Google Android Security Restriction Bypass Vulnerability

Android is an operating system based on the Linux open kernel and is a mobile operating system announced on November 5, 2007 by Google Inc. Google Android is implemented with a security restriction bypass vulnerability, which can be exploited by an attacker to bypass certain security restrictions...

vzctl local security bypass vulnerability

vzctl is a set of tools used to manage OpenVZ, an OS-level server virtualization solution for Linux-based platforms. A local security bypass vulnerability exists in vzctl. A local attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

HP ArcSight Logger Remote Authorized Access Vulnerability

HP ArcSight Logger is a log management software tool. A remote authorized access vulnerability exists in HP ArcSight Logger, which can be exploited by an attacker to bypass certain authorization restrictions and perform unauthorized operations...

PHP Kobo Photo Gallery CMS for PC/smartphone and feature phone Cross-Site Request Forgery Vulnerability

PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone is a photo gallery content management system CMS for PC, smartphone and feature phone from PHP Kobo Japan. A cross-site request forgery vulnerability exists in the admin.php script in PHP Kobo Photo Gallery CMS for PC, smartphone and...

Elasticsearch Logstash Security Bypass Vulnerability (CNVD-2015-05626)

Elasticsearch Logstash is a set of log analysis and monitoring tools from Elasticsearch Netherlands. The tool provides functions such as search, processing and management of logs or events. A security bypass vulnerability exists in Elasticsearch Logstash. An attacker can exploit this vulnerabilit...

Multiple Vulnerabilities in Basware Maksuliikenne

Basware Maksuliikenne is a suite of software from the Finnish company Basware that establishes connections with banks to manage their own finances. An information disclosure vulnerability and a security bypass vulnerability exist in Basware Maksuliikenne. An attacker could use these vulnerabiliti...

Security Bypass Vulnerability in Multiple Huawei ME906 Products

Huawei ME906 is a mobile internet module with M.2 which supports LTE, WCDMA, EVDO and GSM. Multiple Huawei ME906 products insecurely use CRC16 for escalation checking, allowing remote attackers to exploit the vulnerability to bypass security restrictions and perform unauthorized operations in the...

Apache Ranger Access Bypass Vulnerability

Apache Ranger is the Apache Software Foundation's architecture for implementing comprehensive security measures for Hadoop clusters, providing centralized security policy management for core enterprise security requirements such as authorization, billing, and data protection. An access bypass...

IPPUSBXD 'ippusbxd.c' Local Security Bypass Vulnerability

IPPUSBXD is a daemon for the IPP-over-USB printer support program. A local security bypass vulnerability exists in IPPUSBXD. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

ownCloud for iOS Security Bypass Vulnerability

ownCloud for iOS is a free and open source personal cloud storage solution based on the iOS platform created by German KDE developer Frank Karlitschek. The program offers file management, music storage, calendars, and more. A security bypass vulnerability exists in ownCloud for iOS. An attacker c...

GNOME Clutter Local Security Bypass Vulnerability

GNOME Clutter is an open source graphics library GUI and a collection of CAPIs developed by the GNOME project team that uses OpenGL for graphics rendering and is cross-platform and multi-language. A local security bypass vulnerability exists in GNOME Clutter. An attacker can exploit this...

Koha Cross-Site Request Forgery Vulnerability

Koha is the first open source library automation system. Koha suffers from a cross-site request forgery vulnerability that could be exploited by an attacker to perform unauthorized operations...

Drupal OSF for Drupal module cross-site request forgery vulnerability

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community. osf for Drupal is one of the middle-tier modules that allows customization tools and data display for internally structured data RDF and related vocabularies ontologies. A cross-site...

zf-oauth2 security bypass vulnerability

OAuth is an open web standard for authorization that is widely used around the world and is currently in version 2.0. A security bypass vulnerability exists in zf-oauth2, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations...

Linux kernel 'x86/entry/entry_64.S' local security bypass vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local security bypass vulnerability exists in the Linux kernel. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized...

Moodle 'mod/forum:canposttomygroups' security bypass vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security bypass vulnerability exists in Moodle. An attacker could exploit this...

Ansible Bypass Security Restrictions Vulnerability

Ansible is a newly emerged operation and maintenance tool that is based on Python and combines the advantages of many old operation and maintenance tools to achieve batch operating system configuration, batch program deployment, batch running commands and other functions. A security vulnerability...

phpLiteAdmin Cross-Site Request Forgery Vulnerability

phpLiteAdmin is a software developer Dane Iracleous developed a set of PHP implementation and Web-based open-source SQLite database management tool . A cross-site request forgery vulnerability exists in phpLiteAdmin, which can be exploited by attackers to perform unauthorized operations...

pyjwt Insecure HMAC Signature Validation Vulnerability

pyjwt is a JSON Web Token implementation in Python. The pyjwt insecure HMAC signature checksum vulnerability allows remote attackers to perform unauthorized operations or obtain sensitive information...

Cisco FireSIGHT Management Center Cross-Site Request Forgery Vulnerability

Cisco FireSIGHT Management Center is the United States Cisco Cisco company's set of support for centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security equipment network security and operational functions of the management center software. A cross-si...