Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability previously existed in Google Chrome version 126.0.6478.54, which can be exploited by attackers to bypass security restrictions...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by attackers to bypass security restrictions and open new windows...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox for Android, which can be exploited by attackers to bypass security restrictions...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in versions prior to Google Chrome 126.0.6478.54, which can be exploited by an attacker to bypass autonomous access control via a crafted HTML page...

PT-2024-5953 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.20 and earlier Description: The issue is related to insufficient input validation in the Adobe Experience Manager system, which could allow a remote attacker to bypass security restrictions. An attacker...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in versions prior to Google Chrome 126.0.6478.54, which can be exploited by attackers to bypass security restrictions...

KLA68920 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability when...

The vulnerability of GE HealthCare’s ultrasonic diagnostic system’s Kiosk Mode allows intruders to bypass security restrictions, gain unauthorized access to protected information, and enhance their privileges.

The vulnerability of GE HealthCare’s ultrasonic diagnostic system’s Kiosk Mode feature is related to a breach in data protection mechanisms. Exploiting this vulnerability can allow attackers to circumvent security restrictions, gain unauthorized access to protected information, and enhance their...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in versions prior to Google Chrome 126.0.6478.54, which can be exploited by attackers to bypass security restrictions...

PT-2024-4142 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier Description: The issue is related to insufficient access control in Adobe Commerce, allowing a remote attacker to bypass existing security restrictions. This could result...

KLA68921 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, obtain sensitive information, perform cross-site scripting attack. Below is a complete list of vulnerabilitie...

PT-2024-4180 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier Description: The issue is related to an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by attackers to bypass security restrictions...

APSB24-28 : Security update available for Adobe Experience Manager

Adobe has released updates for Adobe Experience Manager AEM. These updates resolve vulnerabilities rated critical, important and moderate. Successful exploitation of these vulnerabilities could result in arbitrary code execution, arbitrary file system read and security feature bypass...

python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers

An HTTP Request Smuggling vulnerability was found in Gunicorn. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn's handling of Transfer-Encoding headers, where it incorrectly...

Vulnerabilities fixed in FortiNet FortiWebManager

FortiNet has fixed vulnerabilities in FortiWebManager. A malicious party could exploit the vulnerabilities to bypass a security measure and potentially perform actions that the malicious party is not initially authorized to perform. For successful exploitation, the malicious party must have at...

CVE-2023-32475

Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system...

CVE-2023-32475

Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system...

CVE-2023-49221

Precor touchscreen console P62, P80, and P82 could allow a remote attacker within the local network to bypass security restrictions, and access the service menu, because there is a hard-coded service code...

CVE-2023-49221

CVE-2023-49221 affects Precor touchscreen consoles P62, P80, and P82. The root cause is a hard-coded service code that enables a remote attacker on the local network to bypass security restrictions and access the service menu. CVSSv3.1 base score is 7.8 (HIGH) with LOCAL attack vector, LOW access...