Google Chrome Security Bypass Vulnerability (CNVD-2024-39744)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in versions prior to Google Chrome 126.0.6478.54, which can be exploited by remote attackers to potentially perform a sandbox escape via a crafted HTML page...

Security Bypass Vulnerability in Multiple Mozilla Products (CNVD-2024-40512)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A security bypass vulnerability exists in several Mozilla products, whic...

The vulnerability of the WinZip archive processor relates to the possibility of bypassing security mechanisms, allowing attackers to execute arbitrary code.

The vulnerability of the WinZip archive processor relates to the ability to bypass security mechanisms. Exploiting this vulnerability allows a perpetrator to execute arbitrary code, provided that the user opens a specially crafted file or accesses a specially crafted link...

ROS-20240923-08

Vulnerabilities in Mozilla Firefox, Firefox ESR and Thunderbird email client are related to flaws in the in access control. Exploitation of the vulnerability could allow an attacker acting remotely, spoofing attacks Vulnerability in the implementation of the HSTS HTTP Strict Transport Security...

ROS-20240923-02

Vulnerability of ANGLE library in Mozilla Firefox, Firefox ESR and Thunderbird email client browsers is related to writing beyond buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service. remotely to cause a denial of service...

K000141129: Python vulnerability CVE-2024-35195

Security Advisory Description Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of...

The vulnerability of the Veeam ONE monitoring software, related to inadequate access control, allows a hacker to bypass existing security restrictions and gain unauthorized access to protected information.

The vulnerability of the Veeam ONE monitoring software relates to deficiencies in access control. Exploiting this vulnerability could allow attackers to bypass existing security restrictions and gain unauthorized access to protected information...

Google Chrome Security Bypass Vulnerability (CNVD-2025-00216)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...

Google Chrome Security Bypass Vulnerability (CNVD-2024-49509)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...

Google Chrome Security Bypass Vulnerability (CNVD-2024-49510)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome 129.0.6668.58 and earlier versions, which can be exploited by attackers to bypass security restrictions...

KLA73521 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 ca...

CVE-2024-6641

The WP Hardening – Fix Your WordPress Security plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 1.2.6. This is due to use of an incorrect regular expression within the "Stop User Enumeration" feature. This makes it possible for unauthenticated...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...

KLA73438 SB vulnerability in LibreOffice

Security bypass vulnerability was found in LibreOffice. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2024-7788: Signatures in “repair mode” should not be trusted Related products LibreOffice CVE list CVE-2024-7788 warning Solution Update ...

KLA73437 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be...

The vulnerability of Microsoft Teams’ corporate platform for Mac OS, related to improper verification of the cryptographic signature, allows a hacker to circumvent existing security restrictions.

The vulnerability of Microsoft Teams’ corporate platform for Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions by introducing malicious libraries...

The vulnerability of Microsoft Word text editor on the Mac OS allows a hacker to circumvent existing security restrictions.

The vulnerability of Microsoft Word text editors on the Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions by introducing malicious libraries...

The vulnerability of the Microsoft OneNote software for the Mac OS allows a hacker to circumvent existing security restrictions.

The vulnerability of the Microsoft OneNote note-taking software for the Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions by introducing malicious libraries...

The vulnerability of FactoryTalk Batch View’s software for real-time control and monitoring processes is related to deficiencies in authentication procedures, allowing attackers to circumvent existing security restrictions.

The vulnerability of FactoryTalk Batch View’s software for managing and monitoring manufacturing processes in real-time is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions remotely...

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software for the Mac OS allows a hacker to circumvent existing security restrictions.

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software for the Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions using a specially created...