Windows Security Zone Mapping Security Feature Bypass Vulnerability

...

Description of the security update for SharePoint Enterprise Server 2016: September 10, 2024 (KB5002624)

None None...

SUSE CVE-2019-11072

DISPUTED lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? in burlnormalize2Ftoslashfix in...

CVE-2024-38217: Protection Mechanism Failure

Windows Mark of the Web Security Feature Bypass Vulnerability...

CVE-2024-30073: Improper Resolution of Path Equivalence

Windows Security Zone Mapping Security Feature Bypass Vulnerability...

CVE-2024-38226: Protection Mechanism Failure

Microsoft Publisher Security Feature Bypass Vulnerability...

CVE-2024-43487: Protection Mechanism Failure

Windows Mark of the Web Security Feature Bypass Vulnerability...

KLA73227 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, cause denial of service, spoof user interface, bypass security restrictions. Below is a complete list of...

PT-2024-31290 · Mozilocms · Mozilocms

Name of the Vulnerable Software and Affected Versions: moziloCMS version 3.0 Description: An arbitrary file upload issue in the /admin/index.php component allows attackers to execute arbitrary code by uploading a crafted file. Recommendations: For moziloCMS version 3.0, consider restricting acces...

CVE-2024-38217

Windows Mark of the Web Security Feature Bypass Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

PT-2024-6281

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a security feature bypass vulnerability in the Windows Mark of the Web MoTW mechanism, which can be exploited by a remote attacker to bypass existing security...

KLA73222 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface, obtain sensitive information. Below is a...

PT-2024-6051

Name of the Vulnerable Software and Affected Versions Microsoft Publisher affected versions not specified Description A security-feature bypass vulnerability in Microsoft Publisher allows attackers to affect the system. The vulnerability is related to a failure in the protection mechanism...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could bypass certain features. The following products and versions are affected:Windows 10 Version 1809...

Microsoft Publisher Protection Mechanism Failure Vulnerability

Microsoft Publisher contains a protection mechanism failure vulnerability that allows attacker to bypass Office macro policies used to block untrusted or malicious files...

Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

Microsoft Windows Mark of the Web MOTW contains a protection mechanism failure vulnerability that allows an attacker to bypass MOTW-based defenses. This can result in a limited loss of integrity and availability of security features such as Protected View in Microsoft Office, which rely on MOTW...

WordPress Customizer Export/Import plugin <= 0.9.7 - Authenticated (Admin+) Arbitrary File Upload via Customization Settings Import vulnerability

Authenticated Admin+ Arbitrary File Upload via Customization Settings Import vulnerability discovered by Luk6785 in WordPress Plugin Customizer Export/Import versions = 0.9.7...

CVE-2023-30583

fs.openAsBlob can bypass the experimental permission model when using the file system read restriction with the --allow-fs-read flag in Node.js 20. This flaw arises from a missing check in the fs.openAsBlob API. Please note that at the time this CVE was issued, the permission model is an...

CVE-2023-30583

fs.openAsBlob can bypass the experimental permission model when using the file system read restriction with the --allow-fs-read flag in Node.js 20. This flaw arises from a missing check in the fs.openAsBlob API. Please note that at the time this CVE was issued, the permission model is an...

CVE-2023-30582

A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non- argument. This flaw arises from an inadequate permission model that fails to restrict file watching through the fs.watchFile API. As a...