Security Updates for Microsoft SharePoint Server Subscription Edition (July 2023)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security featur...

VulnCheck KEV: CVE-2023-32049

Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt...

APSB23-40 : Security update available for Adobe ColdFusion

Adobe has released security updates for ColdFusion versions 2023, 2021 and 2018. These updates resolve critical and important vulnerabilities that could lead to arbitrary code execution and security feature bypass...

Microsoft Outlook Security Feature Bypass Vulnerability

Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt...

Security feature bypass

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

CVE-2021-34506

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

CVE-2021-31982

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

CVE-2021-34506

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

Security feature bypass

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

Security feature bypass

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

CVE-2021-31982

CVE-2021-31982 affects Microsoft Edge (Chromium-based). It is a Security Feature Bypass vulnerability (CVSS v3.1 base score 8.8; Network attack, Low complexity, User interaction required). The issue is addressed by Microsoft Edge updates listed in the MSRC guidance; remediation is to install the ...

CVE-2021-31982 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

CVE-2021-34506 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

CVE-2021-34506 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

Security feature bypass

An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method...

GHSA-WH42-8R2W-873X Magento Open Source allows XML Injection

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by an XML Injection vulnerability. An attacker with low privileges can trigger a specially crafted script to a security feature bypass. Exploitation of this issue does not require user interactio...

Magento Open Source allows Incorrect Authorization

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass a minor functionality. Exploitation of this iss...

Magento Open Source affected by Improper Input Validation

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An admin privileged attacker could leverage this vulnerability to impact the availability of a user's...

GHSA-QW5M-VMP3-F553 Magento Open Source allows Incorrect Authorization

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass a minor functionality. Exploitation of this iss...

GHSA-5JFG-PHX7-7FXG Magento Open Source affected by Improper Input Validation

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to leak another user's data. Exploitation of this issue...