ZOHO ManageEngine ServiceDesk Plus Security Bypass Vulnerability

ZOHO ManageEngine ServiceDesk is the United States ZhuoHao ZOHO company's set of web-based help desk HelpDesk and asset management software. A security bypass vulnerability exists in ManageEngine ServiceDesk Plus 9.2 and prior versions, which can be exploited by an attacker to bypass security...

HP Network Automation Local Security Bypass Vulnerability

HP Network Automation is a suite of automated network configuration management tools from Hewlett-Packard HP. The tool automates configuration changes, software updates, compliance audits, and tracking and control of widely distributed, multi-vendor network devices. A local security bypass...

BaserCMS Cross-Site Request Forgery Vulnerability (CNVD-2016-08860)

baserCMS is an enterprise-level content management system CMS. A cross-site request forgery vulnerability exists in baserCMS 3.0.10 and prior versions, which stems from the program failing to adequately filter user-submitted input. An attacker can exploit this vulnerability to perform unauthorize...

Node.js Security Bypass Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

Huawei HiSuite Man-in-the-Middle Security Bypass Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A man-in-the-middle security bypass vulnerability exists in Huawei HiSuite, which could be exploited by attackers to bypass security restrictions and perform unauthorized operations, or conduct man-in-the-middle...

Trend Micro Internet Security Security Bypass Vulnerability

Trend Micro Internet Security is a set of Trend Micro Trend Micro integrated with personal firewall, anti-virus, anti-spam and other features in one network security software. A security bypass vulnerability exists in versions 8 and 10 of Trend Micro Internet Security, which could be exploited by...

IBM Connections Cross-Site Request Forgery Vulnerability (CNVD-2016-08264)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. A cross-site request...

Red Hat Enterprise Linux Local Security Bypass Vulnerability

Red Hat Enterprise Linux RHEL is a set of Linux operating systems maintained and distributed by Red Hat for business users. A local security bypass vulnerability exists in RHEL version 7.2, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations...

OpenStack Glance Security Bypass Vulnerability (CNVD-2016-08222)

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration and Rackspace, Inc. Glance is a project that stores, queries and retrieves virtual machine images. A remote security bypass vulnerability exists in OpenStack Glance. An attacker could u...

Canoas Web Hosting Administration Page Bypass Vulnerability

A security vulnerability exists in the Canoas web hosting administration page. Due to a failure to filter the Login and Senha parameters in the admin/login.php page. This allows an attacker to bypass login restrictions and perform unauthorized operations...

3Pixels Media Administration Page Bypass Vulnerability

3Pixels is a media software that combines technology and consulting services. A security bypass vulnerability exists in 3Pixels Media. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

phpMyAdmin security bypass vulnerability (CNVD-2016-07932)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...

phpMyAdmin security bypass vulnerability (CNVD-2016-07933)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...

phpMyAdmin security bypass vulnerability (CNVD-2016-07928)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...

Tencent cloud security suffers from injection bypass vulnerability

Tencent Cloud is a public cloud platform built by Tencent for a wide range of enterprises and individuals; it provides basic cloud computing services such as cloud servers, cloud databases, cloud storage and CDN, as well as industry solutions for games, videos and mobile applications. Tencent clo...

phpMyAdmin security bypass vulnerability (CNVD-2016-07930)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A security bypass vulnerability exists in phpMyAdmin...

Schneider Electric Model TSXP572634M PLC Bypasses Certification Vulnerability

Schneider Electric Electric provides total solutions for the energy and infrastructure, industrial, data center and network, building and residential markets in more than 100 countries. When the configuration software is connected to the PLC, all computers that are successfully connected to the P...

HPE Performance Center Remote Security Bypass Vulnerability

HPE Performance Center is a suite of performance load testing software from Hewlett-Packard in the United States. A remote security bypass vulnerability exists in HPE Performance Center that could be exploited by a remote attacker to submit a special request to bypass security restrictions and...

Apache CXF Fediz Security Bypass Vulnerability

Apache CXF is the United States Apache Apache Software Foundation of an open source Web services framework. The framework supports a variety of Web services standards , a variety of front-end programming APIs , etc. Apache CXF Fediz is one of the subprojects , mainly used to provide authenticatio...

Local Privilege Bypass Vulnerability in Various HP Products

HP is a U.S.-based information technology company that specializes in printers, digital imaging, software, computers and information services. A local privilege bypass vulnerability exists in HP XP7 Command View Advance Edition Suite CVAE Replication Manager and Device Manager, which could allow ...