14154 matches found
F5 Networks BIG-IP : BIG-IP TMM vulnerability (K000156707)
The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1.3. It is, therefore, affected by a vulnerability as referenced in the K000156707 advisory. When a virtual server, network address translation NAT object, or secure network address...
GHSA-5RRX-JJJQ-Q2R5 Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability
Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 10.0 , ASP.NET Core 9.0 , ASP.NET Core 8.0, and ASP.NET Core 2.3. This advisory also...
CVE-2025-59051 FreePBX Endpoint Manager command injection via Network Scanning feature
The FreePBX Endpoint Manager module includes a Network Scanning feature that provides web-based access to nmap functionality for network device discovery. In Endpoint Manager 16 before 16.0.92 and 17 before 17.0.6, insufficiently sanitized user-supplied input allows authenticated OS command...
EUVD-2025-34335
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
EUVD-2025-34341
Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2025-62244
Insecure direct object reference IDOR vulnerability in Publications in Liferay Portal 7.3.1 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92, and 7.3 GA through update 36 allows remote authenticated attackers to view the edi...
CVE-2025-55340
Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally...
CVE-2025-55334
Cleartext storage of sensitive information in Windows Kernel allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-55315
Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an authorized attacker to bypass a security feature over a network...
CVE-2025-53139
Cleartext transmission of sensitive information in Windows Hello allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-55682
CVE-2025-55682 : A vulnerability in Windows BitLocker where the behavioral workflow is improperly enforced could allow an attacker with physical access to bypass the BitLocker security feature. The connected official advisory KB5066835 notes this issue and lists fixes for OS builds 26200.6899 and...
CVE-2025-55337 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-55337
CVE-2025-55337 is a Windows BitLocker security feature bypass vulnerability. The description attributes the issue to improper enforcement of BitLocker’s behavioral workflow, allowing an attacker with physical access to bypass the protection and potentially access secured data. Public exploitation...
CVE-2025-55337 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-55334 Windows Kernel Security Feature Bypass Vulnerability
...
CVE-2025-55330 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-55330 Windows BitLocker Security Feature Bypass Vulnerability
...
CVE-2025-53139 Windows Hello Security Feature Bypass Vulnerability
...
CVE-2025-53139
CVE-2025-53139 is tied to Windows Hello. The connected sources confirm a vulnerability where sensitive information is transmitted in cleartext, enabling a local attacker to bypass a Windows Hello security feature. The risk is described as a local, low-gesture exploit with high impact on confident...