security vulnerability database

Ruby on Rails 'create _ with () 'Function Security Restriction Bypass Vulnerability Release date: Updated on: Affected Systems: Ruby on Rails Description: Bugtraq id: 69265 CVE (CAN) ID: CVE-2014-3514 Ruby on Rails (RoR or Rails) is an open-source Web application framework written in Ruby. It is developed in strict accordance with the MVC structure. Ruby on Rails has a

OpenStack Keystone domain-range token revocation failure Security Restriction Bypass Vulnerability Release date:Updated on: Affected Systems:Openstack KeystoneDescription:--------------------------------------------------------------------------------Bugtraq id: 69051OpenStack Keystone is a project that provides identity, Token, directory, and policy services for the OpenStack series.Keystone has a

SystemTap "staprun" Privilege Escalation Security Vulnerability Release date:Updated on: Affected Systems:SystemTap 1.xDescription:--------------------------------------------------------------------------------Cve id: CVE-2011-2502 QEMU is an open source simulator software. Qemu kvm has the Local Security Restriction Bypass

Release date:Updated on: Affected Systems:Yukihiro Matsumoto Ruby 1.8.xUnaffected system:Yukihiro Matsumoto Ruby 1.8.7-Description:--------------------------------------------------------------------------------Bugtraq id: 46458 Ruby is a powerful object-oriented scripting language. The Ruby "Exception # to_s" method has a Security Restriction Bypass Vulnerability. Remote attackers can exploit this

application before submitting an Apple App Store review," said Josh Goldfarb, FireEye's emerging technology leader. Once approved, it will formally enter the Apple App Store, which can send illegal malicious instructions to the device. ”As for how to circumvent the risk of jspatch, Goldsmith says: "My advice is very standard: Download only the apps you need, and you know, you trust." Beware of apps that ask you for permission to access. Remember to provide access only to those apps that you thi

Release date:Updated on: Affected Systems:Debian Linux 5.0 xMandrakeSoft Linux Mandrake 2010.0 x86_64MandrakeSoft Linux Mandrake 2009.0 x86-64MandrakeSoft Linux Mandrake 2009.0MandrakeSoft Linux Mandrake 10.0Aleksey Sanin XML Security Library 1.2.16Unaffected system:Aleksey Sanin XML Security Library 1.2.17Description:--------------------------------------------------------------------------------Bugtraq i

IBM Rational Automation Framework Web UI Security Bypass Vulnerability Release date:Updated on: Affected Systems:IBM Rational Automation Framework 3.xDescription:--------------------------------------------------------------------------------Bugtraq id: 57008CVE (CAN) ID: CVE-2012-4816 The IBM Rational Automation Framework automatically performs middleware environment building, middleware management, and de

Release date:Updated on: Affected Systems:PostgreSQL 8.xDescription:--------------------------------------------------------------------------------Bugtraq id: 65723CVE (CAN) ID: CVE-2014-0060 PostgreSQL is an advanced object-relational database management system that supports extended SQL standard subsets. PostgreSQL 9.3.3, 9.2.7, 9.1.12, 9.0.16, and earlier than 8.4.20 have security vulnerabilities...

PHP is a common open-source scripting language with C as the underlying language, supports almost all popular databases and operating systems, and is much more efficient than CGI, which is fully generated HTML markup, and is primarily suitable for web development. The most important thing is that PHP can be used in C, C + + program extension! All the file operation functions are sensitive functions, when such functions are used improperly or unsafe references, it will lead to problems i

Cisco IOS Software Security Restriction Bypass Vulnerability (CVE-2015-0610) Release date:Updated on: Affected Systems:Cisco IOSDescription:Bugtraq id: 72565CVE (CAN) ID: CVE-2015-0610 Cisco IOS is an interconnected network operating system used on most Cisco system routers and network switches. Cisco IOS has a security v