3521 matches found
PT-2023-3179 · Adobe · Commerce
Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.6 and earlier Adobe Commerce versions 2.4.5-p2 and earlier Adobe Commerce versions 2.4.4-p3 and earlier Description: The issue is related to an Incorrect Authorization vulnerability that could result in a security...
APSB23-31 : Security update available for Adobe Experience Manager
Adobe has released updates for Adobe Experience Manager AEM. These updates resolve vulnerabilities rated important and moderate in Adobe Experience Manager including third party dependencies. Successful exploitation of these vulnerabilities could result in arbitrary code execution, denial of...
CVE-2023-29345
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
CVE-2023-29345
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
Security feature bypass
A duplicate SystemPrincipal object could be created when parsing a non-system html document via DOMParser::ParseFromSafeString. This could have lead to bypassing web security checks. This vulnerability affects Firefox 109...
PT-2023-3114 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Edge, where an attacker can exploit it to bypass security restrictions and perform cross-site scripting...
Microsoft Edge 跨站脚本漏洞
Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge that stems from the presence of a security feature bypass vulnerability...
Microsoft Patch Tuesday May 2023: Microsoft Edge, BlackLotus Secure Boot SFB, OLE RCE, Win32k EoP, NFS RCE, PGM RCE, LDAP RCE, SharePoint RCE
Microsoft Patch Tuesday May 2023: Microsoft Edge, BlackLotus Secure Boot SFB, OLE RCE, Win32k EoP, NFS RCE, PGM RCE, LDAP RCE, SharePoint RCE. Hello everyone! This episode will be about Microsoft Patch Tuesday for May 2023, including vulnerabilities that were added between April and May Patch...
Oracle Linux 9 : krb5 (ELSA-2023-2570)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-2570 advisory. - Add support for MS-PAC extended KDC signature CVE-2022-37967 - Fix integer overflows in PAC parsing CVE-2022-42898 - Fix KDC null deref on TGS inner body null...
Microsoft Edge (Chromium) < 113.0.1774.35 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 113.0.1774.35. It is, therefore, affected by multiple vulnerabilities as referenced in the May 5, 2023 advisory. - Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attack...
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (May 2023)
This host is missing a critical security update according to Microsoft Office Click-to-Run update May 2023 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Microsoft and Adobe Patch Tuesday, May 2023 Security Update Review
Microsoft has addressed 49 vulnerabilities in its May Patch Tuesday edition. The security advisories cover various vulnerabilities in different products, features, and roles. Lets guide you through this months Patch Tuesday details. Microsoft Patch Tuesday for May 2023 Microsoft has also addresse...
CVE-2023-29335
Microsoft Word Security Feature Bypass Vulnerability...
CVE-2023-29335
Microsoft Word Security Feature Bypass Vulnerability...
CVE-2023-28251
Windows Driver Revocation List Security Feature Bypass Vulnerability...
CVE-2023-28251 Windows Driver Revocation List Security Feature Bypass Vulnerability
...
CVE-2023-24932 Secure Boot Security Feature Bypass Vulnerability
...
CVE-2023-29335 Microsoft Word Security Feature Bypass Vulnerability
...
PT-2023-2787 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass existing security restrictions. It is a security-feature bypass vulnerability that affects the system...