Lucene search
+L

4867 matches found

CVE
CVE
•added 2024/02/15 1:39 p.m.•153 views

CVE-2024-20718

Adobe Commerce (Magento Open Source) versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a CSRF vulnerability that can bypass security features and cause the victim to perform unintended actions. The issue requires user interaction and arises from a CSRF flaw in the product’s reques...

6.5CVSS5.9AI score0.00759EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2024/02/15 1:39 p.m.•2 views

CVE-2024-20718

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a Cross-Site Request Forgery CSRF vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to trick a victim into performing actions they did not intend to do, which...

6.5CVSS0.00759EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/02/15 1:39 p.m.•45 views

CVE-2024-20718 [Spain] CSRF to delete Requisition Lists at Adobe Commerce

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a Cross-Site Request Forgery CSRF vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to trick a victim into performing actions they did not intend to do, which...

4.3CVSS6.8AI score0.00759EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/15 1:15 p.m.•32 views

CVE-2024-20738

Adobe FrameMaker Publishing Server versions 2022.1 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass authentication mechanisms and gain unauthorized access. Exploitation of...

9.8CVSS9.7AI score0.01062EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/15 12:22 p.m.•21 views

CVE-2024-20738 Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability | CVE-2023-44324 bypass

Adobe FrameMaker Publishing Server versions 2022.1 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass authentication mechanisms and gain unauthorized access. Exploitation of...

9.8CVSS6.9AI score0.01062EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/15 12:22 p.m.•119 views

CVE-2024-20738

Adobe FrameMaker Publishing Server (versions 2022.1 and earlier) is affected by an Improper Authentication vulnerability that could bypass security features and allow an unauthenticated attacker to gain unauthorized access. The issue enables authentication bypass without user interaction and is r...

9.8CVSS9.5AI score0.01062EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/02/15 12:22 p.m.•44 views

CVE-2024-20738 Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability | CVE-2023-44324 bypass

Adobe FrameMaker Publishing Server versions 2022.1 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass authentication mechanisms and gain unauthorized access. Exploitation of...

9.8CVSS9.8AI score0.01373EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/15 12:00 a.m.•2 views

CVE-2024-20718: Cross-Site Request Forgery (CSRF)

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a Cross-Site Request Forgery CSRF vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to trick a victim into performing actions they did not intend to do, which...

6.5CVSS5.8AI score0.00759EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/15 12:00 a.m.•5 views

CVE-2024-20738: Improper Authentication

Adobe FrameMaker Publishing Server versions 2022.1 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass authentication mechanisms and gain unauthorized access. Exploitation of...

9.8CVSS5.8AI score0.01062EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/02/15 12:00 a.m.•15 views

Adobe Commerce 跨站请求伪造漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A cross-site request forgery vulnerability exists in Adobe Commerce, which stems from the impact of the presence of a cross-site request forgery CSRF...

6.5CVSS6.7AI score0.00759EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/02/15 12:00 a.m.•1 views

PT-2024-1797

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier Description The issue is related to a Cross-Site Request Forgery CSRF vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability ...

6.8CVSS5.9AI score0.00759EPSS
SaveExploits0References9
Malwarebytes
Malwarebytes
•added 2024/02/14 1:17 p.m.•89 views

Update now! Microsoft fixes two zero-days on February Patch Tuesday

Microsoft has issued patches for 73 security vulnerabilities in its February 2024 Patch Tuesday. Among these vulnerabilities are two zero-days that are reportedly being used in the wild. The two zero-day vulnerabilities have already been added to the Cybersecurity & Infrastructure Security Agency...

7.5CVSS8.5AI score0.9941EPSS
SaveExploits26
OpenVAS
OpenVAS
•added 2024/02/14 12:00 a.m.•57 views

Microsoft Windows Multiple Vulnerabilities (KB5034763)

This host is missing an important security update according to Microsoft KB5034763 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS7.7AI score0.9941EPSS
SaveExploits15References3
OpenVAS
OpenVAS
•added 2024/02/14 12:00 a.m.•66 views

Microsoft Windows Multiple Vulnerabilities (KB5034766)

This host is missing an important security update according to Microsoft KB5034766 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS7.7AI score0.9941EPSS
SaveExploits15References3
NVD
NVD
•added 2024/02/13 6:15 p.m.•35 views

CVE-2024-21412

Internet Shortcut Files Security Feature Bypass Vulnerability...

8.1CVSS8.5AI score0.9941EPSS
SaveExploits2References2
OSV
OSV
•added 2024/02/13 6:15 p.m.•15 views

CVE-2024-21412

Internet Shortcut Files Security Feature Bypass Vulnerability...

8.1CVSS7.3AI score0.9941EPSS
SaveExploits2References2
OSV
OSV
•added 2024/02/13 6:15 p.m.•6 views

CVE-2024-21362

Windows Kernel Security Feature Bypass Vulnerability...

5.5CVSS7.3AI score0.00423EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/13 6:15 p.m.•48 views

Security feature bypass

Internet Shortcut Files Security Feature Bypass Vulnerability...

5.8CVSS7.1AI score0.9941EPSS
SaveExploits2References1Affected Software9
Cvelist
Cvelist
•added 2024/02/13 6:02 p.m.•63 views

CVE-2024-21412 Internet Shortcut Files Security Feature Bypass Vulnerability

...

8.1CVSS8.2AI score0.9941EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2024/02/13 6:02 p.m.•43 views

CVE-2024-21351 Windows SmartScreen Security Feature Bypass Vulnerability

...

7.6CVSS7AI score0.27798EPSS
SaveExploits0References1
Rows per page
Query Builder