PT-2024-37127

Name of the Vulnerable Software and Affected Versions: Samsung Universal Print Driver for Windows versions prior to 2018 Description: The issue allows for escalation of privilege, enabling the creation of a reverse shell in the tool. This affects products released or manufactured before 2018...

Vulnerability fixed in Adobe ColdFusion

Adobe has fixed a vulnerability in ColdFusion. A malicious party can exploit the vulnerability to execute arbitrary code execute arbitrary code with permissions from the application using ColdFusion. Due to the nature of such applications, it cannot be be ruled out that this would allow the...

Deserialization of untrusted data

Adobe ColdFusion versions 2018 Update 15 and earlier and 2021 Update 5 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction...

Path traversal

Adobe ColdFusion versions 2018 Update 15 and earlier and 2021 Update 5 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in Arbitrary file system read. Exploitation of this issue does not require user...

PT-2023-1943 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions 2018 Update 15 and earlier and 2021 Update 5 and earlier Description: The issue is related to a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the...

SUSE CVE-2018-5174

In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEEMASKFLAGNOUI" flag associated with downloaded files and will not show any UI. Files that are unknown and potentially dangerous will be allowed to run because SmartScreen will not prompt the user for a decision, and i...

Adobe ColdFusion Code Issue Vulnerability

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. A security vulnerability exists in Adobe ColdFusion 2016 Update 15 and earlier and ColdFusion 2018 Upda...

October 8, 2019—KB4520008 (OS Build 17134.1069)

None None...

October 15, 2019—KB4519978 (OS Build 17134.1099)

None None...

September 10, 2019—KB4516058 (OS Build 17134.1006)

None None...

August 19, 2019—KB4512509 (OS Build 17134.984)

None None...

August 13, 2019—KB4512501 (OS Build 17134.950)

None None...

Adobe ColdFusion Security Bypass Vulnerability (CNVD-2019-18625)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. A security bypass vulnerability exists in Adobe ColdFusion 2018 Update 4 and earlier, ColdFusion 2016...

May 21, 2019—KB4499183 (OS Build 17134.799)

None None...

Microsoft Team Foundation Server Cross-Site Scripting Vulnerability (CNVD-2019-24393))

Microsoft Team Foundation Server is the United States Microsoft Microsoft company's set of application lifecycle management ALM tool suite of team collaboration platform. The platform includes code management, project management and other features. A cross-site scripting vulnerability in Microsof...

CVE-2018-18093

Improper file permissions in the installer for Intel VTune Amplifier 2018 Update 3 and before may allow unprivileged user to potentially gain privileged access via local access...

December 2018 Security Update Release

Today, we released security updates to provide additional protections against malicious attackers. As a best practice, we encourage customers to turn on automatic updates. More information about this month’s security updates can be found on the Security Update Guide...

Security update 2018-12-11

...

December 4, 2018, update for InfoPath 2013 (KB4022181)

None None...

Heap overflow

Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access...