14324 matches found
CVE-2025-0426
A flaw was found in Kubernetes. A large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may fill the Node's disk, potentially leading to a Node denial of service. Mitigation To mitigate this vulnerability, disable the kubelet read-only port by...
Microsoft Office Security Feature Bypass Vulnerability (CNVD-2025-04196)
Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A security feature bypass vulnerability exists in Microsoft Office, which can be exploited by attackers to...
Security Updates for Microsoft Office Products C2R (February 2025)
The Microsoft Office Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Microsoft Office is affected by a remote code execution vulnerability. CVE-2025-21392, CVE-2025-21365 - Microsoft Office is affected by a security feature bypass...
Microsoft Edge (Chromium) < 133.0.3065.69 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 133.0.3065.69. It is, therefore, affected by multiple vulnerabilities as referenced in the February 14, 2025 advisory. - Microsoft Edge Chromium-based Security Feature Bypass Vulnerability CVE-2025-21401 - Use after fr...
IBM i 代码问题漏洞
IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. A code issue vulnerability exists in IBM i that stems from bypassing database feature limitation checks. A privileged bad actor could delete or otherwise affect databas...
Security Updates for Microsoft Excel Products C2R (February 2025)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - Microsoft Office is affected by a remote code execution vulnerability. CVE-2025-21354, CVE-2025-21362, CVE-2025-21394, CVE-2025-21386, CVE-2025-21390, CVE-2025-21387,...
CVE-2025-24422
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain...
CVE-2025-24419
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerability to modify select data. Exploitation of this...
CVE-2025-24420
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerability to modify select data. Exploitation of this...
CVE-2025-24424
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain...
CVE-2025-24421
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerability to read select data. Exploitation of this...
CVE-2025-24425
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Business Logic Error vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to circumvent intended security mechanisms by manipulating th...
CVE-2025-21359
Windows Kernel Security Feature Bypass Vulnerability...
CVE-2025-21194
Microsoft Surface Security Feature Bypass Vulnerability...
CVE-2025-24407
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low privileged attacker could exploit this vulnerability to perform actions with permissions that we...
CVE-2025-24409
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access...
CVE-2025-0525
In affected versions of Octopus Server the preview import feature could be leveraged to identify the existence of a target file. This could provide an adversary with information that may aid in further attacks against the server...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
KLA80207 SB vulnerability in Microsoft Browser
A security feature bypass vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2025-21401 Related products Microsoft-Edge CVE list CVE-2025-21401 warning KB list Solution Install necessary updates fro...
