CVE-2024-53955 Bridge | Integer Underflow (Wrap or Wraparound) (CWE-191)

Bridge versions 14.1.3, 15.0 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-53955

Adobe Bridge (Windows and macOS) versions 14.1.3, 15.0 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability (CVE-2024-53955) that could lead to arbitrary code execution in the current user’s context. Root cause per connected sources: integer underflow in Bridge’s ha...

Adobe Bridge 14.x < 14.1.4 / 15.x < 15.0.1 Vulnerability (APSB24-103)

The version of Adobe Bridge installed on the remote Windows host is prior to 14.1.4 or 15.0.1. It is, therefore, affected by a vulnerability as referenced in the apsb24-103 advisory. - Bridge versions 14.1.3, 15.0 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability...

PT-2024-36017 · Undefined · Undefined

MS-ISAC CYBERSECURITY ADVISORYMS-ISAC CYBERSECURITY ADVISORY MS-ISAC ADVISORY NUMBER: 2024-134 DATES ISSUED: 12/10/2024 SUBJECT: Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution OVERVIEW: Multiple vulnerabilities have been discovered in Adobe products, the most...

CVE-2024-53955: Integer Underflow (Wrap or Wraparound)

Bridge versions 14.1.3, 15.0 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Bridge numerical error vulnerability

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from an integer latency vulnerability that can be exploited by an attacker to execute arbitrary code in the current user's environment...

APSB24-103 : Security update available for Adobe Bridge

Adobe has released a security update for Adobe Bridge. This update addresses a critical vulnerability that could lead to arbitrary code execution...

Adobe Bridge 14.x < 14.1.4 / 15.x < 15.0.1 Vulnerability (APSB24-103)

The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 14.1.4 or 15.0.1. It is, therefore, affected by a vulnerability as referenced in the apsb24-103 advisory. - Bridge versions 14.1.3, 15.0 and earlier are affected by an Integer Underflow Wrap or Wraparound...

PT-2024-10273

Name of the Vulnerable Software and Affected Versions Adobe Bridge versions 14.1.3, 15.0 and earlier Description The issue is caused by an integer underflow, which could allow an attacker to execute arbitrary code in the context of the current user by using a specially crafted file. Exploitation ...

CLSA-2024-1733483945 Fix of 9 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-49992 - drm: remove all control node code - drm: add managed resources tied to drmdevice - drm: Set finalkfree in drmdevalloc - drm/plane: add drmmuniversalplanealloc - drm: Handle dev-unique with drmm - drm: Use drmm for drmdevinit cleanup - drm:...

Security update for obs-scm-bridge

This update for obs-scm-bridge fixes the following issues: Updated to version 0.5.4: - CVE-2024-22038: Fixed DoS attacks, information leaks with crafted Git repositories bnc1230469 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate...

obs-scm-bridge-0.5.4-1.1 on GA media (moderate)

obs-scm-bridge-0.5.4-1.1 on GA media Announcement ID: openSUSE-SU-2024:14543-1 Rating: moderate Cross-References: CVE-2024-22038 CVSS scores: CVE-2024-22038 SUSE : 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H CVE-2024-22038 SUSE : 6.8...

Malware in immutable-axelar-bridge

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

OPENSUSE-SU-2024:14543-1 obs-scm-bridge-0.5.4-1.1 on GA media

These are all security issues fixed in the obs-scm-bridge-0.5.4-1.1 package on the GA media of openSUSE Tumbleweed...

WS-2021-0497

ClickHouse JDBC Bridge before 2.0.7 uses slf4j-log4j12 1.7.32, which depends on log4j 1.2.17. It allows a remote attacker to execute code on the server, if you changed default log4j configuration by adding JMSAppender and an insecure JMS broker...

CVE-2024-11853

The jAlbum Bridge plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ar’ parameter in all versions up to, and including, 2.0.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2024-11853 jAlbum Bridge <= 2.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via ar Parameter

The jAlbum Bridge plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ar’ parameter in all versions up to, and including, 2.0.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

CVE-2024-11853

CVE-2024-11853: The jAlbum Bridge plugin for WordPress (versions up to and including 2.0.15) is vulnerable to Stored Cross-Site Scripting via the ar parameter. An authenticated attacker with Contributor-level access can inject scripts that execute in pages viewed by users. A patch/upgrade to a ve...

CVE-2024-11853 jAlbum Bridge <= 2.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via ar Parameter

The jAlbum Bridge plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ar’ parameter in all versions up to, and including, 2.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

PT-2024-17294 · WordPress · Jalbum Bridge

Name of the Vulnerable Software and Affected Versions: jAlbum Bridge plugin for WordPress versions up to, and including, 2.0.15 Description: The issue is related to Stored Cross-Site Scripting via the ar parameter due to insufficient input sanitization and output escaping. This allows authenticat...