Heimdal Man-in-the-Middle Security Restriction Bypass Vulnerability

Heimdal is a Kerberos 5 implementation developed primarily in Sweden. Heimdal violates the Kerberos 5 protocol rules when obtaining service protocol names, allowing remote attackers to exploit the vulnerability to submit special requests, bypass certain security restrictions, and perform...

Microsoft Windows Security Bypass Vulnerability (CNVD-2017-16001)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A security bypass vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Apache Impala Authentication Bypass Vulnerability

Apache Impala is an open source distributed SQL query engine for Apache Hadoop. When Apache Impala is Kerberos-enabled, a malicious process emulates the Impala backend program, allowing attackers to exploit vulnerabilities to submit special requests, bypass authentication, and perform unauthorize...

Google Android Qualcomm Component Competitive Conditions Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A competitive condition vulnerability exists in the listener routine of TrustZone for Google Android. An attack could exploit this vulnerability to perform unauthorized operations...

Google Android Qualcomm Component Competitive Condition Vulnerability (CNVD-2017-18948)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A competitive condition vulnerability exists in the authentication routine of TrustZone in versions of Android prior to 7.0. An attack could exploit the vulnerability to perform...

Apache Solr Security Bypass Vulnerability

Apache Solr is an enterprise-ready, Lucene-based search server. A security bypass vulnerability exists in Apache Solr. An attacker could use this issue to bypass certain security restrictions and perform unauthorized operations...

Drupal OAuth Module Access Bypass Vulnerability

Drupal is an open source content management framework CMF written in the PHP language, which consists of a content management system CMS and PHP development framework Framework together. An access bypass vulnerability exists in the Drupal OAuth module. Allows an attacker to bypass certain securit...

PostgreSQL PL/Java Unauthorized Operation Vulnerability

PostgreSQL PL/Java is the PostgreSQL development team developed a database can be used in Java code to write stored procedures , triggers and functions of the open source project . A security vulnerability exists in PostgreSQL PL/Java versions 1.4.3 and earlier. A remote attacker could exploit th...

FineCMS Server-Side Request Forgery Vulnerability

FineCMS is a content management system based on PHP+MySql+CI framework. A server-side request forgery vulnerability exists in the application/lib/ajax/getimagedata.php file in versions of FineCMS prior to 2017-07-06. An attacker can exploit this vulnerability to perform unauthorized operations...

Google Android PlayReady API Buffer Overflow Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A buffer overflow vulnerability exists in the PlayReady API in Android, which allows an attacker to exploit the vulnerability to submit a special request to perform an unauthorized...

Google Android WideVine DRM Security Bypass Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in the WideVine DRM in Android, which allows an attacker to exploit the vulnerability to submit a special request to perform an unauthorized operation...

Brother Industries MFC-J960DWN Cross-Site Request Forgery Vulnerability

The Brother Industries MFC-J960DWN is a printer from Brother Industries in Japan. A cross-site request forgery vulnerability exists in the Brother Industries MFC-J960DWN using firmware version D and earlier. A remote attacker could exploit this vulnerability to perform unauthorized operations...

EMC RSA Archer Cross-Site Request Forgery Vulnerability

EMC RSA Archer is an enterprise IT governance and compliance governance product from EMC Corporation EMC. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. A cross-site request forgery vulnerability exists in EMC RSA Archer...

ISC BIND Security Bypass Vulnerability (CNVD-2017-12537)

BIND is an open source implementation of the DNS Domain Name System protocol that contains all the software needed to query and respond to domain names. It is the most widely used type of DNS server on the Internet. A security bypass vulnerability exists in ISC BIND. An attacker can exploit this...

Belden Hirschmann GECKO Cross-Site Request Forgery Vulnerability

The Belden Hirschmann GECKO is the lean managed industrial Ethernet switch. A cross-site request forgery vulnerability exists in the Belden Hirschmann GECKO switch. The vulnerability stems from the program failing to adequately validate requests. An attacker could exploit the vulnerability to...

IBM API Connect Security Bypass Vulnerability

IBM API Connect is an API management solution that addresses all key aspects of the API lifecycle in on-premise and cloud environments. A security bypass vulnerability exists in IBM API Connect. An attacker could use this vulnerability to bypass certain security restrictions and perform...

IBM QRadar SIEM Security Bypass Vulnerability

IBM QRadar SIEM consolidates log event and network flow data from thousands of devices, endpoints and applications scattered across the network. IBM QRadar SIEM is prone to a security bypass vulnerability. An attacker could exploit this vulnerability to bypass security restrictions and perform...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-13530)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. An unauthorized operation vulnerability exists in the Qualcomm component in Android. An attacker...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-13527)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. An unauthorized operation vulnerability exists in the Qualcomm component in Android. An attacker...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-13532)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. An unauthorized operation vulnerability exists in the Qualcomm component in Android. An attacker...