Design/Logic Flaw

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, and XR1000 before 1.0.0.58...

The vulnerability of the Windows Hello component of the Windows operating system allows a intruder to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Windows Hello component of the Windows operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Mozilla Firefox browser, related to security configuration errors, allows a hacker to circumvent the established security restrictions.

The vulnerability of the Mozilla Firefox browser is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to circumvent established security restrictions...

The vulnerability of the Mozilla Firefox browser, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of the Mozilla Firefox browser is related to errors in the configuration of security rules for iframe-based tables in XSLT stylesheets. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions by using iframes to bypass limitations such as...

PT-2021-5603 · Unknown · Crafter Cms

Name of the Vulnerable Software and Affected Versions: Crafter CMS versions affected versions not specified Description: The issue allows unauthenticated remote attackers to read textual content via FreeMarker, including files in /scripts/, /templates/, and some non-binary files in /.git/. This i...

The vulnerability of the Intune management extension for Microsoft Windows operating systems lies in security configuration errors, which allow a hacker to circumvent security restrictions.

The vulnerability of the Intune Management Extension for Microsoft Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a perpetrator to circumvent security restrictions...

Philips IntelliBridge EC 40 and EC 80 Hub

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Low attack complexity Vendor: Philips Equipment: IntelliBridge EC 40 and EC 80 Hub Vulnerabilities: Use of Hard-coded Credentials, Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of these...

The vulnerability of the Security Account Manager in the Microsoft Windows operating system allows a perpetrator to bypass the authentication process.

The vulnerability of the Security Account Manager in the Microsoft Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass authentication processes remotely...

The vulnerability of the Console Window Host component in Microsoft Windows operating systems allows a hacker to bypass security restrictions.

The vulnerability of the Console Window Host component in Microsoft Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...

scap-security-guide bug fix and enhancement update

An update for scap-security-guide is now available for Rocky Linux EnterpriseLinux 8. The scap-security-guide project provides a guide for configuration of the system from the final system's security point of view. The guidance is specified in the Security Content Automation Protocol SCAP format...

Security Restriction Bypass

spring-boot-actuator is vulnerable to security restriction bypass. Lack of secure handling of HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping causes the exposure of those resources and request mapping, leading to...

CVE-2021-22047

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

CVE-2021-22047

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

CVE-2021-22047

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

CVE-2021-22047

CVE-2021-22047 affects Spring Data REST: HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are exposed under URIs that may be accessible without authorization, depending on Spring Security configuration.impact is describe...

VMware Spring Security 安全漏洞

VMware Spring Security is a set of security frameworks from VMware that provide illustrative security protections for Spring-based applications. A security vulnerability exists in Spring Data REST that stems from the additional disclosure of HTTP resources under the uri for custom controller...

Potential Security Bypass for customized Spring Data REST Resource

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

The vulnerability of the Windows operating system, related to errors in security settings, allows a perpetrator to bypass the security mechanisms.

The vulnerability of the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to bypass security measures...

UBUNTU-CVE-2021-39151

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation t...

The vulnerability of the Elastic Cloud Enterprise analytics platform, related to security configuration errors, allows a perpetrator to gain access to protected information.

The vulnerability of the Elastic Cloud Enterprise analytics platform is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...