PT-2024-17648 · Tungsten Automation · Tungsten Automation Power Pdf

Name of the Vulnerable Software and Affected Versions: Tungsten Automation Power PDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of Tungsten Automation Power PDF. User interaction is required to exploi...

CVE-2024-49549 InDesign Desktop | Out-of-bounds Read (CWE-125)

InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

CVE-2024-49535

Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that allows an attacker to provide malicious XML input containing a reference to an external entity...

CVE-2024-49535 Acrobat Reader | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that allows an attacker to provide malicious XML input containing a reference to an external entity...

CVE-2024-49535 Acrobat Reader | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that allows an attacker to provide malicious XML input containing a reference to an external entity...

CVE-2024-53246

In Splunk Enterprise versions below 9.3.2, 9.2.4, and 9.1.7 and Splunk Cloud Platform versions below 9.3.2408.101, 9.2.2406.106, 9.2.2403.111, and 9.1.2312.206, an SPL command can potentially disclose sensitive information. The vulnerability requires the exploitation of another vulnerability, suc...

NI LabVIEW 安全漏洞

NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW that originates from improper input validation of HeapObjMapImpl.cpp, resulting in an out-of-bounds read that could disclose information ...

PT-2024-9371 · Microsoft · Windows Wireless Wide Area Network Service +1

Name of the Vulnerable Software and Affected Versions: Windows Wireless Wide Area Network Service WwanSvc affected versions not specified Description: The issue is related to a buffer overflow in memory, which can allow an attacker to gain unauthorized access to protected information. This can le...

PT-2024-9352 · Microsoft · Windows Mobile Broadband Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Mobile Broadband Driver affected versions not specified Description: The issue is related to insufficient input validation in the Windows Mobile Broadband Driver, which can allow an attacker to gain unauthorized access to protected...

Adobe Acrobat < 20.005.30748 / 24.001.30225 / 24.005.20320 Multiple Vulnerabilities (APSB24-92) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 20.005.30748, 24.001.30225, or 24.005.20320. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are...

Splunk Enterprise和Splunk Cloud Platform 安全漏洞

Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. A security vulnerability exists in Splunk Clou...

The vulnerability of SonicWall SMA 100 network firewall microprogramming software, related to the use of a insecure random number generator program, allows attackers to disclose protected information.

The vulnerability of SonicWall SMA 100 network firewall microprogramming software is related to the use of a potentially insecure program for generating random numbers. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

Adobe Reader < 20.005.30748 / 24.005.20320 Multiple Vulnerabilities (APSB24-92) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 20.005.30748 or 24.005.20320. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by a U...

WordPress plugin Importify (Dropshipping WooCommerce) 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. wordPress plugin is an application plugin. A security vulnerability exists in...

The vulnerability of microprogrammed software for Schneider Electric Modicon M340 CPU BMXP34, Modicon MC80 BMKC80, and Modicon Momentum Unity M1E Processor 171CBU lies in the lack of checks for the integrity of messages during transmission over communication channels. This allows attackers to disclose sensitive information or cause malfunctions in the system.

The vulnerability of microprogrammed logic controllers PLCs from Schneider Electric, such as the Modicon M340 CPU BMXP34, Modicon MC80 BMKC80, and Modicon Momentum Unity M1E Processor 171CBU, stems from the lack of checks for the integrity of messages during transmission over communication...

CBL Mariner 2.0 Security Update: php (CVE-2024-8929)

The version of php installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-8929 advisory. - In PHP versions 8.1. before 8.1.31, 8.2. before 8.2.26, 8.3. before 8.3.14, a hostile MySQL server can cause the...

Dell ECS 输入验证错误漏洞

Dell ECS is a scalable, easy-to-manage, and resilient enterprise-class object storage solution from Dell, Inc. An input validation error vulnerability exists in Dell ECS prior to version 3.8.0, which stems from the inclusion of a host header injection vulnerability. A remote, low-privilege attack...

The vulnerability of cloud software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the insecure management of privileges, which allows attackers to disclose protected information.

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor, operating remotely, to expose protected information...

WordPress plugin Video Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

NVIDIA UFM 授权问题漏洞

NVIDIA UFM is a powerful platform from NVIDIA Corporation for managing InfiniBand scale-out computing environments. An authorization issue vulnerability exists in NVIDIA UFM that stems from improper authentication due to sending malformed requests through the Ethernet management interface, which...