Input validation

Grav is a content management system CMS. Prior to version 1.7.43, users who may write a page may use the frontmatter feature due to insufficient permission validation and inadequate file name validation. This may lead to remote code execution. Version 1.7.43 fixes this issue...

CVE-2024-26246

CVE-2024-26246 affects Microsoft Edge (Chromium-based). The vulnerability is described as a Security Feature Bypass in Edge, with the affected component being Edge’s Chromium-based browser. The available data indicate a Low base severity (CVSS 3.1: 3.9), with confidentiality impact High and no in...

CVE-2024-26246 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

CVE-2024-26163 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

Microsoft Windows Kerberos Security Feature Bypass Vulnerability

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft.Kerberos also serves as a network authentication protocol designed to provide authentication services to client/server applications through a key system. A security feature bypass vulnerability exists i...

CVE-2024-26163: Protection Mechanism Failure

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

PT-2024-2583

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description The issue is related to a security feature bypass vulnerability in Microsoft Edge. It can be exploited by a remote attacker using a specially crafted HTML page to bypass...

PT-2024-2584

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description The issue is related to a security feature bypass vulnerability in Microsoft Edge. It is associated with inadequate access control, which can be exploited by a remote...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security feature bypass vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by attackers to bypass security features and compromise integrity...

CVE-2024-26246: Insufficient Granularity of Access Control

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

Microsoft Edge (Chromium) < 122.0.2365.92 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 122.0.2365.92. It is, therefore, affected by multiple vulnerabilities as referenced in the March 14, 2024 advisory. - Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote...

CVE-2024-20327

A vulnerability in the PPP over Ethernet PPPoE termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to crash the pppma process, resulting in a denial of service DoS condition. This vulnerability is du...

Student Enrollment In PHP Security Vulnerability

Student Enrollment In PHP is a code-projects open source student enrollment system. A security vulnerability exists in Student Enrollment In PHP version 1.0 due to an arbitrary file upload vulnerability in the Add Students Profile Picture feature...

PT-2024-22525 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A cross-site scripting XSS issue was found in DedeCMS via the create file functionality. This allows an attacker to inject malicious scripts into the website, potentially leading to unauthorized access or...

"Failed to launch application" with Citrix Workspace App for Chrome OS version 2402.

Users encounter the "Failed to launch application" error message when attempting to start a desktop session using Citrix Workspace App for Chrome OS version 2402. This behavior is observed when initiating sessions from a delivery group that contains non-English characters while the Service...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

WordPress Plugin Play.ht security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Plugin Premium Addons for Elementor Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

PT-2024-22520 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A cross-site scripting XSS issue was found in DedeCMS via the Photo Collection feature. This allows for potential malicious script execution. Recommendations: For DedeCMS version 5.7, as a temporary workaround...