PT-2023-12897 · Intel +1 · Intel Media Sdk +1

Name of the Vulnerable Software and Affected Versions: IntelR Media SDK versions prior to 22.2.2 Description: The issue is related to a protection mechanism failure in the IntelR Media SDK software, which may allow an authenticated user to potentially enable escalation of privilege via local...

CVE-2023-0002

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent...

CVE-2023-0002: Protection Mechanism Failure

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent...

CVE-2023-0581 PrivateContent <= 8.4.3 - Protection Mechanism Bypass

The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it...

CVE-2023-0581

CVE-2023-0581 affects the PrivateContent WordPress plugin (up to version 8.4.3). Root cause: login protection relies on client-side validation to determine blocklisted IPs, allowing unauthenticated bypass of login restrictions. Impact is the potential to brute-force login bypass. Mitigation: upda...

CVE-2023-0581: Client-Side Enforcement of Server-Side Security

The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it...

Cross-site Request Forgery (CSRF)

cakephp/cakephp is vulnerable to Cross-Site Request Forgery CSRF. A remote attacker is able to bypass the CSRF protection mechanism via the $cookie variable in validateToken function because CsrfComponent fails to invalidate requests that are missing both the CSRF token, and CSRF post data...

CVE-2023-22809

In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra arguments passed in the user-provided environment variables SUDOEDITOR, VISUAL, and EDITOR, allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected...

Duplicate Advisory: Ecto lacks a protection mechanism

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2xxx-fhc8-9qvq. This link is maintained to preserve external references. Original Description Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

CVE-2017-20166

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

Design/Logic Flaw

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

CVE-2017-20166

CVE-2017-20166 affects Ecto 2.2.0, describing a lack of a protection mechanism in the interaction between is_nil and raise. The surrounding entries (NVD, Red Hat, OSV, GHSA duplicates, CNNVD, CVE records) consistently reference this issue with Ecto 2.2.0 and do not provide concrete exploit detail...

CVE-2017-20166

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

CVE-2021-26355: Protection Mechanism Failure

Insufficient fencing and checks in System Management Unit SMU may result in access to invalid message port registers that could result in a potential denial-of-service...

CVE-2022-47544: Protection Mechanism Failure

An issue was discovered in Siren Investigate before 12.1.7. Script variable whitelisting is insufficiently sandboxed...

CVE-2021-41823

The Web Application Firewall WAF in Kemp LoadMaster 7.2.54.1 allows certain uses of onmouseover to bypass an XSS protection mechanism...

Server side request forgery (ssrf)

OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record...

CVE-2022-37313

OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record...

CVE-2022-22761: Protection Mechanism Failure

Web-accessible extension pages pages with a moz-extension:// scheme were not correctly enforcing the frame-ancestors directive when it was used in the Web Extension's Content Security Policy. This vulnerability affects Firefox 97, Thunderbird 91.6, and Firefox ESR 91.6...

Cron execution command field allows attackers with admin privilege to execute OS command as root

Description - Cron execution command value is written into cronfile without any security protection mechanism. - If an attacker gained admin access, he/she can run OS command as root. Proof of Concept 1/ Navigate to http://webserver/froxlor/adminsettings.php?page=overview&part=crond 2/ In the Cro...