18958 matches found
CVE-2024-43487 Windows Mark of the Web Security Feature Bypass Vulnerability
...
CVE-2024-30073 Windows Security Zone Mapping Security Feature Bypass Vulnerability
...
CVE-2024-30073
CVE-2024-30073 is a Windows Security Zone Mapping security feature bypass vulnerability. The public records show a CVSS v3.1 base score of 7.8 (High) with Local attack vector, low attack complexity, no privileges required, but user interaction required, and impact to confidentiality, integrity, a...
CVE-2024-38226 Microsoft Publisher Security Feature Bypass Vulnerability
...
CVE-2024-38226
CVE-2024-38226 is a Microsoft Publisher security feature bypass vulnerability that enables bypass of Mark of the Web protections. The issue affects Microsoft Publisher (and related Office components) and stems from a security feature bypass in MOWeb, allowing files downloaded from the Internet to...
CVE-2024-38226 Microsoft Publisher Security Feature Bypass Vulnerability
...
CVE-2024-38217
CVE-2024-38217 is a security feature bypass in Microsoft Windows Mark of the Web (MOTW). The vulnerability allows bypassing MOTW protections when opening booby-trapped Office files, as discussed in multiple sources. Exploitation details are not fully disclosed in the provided documents, but the C...
CVE-2024-38217 Windows Mark of the Web Security Feature Bypass Vulnerability
...
CVE-2024-38217 Windows Mark of the Web Security Feature Bypass Vulnerability
...
BIT-NODE-2023-30582
A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non- argument. This flaw arises from an inadequate permission model that fails to restrict file watching through the fs.watchFile API. As a...
BIT-NODE-2023-30583
fs.openAsBlob can bypass the experimental permission model when using the file system read restriction with the --allow-fs-read flag in Node.js 20. This flaw arises from a missing check in the fs.openAsBlob API. Please note that at the time this CVE was issued, the permission model is an...
BIT-NODE-2023-30587
A vulnerability in Node.js version 20 allows for bypassing restrictions set by the --experimental-permission flag using the built-in inspector module node:inspector. By exploiting the Worker class's ability to create an "internal worker" with the kIsInternal Symbol, attackers can modify the...
Windows Mark of the Web Security Feature Bypass Vulnerability
...
Description of the security update for SharePoint Enterprise Server 2016: September 10, 2024 (KB5002624)
Description of the security update for SharePoint Enterprise Server 2016: September 10, 2024 KB5002624 Applies To SharePoint Server 2016 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability, and Microsoft SharePoint Server denial of service...
Windows Security Zone Mapping Security Feature Bypass Vulnerability
...
SUSE CVE-2019-11072
DISPUTED lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? in burlnormalize2Ftoslashfix in...
CVE-2024-43487: Protection Mechanism Failure
Windows Mark of the Web Security Feature Bypass Vulnerability...
CVE-2024-38217: Protection Mechanism Failure
Windows Mark of the Web Security Feature Bypass Vulnerability...
CVE-2024-38226: Protection Mechanism Failure
Microsoft Publisher Security Feature Bypass Vulnerability...
PT-2024-6281
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a security feature bypass vulnerability in the Windows Mark of the Web MoTW mechanism, which can be exploited by a remote attacker to bypass existing security...