The vulnerability of the MSHTML platform in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the MSHTML platform in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, provided that the user opens a specially crafted file...

PT-2024-8096 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30636 through 24.002.20965 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...

CVE-2024-31771

Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate privileges via a crafted file...

CVE-2024-31771

Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate privileges via a crafted file...

CVE-2024-4853 Mismatched Memory Management Routines in editcap

Memory handling issue in editcap could cause denial of service via crafted capture file...

PT-2024-3501 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 28.4, 27.9.3 and earlier Description: The issue is related to an out-of-bounds read in memory, which could allow an attacker to disclose sensitive information by opening a specially crafted file. This vulnerability...

TotalAV 安全漏洞

TotalAV is a suite of computer security protection software that supports multiple platforms. The software includes virus protection, anti-phishing and anti-spyware features. A security vulnerability exists in TotalAV version v.6.0.740, which stems from the presence of an insecure privilege...

PT-2024-3455 · Microsoft · Windows Mshtml +1

Name of the Vulnerable Software and Affected Versions: Windows MSHTML affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the MSHTML platform of Windows operating systems. It is caused by errors in handling input data. Exploitation of th...

PT-2024-5181 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Description: The issue is related to an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation ...

PT-2024-4130 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Adobe Acrobat 2020, Acrobat Reader 2020 Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the...

PT-2024-5183 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Adobe Animate versions 24.0.2, 23.0.5 and earlier Description: The issue is related to an out-of-bounds write vulnerability in memory. Exploitation of this issue could allow a remote attacker to execute arbitrary code with the help of a...

CVE-2024-31771

TotalAV 6.0.740 is affected by an Insecure Permission vulnerability enabling local privilege escalation via crafting a file. The connected exploit documentation (GitHub) details a local attacker writing a DLL (via a junction trick to map a user-controlled path to C:\Windows\System32) and triggeri...

CVE-2024-31771

Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate privileges via a crafted file...

PT-2024-24201

Name of the Vulnerable Software and Affected Versions TotalAV version 6.0.740 Description The issue allows a local attacker to escalate privileges via a crafted file. This is due to an insecure permission vulnerability. Recommendations For TotalAV version 6.0.740, at the moment, there is no...

RHEL 8 : discount (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - discount: heap-based buffer over-read via a crafted file CVE-2018-12495 - The mkdtrimline function in...

RHEL 6 : gedit (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gedit: CPU consumption via crafted file CVE-2017-14108 Note that Nessus has not tested for this issue but has inste...

RHEL 7 : jasper (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - jasper: heap-based buffer over-read of size 8 in jasimagedepalettize in libjasper/base/jasimage.c...

RHEL 8 : graphicsmagick (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - GraphicsMagick: Use after free in ReadOneJNGImage and ReadJNGImage functions in coders/png.c allow an...

ytnef: Multiple Vulnerabilities

Background ytnef is a TNEF stream reader for reading winmail.dat files. Description The TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service and potentially code execution due to a double free which can be triggered via a crafted file. The SwapWord...

USN-6764-1 libde265 vulnerability

It was discovered that libde265 could be made to allocate memory that exceeds the maximum supported size. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service...