Lucene search
+L

4920 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•3 views

CVE-2023-36584: Undefined Security Weakness

Windows Mark of the Web Security Feature Bypass Vulnerability...

5.4CVSS7AI score0.03251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/10 12:00 a.m.•2 views

CVE-2023-36564: Undefined Security Weakness

Windows Search Security Feature Bypass Vulnerability...

6.5CVSS6.7AI score0.01432EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/10/10 12:00 a.m.•2 views

PT-2023-5939

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a security feature bypass in Windows Search, allowing attackers to affect the system. It is also described as a vulnerability in the Windows operating system's text...

7.8CVSS6AI score0.01432EPSS
SaveExploits0References9
Adobe
Adobe
•added 2023/10/10 12:00 a.m.•118 views

APSB23-50 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution, privilege escalation, arbitrary file system read, security feature bypass and application...

6.9AI score
SaveExploits0Affected Software2
Prion
Prion
•added 2023/10/06 12:15 p.m.•36 views

Security feature bypass

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. The templates module doesn't enforce the correct permissions, allowing any logged-in user to access to this functionality in t...

5.5CVSS6.8AI score0.00674EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2023/10/04 11:15 a.m.•47 views

Security feature bypass

A vulnerability was found in the Hot Rod client. This security issue occurs as the Hot Rod client does not enable hostname validation when using TLS, possibly resulting in a man-in-the-middle MITM attack...

4CVSS7.4AI score0.00548EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2023/09/15 12:00 a.m.•64 views

Microsoft Office Security Feature Bypass Vulnerability (CNVD-2024-02720)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A security feature bypass vulnerability exists in Microsoft Office, which can be exploited by attacker...

4.3CVSS4.9AI score0.03139EPSS
SaveExploits0References1
NVD
NVD
•added 2023/09/14 8:15 a.m.•34 views

CVE-2023-38206

Adobe ColdFusion versions 2018u18 and earlier, 2021u8 and earlier and 2023u2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

5.3CVSS5.1AI score0.00704EPSS
SaveExploits0References1
NVD
NVD
•added 2023/09/14 8:15 a.m.•36 views

CVE-2023-38205

Adobe ColdFusion versions 2018u18 and earlier, 2021u8 and earlier and 2023u2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

7.5CVSS7.3AI score0.99764EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/09/14 8:15 a.m.•9 views

CVE-2023-38205

Adobe ColdFusion versions 2018u18 and earlier, 2021u8 and earlier and 2023u2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

7.5CVSS5.8AI score0.99764EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/14 8:15 a.m.•81 views

Improper access control

Adobe ColdFusion versions 2018u18 and earlier, 2021u8 and earlier and 2023u2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

5CVSS7.3AI score0.99764EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/09/14 8:15 a.m.•39 views

Improper access control

Adobe ColdFusion versions 2018u18 and earlier, 2021u8 and earlier and 2023u2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

5CVSS6.1AI score0.00704EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/09/14 7:40 a.m.•59 views

CVE-2023-38205 ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298

Adobe ColdFusion versions 2018u18 and earlier, 2021u8 and earlier and 2023u2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

7.5CVSS7.5AI score0.99764EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2023/09/14 7:40 a.m.•37 views

CVE-2023-38205 ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298

Adobe ColdFusion versions 2018u18 and earlier, 2021u8 and earlier and 2023u2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

7.5CVSS6.6AI score0.9979EPSS
SaveExploits2References1
CVE
CVE
•added 2023/09/14 7:40 a.m.•1920 views

CVE-2023-38205

CVE-2023-38205 affects Adobe ColdFusion: versions 2018u18 and earlier, 2021u8 and earlier, and 2023u2 and earlier are vulnerable to an Improper Access Control flaw that enables an unauthenticated attacker to bypass security and access the administration CFM/CFC endpoints without user interaction....

7.5CVSS7.5AI score0.99764EPSS
SaveIn wildExploits1References2Affected Software1
Cvelist
Cvelist
•added 2023/09/14 7:40 a.m.•41 views

CVE-2023-38206 ColdFusion | Improper Access Control (CWE-284)

Adobe ColdFusion versions 2018u18 and earlier, 2021u8 and earlier and 2023u2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

5.3CVSS6.4AI score0.00704EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/09/14 7:40 a.m.•19 views

CVE-2023-38206 ColdFusion | Improper Access Control (CWE-284)

Adobe ColdFusion versions 2018u18 and earlier, 2021u8 and earlier and 2023u2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

5.3CVSS5.1AI score0.00704EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/14 12:00 a.m.•2 views

CVE-2023-38206: Improper Access Control

Adobe ColdFusion versions 2018u18 and earlier, 2021u8 and earlier and 2023u2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

5.3CVSS6.1AI score0.00704EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/14 12:00 a.m.•3 views

CVE-2023-38205: Improper Access Control

Adobe ColdFusion versions 2018u18 and earlier, 2021u8 and earlier and 2023u2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

7.5CVSS7.6AI score0.99764EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2023/09/14 12:00 a.m.•62 views

Microsoft Office 2019 Multiple Vulnerabilities (Sep 2023) - Mac OS X

This host is missing an important security update for Microsoft Office 2019 on Mac OS X according to Microsoft security update September 2023 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

7.8CVSS6.5AI score0.03139EPSS
SaveExploits0References1
Rows per page
Query Builder