114 matches found
CVE-2024-25576
improper access control in firmware for some IntelR FPGA products before version 24.1 may allow a privileged user to enable escalation of privilege via local access...
CVE-2023-7249
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in OpenText OpenText Directory Services allows Path Traversal.This issue affects OpenText Directory Services: from 16.4.2 before 24.1...
PT-2024-15250
Name of the Vulnerable Software and Affected Versions OpenText Directory Services versions 16.4.2 through 24.1 Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability allows Path Traversal...
CVE-2024-20745
Premiere Pro versions 24.1, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2024-20745 ZDI-CAN-22671: Adobe Premiere Pro AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Premiere Pro versions 24.1, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
ClickHouse Security Breach
ClickHouse is ClickHouse's fastest and most resource-efficient open source database for real-time applications and analytics. A security vulnerability exists in ClickHouse prior to 24.1, ClickHouse Cloud prior to 24.0.2.54535, which stems from an access control bypass when query caching is enable...
PT-2024-2183 · Adobe · Premiere Pro
Name of the Vulnerable Software and Affected Versions: Adobe Premiere Pro versions 24.1, 23.6.2 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requir...
BeyondTrust Privilege Management Security Vulnerability
BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management for Windows prior to version 24.1 that stems from improper privilege management...
PT-2024-18155 · Beyondtrust · Privilege Management For Windows
Name of the Vulnerable Software and Affected Versions: Privilege Management for Windows versions prior to 24.1 Description: A local authenticated attacker can view Sysvol when Privilege Management for Windows is configured to use a GPO policy, allowing them to view the policy and potentially find...
PT-2024-8891 · Intel · Intel Fpga
Name of the Vulnerable Software and Affected Versions: IntelR FPGA products versions prior to 24.1 Description: The issue is related to improper access control in the firmware of some IntelR FPGA products, which may allow a privileged user to enable escalation of privilege via local access. This ...
Vulnerabilities fixed in Adobe After Effects
Adobe has fixed vulnerabilities in After Effects. A malicious party could exploit the vulnerabilities to gain access to system data, or to execute arbitrary code with privileges of the victim. The malicious party does not need any prior authorizations required. Adobe has released updates to fix t...
Code injection
Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service e.g., CPU consumption because draining the inventory-to-send queue is inefficient, as exploited in the wild in May 2023...
Design/Logic Flaw
Photoshop version 23.5.3 and earlier, 24.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...
Cross site scripting
Photoshop version 23.5.3 and earlier, 24.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2023-21578 Adobe Photoshop Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Photoshop version 23.5.3 and earlier, 24.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...
CVE-2023-21574 Adobe Photoshop Improper Input Validation Remote Code Execution Vulnerability
Photoshop version 23.5.3 and earlier, 24.1 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2023-21576
Photoshop version 23.5.3 and earlier, 24.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2023-21577
Photoshop version 23.5.3 and earlier, 24.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...
