14448 matches found
CVE-2023-28251
Windows Driver Revocation List Security Feature Bypass Vulnerability...
Security feature bypass
Windows Driver Revocation List Security Feature Bypass Vulnerability...
Information disclosure
An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to obtain a list of files in a specific directory, by using the regex feature in a package name...
CVE-2023-24932
CVE-2023-24932 is a Secure Boot bypass vulnerability. It involves a Microsoft-signed UEFI application using the IhisiParamBuffer NVRAM variable to bypass Security2 verification, potentially allowing execution of unsigned binaries during early boot. Affected components include DT Research’s DtBios...
CVE-2023-28251 Windows Driver Revocation List Security Feature Bypass Vulnerability
...
CVE-2023-24932 Secure Boot Security Feature Bypass Vulnerability
...
CVE-2023-28251 Windows Driver Revocation List Security Feature Bypass Vulnerability
...
CVE-2023-29335 Microsoft Word Security Feature Bypass Vulnerability
...
CVE-2023-29335
CVE-2023-29335 – Microsoft Word Security Feature Bypass Vulnerability is documented with concrete remediation in Microsoft Word updates. Affected product: Word (Office). The issue is a security feature bypass (not a traditional memory/remote-code-exec hole) and has a CVSSv3.1 base score of 7.5 (N...
CVE-2023-29324
Technical details about CVE-2023-29324 are not publicly available in the provided documents. Monitor official advisories for updates.
Path traversal
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 All versions = V2.0 = V2.0 V2.1. The filename in the upload feature of the web based management of the affected device is susceptible to a path traversal vulnerability. This could allow an authenticated privileged remote attacke...
kernel: octeontx2-pf: Fix resource leakage in VF driver unbind
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix resource leakage in VF driver unbind resources allocated like mcam entries to support the Ntuple feature and hash tables for the tc feature are not getting freed in driver unbind. This patch fixes the issue...
kernel: HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
A flaw was found in the hid-steam module in the Linux kernel. A NULL pointer dereference can be triggered when a malicious device fails to submit a feature report, resulting in a denial of service...
Secure Boot Security Feature Bypass Vulnerability
...
Description of the security update for SharePoint Enterprise Server 2016: May 9, 2023 (KB5002397)
None None...
End of support for Office 2016 and Office 2019
None None...
CVE-2023-31474
An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to obtain a list of files in a specific directory, by using the regex feature in a package name...
PT-2023-2787 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass existing security restrictions. It is a security-feature bypass vulnerability that affects the system...
PT-2023-23353 · Gl.Inet · Gl.Inet
Name of the Vulnerable Software and Affected Versions: GL.iNet devices versions prior to 3.216 Description: An issue was discovered that allows injecting arbitrary parameters in a request to cause opkg to obtain a list of files in a specific directory, by using the regex feature in a package name...
Microsoft Word 安全漏洞
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A security feature bypass vulnerability exists in Microsoft Word, which can be exploited by an attacker to bypass security restrictions...