14449 matches found
CVE-2023-24890
Microsoft OneDrive for iOS Security Feature Bypass Vulnerability...
CVE-2023-24880
Windows SmartScreen Security Feature Bypass Vulnerability...
CVE-2023-24880 Windows SmartScreen Security Feature Bypass Vulnerability
...
CVE-2023-24890
CVE-2023-24890 concerns Microsoft OneDrive for iOS and is described in connected sources as a security feature bypass (circumvention of a security measure). Affected product/area: OneDrive for iOS. The available documents identify the vulnerability as bypassing security controls but do not provid...
CVE-2023-24890
Microsoft OneDrive for iOS Security Feature Bypass Vulnerability...
CVE-2023-24880 Windows SmartScreen Security Feature Bypass Vulnerability
...
CVE-2023-24890 Microsoft OneDrive for iOS Security Feature Bypass Vulnerability
...
CVE-2023-24880
CVE-2023-24880 is a Windows SmartScreen Security Feature Bypass vulnerability. The Connected sources describe MOTW bypass via crafted files that can defeat SmartScreen/Protected View, enabling execution of malicious code without proper MOTW checks. Exploitation in the wild is mentioned in multipl...
Microsoft Mitigates Outlook Elevation of Privilege Vulnerability
May 9, 2023 update: Releases for Microsoft Products has been updated with the release of CVE-2023-29324 - Security Update Guide - Microsoft - Windows MSHTML Platform Security Feature Bypass Vulnerability March 24, 2023 update: Impact Assessment has been updated to a link to Guidance for...
Description of the security update for SharePoint Enterprise Server 2016: March 14, 2023 (KB5002368)
None None...
Microsoft OneDrive for iOS Security Feature Bypass Vulnerability
...
Description of the security update for SharePoint Server Subscription Edition: March 14, 2023 (KB5002355)
None None...
Windows SmartScreen Security Feature Bypass Vulnerability
...
Atlassian Jira 7.13.0 < 7.13.3 Csrf Via Logging And Profiling Feature
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to version 7.13.3 or 8.0.0 prior to 8.1.0 . It is, therefore, affected by a vulnerability which permits remote attackers to modify logging and profiling settings via a cross-site...
APSB23-18 : Security update available for Adobe Experience Manager
Adobe has released updates for Adobe Experience Manager AEM. These updates resolve vulnerabilities rated important and moderate. Successful exploitation of these vulnerabilities could result in arbitrary code execution, privilege escalation and security feature bypass...
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web MOTW defenses via a specially crafted malicious file...
APSB23-17 : Security update available for Adobe Commerce
Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution, security feature bypass and arbitrary file system read...
CVE-2023-28154
Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object...
CVE-2023-28154
Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object...
Improper Authentication
WordPress is vulnerable to Improper Authentication. The vulnerability allows an attacker to obtain the email address of the user who posted a blog using the WordPress Post by Email Feature...