Pulp Security Bypass Vulnerability

Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. A security bypass vulnerability exists in Pulp. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized...

Symantec Endpoint Protection Manager Cross-Site Request Forgery Vulnerability

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. A cross-site request forgery vulnerability exists in SEPM version 12.1. An attacker coul...

Multiple Meteocontrol WEB'log Products Cross-Site Request Forgery Vulnerabilities

Meteocontrol WEB'log is a web-based SCADA system from Meteocontrol Germany that provides energy and power configuration management functions using different connected energy/industrial devices. A cross-site request forgery vulnerability exists in several Meteocontrol WEB'log products. A remote...

IBM Security Identity Manager Virtual Appliance Cross-Site Request Forgery Vulnerability

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

Moodle Assignment Plugin Cross-Site Request Forgery Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas in Australia.Assignment is one of the plug-ins used to develop new types of assignments. A cross-sit...

Microsoft Enhanced Mitigation Experience Toolkit Security Bypass Vulnerability

Microsoft Enhanced Mitigation Experience Toolkit is a security tool introduced in response to vulnerabilities. It protects users from attacks even when patches are not installed through technologies such as Data Execution Protection DEP, Structured Exception Handling Override Protection SEHOP, an...

GNU Libgcrypt Security Bypass Vulnerability

GNU Libgcrypt is a general-purpose cryptographic library developed by the GNU Project based on the GnuPG code. A security vulnerability exists in GNU Libgcrypt that allows attackers to perform unauthorized operations...

Ubuntu Wily 'programs/pt_chown.c' Security Bypass Vulnerability

Ubuntu is a desktop-oriented GNU/Linux operating system developed by Canonical and the Ubuntu Foundation, with Wily being a development code name for Ubuntu. A security bypass vulnerability exists in Ubuntu Wily. A local attacker could use this vulnerability to bypass security restrictions and...

Umbraco CMS Cross-Site Request Forgery Vulnerability

Umbraco CMS is a Danish Umbraco company using ASP.Net build , Mysql for data storage content management system CMS. The system supports customized templates , manage users , rights definition of content and so on. A cross-site request forgery vulnerability exists in Umbraco CMS. The vulnerability...

Huawei Policy Center Elevation of Privilege Vulnerability

Huawei Policy Center is a suite of policy management center software from Huawei. An elevation of privilege vulnerability exists in Huawei Policy Center. An attacker could use this vulnerability to obtain elevated privileges and perform unauthorized operations...

Drupal Nodejs Module Access Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language maintained by the Drupal community.Node.js is one of the modules that provides real-time push updates. An access bypass vulnerability exists in the Drupal Nodejs module. This vulnerability allows attackers to...

IBM Java SDK Security Bypass Vulnerability (CNVD-2016-01228)

The IBM Java SDK is a Java implementation for AIX and Linux platforms and is a software development kit. A security bypass vulnerability exists in the IBM Java SDK. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations within the context of a...

WordPress Security Bypass Vulnerability (CNVD-2016-01224)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security bypass vulnerability exists in WordPress, which allows remote attackers to bypass security...

OpenStack Glance Security Bypass Vulnerability

OpenStack is a cloud platform management project. glance is one of the projects that can store, query and retrieve virtual machine images. A security vulnerability exists in OpenStack Glanc that allows an attacker to exploit the vulnerability to bypass security restrictions and perform unauthoriz...

Apache Ranger Authentication Bypass Vulnerability

Apache Ranger is the Apache Software Foundation's architecture for implementing comprehensive security measures for Hadoop clusters, providing centralized security policy management for core enterprise security requirements such as authorization, billing, and data protection. An authentication...

Drupal Open Atrium Module Security Bypass Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Open Atrium is one of the team collaboration and knowledge management system modules. A security bypass vulnerability exists in the Drupal Open Atrium module that can be exploited by...

Ruby on Rails Active Model Security Bypass Vulnerability

Ruby on Rails is the Rails core team to develop and maintain a set of open source Web application framework based on the Ruby language . Active Model is one of the libraries containing various modules . A security vulnerability exists in Ruby on Rails Active Model that allows remote attackers to...

Django Security Bypass Vulnerability (CNVD-2016-00884)

Django is a set of open source Web application framework based on the Python language . A security bypass vulnerability exists in Django that allows remote attackers to bypass security restrictions and perform unauthorized operations...

ZOHO ManageEngine EventLog Analyzer Elevation of Privilege Vulnerability

ZOHO ManageEngine EventLog Analyzer is a set of system, event log analysis software. A security vulnerability exists in ZOHO ManageEngine EventLog Analyzer that could be exploited by an attacker to elevate privileges and perform unauthorized operations...

NTP Cronjob Script Local Privilege Vulnerability

The NTP Cronjob Script is a task script used to perform a purge operation on the statistics file generated by the NTP daemon running the statistics function. A security vulnerability exists in NTP Cronjob Script that can be exploited by attackers to gain root privileges and perform unauthorized...