PT-2024-2788 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Secure Boot protocol in Windows operating systems, specifically due to insufficient input validation. This can allow a remote attacker to...

The vulnerability in the set of VMware Tools relates to improper privilege assignment, allowing a malicious actor to circumvent existing security restrictions.

The vulnerability of the VMware Tools set is related to the vulnerability of handling the file descriptor in the vmware-user-suid-wrapper layer. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

CVE-2023-51573

Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this...

PT-2024-5662 · Korenix · Korenix Jetport +1

Name of the Vulnerable Software and Affected Versions: Korenix JetPort versions 1.2 and earlier Korenix JetPort 5601v3 versions through 1.2 Description: The issue is related to weaknesses in the authentication procedure of the Korenix JetPort serial device server. It may allow a remote attacker t...

The vulnerability of the Simple Network Management Plane (SNMP) server of the Cisco IOS operating system, which allows a hacker to bypass security restrictions

The vulnerability of the Simple Network Management Plane SNMP on the Cisco IOS operating system is related to deficiencies in access control based on Access Control Lists ACLs. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of the access control list mechanism in the Cisco IOS XR operating system allows a perpetrator to circumvent security restrictions.

The vulnerability of the Cisco IOS XR operating system’s access control list mechanism is related to deficiencies in access control based on access control lists ACLs. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...

The vulnerability of Adobe Experience Manager’s content and media data management system, related to insufficient validation of input data, allows attackers to circumvent existing security restrictions.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability in the implementation of the Kerberos network protocol for Windows operating systems allows attackers to circumvent security restrictions.

The vulnerability of the Kerberos network protocol implementation in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of the proactor1.2 service (/usr/sbin/proactor1.2/pro), a microprogramming software for network interfaces and VPN devices from Zyxel, allows attackers to circumvent existing security restrictions.

The vulnerability of the proactor1.2 service /usr/sbin/proactor1.2/pro, a microprogrammed software for network interfaces and VPN devices from Zyxel, is related to insufficient checking of incoming requests. Exploiting this vulnerability can allow an attacker to bypass existing security...

PT-2024-1936 · Zyxel · Zyxel Usg +1

Name of the Vulnerable Software and Affected Versions: Zyxel USG and Zyxel VPN versions affected versions not specified Description: The issue is related to insufficient validation of incoming requests in the proactor1.2 service /usr/sbin/proactor1.2/pro of Zyxel USG and Zyxel VPN firewall and VP...

SUSE CVE-2024-1675

Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. Chromium security severity: Medium...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the ability to forge cross-site requests, allowing attackers to circumvent existing security restrictions.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to the manipulation of cross-site requests. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the access control function of the Snort intrusion detection system allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the access control function of the Snort intrusion detection system is related to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

CVE-2024-22394

An improper authentication vulnerability has been identified in SonicWall SonicOS SSL-VPN feature, which in specific conditions could allow a remote attacker to bypass authentication. This issue affects only firmware version SonicOS 7.1.1-7040...

CVE-2023-6942

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1GOT1000 versions 1.325P and prior, GT Designer3 Version1GOT2000 versions 1.320J and prior, GX Works2 versions 1.11M to 1.626C, GX Works3 versions 1.106...

The vulnerability affects the implementation of the HSTS (HTTP Strict Transport Security) mechanism in Mozilla Firefox, Firefox ESR, and the Thunderbird email client, allowing attackers to circumvent these security measures.

The vulnerability of the HSTS HTTP Strict Transport Security mechanism implementation in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to bypass security measures remotely...

The vulnerability of the Jose4j JWT library, related to the use of an algorithm that provides insufficient entropy, allows attackers to circumvent security restrictions.

The vulnerability of the Jose4j JWT library relates to the use of an algorithm that ensures insufficient entropy. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

PT-2024-1298 · Cisco · Cisco Business 350 Series Managed Switches +1

Name of the Vulnerable Software and Affected Versions: Cisco Business 250 Series Smart Switches affected versions not specified Cisco Business 350 Series Managed Switches affected versions not specified Description: A vulnerability with the access control list ACL management within a stacked swit...

PT-2024-10091 · Drupal · Two-Factor Authentication

Name of the Vulnerable Software and Affected Versions: Two-factor Authentication TFA versions 0.0.0 through 1.5.0 Description: The issue is related to a weak authentication vulnerability in the Two-factor Authentication TFA module for Drupal, which can be exploited to abuse authentication. This...

The vulnerability of the Server Key Distribution service in the Windows operating system allows a hacker to circumvent existing security restrictions.

The vulnerability of the Server Key Distribution service in the Windows operating system is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...