Microsoft Excel Security Feature Bypass Vulnerability (CNVD-2023-53470)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security feature bypass vulnerability exists in Microsoft Excel. An attacker can exploit this vulnerability to bypass security features...

PT-2022-28244 · Unknown · Company Account Feature

Name of the Vulnerable Software and Affected Versions: Company account feature version 4 and later Description: A critical issue allows users with the Company admin role to assign any role to any user, bypassing subtree limitations. This also affects users with the role / assign policy, typically...

PT-2022-28186 · Unknown · Company Account Feature

Name of the Vulnerable Software and Affected Versions: Company account feature version 4 and later Description: A critical issue allows users with the Company admin role to assign any role to any user, bypassing subtree limitations. This also affects users with the role / assign policy, typically...

PT-2022-28178 · Unknown · Company Account Feature

Name of the Vulnerable Software and Affected Versions: Company account feature version 4 and later Description: A critical issue allows users with the Company admin role to assign any role to any user, bypassing subtree limitations. This also affects users with the role / assign policy, typically...

PT-2022-28268 · Unknown · Company Account Feature

Name of the Vulnerable Software and Affected Versions: Company account feature version 4 and later Description: A critical issue allows users with the Company admin role to assign any role to any user, bypassing subtree limitations. This also affects users with the role / assign policy, typically...

CVE-2022-41104

Microsoft Excel Security Feature Bypass Vulnerability...

CVE-2022-41099

BitLocker Security Feature Bypass Vulnerability...

CVE-2022-41091

Windows Mark of the Web Security Feature Bypass Vulnerability...

CVE-2022-41049

Windows Mark of the Web Security Feature Bypass Vulnerability...

CVE-2022-41049

Windows Mark of the Web Security Feature Bypass Vulnerability...

CVE-2022-39892

Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature...

Security feature bypass

Windows Mark of the Web Security Feature Bypass Vulnerability...

Security feature bypass

Microsoft Excel Security Feature Bypass Vulnerability...

Security feature bypass

The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

APT29 Exploited a Windows Feature to Compromise European Diplomatic Entity Network

The Russia-linked APT29 nation-state actor has been found leveraging a "lesser-known" Windows feature called Credential Roaming following a successful phishing attack against an unnamed European diplomatic entity. "The diplomatic-centric targeting is consistent with Russian strategic priorities a...

PT-2022-21432 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 15.3.5 GitLab CE/EE version 15.4 prior to 15.4.4 GitLab CE/EE version 15.5 prior to 15.5.2 Description: A cross-site scripting issue has been discovered in GitLab CE/EE. It was possible to exploit a vulnerabilit...

CVE-2022-41091

Windows Mark of the Web Security Feature Bypass Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2022-41091

CVE-2022-41091 is a Windows security feature bypass in Mark of the Web (MOTW). The vulnerability allows bypassing MOTW protections, with a CVSS v3.1 base score of 5.4 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L). Public sources note exploitation in the wild and patches are delivered via Microsoft’s upda...

CVE-2022-39892

Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature...

Samsung Pass 授权问题漏洞

SAMSUNG Pass is a secure and easy way to log in to websites and applications on cell phones using biometrics from Samsung South Korea. A security vulnerability exists in Samsung Pass versions prior to 4.0.05.1, which stems from incorrect access control and can be exploited by an attacker to gain...