Remote Code Execution (RCE)

dtale is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling or validation of user input in the "Custom Filter" feature using the getstrarg method, allowing malicious code to be executed on the server...

kernel: mm: cachestat: fix two shmem bugs

CVE-2024-35797 is a vulnerability in the Linux kernel’s memory management, specifically affecting the cachestat feature when handling shared memory. The flaw stems from race conditions during operations like swapping or invalidation, which can lead to out-of-bounds memory access or invalid pointe...

Microsoft Publisher 2016 Security Feature Bypass Vulnerability (KB5002566)

This host is missing an important security update according to Microsoft KB5002566 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Security Feature Bypass And Spoofing Vulnerabilities (KB5043049)

This host is missing an important security update according to Microsoft KB5043049 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Sep 2024)

This host is missing a critical security update according to Microsoft Office Click-to-Run update September 2024. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2024-38226

Microsoft Publisher Security Feature Bypass Vulnerability...

CVE-2024-38226

Microsoft Publisher Security Feature Bypass Vulnerability...

CVE-2024-38217

Windows Mark of the Web Security Feature Bypass Vulnerability...

CVE-2024-30073

Windows Security Zone Mapping Security Feature Bypass Vulnerability...

CVE-2024-43487 Windows Mark of the Web Security Feature Bypass Vulnerability

...

CVE-2024-30073 Windows Security Zone Mapping Security Feature Bypass Vulnerability

...

CVE-2024-30073

CVE-2024-30073 is a Windows Security Zone Mapping security feature bypass vulnerability. The public records show a CVSS v3.1 base score of 7.8 (High) with Local attack vector, low attack complexity, no privileges required, but user interaction required, and impact to confidentiality, integrity, a...

CVE-2024-38226 Microsoft Publisher Security Feature Bypass Vulnerability

...

CVE-2024-38226

CVE-2024-38226 is a Microsoft Publisher security feature bypass vulnerability that enables bypass of Mark of the Web protections. The issue affects Microsoft Publisher (and related Office components) and stems from a security feature bypass in MOWeb, allowing files downloaded from the Internet to...

CVE-2024-38226 Microsoft Publisher Security Feature Bypass Vulnerability

...

CVE-2024-38217

CVE-2024-38217 is a security feature bypass in Microsoft Windows Mark of the Web (MOTW). The vulnerability allows bypassing MOTW protections when opening booby-trapped Office files, as discussed in multiple sources. Exploitation details are not fully disclosed in the provided documents, but the C...

CVE-2024-38217 Windows Mark of the Web Security Feature Bypass Vulnerability

...

CVE-2024-38217 Windows Mark of the Web Security Feature Bypass Vulnerability

...

BIT-NODE-2023-30582

A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non- argument. This flaw arises from an inadequate permission model that fails to restrict file watching through the fs.watchFile API. As a...

BIT-NODE-2023-30583

fs.openAsBlob can bypass the experimental permission model when using the file system read restriction with the --allow-fs-read flag in Node.js 20. This flaw arises from a missing check in the fs.openAsBlob API. Please note that at the time this CVE was issued, the permission model is an...