4086 matches found
CVE-2024-26029
Adobe Experience Manager (AEM) versions 6.5.20 and earlier are affected by an Improper Access Control vulnerability (CVE-2024-26029) that could bypass security features and disclose information. The issue is network-accessible with no user interaction required, as described in NVD and CVE records...
CVE-2024-26127 Adobe Experience Manager | Improper Input Validation (CWE-20)
Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitatio...
CVE-2024-26127 Adobe Experience Manager | Improper Input Validation (CWE-20)
Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitatio...
Adobe Acrobat Mobile Sign Android Security Vulnerability
Adobe Acrobat is a suite of PDF file editing and conversion tools from Adobe. A security vulnerability exists in Adobe Acrobat Mobile Sign Android version 24.4.2.33155 and prior versions, which stems from being affected by an Authorization Error vulnerability that could lead to a security feature...
Adobe Experience Manager 输入验证错误漏洞
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An inp...
Adobe ColdFusion < 2021.x < 2021u14 / 2023.x < 2023u8 Multiple Vulnerabilities (APSB24-41)
The version of Adobe ColdFusion installed on the remote Windows host is prior to 2021.x update 14 or 2023.x update 8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-41 advisory. - Improper Access Control CWE-284 potentially leading to Arbitrary file system read...
APSB24-40 : Security update available for Adobe Commerce
Adobe has released a security update for Adobe Commerce, Magento Open Source and Adobe Commerce Webhooks Plugin. This update resolves critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution, security feature bypass and privilege escalation...
APSB24-50 : Security update available for Adobe Acrobat Android
No description provided...
WordPress Captcha Code plugin Access Control Error Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error...
WordPress Captcha/Honeypot for Contact Form plugin Access Control Error Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error...
U.S. Dept Of Defense: CVE-2023-26347 in https://████.mil/hax/..CFIDE/adminapi/administrator.cfc?method=getBuildNumber&_cfclient=true
CVE-2023-26347 was discovered in Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier. The vulnerability was an Improper Access Control issue that could result in a Security feature bypass. Unauthenticated access was possible to the administration CFM and CFC endpoints...
CVE-2024-30050
Windows Mark of the Web Security Feature Bypass Vulnerability...
CVE-2024-30040 Windows MSHTML Platform Security Feature Bypass Vulnerability
...
CVE-2024-30050 Windows Mark of the Web Security Feature Bypass Vulnerability
...
CVE-2024-30050 Windows Mark of the Web Security Feature Bypass Vulnerability
...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-30051 Microsoft DWM Core Library Privilege Escalation Vulnerability CVE-2024-30040 Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability Thes...
Windows MSHTML Platform Security Feature Bypass Vulnerability
...
Windows Mark of the Web Security Feature Bypass Vulnerability
...
PT-2024-3708 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the Mark of the Web MoTW mechanism of Windows operating systems. It is caused by insufficient input validation, which can...
