12730 matches found
CVE-2023-5485
Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass autofill restrictions via a crafted HTML page. Chromium security severity: Low...
Security Bulletin: A vulnerability in go-restful affects IBM Robotic Process Automation for Cloud Pak resulting in a bypass of security restrictions (CVE-2022-1996).
Summary A vulnerability in go-restful affects IBM Robotic Process Automation for Cloud Pak resulting in a bypass of security restrictions. go-restful is used by IBM Robotic Process Automation for Cloud Pak as part of the operator framework. This bulletin identifies the security fixes to apply to...
F5 BIG-IP iControl Security Bypass Vulnerability
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A security bypass vulnerability exists in F5 BIG-IP iControl, which can be exploited by an attacker to allow a...
The vulnerability of the SetSysEmailSettings function in D-Link DIR-X3260 Wi-Fi routers allows a hacker to bypass security restrictions and execute arbitrary code.
The vulnerability of the SetSysEmailSettings function in D-Link DIR-X3260 Wi-Fi routers is related to insufficient cleaning of input data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary code by sending specially crafted HNAP requests t...
ZITADEL's password reset does not respect the "Ignoring unknown usernames" setting
Impact ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which helps mitigate attacks that try to guess/enumerate usernames. While this settings was properly working during the authentication process it did not work correctly on the password reset flow. This meant th...
CVE-2023-36584
Windows Mark of the Web Security Feature Bypass Vulnerability...
Security feature bypass
Windows Mark of the Web Security Feature Bypass Vulnerability...
Security feature bypass
A client-side enforcement of server-side security CWE-602 vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 may allow a remote attacker with low privileges to access a privileged web console via client side code execution...
CVE-2023-36698 Windows Kernel Security Feature Bypass Vulnerability
...
PT-2023-6063 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the Mark of the Web MOTW mechanism of Windows operating systems. This vulnerability is caused by errors in security...
F5 BIG-IP 代码问题漏洞
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A security bypass vulnerability exists in F5 BIG-IP iControl, which can be exploited by an attacker to allow a...
PT-2023-5911 · Google +4 · Google Chrome +4
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 118.0.5993.70 Description: The issue is related to an inappropriate implementation in the Installer component of Google Chrome, which allowed a local attacker to bypass discretionary access control via a crafte...
CVE-2023-36584
Windows Mark of the Web Security Feature Bypass Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Security feature bypass
Wazuh is a security detection, visibility, and compliance open source project. In versions 4.4.0 and 4.4.1, it is possible to get the Wazuh API administrator key used by the Dashboard using the browser development tools. This allows a logged user to the dashboard to become administrator of the AP...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security bypass vulnerability exists in Huawei...
Foxit PhantomPDF for Mac < 4.0 Multiple Vulnerabilities
According to its version, the Foxit PhantomPDF for Mac application formally known as Phantom for Mac installed on the remote macOS host is prior to 4.0. It is, therefore affected by multiple vulnerabilities: - Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlie...
The vulnerability of the OpenIdAuthenticator class in Eclipse Jetty servers allows a hacker to bypass security restrictions.
The vulnerability of the OpenIdAuthenticator class in Eclipse Jetty servers is related to deficiencies in the authentication process when processing the LoginService parameter. Exploiting this vulnerability can allow an attacker to bypass security restrictions remotely...
Electrolink FM/DAB/TV Transmitter (controlloLogin.js) Credentials Disclosure
Summary Since 1990 Electrolink has been dealing with design and manufacturing of advanced technologies for radio and television broadcasting. The most comprehensive products range includes: FM Transmitters, DAB Transmitters, TV Transmitters for analogue and digital multistandard operation, Bandpa...
Electrolink FM/DAB/TV Transmitter (login.htm/mail.htm) Credentials Disclosure
Summary Since 1990 Electrolink has been dealing with design and manufacturing of advanced technologies for radio and television broadcasting. The most comprehensive products range includes: FM Transmitters, DAB Transmitters, TV Transmitters for analogue and digital multistandard operation, Bandpa...
Electrolink FM/DAB/TV Transmitter SuperAdmin Hidden Functionality
Summary Since 1990 Electrolink has been dealing with design and manufacturing of advanced technologies for radio and television broadcasting. The most comprehensive products range includes: FM Transmitters, DAB Transmitters, TV Transmitters for analogue and digital multistandard operation, Bandpa...