Lucene search
+L

14455 matches found

Github Security Blog
Github Security Blog
β€’added 2022/08/17 12:00 a.m.β€’36 views

Magento Improper Access Control vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature...

5.3CVSS6.7AI score0.01582EPSS
SaveExploits0References6Affected Software1
OSV
OSV
β€’added 2022/08/17 12:00 a.m.β€’34 views

GHSA-9WJF-94H3-R4RH Magento Improper Access Control vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature...

5.3CVSS5.3AI score0.01582EPSS
SaveExploits0References6
NVD
NVD
β€’added 2022/08/16 9:15 p.m.β€’28 views

CVE-2022-34259

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature...

5.3CVSS0.01582EPSS
SaveExploits0References1
Prion
Prion
β€’added 2022/08/16 9:15 p.m.β€’29 views

Improper access control

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature...

5CVSS6.1AI score0.01582EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
β€’added 2022/08/16 7:46 p.m.β€’37 views

CVE-2022-34259 Adobe Commerce Improper Access Control Security feature bypass

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature...

5.3CVSS5.3AI score0.01582EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
β€’added 2022/08/16 7:46 p.m.β€’9 views

CVE-2022-34259 Adobe Commerce Improper Access Control Security feature bypass

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature...

5.3CVSS5AI score0.01582EPSS
SaveExploits0References1
OSV
OSV
β€’added 2022/08/16 7:46 p.m.β€’24 views

CVE-2022-34259 Adobe Commerce Improper Access Control Security feature bypass

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature...

5.3CVSS6.2AI score
SaveExploits0References3
GithubExploit
GithubExploit
β€’added 2022/08/16 12:49 a.m.β€’42 views

Exploit for CVE-2022-38532

CVE-2022-38532 Local privilege escalation in MSI Center d...

7.8CVSS7.5AI score0.00464EPSS
SaveExploits2
OSV
OSV
β€’added 2022/08/15 9:15 p.m.β€’4 views

CVE-2022-35822

Windows Defender Credential Guard Security Feature Bypass Vulnerability...

7.1CVSS5.8AI score0.0091EPSS
SaveExploits0References1
Prion
Prion
β€’added 2022/08/15 9:15 p.m.β€’27 views

Security feature bypass

Windows Defender Credential Guard Security Feature Bypass Vulnerability...

3.2CVSS6.8AI score0.0091EPSS
SaveExploits0References1Affected Software2
CVE
CVE
β€’added 2022/08/15 8:30 p.m.β€’249 views

CVE-2022-35822

CVE-2022-35822 is a local security-bypass vulnerability affecting Windows Defender Credential Guard, with high impact to confidentiality and integrity and no availability impact. It requires low privileges and is exploitable with local access and no user interaction. The provided documents do not...

7.1CVSS6.7AI score0.0091EPSS
SaveExploits0References1Affected Software5
Vulnrichment
Vulnrichment
β€’added 2022/08/15 8:30 p.m.β€’17 views

CVE-2022-35822 Windows Defender Credential Guard Security Feature Bypass Vulnerability

...

7.1CVSS6.8AI score0.0091EPSS
SaveExploits0References1
Cvelist
Cvelist
β€’added 2022/08/15 8:30 p.m.β€’32 views

CVE-2022-35822 Windows Defender Credential Guard Security Feature Bypass Vulnerability

...

7.1CVSS7.5AI score0.0091EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
β€’added 2022/08/15 7:00 a.m.β€’85 views

Windows Defender Credential Guard Security Feature Bypass Vulnerability

...

7.1CVSS7AI score0.0091EPSS
SaveExploits0
Information Security Automation
Information Security Automation
β€’added 2022/08/14 11:30 a.m.β€’299 views

Vulnerability Management news and publications #2

Hello everyone! This is the second episode of Vulnerability Management news and publications. In fact, this is a collection of my posts from the avleonovcom and avleonovrus telegram channels. Therefore, if you want to read them earlier, subscribe to these channels. The main idea of ​​this episode...

10CVSS9.5AI score0.99999EPSS
SaveExploits156
OSV
OSV
β€’added 2022/08/12 9:14 a.m.β€’11 views

SUSE-FU-2022:2794-1 Feature update for ongres-scram, ongres-stringprep, postgresql-jdbc

This feature update for ongres-scram, ongres-stringprep, postgresql-jdbc provides: ongres-scram: - Upgrade from version 1.0.0-beta.2 to version 2.1. jscSLE-23994 Add standard SASLPrep bsc1196693, jscSLE-23994 Failover to bouncy castle implementation of PBKDF2WithHmacSHA256 to support Oracle JDK 7...

9.8CVSS9.5AI score0.02999EPSS
SaveExploits0References4
CNVD
CNVD
β€’added 2022/08/12 12:00 a.m.β€’18 views

Microsoft Excel Security Feature Bypass Vulnerability (CNVD-2023-53907)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security feature bypass vulnerability exists in Microsoft Excel, which can be exploited by attackers to perform certain illegal operations...

7.3CVSS6.5AI score0.00806EPSS
SaveExploits0References1
OSV
OSV
β€’added 2022/08/11 3:15 p.m.β€’10 views

CVE-2022-20245

In WindowManager, there is a possible method to create a recording of the lock screen due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...

2.4CVSS5.9AI score0.00135EPSS
SaveExploits0References1
OpenVAS
OpenVAS
β€’added 2022/08/10 12:00 a.m.β€’26 views

Microsoft Excel 2016 Security Feature Bypass Vulnerability (KB5002232)

This host is missing an important security update according to Microsoft KB5002232 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.3CVSS7.3AI score0.00806EPSS
SaveExploits0References1
OpenVAS
OpenVAS
β€’added 2022/08/10 12:00 a.m.β€’28 views

Microsoft Excel 2013 Service Pack 1 Security Feature Bypass Vulnerability (KB5002242)

This host is missing an important security update according to Microsoft KB5002242 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

7.3CVSS7.3AI score0.00806EPSS
SaveExploits0References1
Rows per page
Query Builder