PT-2024-6899

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Description The issue is related to an Improper Access Control vulnerability that could result in a Security feature bypass. An admin attacker could leverage this...

CVE-2024-43585: Protection Mechanism Failure

Code Integrity Guard Security Feature Bypass Vulnerability...

CVE-2024-43513: Protection Mechanism Failure

BitLocker Security Feature Bypass Vulnerability...

PT-2024-6956

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.7-p2 through 2.4.4-p10 and earlier Magento Open Source versions 2.4.7-p2 through 2.4.4-p10 and earlier Description The issue is related to incorrect authorization, which could result in a security feature bypass. A...

PT-2024-7809

Name of the Vulnerable Software and Affected Versions Windows Scripting Engine affected versions not specified Description A security feature bypass issue exists in the Windows Scripting Engine, allowing attackers to bypass security restrictions. The vulnerability is related to the...

CVE-2024-37976: Integer Overflow or Wraparound

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability...

CVE-2024-37982: Untrusted Pointer Dereference

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability...

Microsoft Hyper-V input validation error vulnerability

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. A security feature bypass vulnerability exists in Microsoft Windows Hyper-V, which can be exploited by an attacker to bypass certain features...

PT-2024-6776 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the Code Integrity Guard function of Microsoft Windows operating systems. This vulnerability is associated with ...

PT-2024-6779

Name of the Vulnerable Software and Affected Versions Windows Resume Extensible Firmware Interface affected versions not specified Description The issue is related to a security-feature bypass vulnerability in the Resume Extensible Firmware Interface of Microsoft Windows operating systems. It...

PT-2024-6965 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p2 through 2.4.4-p10 and earlier Description: The issue is related to a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this...

iPhone flaw could read your saved passwords out loud. Update now!

Apple has issued security updates for iOS 18.0.1 and iPadOS 18.0.1 which includes a fix for a bug that could allow a user's saved passwords to be read aloud by its VoiceOver feature. VoiceOver allows users to use their iPhone or iPad even if they can't see the screen. It gives audible description...

PT-2024-7176 · Sap · Sap Hana Node.Js Client Package

Name of the Vulnerable Software and Affected Versions: SAP HANA Node.js client package versions 2.0.0 through 2.21.30 Description: The issue is related to a Prototype Pollution vulnerability in the SAP HANA Node.js client package, specifically affecting the nestTables feature. This vulnerability...

Cross Site Scripting(XSS)

librenms/librenms is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient validation and sanitization of user input in the "Alert Transports" feature, specifically in the "Details" section, which allows authenticated users to inject arbitrary JavaScript code executable...

CVE-2024-41163

A directory traversal vulnerability exists in the archive functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability...

Webroot Secure Anywhere security vulnerabilities

Webroot Secure Anywhere is a comprehensive antivirus program from Webroot USA. A security vulnerability exists in Webroot Secure Anywhere versions prior to 2.1.2.3, which stems from the presence of type obfuscation that allows feature abuse...

Webroot Secure Anywhere security vulnerabilities

Webroot Secure Anywhere is a comprehensive antivirus program from Webroot USA. A security vulnerability exists in Webroot Secure Anywhere versions prior to 2.1.2.3, which stems from improper checking of anomalies or exceptions that could lead to feature abuse...

Webroot Secure Anywhere security vulnerabilities

Webroot Secure Anywhere is a comprehensive antivirus program from Webroot USA. A security vulnerability exists in Webroot Secure Anywhere versions prior to 2.1.2.3 that stems from the presence of type confusion, which can lead to feature abuse...

PT-2024-31037 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.0.1 iPadOS versions prior to 18.0.1 Description: A logic issue was addressed with improved validation, allowing a user's saved passwords to be read aloud by VoiceOver. This issue is related to the VoiceOver feature in...

CVE-2024-46083

Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting XSS. An authenticated user can craft malicious payloads using the messages feature, which allows the injection of malicious code into any user's account on the platform. It is important to note that regular users can trigger...