Apache HTTP Server mod_fcgid Module Security Bypass Vulnerability

Apache HTTP Server is an open source web server from the Apache Apache Software Foundation in the United States. modfcgid is one of the modcgi and modcgid alternatives Apache modules. A security bypass vulnerability exists in the modfcgid module in Apache HTTP Server. An attacker could exploit th...

nginx security bypass vulnerability

nginx is an HTTP and reverse proxy server developed by Russian software developer Igor Sysoev, which can also be used as a mail proxy server. A security bypass vulnerability exists in nginx. An attacker can exploit this vulnerability to perform unauthorized operations...

KDE KArchive Security Bypass Vulnerability

KDE is a free and open source X desktop management program for Linux and Unix workstations, KDE provides support for various network protocols through the KIO subsystem.KDE KArchive is one of the document managers. A security bypass vulnerability exists in KDE KArchive 5.23.0 and earlier versions...

Teclib Armadito Antivirus Man-in-the-Middle Attack Vulnerability

Teclib Armadito Antivirus is an open source antivirus from the Spanish company Teclib. A security vulnerability exists in Teclib Armadito Antivirus, which can be exploited by attackers to conduct man-in-the-middle attacks, perform unauthorized operations, and obtain sensitive information...

TYPO3 page path extension remote unauthorized operation vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. page path is one of the page path extension plug-ins. A program security vulnerability exists in TYPO3 page path extension 1.0.3 and earlier versions, which can be exploited by...

Avast! Antivirus Security Bypass Vulnerability

Avast! Antivirus is a suite of antivirus programs from the Czech company Avast. A security bypass vulnerability exists in Avast! Antivirus, which can be exploited by attackers to bypass security restrictions and perform unauthorized operations...

Ceragon FibeAir IP-10 Authentication Bypass Vulnerability

The Ceragon FibeAir IP-10 is a wireless microwave transmission device from Ceragon Israel. An authentication bypass vulnerability exists in Ceragon FibeAir IP-10 versions prior to 7.2.0, which can be exploited by an attacker to bypass the authentication mechanism and perform unauthorized operatio...

Open-Xchange OX Guard Security Bypass Vulnerability

Open-Xchange OX Guard is a suite of security protection software for e-mail and files from Open-Xchange USA. A security bypass vulnerability exists in versions 2.0 and 2.2.0 of Open-Xchange OX Guard, which can be exploited by attackers to bypass security restrictions and perform unauthorized...

Drupal USASearch Module Access Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.USASearch is one of the theme search modules. An access bypass vulnerability exists in Drupal USASearch module versions prior to 7.x-5.1, which can be exploited by an attacker to bypass...

Local Security Bypass Vulnerability in mod_nss Module

modnss is a module that provides encryption for the Apache HTTP server based on the Secure Sockets Layer SSL and Transport Layer Security TLS protocols and uses the Network Security Services NSS security library to provide encryption. A local security bypass vulnerability exists in the modnss...

Multiple vulnerabilities in WAGO IO PLCs (CNVD-2016-05505)

The WAGO IO PLC 758-870 and 750-849 are bus editable logic controller modules from WAGO Germany. A security bypass vulnerability and a power lifting vulnerability exists in the WAGO IO PLC 758-870 and 750-849 versions, which can be exploited by an attacker to execute arbitrary code, bypass securi...

NetApp OnCommand Workflow Automation Authentication Bypass Vulnerability

NetApp OnCommand Workflow Automation is a set of storage process management software from the U.S. company NetApp. An authentication bypass vulnerability exists in versions of NetApp OnCommand Workflow Automation prior to 3.1P2, which can be exploited by an attacker to bypass the authorization...

Multiple Pivotal Product Security Bypass Vulnerabilities

Pivotal Cloud Foundry CF is a suite of open source Platform-as-a-Service PaaS cloud computing platforms from Pivotal Software in the United States, which provides container scheduling, continuous delivery, and automated service deployment. cf-release is a release of CF. Elastic Runtime is CF's...

Esoteric Software kryo Security Bypass Vulnerability

Esoteric Software kryo is Esoteric Software's set of object serialization framework for Java . A security bypass vulnerability exists in Esoteric Software kryo, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations...

ZOHO ManageEngine Password Manager Pro Security Bypass Vulnerability

ZOHO ManageEngine Password Manager Pro PMP is a set of password management software from ZOHO. The software can record general password information, website login passwords, software registration codes and Email account passwords. A security bypass vulnerability exists in ZOHO ManageEngine PMP. A...

Mod_Nss Security Bypass Vulnerability

modnss is a module that provides encryption for the Apache HTTP server based on the Secure Sockets Layer SSL and Transport Layer Security TLS protocols and uses the Network Security Services NSS security library to provide encryption. A security bypass vulnerability exists in modnss version 1.0.1...

GoPivotal Spring Security and Spring Framework Security Bypass Vulnerability

GoPivotal Spring Securit and Spring Framework are both products of the U.S. company GoPivotal. The former is a set of Spring-based applications to provide illustrative security protection security framework, the latter is a set of open source Java, Java EE application framework. A security bypass...

Apache Archiva Cross-Site Request Forgery Vulnerability (CNVD-2016-04983)

Apache Archiva is a suite of software from the Apache Software Foundation in the United States for managing one or more remote stores. A cross-site request forgery vulnerability exists in Apache Archiva version 1.3.9, which can be exploited by an attacker to perform unauthorized operations...

Android Local Security Bypass Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A local security bypass vulnerability exists in Android, which can be exploited by local attackers to bypass security restrictions and perform unauthorized operations...

GnuTLS Local Security Bypass Vulnerability

GnuTLS is a free secure communications library for implementing the SSL, TLS and DTLS protocols developed by Nikos Mavrogiannopoulos of Belgium and Simon Josefsson of Sweden, software developers. A local security bypass vulnerability exists in GnuTLS version 3.4.12, which can be exploited by an...