18515 matches found
CVE-2023-46841
Recent x86 CPUs offer functionality named Control-flow Enforcement Technology CET. A sub-feature of this are Shadow Stacks CET-SS. CET-SS is a hardware feature designed to protect against Return Oriented Programming attacks. When enabled, traditional stacks holding both data and return addresses...
UBUNTU-CVE-2023-46841
Recent x86 CPUs offer functionality named Control-flow Enforcement Technology CET. A sub-feature of this are Shadow Stacks CET-SS. CET-SS is a hardware feature designed to protect against Return Oriented Programming attacks. When enabled, traditional stacks holding both data and return addresses...
CVE-2024-26119
Adobe Experience Manager versions 6.5.19 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to achieve a low-confidentiality impact within the application. Exploitation of this issue does...
CVE-2024-26119
Adobe Experience Manager versions 6.5.19 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to achieve a low-confidentiality impact within the application. Exploitation of this issue does...
CVE-2024-26063
Adobe Experience Manager versions 6.5.19 and earlier are affected by an Information Exposure vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain unauthorized access to sensitive information, potentially bypassing security measures...
CVE-2024-26063 Adobe Experience Manager | Information Exposure (CWE-200)
Adobe Experience Manager versions 6.5.19 and earlier are affected by an Information Exposure vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain unauthorized access to sensitive information, potentially bypassing security measures...
CVE-2024-26063 Adobe Experience Manager | Information Exposure (CWE-200)
Adobe Experience Manager versions 6.5.19 and earlier are affected by an Information Exposure vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain unauthorized access to sensitive information, potentially bypassing security measures...
CVE-2024-26119 Adobe Experience Manager | Information Exposure (CWE-200)
Adobe Experience Manager versions 6.5.19 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to achieve a low-confidentiality impact within the application. Exploitation of this issue does...
CVE-2024-26119
CVE-2024-26119 affects Adobe Experience Manager 6.5.19 and earlier. The issue is an Information Exposure vulnerability that could enable a security feature bypass with low confidentiality impact. Exploitation does not require user interaction and can occur over the network (no vectors described b...
CVE-2024-26063: Exposure of Sensitive Information to an Unauthorized Actor
Adobe Experience Manager versions 6.5.19 and earlier are affected by an Information Exposure vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain unauthorized access to sensitive information, potentially bypassing security measures...
CVE-2024-26119: Exposure of Sensitive Information to an Unauthorized Actor
Adobe Experience Manager versions 6.5.19 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to achieve a low-confidentiality impact within the application. Exploitation of this issue does...
biz.jovido:jovido-webseed (>=0.0.1, <=0.0.1-fenicesfa), biz.jovido:jovido-webseed-fenicesfa (0.0.1) +932 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (4.3.9.release)
org.springframework:spring-web MAVEN version 4.3.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - biz.jovido:jovido-webseed =0.0.1, =1.1, =1.7, =1.1.1, =1.0, =1.0.1, =1.1.12, =1.1.12,...
CVE-2024-28053 Resource Exhaustion via the Invitation Feature
Resource Exhaustion in Mattermost Server versions 8.1.x before 8.1.10 fails to limit the size of the payload that can be read and parsed allowing an attacker to send a very large email payload and crash the server...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (CNVD-2024-28622)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security feature bypass vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by attackers to bypass security features and compromise confidentiality...
PT-2024-27205
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description A dynamic memory safety error detector KASAN catches and generates error messages "BUG: KASAN: slab-out-of-bounds" as the writeback connector does not support certain features which are not...
CVE-2024-26246
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
CVE-2024-26163
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
CVE-2024-26163
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
Input validation
Grav is a content management system CMS. Prior to version 1.7.43, users who may write a page may use the frontmatter feature due to insufficient permission validation and inadequate file name validation. This may lead to remote code execution. Version 1.7.43 fixes this issue...