13573 matches found
CVE-2020-0696
A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'...
Security feature bypass
A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'...
CVE-2020-0696
Microsoft Outlook Security Feature Bypass (CVE-2020-0696) is described across multiple feeds as a vulnerability in how Outlook parses URI formats, categorized as a security feature bypass. No concrete exploit details, affected versions, or remediation steps are provided in the connected documents...
CVE-2020-0696
A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'...
CVE-2020-6409
Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convinced the user to enter a URI to bypass navigation restrictions via a crafted domain name...
Design/Logic Flaw
Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convinced the user to enter a URI to bypass navigation restrictions via a crafted domain name...
CVE-2020-6409
Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convinced the user to enter a URI to bypass navigation restrictions via a crafted domain name...
Microsoft Outlook Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats. The security feature bypass by itself does not allow arbitrary code execution. However, to successfully exploit the vulnerability, an attacker would have to use it i...
Description of the security update for Outlook 2010: February 11, 2020
Description of the security update for Outlook 2010: February 11, 2020 Summary This security update resolves a security feature bypass vulnerability that exists in Microsoft Outlook software if it incorrectly handles the parsing of URI formats. To learn more about the vulnerability, see Microsoft...
Description of the security update for Outlook 2013: February 11, 2020
Description of the security update for Outlook 2013: February 11, 2020 Summary This security update resolves a security feature bypass vulnerability that exists in Microsoft Outlook software if it incorrectly handles the parsing of URI formats. To learn more about the vulnerability, see Microsoft...
Description of the security update for Outlook 2016: February 11, 2020
Description of the security update for Outlook 2016: February 11, 2020 Applies To Outlook 2016 Summary This security update resolves a security feature bypass vulnerability that exists in Microsoft Outlook software if it incorrectly handles the parsing of URI formats. To learn more about the...
PT-2020-1738
Name of the Vulnerable Software and Affected Versions Microsoft Outlook affected versions not specified Description A security feature bypass issue exists when Microsoft Outlook improperly handles the parsing of URI formats. This can allow a remote attacker to bypass existing security restriction...
Security Updates for Outlook (February 2020)
An security feature bypass exists in Outlook due to improper the parsing of URI formats. An unauthenticated, remote attacker can exploit this via a specially crafted URI. This can provide opportunities for additional exploits. C Tenable Network Security, Inc. The descriptive text and package chec...
CVE-2020-0696: Undefined Security Weakness
A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'...
Centreon 19.10.5 Pollers Remote Command Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Centreon Poller Authenticated Remote Command Execution', 'Description' = %q TODO , 'Author' = 'Omri Baso', discovery 'Fabien Aunay', discovery...
CVE-2020-8515
DrayTek Vigor2960 1.3.1Beta, Vigor3900 1.4.4Beta, and Vigor300B 1.3.3Beta, 1.4.2.1Beta, and 1.4.4Beta devices allow remote code execution as root without authentication via shell metacharacters to the cgi-bin/mainfunction.cgi URI. This issue has been fixed in Vigor3900/2960/300B v1.5.1...
CVE-2013-2764
Secure Entry Server before 4.7.0 contains a URI Redirection vulnerability which could allow remote attackers to conduct phishing attacks due to HSPAbsoluteRedirects being disabled by default...
Design/Logic Flaw
Secure Entry Server before 4.7.0 contains a URI Redirection vulnerability which could allow remote attackers to conduct phishing attacks due to HSPAbsoluteRedirects being disabled by default...
CVE-2013-2764
Secure Entry Server (SES) before version 4.7.0 contains a URI redirection vulnerability due to HSP_AbsoluteRedirects being disabled by default, enabling remote phishing-like redirects. The issue affects SES components handling redirects and can redirect to non-fully-qualified URLs. A fix is avail...