Apache Tomcat Security Manager Security Restriction Bypass Vulnerability (CNVD-2016-10423)

Apache Tomcat is a popular open source JSP application server program. Apache Tomcat 7.0.0-7.0.70 suffers from a security restriction bypass vulnerability in its implementation. An attacker can exploit this vulnerability to bypass certain security restrictions and perform unauthorized operations...

Apache Tomcat Security Restriction Bypass Vulnerability

Apache Tomcat is a popular open source JSP application server program. Apache Tomcat suffers from a security restriction bypass vulnerability in its implementation. An attacker can exploit this vulnerability to bypass certain security restrictions and perform unauthorized operations...

Apache Tomcat Security Restriction Bypass Vulnerability (CNVD-2016-10419)

Apache Tomcat is a popular open source JSP application server program. Apache Tomcat suffers from a security restriction bypass vulnerability in its implementation. An attacker can exploit this vulnerability to bypass certain security restrictions and perform unauthorized operations...

Cisco AsyncOS Security Bypass Vulnerability (CNVD-2016-10396)

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A security bypass vulnerability exists in Cisco AsyncOS that could be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

Ruckus Wireless H500 Cross-Site Request Forgery Vulnerability

The Ruckus Wireless H500 is an indoor wall switch access point from Ruckus Wireless, USA. web management interface is one of the web-based management interfaces. A cross-site request forgery vulnerability exists in the Ruckus Wireless H500 web management interface. An attacker could exploit this...

Cisco AsyncOS Security Bypass Vulnerability

The Cisco AsyncOS operating system is available to enhance the security and performance of Cisco email security appliances. A security vulnerability exists in Cisco AsyncOS that could be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

Cisco AsyncOS for Email and Web Security Appliances Remote Security Bypass Vulnerability

Cisco AsyncOS for Email and Web Security Appliances are both products of Cisco, Inc.Cisco AsyncOS for Email Security Appliances is a set of operating systems used in the Email Security Appliance ESA of Cisco, Inc.Cisco Web Security Appliance WSA is a set of Web security appliances. Cisco AsyncOS...

Moxa EDR-810 Router Elevation of Privilege Vulnerability

Moxa EDR-G810 is an all-in-one firewall/VPN security router product from Moxa. A remote elevation of privilege vulnerability exists in the Moxa EDR-810 router, which can be exploited by an attacker to perform unauthorized operations and obtain elevation of privilege...

DotCMS Security Bypass Vulnerability

DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . DotCMS has a security bypass vulnerability that can be exploited by attackers to bypass security restrictions a...

Schneider Electric PowerLogic PM8ECC Security Bypass Vulnerability

The Schneider Electric PowerLogic PM8ECC is a communication module for use in 800 series meters from Schneider Electric, France. A security bypass vulnerability exists in Schneider Electric PowerLogic PM8ECC for PowerMeter 800 prior to version 2.651, which can be exploited by an attacker to bypas...

SAP SAPCRYPTOLIB Component Security Bypass Vulnerability

SAP SAPCRYPTOLIB is a cryptographic library of the German company SAP. A security bypass vulnerability exists in the SAP SAPCRYPTOLIB component and can be exploited by an attacker to bypass security restrictions and perform unauthorized operations...

SAP NetWeaver Security Bypass Vulnerability (CNVD-2016-09869)

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A security bypass vulnerability exists in SAP NetWeaver version 7.4, which can be exploited by attackers to bypa...

SAP NetWeaver Security Bypass Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A security bypass vulnerability exists in SAP NetWeaver version 7.40, which can be exploited by an attacker to...

Cybozu Office Security Bypass Vulnerability

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A security bypass vulnerability exists in Cybozu Office versions 9.0.0 through 10.4.0. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...

SPIP Cross-Site Request Forgery Vulnerability

SPIP is a free Web-based content publishing system. The system is primarily used for online collaboration. A cross-site request forgery vulnerability exists in SPIP versions 1.9.2-SPIP 3.0.7, which can be exploited by an attacker to perform unauthorized operations...

X.Org libXrandr Privilege Bypass Vulnerability

X.Org libXrandr is an X11 RandR extension library operated by the X.Org Foundation. A security vulnerability exists in X.Org libXrandr 1.5.0 and earlier versions that can be exploited by an attacker to bypass security restrictions and perform unauthorized operations...

X.Org libXtst Integer Overflow Vulnerability

X.Org libXtst is an Xlib-based client API proprietary to the XTEST & RECORD extension operated by the X.Org Foundation. An integer overflow vulnerability exists in X.Org libXtst 1.2.2 and earlier versions that can be exploited by an attacker to perform unauthorized operations...

LG Electronics L-04D Cross-Site Request Forgery Vulnerability

The LG Electronics L-04D is a wireless router from LG Electronics of South Korea. A cross-site request forgery vulnerability exists in LG Electronics L-04D firmware versions V10a and V10b. An attacker can exploit this vulnerability to perform unauthorized operations...

GE Bently Nevada 3500/22M Security Bypass Vulnerability

The GE Bently Nevada 3500/22M is a vibration monitoring system. A security bypass vulnerability exists in the GE Bently Nevada 3500/22M. Allowing an attacker to perform unauthorized operations...

SetucoCMS Cross-Site Request Forgery Vulnerability

SetucoCMS is a content management system CMS. A cross-site request forgery vulnerability exists in SetucoCMS. An attacker could exploit this vulnerability to perform unauthorized operations...