CVE-2019-0762: Incorrect Authorization

A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins, aka 'Microsoft Browsers Security Feature Bypass Vulnerability'...

CVE-2019-0816: Use of Incorrectly-Resolved Name or Reference

A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'...

PT-2019-1815

Name of the Vulnerable Software and Affected Versions Azure DevOps Server affected versions not specified Description The issue is related to a spoofing vulnerability that could allow a security feature bypass. This occurs because Azure DevOps Server does not properly sanitize user-provided input...

CVE-2019-0768: Improper Input Validation

A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, and to allow requests that should otherwise be ignored, aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is uniq...

KB4493448: Windows 7 and Windows Server 2008 R2 April 2019 Security Update

The remote Windows host is missing security update 4493448 or cumulative update 4493472. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls ...

CVE-2019-0612

CVE-2019-0612 is a security feature bypass in Microsoft Edge where Click2Play protection improperly handles Flash objects. The bypass does not by itself enable arbitrary code execution, but can undermine the protection mechanism. Affected product: Microsoft Edge on Windows; vulnerable component: ...

CVE-2019-0612: Undefined Security Weakness

A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerability does not allow arbitrary code execution, aka 'Microsoft Edge Security Feature Bypass Vulnerability'...

Microsoft Edge and Internet Explorer Same Origin Policy Bypass

A vulnerability exists in Microsoft Edge and Internet Explorer web browsers that could allow security feature bypass. The vulnerability could allow an attacker to bypass the Same Origin Policy. Successful exploitation of this vulnerability could allow the disclosure of sensitive information...

Security feature bypass

Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It then writes out the content of these paths to the Karaf repo and resources directories. However, it doesn't do any validation on the paths in the zip file. This...

cloud-init: extra ssh keys added to authorized_keys on the Azure platform

A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Feature Bypass Vulnerability'...

G DATA Software Total Security Security Feature Issue Vulnerability

G DATA Software Total Security is a suite of antivirus software from the German company G DATA Software. The software is anti-phishing, anti-virus and anti-spam. A security feature issue vulnerability in the gdwfpcd.sys file in versions of G DATA Software Total Security prior to 2019-02-22, which...

Security feature bypass

An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security group rule along with a protocol that doesn't support that option for example, VRRP, an...

Internet Explorer Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Internet Explorer VBScript execution policy does not properly restrict VBScript under specific conditions, and to allow requests that should otherwise be ignored. An attacker who successfully exploited the vulnerability could force the browser t...

Microsoft Browsers Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins. The vulnerability allows Microsoft browsers to bypass Same-Site cookie restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully exploit...

Internet Explorer Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific URLs. This could allow an attacker to cause a user to access a URL in a less restricted Internet Security Zone than intended. To exploit this vulnerability, a...

PT-2019-1640

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A security feature bypass issue exists due to Internet Explorer's failure to validate the correct Security Zone for specific URLs. This could allow an attacker to cause a user to...

PT-2019-1593

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A security feature bypass issue exists due to improper handling of flash objects by the Click2Play protection in Microsoft Edge. This bypass, on its own, does not allow for arbitrary...

PT-2019-1646

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description A security feature bypass issue exists due to improper restriction of VBScript execution under specific conditions, allowing requests that should otherwise be ignored. This could...

KB4489885: Windows 7 and Windows Server 2008 R2 March 2019 Security Update

The remote Windows host is missing security update 4489885 or cumulative update 4489878. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting fores...

Microsoft Internet Explorer Security Feature Bypass (CVE-2019-0768)

A security bypass vulnerability exists in Microsoft Internet Explorer. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...