Lucene search
+L

4868 matches found

Vulnrichment
Vulnrichment
•added 2024/02/13 6:02 p.m.•43 views

CVE-2024-21351 Windows SmartScreen Security Feature Bypass Vulnerability

...

7.6CVSS7AI score0.27798EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/02/13 12:00 a.m.•45 views

Adobe FrameMaker Publishing Server 2020 < 2020 Update 3 / 2022 < 2022 Update 2 Security Feature Bypass (APSB24-10)

The version of Adobe FrameMaker Publishing Server installed on the remote Windows host is Version 2020 prior to Update 3, or Version 2022 prior to Update 2. It is, therefore, affected by a vulnerability as referenced in the apsb24-10 advisory. - Adobe Framemaker Publishing Server sions 2022.1 and...

9.8CVSS9.8AI score0.01062EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/13 12:00 a.m.•4 views

CVE-2024-21412: Protection Mechanism Failure

Internet Shortcut Files Security Feature Bypass Vulnerability...

8.1CVSS7.4AI score0.9941EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/13 12:00 a.m.•5 views

CVE-2024-21351: Improper Control of Generation of Code

Windows SmartScreen Security Feature Bypass Vulnerability...

7.6CVSS8.3AI score0.27798EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/13 12:00 a.m.•3 views

CVE-2024-21362: Time-of-check Time-of-use (TOCTOU) Race Condition

Windows Kernel Security Feature Bypass Vulnerability...

5.5CVSS5.7AI score0.00423EPSS
SaveExploits0References4
Adobe
Adobe
•added 2024/02/13 12:00 a.m.•142 views

APSB24-03 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important, and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution, security feature bypass, and application denial-of-service...

8.1AI score
SaveExploits0Affected Software2
VulnCheck KEV
VulnCheck KEV
•added 2024/02/13 12:00 a.m.•6 views

VulnCheck KEV: CVE-2024-21412

Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass...

8.1CVSS7.6AI score0.9941EPSS
SaveIn wildExploits2References35
CISA KEV Catalog
CISA KEV Catalog
•added 2024/02/13 12:00 a.m.•152 views

Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass...

8.1CVSS7.2AI score0.9941EPSS
SaveIn wildExploits2
Prion
Prion
•added 2024/02/06 3:15 p.m.•17 views

Security feature bypass

Rejected reason: We have rejected this CVE as it was determined a non-security issue by the vendor...

7.2AI score
SaveExploits0
NVD
NVD
•added 2024/02/05 10:16 p.m.•37 views

CVE-2024-0701

The UserPro plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 5.1.6. This is due to the use of client-side restrictions to enforce the 'Disabled registration' Membership feature within the plugin's General settings. This makes it possible for...

5.3CVSS5.2AI score0.0058EPSS
SaveExploits0References2
Prion
Prion
•added 2024/02/05 10:16 p.m.•26 views

Security feature bypass

The UserPro plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 5.1.6. This is due to the use of client-side restrictions to enforce the 'Disabled registration' Membership feature within the plugin's General settings. This makes it possible for...

5CVSS7.1AI score0.0058EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/02/05 9:22 p.m.•35 views

CVE-2024-0701

The UserPro plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 5.1.6. This is due to the use of client-side restrictions to enforce the 'Disabled registration' Membership feature within the plugin's General settings. This makes it possible for...

5.3CVSS6.8AI score0.0058EPSS
SaveExploits0References2
CVE
CVE
•added 2024/02/05 9:22 p.m.•76 views

CVE-2024-0701

CVE-2024-0701 concerns the WordPress UserPro plugin. The vulnerability is described as a Security Feature Bypass caused by relying on client-side restrictions to enforce the Disable Registration setting, enabling unauthenticated attackers to create accounts even when registration is disabled. Dat...

5.3CVSS6.2AI score0.0058EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/02/05 9:22 p.m.•44 views

CVE-2024-0701 UserPro <= 5.1.6 - Disabled Membership Registration Bypass

The UserPro plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 5.1.6. This is due to the use of client-side restrictions to enforce the 'Disabled registration' Membership feature within the plugin's General settings. This makes it possible for...

5.3CVSS5.5AI score0.0058EPSS
SaveExploits0References2
Prion
Prion
•added 2024/02/05 9:15 p.m.•46 views

Security feature bypass

A security vulnerability has been identified in the cryptlib cryptographic library when cryptlib is compiled with the support for RSA key exchange ciphersuites in TLS by setting the USERSASUITES define, it will be vulnerable to the timing variant of the Bleichenbacher attack. An attacker that is...

2.6CVSS7.1AI score0.00309EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/02/05 12:00 a.m.•4 views

PT-2024-15762

Name of the Vulnerable Software and Affected Versions UserPro plugin for WordPress versions up to, and including, 5.1.6 Description The issue is related to a Security Feature Bypass in the UserPro plugin for WordPress. This bypass occurs due to the plugin's reliance on client-side restrictions to...

5.3CVSS5.6AI score0.0058EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/05 12:00 a.m.•5 views

CVE-2024-0701: Client-Side Enforcement of Server-Side Security

The UserPro plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 5.1.6. This is due to the use of client-side restrictions to enforce the 'Disabled registration' Membership feature within the plugin's General settings. This makes it possible for...

5.3CVSS5.6AI score0.0058EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/02/03 12:00 a.m.•88 views

GLSA-202402-05 : Microsoft Edge: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202402-05 Microsoft Edge: Multiple Vulnerabilities - Microsoft Edge Chromium-based Security Feature Bypass Vulnerability CVE-2023-29345 - Microsoft Edge Chromium-based Elevation of Privilege Vulnerability CVE-2023-33143,...

9.6CVSS7AI score0.08619EPSS
SaveExploits2References21
Prion
Prion
•added 2024/02/02 9:15 p.m.•29 views

Security feature bypass

A vulnerability classified as problematic has been found in Armcode AlienIP 2.41. Affected is an unknown function of the component Locate Host Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public...

1.7CVSS6.8AI score0.00396EPSS
SaveExploits1References3Affected Software1
WPVulnDB
WPVulnDB
•added 2024/02/02 12:00 a.m.•16 views

UserPro < 5.1.7 - Disabled Membership Registration Bypass

Description The plugin is vulnerable to Security Feature Bypass, due to the use of client-side restrictions to enforce the 'Disabled registration' Membership feature within the plugin's General settings, allowing unauthenticated attackers to register an account even when account registration has...

5CVSS6.9AI score0.0058EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder