CVE-2024-39414: Improper Access Control

Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information...

CVE-2024-39413: Improper Authorization

Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information...

CVE-2024-39411: Improper Authorization

Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information...

CVE-2024-38180

Windows SmartScreen Security Feature Bypass Vulnerability...

CVE-2024-38213 Windows Mark of the Web Security Feature Bypass Vulnerability

...

CVE-2024-38213

CVE-2024-38213 is a Windows Mark of the Web (MoTW) security feature bypass vulnerability. Affected software involves Windows MoTW handling; the flaw allows downloaded web-origin files to bypass warnings/ protections, enabling potentially malicious content to execute. Exploitation information in c...

Windows Mark of the Web Security Feature Bypass Vulnerability

...

Windows SmartScreen Security Feature Bypass Vulnerability

...

PT-2024-5548

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The vulnerability is related to a security feature bypass in Microsoft Windows, specifically in the Mark of the Web MoTW mechanism. This allows attackers to bypass SmartScreen...

PT-2024-5716 · Microsoft · Windows Smartscreen +1

Name of the Vulnerable Software and Affected Versions: Windows SmartScreen affected versions not specified Description: The issue is related to a security feature bypass in the Windows SmartScreen security feature, which can be exploited by a remote attacker to impact the confidentiality,...

PT-2024-6002

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.7-p1 through 2.4.4-p9 and earlier Description The issue is related to an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabili...

CVE-2024-38213: Protection Mechanism Failure

Windows Mark of the Web Security Feature Bypass Vulnerability...

KLA71485 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, execute arbitrary code, cause denial of service, gain privileges, obtain sensitive information. Below is a...

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file...

PT-2024-7101 · Phoenix Contact · Phoenix Contact Charx Sec-3000

Name of the Vulnerable Software and Affected Versions: Phoenix Contact CHARX SEC-3000 versions up to 1.6.2 Description: A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user user-app t...

PT-2024-5996

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.7-p1 through 2.4.4-p9 and earlier Description The issue is related to an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabili...

PT-2024-5997

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.7-p1 through 2.4.4-p9 and earlier Description The issue is related to an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabili...

PT-2024-5995

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.7-p1 through 2.4.4-p9 and earlier Description The issue is related to inadequate access control in Adobe Commerce, allowing a remote attacker to elevate their privileges. A low-privileged attacker could leverage thi...

CVE-2024-38180: Protection Mechanism Failure

Windows SmartScreen Security Feature Bypass Vulnerability...

APSB24-61 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution, arbitrary file system read, security feature bypass and privilege escalation...