Lucene search
K

275 matches found

NVD
NVD
added 2025/03/03 4:15 p.m.7 views

CVE-2024-43169

IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a user to download a malicious file without verifying the integrity of the code...

8.8CVSS0.001EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/14 11:20 a.m.4 views

CVE-2024-27438

Download of Code Without Integrity Check vulnerability in Apache Doris. The jdbc driver files used for JDBC catalog is not checked and may resulting in remote command execution. Once the attacker is authorized to create a JDBC catalog, he/she can use arbitrary driver jar file with unchecked code...

9.8CVSS7.6AI score0.02342EPSS
Exploits0References1
Microsoft KB
Microsoft KB
added 2024/11/21 12:0 a.m.5 views

November 21, 2024-KB5048162 Cumulative Update Preview for .NET Framework 3.5 and 4.8.1 for Windows 11, version 24H2

November 21, 2024-KB5048162 Cumulative Update Preview for .NET Framework 3.5 and 4.8.1 for Windows 11, version 24H2 Release Date: November 21, 2024 Version: .NET Framework 3.5 and 4.8.1 Revised: December 18th, 2024 to update the quality and reliability improvement. If you have already installed...

6.9AI score
Exploits0
The Hacker News
The Hacker News
added 2024/10/28 5:29 a.m.34 views

Researchers Uncover OS Downgrade Vulnerability Targeting Microsoft Windows Kernel

A new attack technique could be used to bypass Microsoft's Driver Signature Enforcement DSE on fully patched Windows systems, leading to operating system OS downgrade attacks. "This bypass allows loading unsigned kernel drivers, enabling attackers to deploy custom rootkits that can neutralize...

7.3CVSS7.9AI score0.02935EPSS
Exploits0
NVD
NVD
added 2024/10/08 6:15 p.m.19 views

CVE-2024-43585

Code Integrity Guard Security Feature Bypass Vulnerability...

5.5CVSS0.00215EPSS
Exploits0References1
OSV
OSV
added 2024/10/08 6:15 p.m.0 views

CVE-2024-43585

Code Integrity Guard Security Feature Bypass Vulnerability...

5.5CVSS5.8AI score0.00215EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/08 5:36 p.m.20 views

CVE-2024-43585 Code Integrity Guard Security Feature Bypass Vulnerability

...

5.5CVSS0.00215EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/08 5:36 p.m.17 views

CVE-2024-43585 Code Integrity Guard Security Feature Bypass Vulnerability

...

5.5CVSS7.2AI score0.00215EPSS
Exploits0References1
CVE
CVE
added 2024/10/08 5:36 p.m.161 views

CVE-2024-43585

Technical details about CVE-2024-43585 are not publicly available in the provided connected documents. No specifics on affected products, root cause, or fixes are present here. Monitor for updates from official advisories.

5.5CVSS6.9AI score0.00215EPSS
Exploits0References1Affected Software10
Microsoft CVE
Microsoft CVE
added 2024/10/08 7:0 a.m.92 views

Code Integrity Guard Security Feature Bypass Vulnerability

...

5.5CVSS7.3AI score0.00215EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2024/10/08 12:0 a.m.1 views

PT-2024-6776 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the Code Integrity Guard function of Microsoft Windows operating systems. This vulnerability is associated with ...

5.5CVSS6.7AI score0.00215EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/10/08 12:0 a.m.2 views

Microsoft Code Integrity Guard 安全漏洞

Microsoft Code Integrity Guard is a security feature in Windows systems from Microsoft Corporation USA designed to prevent the execution of untrustworthy code. A security vulnerability exists in Microsoft Code Integrity Guard. An attacker exploiting this vulnerability could bypass certain feature...

5.5CVSS6.5AI score0.00215EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/04/12 3:21 p.m.13 views

CVE-2024-28878 IOSIX IO-1020 Micro ELD Download of Code Without Integrity Check

IO-1020 Micro ELD downloads source code or an executable from an adjacent location and executes the code without sufficiently verifying the origin or integrity of the code...

9.6CVSS9.6AI score0.00069EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/12 3:21 p.m.9 views

CVE-2024-28878 IOSIX IO-1020 Micro ELD Download of Code Without Integrity Check

IO-1020 Micro ELD downloads source code or an executable from an adjacent location and executes the code without sufficiently verifying the origin or integrity of the code...

9.6CVSS7.2AI score0.00069EPSS
Exploits0References1
CVE
CVE
added 2024/04/12 3:21 p.m.48 views

CVE-2024-28878

CVE-2024-28878 affects IO-1020 Micro ELD (IOSiX) prior to version 360. The issue is that the device downloads code from an adjacent location and executes it without adequately verifying origin or integrity, enabling potential code execution with high impact (confidentiality, integrity, availabili...

9.6CVSS7AI score0.00069EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/21 9:39 a.m.17 views

CVE-2024-27438 Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution

Download of Code Without Integrity Check vulnerability in Apache Doris. The jdbc driver files used for JDBC catalog is not checked and may resulting in remote command execution. Once the attacker is authorized to create a JDBC catalog, he/she can use arbitrary driver jar file with unchecked code...

7.5AI score0.02342EPSS
Exploits0References2
OSV
OSV
added 2024/03/12 5:15 p.m.0 views

CVE-2024-21431

Hypervisor-Protected Code Integrity HVCI Security Feature Bypass Vulnerability...

6.7CVSS7.3AI score0.00401EPSS
Exploits0References1
NVD
NVD
added 2024/03/12 5:15 p.m.19 views

CVE-2024-21431

Hypervisor-Protected Code Integrity HVCI Security Feature Bypass Vulnerability...

7.8CVSS8.2AI score0.00401EPSS
Exploits0References1
Prion
Prion
added 2024/03/12 5:15 p.m.27 views

Security feature bypass

Hypervisor-Protected Code Integrity HVCI Security Feature Bypass Vulnerability...

4.3CVSS7.2AI score0.00401EPSS
Exploits0References1
CVE
CVE
added 2024/03/12 4:58 p.m.230 views

CVE-2024-21431

CVE-2024-21431 is a Microsoft Windows vulnerability titled “Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability.” Connected sources identify this as a local, high-severity issue affecting the HVCI mechanism, with a CVSS score in the high range (confidentiality, integr...

7.8CVSS8.1AI score0.00401EPSS
Exploits0References1Affected Software7
Rows per page
Query Builder