CVE-2017-8715

CVE-2017-8715 is a Device Guard security feature bypass in Windows PowerShell sessions on Windows 10 (Gold 1511, 1607, 1703) and Windows Server 2016. The vulnerability could let an attacker inject code into a trusted PowerShell process to bypass Code Integrity. Remediation exists: install the Mic...

CVE-2017-11774

Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability."...

CVE-2017-11774

Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka “Microsoft Outlook Security Feature Bypass Vulnerability.” Recent assessments: Assessed Attacker Value: 0 Assessed...

Siemens BACnet Field Panels Security Bypass Vulnerability

BACnet Building Automation Control Network is a data communication protocol for building automation and control networks. A security bypass vulnerability exists in Siemens BACnet Field Panels, where an attacker with network access to an integrated web server ports 80/TCP and 443 /TCP could bypass...

Red Hat JBoss A-MQ Hawtio console security bypass vulnerability

Red Hat JBoss A-MQ is an open source messaging platform from Red Hat, Inc. that integrates applications and devices and provides various messaging modes to support real-time messaging. The platform is used to integrate applications , endpoints and devices , and provides a variety of messaging...

Microsoft Edge Content Security Policy Security Bypass Vulnerability

Microsoft Windows 10 is a set of next-generation cross-platform operating systems released by Microsoft Corporation in the U.S. It is available for PCs and laptops, tablets, and cell phones, among other devices.Microsoft Edge is one of the default browsers that comes with the system. Microsoft Ed...

Microsoft Windows Device Guard Local Security Bypass Vulnerability

Microsoft Windows is the popular computer operating system. A security bypass vulnerability in the implementation of Microsoft Windows Device Guard could allow an attacker to inject malicious code into a Windows PowerShell session...

Microsoft Office Outlook Security Bypass Vulnerability

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A security bypass vulnerability exists in the implementation of Microsoft Outlook when it does not properly handle in-memory objects, where an attacker could execute arbitrary commands via...

Apple iTunes Security Bypass Vulnerability

Apple iTunes is a suite of media player applications from Apple, Inc. that are used to play and manage digital music and video files. A security bypass vulnerability exists in Apple iTunes versions prior to 12.7. The vulnerability can be exploited by an attacker to access iOS backups made through...

Microsoft Windows Storage Security Bypass Vulnerability

Microsoft Windows Server 2016 and others are operating systems released by Microsoft Corporation USA. storage is one of the components used to manage file storage. A security bypass vulnerability exists in storage in Microsoft Windows that originates from the program failing to validate integrity...

Microsoft Windows Device Guard Local Security Bypass Vulnerability (CNVD-2017-30911)

Microsoft Windows is the popular computer operating system. A security bypass vulnerability in the implementation of Microsoft Windows Device Guard could allow an attacker to inject malicious code into a Windows PowerShell session...

Apache Commons Jelly Security Bypass Vulnerability

Apache Commons Jelly is the United States Apache Apache Software Foundation of a Java and XML-based scripting engine . A security vulnerability exists in Apache Commons Jelly version 1.0. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operation...

Microsoft Office Outlook CVE-2017-11774 Security Bypass Vulnerability

Description Microsoft Office Outlook is prone to a security-bypass vulnerability because it fails to properly handle input. An attacker can leverage this issue to bypass certain security restrictions and execute arbitrary commands in the context of the affected application; this may aid in...

Microsoft Windows Storage CVE-2017-11818 Security Bypass Vulnerability

Description Microsoft Windows is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems...

Microsoft Windows Device Guard CVE-2017-11823 Local Security Bypass Vulnerability

Description Microsoft Windows is prone to a local security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems...

Microsoft Windows Device Guard CVE-2017-8715 Local Security Bypass Vulnerability

Description Microsoft Windows is prone to a local security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems...

Trend Micro OfficeScan Security Bypass Vulnerability

Trend Micro OfficeScan is a best-of-breed endpoint security solution for mid-sized and large organizations, with a future-proof, resilient architecture that allows you to customize your threat protection and data protection through plug-ins. A security bypass vulnerability exists in Trend Micro...

Google Android Framework Security Bypass Vulnerability

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. A security bypass vulnerability exists in Google Android Framework, which can be exploited by attackers to bypass certain security restrictions and perform unauthorized...

X.Org X Server Local Security Bypass Vulnerability

X.Org X Server is an X Window System display server from the X.Org Foundation. A local security bypass vulnerability exists in X.Org X Server. An attacker could use this vulnerability to bypass certain security restrictions and perform unauthorized operations...

Apple macOS High Sierra Security Security Bypass Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple Inc. for Mac computers.Security component is one of the security components. A security bypass vulnerability exists in the Security component of Apple macOS High Sierra versions prior to 10.13. An attacker can exploit th...