MediaWiki security bypass vulnerability (CNVD-2015-07399)

MediaWiki is a suite of free and freely available web-based wiki engines that can be used to deploy in-house knowledge management and content management systems. MediaWiki has a security vulnerability that allows remote attackers to exploit the vulnerability and bypass security restrictions to...

Network Time Protocol Security Bypass Vulnerability

Network Time Protocol is a set of protocols for synchronizing computer clocks over a network. A security bypass vulnerability exists in Network Time Protocol that could allow a remote attacker to perform a man-in-the-middle attack to bypass security restrictions and perform unauthorized operation...

MediaWiki Oauth extension security bypass vulnerability (CNVD-2015-07397)

MediaWiki is a suite of free and freely available web-based wiki engines that can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in the MediaWiki Oauth extension, which allows remote attackers to exploit the vulnerability to bypass...

Tinfoil Security Devise-two-factor Security Bypass Vulnerability

Tinfoil Security Devise-two-factor is a two-factor authentication extension from the American company Tinfoil Security. A security bypass vulnerability exists in Tinfoil Security Devise-two-factor. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized...

Baxter SIGMA Spectrum Infusion System Local Security Bypass Vulnerability

The Baxter SIGMA Spectrum Infusion System is an intelligent infusion system from Baxter. A local security bypass vulnerability exists in the Baxter SIGMA Spectrum Infusion System. A local attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Squid Security Bypass Vulnerability (CNVD-2015-07339)

Squid full name Squid Cache is a suite of proxy server and Web caching server software. A security bypass vulnerability exists in Squid. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Linux kernel 'securelevel/secureboot' local security bypass vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local security bypass vulnerability exists in the Linux kernel. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized...

Kaspersky Endpoint Security 'avp.exe' Authentication Bypass Vulnerability

Kaspersky Endpoint Security is a suite of security software that provides digital threat protection protection for business users. Kaspersky Endpoint Security suffers from an authentication bypass vulnerability that could be exploited by an attacker to bypass authentication mechanisms and perform...

Kaspersky Total Security 'avp.exe' Authentication Bypass Vulnerability

Kaspersky Total Security is an all-encompassing multi-device version of antivirus software. A remote authentication bypass vulnerability exists in Kaspersky Total Security, which could be exploited by remote attackers to bypass authentication mechanisms and perform unauthorized operations...

Kaspersky Small Office Security 'avp.exe' Remote Authentication Bypass Vulnerability

Kaspersky Small Office Security is a suite of antivirus software for small and medium-sized businesses. A remote authentication bypass vulnerability exists in Kaspersky Small Office Security, which could be exploited by an attacker to bypass authentication mechanisms and perform unauthorized...

Kaspersky Anti-Virus 'avp.exe' Authentication Bypass Vulnerability

Kaspersky Anti-Virus is a suite of antivirus software developed by the Russian Kaspersky Lab. An authentication bypass vulnerability exists in Kaspersky Anti-Virus 'avp.exe', which allows remote attackers to bypass authentication mechanisms and perform unauthorized operations...

CVE-2007-1742

suexec in Apache HTTP Server httpd 2.2.3 uses a partial comparison for verifying whether the current directory is within the document root, which might allow local users to perform unauthorized operations on incorrect directories, as demonstrated using "htmlbackup" and "htmleditor" under an "html...

Gummi Local Competitive Conditions Vulnerability

Gummi is a Dutch software developer Alexander van der Meij developed a Linux-based platform and the use of C and GTK + technology development of open-source Latex editor , it provides real-time preview , syntax highlighting , export to PDF, error correction / spell checking and preset templates a...

Linux Audit '/auparse/auparse.c' Security Bypass Vulnerability

Linux Audit is a set of graphical tools for viewing audit logs of Linux systems. A security bypass vulnerability exists in Linux Audit. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Moodle Security Bypass Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle. An attacker could use this...

SAP Netwaver XML External Entity Injection Vulnerability

SAP Netwaver is a professional standards-based integrated application platform from SAP. The platform provides components such as portals, application servers and business intelligence solutions. An XML external entity injection vulnerability exists in SAP Netwaver versions prior to 7.01. An...

Apache Ambari Security Bypass Vulnerability

Apache Ambari is a set of tools for configuring, managing and monitoring Apache Hadoop clusters from the Apache Apache Software Foundation, USA. The tool supports visualization and analysis of job and task execution, support for system alerts, and more. A security bypass vulnerability exists in...

OpenStack Nova Unauthorized Operation Vulnerability

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration and Rackspace, Inc. in the U.S. OpenStack Nova is one of the cloud computing construct controllers written in Python. It is part of the IaaS system. A security vulnerability exists in...

Moodle Security Bypass Vulnerability (CNVD-2015-07086)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle. An attacker could use this...

Linux Kernel Local Security Bypass Vulnerability (CNVD-2015-06390)

Linux kernel is an open source operating system. Linux kernel has a security vulnerability that allows local attackers to bypass security restrictions and perform unauthorized operations...