NTP Security Bypass Vulnerability (CNVD-2016-00818)

NTP Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security bypass vulnerability exists in NTP. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

phpMyAdmin Security Restriction Bypass Vulnerability

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A security vulnerability exists in phpMyAdmin due to a failure of the program to properly generate XSRF/CSRF tokens, which allows remote attackers to exploit the vulnerability by submitting special...

Cross-Site Request Forgery Vulnerability in Multiple Buffalo Devices

Buffalo BHR-4GRV2 and others are wireless router products from the Buffalo Group of Japan. A cross-site request forgery vulnerability exists in multiple Buffalo devices. A remote attacker could exploit this vulnerability to perform unauthorized operations...

RubyGems rack-attack 'ActionDispatch' security bypass vulnerability

RubyGems is a Ruby package manager from the RubyGems organization that is used to distribute and manage Ruby packages. rack-attack is one of the middleware used to block abusive requests. A security vulnerability in RubyGems rack-attack allows remote attackers to bypass security restrictions and...

NetApp SnapCenter Server Authentication Bypass Vulnerability

NetApp SnapCenter is a suite of applications that provide the ability to back up, verify, clone, and restore NetApp storage systems.NetApp SnapCenter Server is a server edition. A security vulnerability exists in NetApp SnapCenter Server that allows an attacker to bypass the authentication...

Kozea Radicale Security Bypass Vulnerability

Kozea Radicale is a free and open source CalDAV and CardDAV server solution. A security vulnerability exists in Kozea Radicale that could be exploited by remote attackers to bypass security restrictions and perform unauthorized operations...

Cisco Adaptive Security Appliance Software Security Bypass Vulnerability

Cisco Adaptive Security Appliances is a set of firewall appliances from Cisco in the United States. The appliance also includes IPS, SSL VPN, IPSec VPN, anti-spam and other features. A security bypass vulnerability exists in Cisco Adaptive Security Appliance Software, which allows remote attacker...

HP HPE ArcSight Logger Certificate Upload Security Bypass Vulnerability (CNVD-2016-00362)

HP HPE ArcSight Logger is a suite of log management software. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A vulnerability in the HP HPE ArcSight Logger client certificate upload processing...

Microsoft Office Security Mechanism Bypass Vulnerability

Microsoft Office is a suite of office software developed by Microsoft Corporation for the Microsoft Windows and Apple Macintosh operating systems. A security bypass vulnerability exists in Microsoft Office, which can be exploited by remote attackers to bypass the ASLR protection mechanism and...

Freebox OS Web interface cross-site request forgery vulnerability

The Freebox OS Web interface is a web interface for the ADSL modem Freebox operating system. A cross-site request forgery vulnerability exists in the Freebox OS Web interface version 3.0.2. An attacker could exploit this vulnerability by sending a specially crafted request to perform an...

OpenStack qemu-imge security bypass vulnerability

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration and Rackspace, Inc. OpenStack qemu-imge is one of the installation images. A security bypass vulnerability exists in OpenStack qemu-imge. An attacker could use this vulnerability to...

MediaWiki Remote Vulnerability

MediaWiki is a free and free web-based Wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers, which can be used to deploy in-house knowledge management and content management systems. A remote security vulnerability exists in MediaWiki. An attacker could exploi...

MediaWiki 'includes/User.php' Security Bypass Vulnerability

MediaWiki is a free and free web-based Wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers, which can be used to deploy in-house knowledge management and content management systems. A security bypass vulnerability exists in MediaWiki. An attacker could use th...

MediaWiki Security Bypass Vulnerability (CNVD-2016-00110)

MediaWiki is a free and free web-based Wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers, which can be used to deploy in-house knowledge management and content management systems. A security bypass vulnerability exists in MediaWiki. An attacker could use th...

Lepide Software Active Directory Self Service Password Reset Vulnerability

Lepide Software Active Directory Self Service is a web-based self-service solution for Active Directory Active Directory Services. Lepide Software Active Directory Self Service does not properly restrict the use of the password reset feature, allowing remote attackers to exploit vulnerabilities t...

HP HPE Helion Eucalyptus Unauthorized Access Vulnerability

HP HPE Helion Eucalyptus is an open source for building Amazon Web Services AWS compatible private cloud solutions from Hewlett-Packard HP. An unauthorized access vulnerability exists in HP HPE Helion Eucalyptus. An attacker could use this vulnerability to bypass security restrictions, gain...

OpenSolution Quick.Cart 'admin.php' Cross-Site Request Forgery Vulnerability

OpenSolution Quick.Cart is a PHP-based open source e-commerce software from OpenSolution Poland. The software supports engine optimization , module extensions and so on. OpenSolution Quick.Cart version 6.6 and cross-site request forgery vulnerability. An attacker can exploit the vulnerability to...

Python pip security bypass vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. pip is a set of tools for installing and managing Python packages. A security bypass vulnerability exists in Python pip. An attacker could use this vulnerability to bypass security restrictions and...

Atlassian JIRA Security Bypass Vulnerability (CNVD-2015-085068)

Atlassian JIRA is a defect tracking management system. A security bypass vulnerability exists in Atlassian JIRA that could be exploited by remote attackers to bypass security restrictions and perform unauthorized operations...

eWON Cross-Site Request Forgery Vulnerability

eWON is an industrial router product from eWON Belgium. A cross-site request forgery vulnerability exists in eWON using firmware versions prior to 10.1s0. An attacker could exploit this vulnerability to perform unauthorized operations with user privileges...