3607 matches found
CVE-2024-26127 Adobe Experience Manager | Improper Input Validation (CWE-20)
Adobe Experience Manager versions 6.5.20 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitatio...
Adobe Acrobat Mobile Sign Android Security Vulnerability
Adobe Acrobat is a suite of PDF file editing and conversion tools from Adobe. A security vulnerability exists in Adobe Acrobat Mobile Sign Android version 24.4.2.33155 and prior versions, which stems from being affected by an Authorization Error vulnerability that could lead to a security feature...
Adobe Experience Manager 输入验证错误漏洞
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An inp...
Adobe ColdFusion < 2021.x < 2021u14 / 2023.x < 2023u8 Multiple Vulnerabilities (APSB24-41)
The version of Adobe ColdFusion installed on the remote Windows host is prior to 2021.x update 14 or 2023.x update 8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-41 advisory. - Improper Access Control CWE-284 potentially leading to Arbitrary file system read...
APSB24-40 : Security update available for Adobe Commerce
Adobe has released a security update for Adobe Commerce, Magento Open Source and Adobe Commerce Webhooks Plugin. This update resolves critical and important vulnerabilities. Successful exploitation could lead to arbitrary code execution, security feature bypass and privilege escalation...
APSB24-50 : Security update available for Adobe Acrobat Android
No description provided...
U.S. Dept Of Defense: CVE-2023-26347 in https://████.mil/hax/..CFIDE/adminapi/administrator.cfc?method=getBuildNumber&_cfclient=true
CVE-2023-26347 was discovered in Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier. The vulnerability was an Improper Access Control issue that could result in a Security feature bypass. Unauthenticated access was possible to the administration CFM and CFC endpoints...
CVE-2024-30050
Windows Mark of the Web Security Feature Bypass Vulnerability...
CVE-2024-30050 Windows Mark of the Web Security Feature Bypass Vulnerability
...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-30051 Microsoft DWM Core Library Privilege Escalation Vulnerability CVE-2024-30040 Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability Thes...
PT-2024-3708 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the Mark of the Web MoTW mechanism of Windows operating systems. It is caused by insufficient input validation, which can...
Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability
Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass...
VulnCheck KEV: CVE-2024-30040
Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass...
VulnCheck KEV: CVE-2023-26347
Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...
Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
Microsoft SmartScreen Prompt contains a security feature bypass vulnerability that allows an attacker to bypass the Mark of the Web MotW feature. This vulnerability can be chained with CVE-2023-38831 and CVE-2024-21412 to execute a malicious file...
CVE-2024-29991 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
CVE-2024-29991
CVE-2024-29991 affects Microsoft Edge (Chromium-based). The entry describes a Security Feature Bypass vulnerability in Edge with CVSS v3.1 base score 5.0 (Network, High attack complexity, Privileges None, User Interaction Required, Confidentiality/Integrity/Availability Low to None). Connected so...
CVE-2024-29991 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
