938 matches found
PT-2022-4305 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass the authentication process. It is a security-feature bypass vulnerability that enables attacker...
CVE-2022-1029
The Limit Login Attempts WordPress plugin before 4.0.72 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfilteredhtml is disallowed for example in multisite...
Samsung mobile 安全漏洞
Samsung mobile is a South Korean cell phone from Samsung. A security vulnerability exists in Samsung mobile SecSettingsIntelligence SMR prior to Jun-2022 Release 1, which arises from an unprotected component vulnerability in DeviceSearchTrampoline that allows local attackers to initiate activity ...
Race Condition in Jenkins
A race condition during Jenkins 2.81 through 2.94 inclusive; 2.89.1 startup could result in the wrong order of execution of commands during initialization. This could in rare cases result in failure to initialize the setup wizard on the first startup. This resulted in multiple security-related...
PT-2022-2651 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass the authentication process. This security-feature bypass vulnerability can affect the system...
PT-2022-3138 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Kerberos network protocol authentication for the isolated software environment AppContainer in Windows operating systems, which is connecte...
Apache Tomcat may be started without proper security settings
Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions...
PT-2022-2597
Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description The issue is related to errors in security settings, allowing an attacker to bypass security features and potentially disclose protected information. A security-feature bypass...
Fraud on Zelle
Zelle is rife with fraud: Zelle’s immediacy has also made it a favorite of fraudsters. Other types of bank transfers or transactions involving payment cards typically take at least a day to clear. But once crooks scare or trick victims into handing over money via Zelle, they can siphon away...
PT-2022-1674 · Microsoft · Windows Common Log File System Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Common Log File System Driver, which can be exploited due to errors in security...
PT-2022-1654 · Microsoft · Windows Dwm Core Library +1
Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to unauthorized acces...
PT-2022-1660 · Microsoft · Windows Common Log File System Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to disclose protected information. It enables attackers to obtain sensitive informati...
PT-2022-1980
Name of the Vulnerable Software and Affected Versions Microsoft Word affected versions not specified Description The issue is related to errors in security settings of Microsoft Office and Microsoft 365 Apps for Enterprise packages, which can allow an attacker to bypass security features...
How to Secure Your SaaS Stack with a SaaS Security Posture Management Solution
Whether it’s Office 365, Salesforce, Slack, GitHub or Zoom, all SaaS apps include a host of security features designed to protect the business and its data. The job of ensuring that all the apps have proper security settings and are configured correctly falls on the security team. The challenge...
NETGEAR Wi-Fi Router System Data Compromise
The vulnerabilities of NETGEAR Wi-Fi router software models D3600, D6000, D6200, D6220, D6400, D7000, D7000v2, D7800, D8500, DC112A, DGN2200v4, DGND2200Bv4, DM200, EX3700, EX3800, EX6120, EX6130, EX7000, PR2000, R6220, R6230, R6250, R6300v2, R6400, R6400v2, R6700, R6700v3, R6900, R7000, R7100LG,...
Improper Input Validation
smarty/smarty is vulnerable to improper input validation. The vulnerability exists in smartyinternaltemplateparser.php because the security settings are not properly defined which allows an attacker to the restricted code through dynamic static class...
PT-2022-1565 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to errors in security settings of the Windows Hyper-V hardware virtualization system, which can be exploited to bypass security restrictions. This allows an...
PT-2022-1566 · Microsoft · Windows Defender +1
Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass security restrictions. It is a security-feature bypass vulnerability that enables attackers to...
Google Chrome Resource Management Error Vulnerability (CNVD-2022-16303)
Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome that could be exploited by remote attackers to create a specially designed web page that bypasses certain security settings...