Lucene search
K

2651 matches found

Rapid7 Blog
Rapid7 Blog
added 2024/11/18 2:1 p.m.5 views

Unlock 24/7 SOC Coverage: Rapid7 MXDR Now Supports with Microsoft Security Products

In today’s complex threat landscape, organizations need every advantage at their disposal to stay secure–starting with maximizing the tools they already have within their ecosystem. With the launch of Rapid7 MXDR’s SOC support for key Microsoft security products, we’re making it possible for...

7.1AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/11/17 12:0 a.m.5 views

The vulnerability of Windows Defender Application Control (WDAC) on Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of Windows Defender Application Control WDAC on Windows operating systems relates to a flaw in the data protection mechanism. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

6.8CVSS5.5AI score0.00537EPSS
Exploits0References2
OSV
OSV
added 2024/11/12 6:15 p.m.1 views

CVE-2024-43645

Windows Defender Application Control WDAC Security Feature Bypass Vulnerability...

7.8CVSS5.8AI score0.00537EPSS
Exploits0References1
NVD
NVD
added 2024/11/12 6:15 p.m.18 views

CVE-2024-43645

Windows Defender Application Control WDAC Security Feature Bypass Vulnerability...

7.8CVSS0.00537EPSS
Exploits0References1
CVE
CVE
added 2024/11/12 5:53 p.m.91 views

CVE-2024-43645

CVE-2024-43645 is a Windows Defender Application Control (WDAC) security feature bypass described in connected advisories. The vulnerability permits bypassing WDAC protections via a local attacker, with high potential impact to confidentiality, integrity, and availability. Microsoft has published...

7.8CVSS6.7AI score0.00537EPSS
Exploits0References1Affected Software5
Cvelist
Cvelist
added 2024/11/12 5:53 p.m.15 views

CVE-2024-43645 Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability

...

6.7CVSS0.00537EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/12 5:53 p.m.14 views

CVE-2024-43645 Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability

...

6.7CVSS7AI score0.00537EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2024/11/12 8:0 a.m.26 views

Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability

...

7.8CVSS7.1AI score0.00537EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2024/11/12 12:0 a.m.5 views

PT-2024-8159 · Microsoft · Windows Defender Application Control +1

Name of the Vulnerable Software and Affected Versions: Windows Defender Application Control WDAC affected versions not specified Description: The issue is related to a security feature bypass in Windows Defender Application Control WDAC that affects the data protection mechanism. This could allow...

7.8CVSS6.5AI score0.00537EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.6 views

Microsoft Windows Defender Application Control 安全漏洞

Microsoft Windows Defender Application Control WDAC is a security tool from Microsoft Corporation USA that restricts the operation of programs at the software level by configuring policies to reduce the scope of what hackers can attack. A security vulnerability exists in Microsoft Windows Defende...

7.8CVSS6.2AI score0.00537EPSS
Exploits0References2
Kaspersky
Kaspersky
added 2024/11/12 12:0 a.m.13 views

KLA77108 ACE vulnerability in Microsoft System Center

A remote code execution vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2024-5535 Related products Microsoft-System-Center-Virtual-Machine-Manager...

9.1CVSS8.9AI score0.05582EPSS
Exploits1References4
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/11 5:51 p.m.28 views

Security Bulletin: Potential Denial of Service in IBM Storage Defender - Data Protect

Summary IBM Storage Defender - Data Protect is potentially vulnerable to a denial of service attack via CVE-2022-21698. Vulnerability Details CVEID:CVE-2022-21698 DESCRIPTION: Prometheus Go client library clientgolang is vulnerable to a denial of service, caused by a flaw when handling requests...

7.5CVSS7.2AI score0.05994EPSS
Exploits0Affected Software1
NVD
NVD
added 2024/11/01 3:15 p.m.16 views

CVE-2024-37444

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security: from n/a through = 4.7.1...

9.8CVSS0.00532EPSS
Exploits0References1
OSV
OSV
added 2024/11/01 3:15 p.m.2 views

CVE-2024-37444

Missing Authorization vulnerability in WPMU DEV Defender Security allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Defender Security: from n/a through 4.7.1...

9.8CVSS5.8AI score0.00532EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:18 p.m.14 views

CVE-2024-37444 WordPress Defender plugin <= 4.7.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security: from n/a through = 4.7.1...

5.3CVSS5.2AI score0.00532EPSS
Exploits0References1
CVE
CVE
added 2024/11/01 2:18 p.m.60 views

CVE-2024-37444

CVE-2024-37444 – Missing Authorization in Defender Security (WPMU DEV Defender Security) for WordPress allows accessing functionality not constrained by ACLs. Affected: Defender Security through 4.7.1 (WordPress plugin). Mitigation: upgrade to 4.7.2 or later (patch available). CVSS v3.1: 9.8 (AV:...

9.8CVSS5.9AI score0.00532EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/01 2:18 p.m.21 views

CVE-2024-37444 WordPress Defender plugin <= 4.7.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform Defender Security defender-security.This issue affects Defender Security: from n/a through = 4.7.1...

5.3CVSS0.00532EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.3 views

WordPress plugin Defender Security 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS6.6AI score0.00532EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/10/18 1:50 a.m.57 views

Security Bulletin: Vulnerabilities in GNU Binutils, Bootstrap, PortSmash, Node.js, and libarchive might affect IBM Storage Defender – Data Protect.

Summary IBM Storage Defender – Data Protect is vulnerable and that can result in denial of service attacks, cross-site scripting, execution of arbitrary code, gaining elevated privileges, low integrity and confidentiality impacts, and the ability to obtain sensitive information. The vulnerabiliti...

9.8CVSS9.8AI score0.05941EPSS
Exploits15Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/16 12:0 a.m.4 views

The vulnerability of Microsoft Defender for Endpoint on Linux operating systems, related to errors in processing the relative path to the directory, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Defender for Endpoint on Linux operating systems is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks...

5.5CVSS5.5AI score0.00643EPSS
Exploits0References2
Rows per page
Query Builder