CVE-2021-28594: Uncontrolled Search Path Element

Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Uncontrolled Search Path Element vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...

CVE-2021-28633: Creation of Temporary File in Directory with Insecure Permissions

Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Insecure temporary file creation vulnerability. An attacker could leverage this vulnerability to cause arbitrary file overwriting in the context of the current user. Exploitation of this issue requires...

Mozilla VPN 安全特征问题漏洞

Mozilla VPN is an open source virtual private network Web browser extension, desktop application and mobile application from the Mozilla Foundation in the U.S. A security vulnerability exists in versions of Mozilla VPN prior to 2.3. An attacker could exploit the vulnerability to gain control of t...

Unspecified Vulnerability in Rocket.Chat

Rocket.Chat is an open source team chat software. A security vulnerability exists in the Rocket.Chat desktop application version 2.17.11, which originates from the ability to open external links without user interaction. No details of the vulnerability are available at this time...

CVE-2020-26763

The Rocket.Chat desktop application 2.17.11 opens external links without user interaction...

CVE-2020-26763

The Rocket.Chat desktop application 2.17.11 opens external links without user interaction...

Design/Logic Flaw

The Rocket.Chat desktop application 2.17.11 opens external links without user interaction...

CVE-2020-26763

The Rocket.Chat desktop application 2.17.11 opens external links without user interaction...

CVE-2020-26763

The Rocket.Chat desktop application 2.17.11 opens external links without user interaction...

CVE-2020-26763

Affected product: Rocket.Chat Desktop (version 2.17.11). Vulnerability: the desktop app opens external links without user interaction, with CVSSv3.1 base score 7.5 (network, low complexity, no privileges required, UI interaction not required; integrity impact HIGH; confidentiality/availability NO...

CVE-2020-26763: Undefined Security Weakness

The Rocket.Chat desktop application 2.17.11 opens external links without user interaction...

PT-2021-11269

Name of the Vulnerable Software and Affected Versions: Rocket.Chat desktop application version 2.17.11 Description: The issue concerns the Rocket.Chat desktop application, which opens external links without requiring user interaction. Recommendations: For Rocket.Chat desktop application version...

Creative Cloud Desktop Application 安全漏洞

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An arbitrary file system write vulnerability exists in Adobe Creative Cloud Desktop Application 2.4 and earlier versions. The vulnerability originates from the creation of...

Creative Cloud Desktop Application 代码问题漏洞

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An uncontrolled search path element vulnerability exists in Adobe Creative Cloud Desktop Application 2.4 and earlier versions. An attacker can exploit this vulnerability to...

PT-2021-5602

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application installer version 2.4 and earlier Description The issue is related to an Uncontrolled Search Path Element. An unauthenticated attacker could leverage this to achieve arbitrary code execution in the...

APSB21-41 Security update available for Adobe Creative Cloud Desktop Application

Adobe has released an update for the Creative Cloud Desktop installer for Windows and macOS. This update includes a fix for a critical and an important vulnerability that could lead to arbitrary code execution in the context of current user...

OpenText Brava! Desktop out-of-bounds write vulnerability (CNVD-2021-42322)

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An out-of-bounds write vulnerability exists in the parsing of DWF files in OpenText Brava! Desktop. The vulnerability stems from a lack of proper validation of...

Adobe Creative Cloud Desktop Application 代码问题漏洞

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An uncontrolled search path element vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker can exploit the vulnerability to...

APSB21-31 Security update available for Adobe Creative Cloud Desktop Application

Adobe has released an update for the Creative Cloud Desktop Application for Windows. This update includes a fix for a critical vulnerability that could lead to arbitrary code execution in the context of current user...

CVE-2021-21078

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction...