12832 matches found
The vulnerability of the D-Link DSL6740C modem’s microprogramming software lies in its ability to bypass security measures. This allows attackers to read arbitrary system files, obtain the device’s MAC address, and attempt to gain access to the system.
The vulnerability of D-Link DSL6740C modem’s microprogramming software is related to the possibility of bypassing security measures. Exploiting this vulnerability allows a malicious actor to read arbitrary system files, obtain the device’s MAC address, and attempt to log into the system using...
CVE-2024-52871
The CVE-2024-52871 issue affects Flagsmith up to version 2.134.1, where the ALLOW_REGISTRATION_WITHOUT_INVITE setting can be bypassed. The vulnerability concerns the open-source Flagsmith product (feature flagging/remote configuration) and involves bypassing the invitation-requirement for registr...
CVE-2024-3334 USB Security Feature Bypass in Digital Guardian Windows Agent Prior to version 8.2.0
A security bypass vulnerability exists in the Removable Media Encryption RMEcomponent of Digital Guardian Windows Agents prior to version 8.2.0. This allows a user to circumvent encryption controls by modifying metadata on the USB device thereby compromising the confidentiality of the stored data...
CVE-2024-3334 USB Security Feature Bypass in Digital Guardian Windows Agent Prior to version 8.2.0
A security bypass vulnerability exists in the Removable Media Encryption RMEcomponent of Digital Guardian Windows Agents prior to version 8.2.0. This allows a user to circumvent encryption controls by modifying metadata on the USB device thereby compromising the confidentiality of the stored data...
Google Chrome Security Bypass Vulnerability (CNVD-2024-48379)
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...
Google Chrome Security Bypass Vulnerability (CNVD-2025-00211)
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which stems from the Navigation module containing a policy misenforcement issue. An attacker could exploit the vulnerability to bypass security restrictions...
The vulnerability of the libpq component in the PostgreSQL database management system allows attackers to circumvent existing security restrictions and execute a type of “man-in-the-middle” attack.
The vulnerability of the libpq component in the PostgreSQL database management system is related to the use of an unreliable data source. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and carry out a “man-in-the-middle” type attack...
Google Chrome Security Bypass Vulnerability (CNVD-2024-48382)
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...
Google Chrome Security Bypass Vulnerability (CNVD-2025-00212)
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that stems from the Views module containing a mal-implementation issue. An attacker could exploit the vulnerability to bypass security restrictions...
PT-2024-10586 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to 8.0 Description: A security settings bypass is possible due to a missing permission check in the setAllowOnlyVpnForUids function of NetworkManagementService.java. This could lead to local escalation of privilege,...
Google Chrome Security Bypass Vulnerability (CNVD-2024-48380)
Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...
Vulnerabilities fixed in Palo Alto PAN OS
Palo Alto Networks has fixed vulnerabilities in PAN-OS. A malicious party can exploit the vulnerabilities to bypass security measures to route traffic to and through the system that is not initially authorized, or cause a denial-of-service. Palo Alto has released updates to address the...
KLA77143 Multiple vulnerabilities in PostgreSQL
Multiple vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability can be exploited remotely to gain...
Amazon Linux 2023 : ecs-service-connect-agent (ALAS2023-2024-758)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-758 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks ...
Security Bulletin: Multiple Vulnerabilities in IBM Event Endpoint Management
Summary Multiple vulnerabilities were addressed in IBM Event Endpoint Management version 11.3.2 Vulnerability Details CVEID:CVE-2024-47176 DESCRIPTION: OpenPrinting cups-browsed could allow a remote attacker to obtain sensitive information, caused by the binding on UDP INADDRANY:631 and trusting...
The vulnerability of the Create MyConfig (CMC) utility in Siemens Sinumerik programmable logic controllers allows a perpetrator to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the Create MyConfig CMC utility in Siemens Sinumerik programmable logic controllers is related to the disclosure of information through registration files in the log files. Exploiting this vulnerability can allow attackers to circumvent security restrictions and gain...
Google Chrome Security Update (stable-channel-update-for-desktop_12-2024-11) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
The vulnerability of the Cisco Unified Threat Defense Snort Intrusion Prevention System Engine’s operating system, Cisco IOS XE, related to the operation of data out of the buffer in memory. This allows attackers to bypass existing security restrictions and trigger a service failure.
The vulnerability of the Cisco Unified Threat Defense Snort Intrusion Prevention System Engine’s operating system, Cisco IOS XE, lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and...
