CVE-2017-0173: Undefined Security Weakness

Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass...

CVE-2017-8530: Origin Validation Error

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when Microsoft Edge does not properly enforce same-origin policies, aka "Microsoft Edge Security Feature Bypass Vulnerability"...

Microsoft Outlook 2016 Multiple Vulnerabilities (KB3191932)

This host is missing an important security update according to Microsoft KB3191932 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Outlook 2013 Service Pack 1 Multiple Vulnerabilities (KB3191938)

This host is missing an important security update according to Microsoft KB3191938 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session. An attacker who successfully exploited this vulnerability could inject code into a trusted PowerShell process to bypass the Device Guard Code...

Windows Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft Windows fails to enforce case sensitivity for certain variable checks, which could allow an attacker to set variables that are either read-only or require authentication. To exploit this vulnerability, an attacker could run a specially...

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session. An attacker who successfully exploited this vulnerability could inject code into a trusted PowerShell process to bypass the Device Guard Code...

Microsoft Edge Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins. The vulnerability allows Microsoft Edge to bypass Same-Origin Policy SOP restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully exploite...

Microsoft Outlook Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of file formats. The security feature bypass by itself does not allow arbitrary code execution. However, to successfully exploit the vulnerability, an attacker would have to use it ...

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session. An attacker who successfully exploited this vulnerability could inject code into a trusted PowerShell process to bypass the Device Guard Code...

Security feature bypass

A vulnerability in the Virtual Network Function Manager's VNFM logging function of Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive data cleartext credentials on an affected system. More Information: CSCvd29355. Known Affected Releases: 21.0.v0.65839...

PT-2017-10440

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A security-feature bypass issue allows attackers to affect the system. No additional details are provided about the nature of the issue, potential impacts, or the scope of affected devices...

PT-2017-10463

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A security-feature bypass issue allows attackers to affect the system. No additional details are provided about the nature of the issue, potential impacts, or the scope of affected devices...

PT-2017-10464

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A security-feature bypass issue allows attackers to affect the system. No additional details are provided about the nature of the issue, potential impacts, or the scope of affected devices...

PT-2017-10465

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A security-feature bypass issue allows attackers to affect the system. No additional details are provided about the nature of the issue, potential impacts, or the scope of affected devices...

PT-2017-18382

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A security feature bypass issue exists due to improper handling of file formats. This issue does not allow arbitrary code execution on its own but can be exploited in conjunction wit...

Security feature bypass

Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented "Block applications" design goal. The local attacker must have privileges to write to program.exe in a protected directory, such as the %SYSTEMDRIVE% directory, and...

CVE-2017-7180

CVE-2017-7180 affects Net Monitor for Employees Pro up to version 5.3.4. The issue is an unquoted service path for the service "Net Monitor for Employees Agent", allowing a local attacker with write access to program.exe in a protected directory (e.g., SYSTEMDRIVE) to bypass the security feature ...

CVE-2017-7180

Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its documented "Block applications" design goal. The local attacker must have privileges to write to program.exe in a protected directory, such as the %SYSTEMDRIVE% directory, and...

PT-2017-17561

Name of the Vulnerable Software and Affected Versions Net Monitor for Employees Pro versions 5.3.4 and earlier Description The issue allows a Security Feature Bypass of the "Block applications" design goal. A local attacker with privileges to write to program.exe in a protected directory, such as...