Drupal Private Module Access Bypass Vulnerability

Drupal is an open source content management framework CMF written in PHP, which consists of a content management system CMS and a PHP development framework Framework. An access bypass vulnerability exists in Drupal Private Module. An attacker can exploit this vulnerability to perform unauthorized...

Cisco Nexus 7000 Series Switches Security Bypass Vulnerability

Cisco Nexus 7000 Series Switches are 7000 series switches from Cisco USA. A security bypass vulnerability exists in the access control filtering mechanism in Cisco Nexus 7000 Series Switches. An attacker could use this vulnerability to bypass some security restrictions to perform unauthorized...

Suricata Security Bypass Vulnerability

Suricata is a set of network intrusion detection system IDS, intrusion prevention system IPS and network security monitoring engine developed by the Open Information Security Foundation OISF and its supported vendors, which supports multi-threading, built-in IPv6, and the ability to load...

CloudBees Jenkins Distributed Fork Plugin Security Bypass Vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Distributed Fork is one of them to a...

CloudBees Jenkins Pipeline: Classpath Steps Plugin Security Bypass Vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools . A security vulnerability in the CloudBees Jenkins Pipeline: Classpath Steps plugin allows remote attackers to submit a special request to bypass security restrictions and...

Jenkins Mailer plugin security bypass vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools . A security bypass vulnerability exists in the CloudBees Jenkins Mailer plugin, which allows remote attackers to submit a special request to bypass security restrictions and...

Cisco Prime Infrastructure Security Bypass Vulnerability

Cisco Prime Infrastructure PI is a product of Cisco USA.PI is a set of wireless management solutions through Cisco Prime LAN Management Solution LMS and Cisco Prime Network ControlSystem NCS technologies. PI is a wireless management solution through Cisco Prime LAN Management Solution LMS and Cis...

Cisco WebEx Meetings Server Authentication Bypass Vulnerability

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. An authentication bypass vulnerability exists in Cisco WebEx Meetings Server. An attacker could use this...

Fastspot BigTree CMS Cross-Site Request Forgery Vulnerability

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site request forgery vulnerability exists in Fastspot BigTree CMS version 4.2.16. An attacker can exploit this vulnerability to perform unauthorized operations...

Cisco Wireless LAN Controller Remote Security Bypass Vulnerability

Cisco Wireless LAN Controller is a wireless LAN controller from Cisco. A remote security bypass vulnerability exists in Cisco Wireless LAN Controller. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations, resulting in further attacks...

Mozilla Firefox MFSA has multiple vulnerabilities (CNVD-2017-04171)

Mozilla Firefox is an open source web browser. Multiple vulnerabilities exist in Mozilla Firefox. An attacker could use this vulnerability to bypass security restrictions to perform unauthorized operations, obtain sensitive information, execute arbitrary script code in the affected application's...

Linux Kernel 'x86/mm/gup.c' Local Security Bypass Vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local security bypass vulnerability exists in Linux Kernel 'x86/mm/gup.c'. An attacker could use this vulnerability to bypass some security restrictions and perform...

Unspecified Security Bypass Vulnerability in SAP NetWeaver

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An unspecified security bypass vulnerability exists in SAP NetWeaver. An attacker could use this vulnerability t...

OpenBSD Man-in-the-Middle Security Bypass Vulnerability

OpenBSD is the popular BSD operating system, a derivative of Unix. A security bypass vulnerability exists in OpenBSD. An attacker can exploit this vulnerability by performing a man-in-the-middle attack to bypass certain security restrictions and perform unauthorized operations, leading to other...

Microsoft Edge Security Bypass Vulnerability (CNVD-2017-03533)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security bypass vulnerability exists in Microsoft Edge. An attacker exploits the vulnerability to bypass security restrictions and perform unauthorized operatio...

FTP Voyager Scheduler Cross-Site Request Forgery Vulnerability

FTP Voyager Scheduler is a program that starts or stops the scheduler when a user creates a directory or uploads or downloads a file by creating a task or command. A cross-site request forgery vulnerability exists in FTP Voyager Scheduler that stems from a failure to properly validate HTTP...

Apache NiFi Security Bypass Vulnerability

Apache NiFi is an automated solution for data transfer between systems. A security bypass vulnerability exists in Apache NiFi. An attacker could use this vulnerability to bypass security restrictions, perform unauthorized operations, and launch further attacks...

Microsoft Internet Explorer and Edge Spoofing Vulnerability

Microsoft Internet Explorer and Edge are both web browsers developed by the American company Microsoft and are the default browsers that come with the Windows operating system. A security vulnerability exists in Microsoft Internet Explorer and Edge, which can be exploited by attackers to perform...

Zammad Security Bypass Vulnerability

Zammad is a web-based, open-source helpdesk/customer support system from the German company Zammad, with many features to manage customer communication through multiple channels such as phone calls. A security bypass vulnerability exists in Zammad. An attacker could exploit the vulnerability to...

WordPress Security Bypass Vulnerability (CNVD-2017-03617)

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress suffers from a security bypass vulnerability. An attacker can exploit this vulnerability to bypass certain security...