PT-2024-3455

Name of the Vulnerable Software and Affected Versions: Windows MSHTML affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the MSHTML platform of Windows operating systems. It is caused by errors in handling input data. Exploitation of th...

PT-2024-5183 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Adobe Animate versions 24.0.2, 23.0.5 and earlier Description: The issue is related to an out-of-bounds write vulnerability in memory. Exploitation of this issue could allow a remote attacker to execute arbitrary code with the help of a...

TotalAV security vulnerability

TotalAV is a suite of computer security protection software that supports multiple platforms. The software includes virus protection, anti-phishing and anti-spyware features. A security vulnerability exists in TotalAV version v.6.0.740, which stems from the presence of an insecure privilege...

CVE-2024-31771

Insecure Permission vulnerability in TotalAV v.6.0.740 allows a local attacker to escalate privileges via a crafted file...

CVE-2024-31771

TotalAV versions 6.0.x (specifically 6.0.740 and 6.0.1028 ) are vulnerable to an Insecure Permission vulnerability that allows a local attacker to escalate privileges . The root cause involves an insecure permission handling that can be triggered by a crafted file. An exploit chain was demonstrat...

PT-2024-24201

Name of the Vulnerable Software and Affected Versions TotalAV version 6.0.740 Description The issue allows a local attacker to escalate privileges via a crafted file. This is due to an insecure permission vulnerability. Recommendations For TotalAV version 6.0.740, at the moment, there is no...

RHEL 7 : jasper (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - jasper: heap-based buffer over-read of size 8 in jasimagedepalettize in libjasper/base/jasimage.c...

RHEL 8 : discount (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - discount: heap-based buffer over-read via a crafted file CVE-2018-12495 - The mkdtrimline function in...

RHEL 8 : graphicsmagick (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - GraphicsMagick: Use after free in ReadOneJNGImage and ReadJNGImage functions in coders/png.c allow an...

RHEL 6 : gedit (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gedit: CPU consumption via crafted file CVE-2017-14108 Note that Nessus has not tested for this issue but has inste...

ytnef: Multiple Vulnerabilities

Background ytnef is a TNEF stream reader for reading winmail.dat files. Description The TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service and potentially code execution due to a double free which can be triggered via a crafted file. The SwapWord...

USN-6764-1 libde265 vulnerability

It was discovered that libde265 could be made to allocate memory that exceeds the maximum supported size. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service...

GitKraken GitLens Visual Studio Code Execution

The vulnerability of the plugin for control and visualization of Git history, GitKraken, GitLens, and the source code editor Visual Studio Code is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially...

Adobe Illustrator Heap Buffer Overflow RCE

The vulnerability of Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Adobe Audition Buffer Overflow

The vulnerability of Adobe Audition is related to overflowing buffers in the “bucket” mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Adobe Illustrator Heap Buffer Overflow RCE

The vulnerability of Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

CVE-2024-33786

An arbitrary file upload vulnerability in Zhongcheng Kexin Ticketing Management Platform 20.04 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2023-27345

PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must vis...

Foxit PDF Reader security vulnerabilities

Foxit PDF Reader is a free and compact PDF document reader and printer. A security vulnerability exists in Foxit PDF Reader AcroForm Doc, which can be exploited by a remote attacker to submit a special file request and trick the user into parsing it, which can crash the application or execute...

CVE-2024-30306

Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context ...