4631 matches found
CVE-2025-27472 Windows Mark of the Web Security Feature Bypass Vulnerability
...
Windows Hello Security Feature Bypass Vulnerability
Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...
Windows Mark of the Web Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Mark of the Web MOTW allows an unauthorized attacker to bypass a security feature over a network...
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
Insufficient verification of data authenticity in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...
End of support for Office 2016 and Office 2019
None None...
Description of the security update for OneNote 2016: April 8, 2025 (KB5002622)
None None...
Description of the security update for Office 2016: April 8, 2025 (KB5002573)
None None...
Adobe ColdFusion 访问控制错误漏洞
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has a security vulnerability that can be exploited by attackers to cause a security...
Adobe ColdFusion 输入验证错误漏洞
Adobe ColdFusion is a suite of rapid application development platforms from the American company Audobee Adobe. The platform includes an integrated development environment and a scripting language. An input validation error vulnerability exists in Adobe ColdFusion versions 2023.12, 2021.18, 2025....
CVE-2025-29816: Acceptance of Extraneous Untrusted Data With Trusted Data
Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network...
CVE-2025-30293: Improper Input Validation
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security protections and gain unauthorized write access...
CVE-2025-27191: Improper Access Control
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access...
CVE-2025-29822: Incomplete List of Disallowed Inputs
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-27735: Insufficient Verification of Data Authenticity
Insufficient verification of data authenticity in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...
Microsoft Windows Hello 安全漏洞
Microsoft Windows Hello is a more personalized and secure way to sign in to your Windows device. A security feature bypass vulnerability exists in Microsoft Windows Hello, which can be exploited by an attacker to bypass certain features...
Adobe ColdFusion 信息泄露漏洞
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has an information disclosure vulnerability that can be exploited by attackers to caus...
Security Updates for Microsoft Word Products (April 2025)
The Microsoft Word Products are missing security updates. They are, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...
Security Updates for Microsoft Office Products (April 2025)
The Microsoft Office Products are missing security updates. They are, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2025-29792 - A security feature bypass vulnerability exists. An attacker...
KLA82406 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...
PT-2025-15659 · Adobe · Coldfusion
Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.0 and earlier ColdFusion versions 2023.12 ColdFusion versions 2021.18 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which could le...