Lucene search
+L

4332 matches found

OSV
OSV
added 2025/06/10 6:32 p.m.7 views

GHSA-R487-9VV5-75GG Magento Improper Authorization leading to security feature bypass

Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access leading to a...

8.2CVSS6.7AI score0.00436EPSS
SaveExploits0References3
OSV
OSV
added 2025/06/10 6:32 p.m.16 views

GHSA-G2PJ-XMXQ-3R9Q Magento Improper Access Control leads to security feature bypass

Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited write access...

5.3CVSS6.8AI score0.00382EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2025/06/10 6:32 p.m.15 views

Magento Improper Access Control leads to security feature bypass

Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited write access...

5.3CVSS6.8AI score0.00382EPSS
SaveExploits0References3Affected Software2
NVD
NVD
added 2025/06/10 5:23 p.m.13 views

CVE-2025-47160

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

5.4CVSS0.00758EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/10 5:23 p.m.14 views

CVE-2025-47160

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

5.4CVSS5.8AI score0.00758EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/10 5:22 p.m.9 views

CVE-2025-33069

Improper verification of cryptographic signature in App Control for Business WDAC allows an unauthorized attacker to bypass a security feature locally...

5.1CVSS0.00288EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/10 5:02 p.m.21 views

CVE-2025-33069 Windows App Control for Business Security Feature Bypass Vulnerability

...

5.1CVSS0.00288EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/10 5:02 p.m.80 views

CVE-2025-33069

CVE-2025-33069 affects Windows App Control for Business (WDAC). The root cause is improper verification of cryptographic signatures in WDAC, enabling a local attacker to bypass the security feature. The vulnerability is categorized as a security feature bypass with medium severity (CVSS 3.1: Loca...

5.1CVSS5.2AI score0.00288EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2025/06/10 5:02 p.m.5 views

CVE-2025-47160 Windows Shortcut Files Security Feature Bypass Vulnerability

...

5.4CVSS7.2AI score0.00758EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/10 5:02 p.m.155 views

CVE-2025-47160

The CVE-2025-47160 entry applies to Windows Shell and describes a Protection mechanism failure that allows a remote attacker to bypass a security feature over the network. The NVD entry lists a CVSS v3.1 base score of 5.4 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L), indicating a network-exposed issue w...

5.4CVSS5.4AI score0.00758EPSS
SaveExploits0References1Affected Software14
Cvelist
Cvelist
added 2025/06/10 5:02 p.m.25 views

CVE-2025-47160 Windows Shortcut Files Security Feature Bypass Vulnerability

...

5.4CVSS0.00758EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/10 4:15 p.m.14 views

CVE-2025-27206

Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited write access...

5.3CVSS0.00382EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/10 4:08 p.m.108 views

CVE-2025-27206

Adobe Commerce (versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier) is impacted by an Improper Access Control vulnerability that could bypass security features and grant limited write access. The issue enables a security feature bypass without user interaction. Multiple connect...

5.3CVSS5.3AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/10 4:08 p.m.6 views

CVE-2025-27206 Adobe Commerce | Improper Access Control (CWE-284)

Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited write access...

5.3CVSS7.2AI score0.00382EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/10 4:08 p.m.60 views

CVE-2025-43585 Adobe Commerce | Improper Authorization (CWE-285)

Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access leadi...

8.2CVSS0.00436EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/06/10 7:00 a.m.67 views

Windows Shortcut Files Security Feature Bypass Vulnerability

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

5.4CVSS7.2AI score0.00758EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/06/10 7:00 a.m.12 views

Windows App Control for Business Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in App Control for Business WDAC allows an unauthorized attacker to bypass a security feature locally...

5.1CVSS7.3AI score0.00288EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/06/10 12:00 a.m.10 views

Adobe Commerce 访问控制错误漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce has a security vulnerability that can be exploited by an attacker to cause a security feature bypass...

5.3CVSS6.7AI score0.00382EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/06/10 12:00 a.m.4 views

PT-2025-24920 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier Description: The issue is an Information Exposure vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to gain...

5.5CVSS6AI score0.00171EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/06/10 12:00 a.m.13 views

PT-2025-24860 · Microsoft · Windows Shell +1

Name of the Vulnerable Software and Affected Versions: Windows Shell affected versions not specified Description: A protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. Recommendations: At the moment, there is no information...

6.4CVSS5.8AI score0.00758EPSS
SaveExploits0References7
Rows per page
Query Builder