Improper Authorization

Twig is vulnerable to Improper Authorization. The vulnerability is due to incomplete enforcement of sandbox security checks for implicit toString calls, which allows an attacker to invoke non-allowlisted toString methods on accessible objects and bypass configured security policies...

CVE-2024-20508

A vulnerability in Cisco Unified Threat Defense UTD Snort Intrusion Prevention System IPS Engine for Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured security policies or cause a denial of service DoS condition on an affected device. This vulnerability is...

CVE-2024-2610

Using a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content security policies. This vulnerability affects Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9...

SAP ERP 跨站脚本漏洞

SAP ERP is a series of software for ERP management from SAP, a German company. SAP ERP suffers from a cross-site scripting vulnerability that allows an attacker to bypass security policies and remotely execute arbitrary code...

The vulnerability of the CORS mechanism implementation in Google Chrome web browsers allows a hacker to gain access to confidential information.

The vulnerability of the CORS mechanism implementation in Google Chrome browser is related to the bypassing of security policies. Exploiting this vulnerability can allow an attacker, operating remotely, to access confidential information...