PT-2024-6965 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p2 through 2.4.4-p10 and earlier Description: The issue is related to a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this...

PT-2024-6779

Name of the Vulnerable Software and Affected Versions Windows Resume Extensible Firmware Interface affected versions not specified Description The issue is related to a security-feature bypass vulnerability in the Resume Extensible Firmware Interface of Microsoft Windows operating systems. It...

CVE-2024-37983: Untrusted Pointer Dereference

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability...

PT-2024-7809

Name of the Vulnerable Software and Affected Versions Windows Scripting Engine affected versions not specified Description A security feature bypass issue exists in the Windows Scripting Engine, allowing attackers to bypass security restrictions. The vulnerability is related to the...

CVE-2024-43584: Protection Mechanism Failure

Windows Scripting Engine Security Feature Bypass Vulnerability...

PT-2024-6891

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Description The issue is related to an Information Exposure vulnerability that could...

PT-2024-6899

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Description The issue is related to an Improper Access Control vulnerability that could result in a Security feature bypass. An admin attacker could leverage this...

PT-2024-6901

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Description The issue is related to an Information Exposure vulnerability that could...

PT-2024-6971

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.7-p2 through 2.4.4-p10 and earlier Magento Open Source versions 2.4.7-p2 through 2.4.4-p10 and earlier Description The issue is related to Improper Access Control, which could result in a Security feature bypass. A...

CVE-2024-20659: Improper Input Validation

Windows Hyper-V Security Feature Bypass Vulnerability...

CVE-2024-37976: Integer Overflow or Wraparound

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability...

CVE-2024-43513: Protection Mechanism Failure

BitLocker Security Feature Bypass Vulnerability...

PT-2024-6960 · Adobe · Commerce +1

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Description: The issue is related to insufficient access control in Adobe Commerce,...

CVE-2024-43585: Protection Mechanism Failure

Code Integrity Guard Security Feature Bypass Vulnerability...

CVE-2024-37982: Untrusted Pointer Dereference

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability...

PT-2024-6776 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the Code Integrity Guard function of Microsoft Windows operating systems. This vulnerability is associated with ...

CVE-2024-6641

The WP Hardening – Fix Your WordPress Security plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 1.2.6. This is due to use of an incorrect regular expression within the "Stop User Enumeration" feature. This makes it possible for unauthenticated...

CVE-2024-6641 WP Hardening – Fix Your WordPress Security <= 1.2.6 - Unauthenticated Security Feature Bypass to Username Enumeration

The WP Hardening – Fix Your WordPress Security plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 1.2.6. This is due to use of an incorrect regular expression within the "Stop User Enumeration" feature. This makes it possible for unauthenticated...

CVE-2024-6641

The CVE describes a vulnerability in the WordPress plugin WP Hardening – Fix Your WordPress Security, affecting all versions up to 1.2.6. Root cause: an incorrect regular expression in the Stop User Enumeration feature, enabling unauthenticated attackers to bypass security checks and reveal site ...

CVE-2024-6641: Incorrect Regular Expression

The WP Hardening – Fix Your WordPress Security plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 1.2.6. This is due to use of an incorrect regular expression within the "Stop User Enumeration" feature. This makes it possible for unauthenticated...