CVE-2024-43584 Windows Scripting Engine Security Feature Bypass Vulnerability

...

CVE-2024-37976 Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

...

CVE-2024-20659 Windows Hyper-V Security Feature Bypass Vulnerability

...

Code Integrity Guard Security Feature Bypass Vulnerability

...

PT-2024-6960 · Adobe · Commerce +1

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier Description: The issue is related to insufficient access control in Adobe Commerce,...

PT-2024-6776 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the Code Integrity Guard function of Microsoft Windows operating systems. This vulnerability is associated with ...

PT-2024-6965 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p2 through 2.4.4-p10 and earlier Description: The issue is related to a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this...

CVE-2024-6641

The WP Hardening – Fix Your WordPress Security plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 1.2.6. This is due to use of an incorrect regular expression within the "Stop User Enumeration" feature. This makes it possible for unauthenticated...

CVE-2024-6641 WP Hardening – Fix Your WordPress Security <= 1.2.6 - Unauthenticated Security Feature Bypass to Username Enumeration

The WP Hardening – Fix Your WordPress Security plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 1.2.6. This is due to use of an incorrect regular expression within the "Stop User Enumeration" feature. This makes it possible for unauthenticated...

CVE-2024-6641

The CVE describes a vulnerability in the WordPress plugin WP Hardening – Fix Your WordPress Security, affecting all versions up to 1.2.6. Root cause: an incorrect regular expression in the Stop User Enumeration feature, enabling unauthenticated attackers to bypass security checks and reveal site ...

Microsoft Publisher 2016 Security Feature Bypass Vulnerability (KB5002566)

This host is missing an important security update according to Microsoft KB5002566 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Sep 2024)

This host is missing a critical security update according to Microsoft Office Click-to-Run update September 2024. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2024-38226

Microsoft Publisher Security Feature Bypass Vulnerability...

CVE-2024-38226

Microsoft Publisher Security Feature Bypass Vulnerability...

CVE-2024-30073

Windows Security Zone Mapping Security Feature Bypass Vulnerability...

CVE-2024-43487 Windows Mark of the Web Security Feature Bypass Vulnerability

...

CVE-2024-38226 Microsoft Publisher Security Feature Bypass Vulnerability

...

CVE-2024-38226

CVE-2024-38226 is a Microsoft Publisher security feature bypass vulnerability that enables bypass of Mark of the Web protections. The issue affects Microsoft Publisher (and related Office components) and stems from a security feature bypass in MOWeb, allowing files downloaded from the Internet to...

CVE-2024-38226 Microsoft Publisher Security Feature Bypass Vulnerability

...

CVE-2024-38217

CVE-2024-38217 is a security feature bypass in Microsoft Windows Mark of the Web (MOTW). The vulnerability allows bypassing MOTW protections when opening booby-trapped Office files, as discussed in multiple sources. Exploitation details are not fully disclosed in the provided documents, but the C...