The vulnerability of the ColdFusion software platform, related to improper access control, allows attackers to bypass existing security restrictions.

The vulnerability of the ColdFusion software platform is related to improper access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

DEBIAN-CVE-2023-2311

Insufficient policy enforcement in File System API in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2022-4911

Insufficient data validation in DevTools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition packages is related to security configuration errors, allowing attackers to circumvent existing security restrictions.

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Server Subscription Edition packages is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the Remote Desktop Client on the Microsoft Windows operating system allows attackers to circumvent existing security restrictions.

The vulnerability of the Remote Desktop Client on the Microsoft Windows operating system relates to security configuration errors. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the MSHTML platform in Windows operating systems allows attackers to circumvent security restrictions.

The vulnerability of the MSHTML platform in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of the Google Chrome browser downloader, which allows a hacker to circumvent existing security restrictions

The vulnerability of the Google Chrome browser browser loader is related to improperly implemented security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the Microsoft Outlook email client, related to insufficient validation of input data, allows attackers to circumvent existing security restrictions.

The vulnerability of the Microsoft Outlook email client is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions remotely...

Vulnerability of the .NET software platform and Microsoft Visual Studio development tools: Errors in synchronization when using shared resources allow attackers to circumvent existing security restrictions.

The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to circumvent security restrictions.

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

PT-2023-3476 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in security settings of the SmartScreen component, which is part of Windows operating systems. It allows a remote attacker to bypass security...

The vulnerability of TP-Link Tapo C210 IP cameras’ microprogramming software lies in the lack of a password recovery mechanism, allowing attackers to circumvent security restrictions.

The vulnerability of TP-Link Tapo C210 IP cameras’ microprogramming software is related to the lack of a password recovery mechanism. Exploiting this vulnerability could allow an attacker to bypass security restrictions remotely...

The vulnerability of the OpenSSL cryptographic library, related to errors in the certificate validation process, allows a perpetrator to bypass the certificate policy checks.

The vulnerability of the OpenSSL cryptographic library is related to the disregard for invalid certificate policies in certificate chains, which are skipped by this certificate. Exploiting this vulnerability allows a malicious actor to bypass certificate policy checks remotely...

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from improper handling of logical operations, allowing attackers to circumvent existing security restrictions.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the improper handling of logical operations. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from insufficient verification of data authenticity. This allows attackers to circumvent existing security restrictions.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to improper authentication procedures, allows attackers to bypass existing security restrictions.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to improper authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the Schema Handler component in the PostgreSQL database management system allows attackers to circumvent security restrictions.

The vulnerability of the Schema Handler component in the PostgreSQL database management system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of Cisco Aironet Access Point microprogramming software and Cisco Wireless LAN Controller (WLC) microprogramming software, related to access control deficiencies, allows attackers to circumvent security restrictions.

The vulnerability of Cisco Aironet Access Point microprogramming software and Cisco Wireless LAN Controller WLC microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of the MSHTML platform in Windows operating systems allows attackers to circumvent security restrictions.

The vulnerability of the MSHTML platform in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

PT-2023-2715 · Microsoft · Office Word

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass existing security restrictions. This can enable an attacker to impact the system. The...