Axesstel MU553S Default Password Vulnerability

The Axesstel MU553S is a router from Axesstel USA. A security vulnerability exists in the Axesstel MU553S MU55XS-V1.14 version that originates from the use of the default 'admin' password for the administrator account. An attacker can exploit the vulnerability to perform unauthorized operations...

Microsoft Edge Security Bypass Vulnerability (CNVD-2017-28648)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is an operating system for personal computers and the latter is a server operating system.Edge is one of the web browsers that comes with the system. Edge in Microsoft Windows suffers from a...

Drupal Views Refresh Refresh Module Access Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An access bypass vulnerability exists in the Drupal Views Refresh Refresh module. This allows an attacker to bypass certain security restrictions and perform unauthorized...

Drupal Views Module Access Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An access bypass vulnerability exists in the Drupal Views module. The vulnerability allows attackers to bypass certain security restrictions and perform unauthorized...

SeaWell Networks Spectrum SDC Trust Management Vulnerability

SeaWell Networks Spectrum SDC is a video solution. The solution utilizes ABR repackaging technology to simplify IP video delivery using a common format. A security vulnerability exists in SeaWell Networks Spectrum SDC version 02.05.00. The vulnerability stems from the program's use of default wea...

NetApp Data ONTAP Authentication Bypass Vulnerability

NetApp Data ONTAP is a set of storage operating system from American NetApp. The system supports the enhancement of the user's enterprise application performance and improve the flexibility of the data center and so on. An authentication bypass vulnerability exists in NetApp Data ONTAP versions...

SimpleSAMLphp Security Bypass Vulnerability (CNVD-2017-24382)

SimpleSAMLphp is a PHP authentication application that implements the SAML2.0 service provider and identity provider functionality . A security bypass vulnerability exists in SimpleSAMLphp 1.14.x through 1.14.11, which can be exploited by attackers to bypass security restrictions and perform...

Huawei FusionManager Cross-Site Request Forgery Vulnerability

Huawei FusionManager is a management software for hardware devices, virtualized resources, and applications from Huawei, China. A cross-site request forgery vulnerability exists in Huawei FusionManager versions V100R002C03 and V100R003C00. A remote attacker could exploit this vulnerability to...

Drupal Relation Module Access Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An access bypass vulnerability exists in the Drupal Relation module. An attacker could use the vulnerability to bypass certain security restrictions and perform unauthoriz...

OpenSSL Security Bypass Vulnerability (CNVD-2017-30659)

OpenSSL is an open source capable of implementing the Secure Sockets Layer and Secure Transport Layer protocols for a common cryptographic library. A security vulnerability exists in OpenSSL that allows a remote attacker to exploit the vulnerability to submit special requests, bypass security...

CloudBees Jenkins Periodic Backup Plugin Security Bypass Vulnerability

CloudBees Jenkins is a set of U.S. CloudBees continuous integration tools based on Java development , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Periodic Backup Plugin is one of the file regular backup...

Attic 'attic/archiver.py' security bypass vulnerability

Attic is a Python based data backup program that uses deduplication technology. A security bypass vulnerability exists in Attic. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...