16847 matches found
Microsoft Publisher 2016 Security Feature Bypass Vulnerability (KB5002566)
This host is missing an important security update according to Microsoft KB5002566 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Security Feature Bypass And Spoofing Vulnerabilities (KB5043049)
This host is missing an important security update according to Microsoft KB5043049 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Sep 2024)
This host is missing a critical security update according to Microsoft Office Click-to-Run update September 2024. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2024-38226
Microsoft Publisher Security Feature Bypass Vulnerability...
CVE-2024-38226
Microsoft Publisher Security Feature Bypass Vulnerability...
CVE-2024-38217
Windows Mark of the Web Security Feature Bypass Vulnerability...
CVE-2024-30073
Windows Security Zone Mapping Security Feature Bypass Vulnerability...
CVE-2024-43487 Windows Mark of the Web Security Feature Bypass Vulnerability
...
CVE-2024-30073
CVE-2024-30073 is a Windows Security Zone Mapping security feature bypass vulnerability. The public records show a CVSS v3.1 base score of 7.8 (High) with Local attack vector, low attack complexity, no privileges required, but user interaction required, and impact to confidentiality, integrity, a...
CVE-2024-30073 Windows Security Zone Mapping Security Feature Bypass Vulnerability
...
CVE-2024-38226 Microsoft Publisher Security Feature Bypass Vulnerability
...
CVE-2024-38226
CVE-2024-38226 is a Microsoft Publisher security feature bypass vulnerability that enables bypass of Mark of the Web protections. The issue affects Microsoft Publisher (and related Office components) and stems from a security feature bypass in MOWeb, allowing files downloaded from the Internet to...
CVE-2024-38226 Microsoft Publisher Security Feature Bypass Vulnerability
...
CVE-2024-38217 Windows Mark of the Web Security Feature Bypass Vulnerability
...
CVE-2024-38217
CVE-2024-38217 is a security feature bypass in Microsoft Windows Mark of the Web (MOTW). The vulnerability allows bypassing MOTW protections when opening booby-trapped Office files, as discussed in multiple sources. Exploitation details are not fully disclosed in the provided documents, but the C...
CVE-2024-38217 Windows Mark of the Web Security Feature Bypass Vulnerability
...
BIT-NODE-2023-30582
A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non- argument. This flaw arises from an inadequate permission model that fails to restrict file watching through the fs.watchFile API. As a...
BIT-NODE-2023-30583
fs.openAsBlob can bypass the experimental permission model when using the file system read restriction with the --allow-fs-read flag in Node.js 20. This flaw arises from a missing check in the fs.openAsBlob API. Please note that at the time this CVE was issued, the permission model is an...
BIT-NODE-2023-30587
A vulnerability in Node.js version 20 allows for bypassing restrictions set by the --experimental-permission flag using the built-in inspector module node:inspector. By exploiting the Worker class's ability to create an "internal worker" with the kIsInternal Symbol, attackers can modify the...
