19028 matches found
CVE-2024-45145
Adobe Lightroom Desktop vulnerable to an out-of-bounds read (CWE-125) in versions 7.4.1, 13.5, 12.5.1 and earlier, with the issue allowing disclosure of sensitive memory and potential bypass of ASLR. Exploitation requires user interaction (victim opens a malicious file). The security context and ...
firefox: thunderbird: Cross-origin access to JSON contents through multipart responses
A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the issue as follows: An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the resource://devtools origin. This could allow them to access cross-origin JSON content. This...
firefox: thunderbird: Cross-origin access to PDF contents through multipart responses
A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the issue as follows: An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the resource://pdf.js origin. This could allow them to access cross-origin PDF content. This...
Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild
Microsoft has released security updates to fix a total of 118 vulnerabilities across its software portfolio, two of which have come under active exploitation in the wild. Of the 118 flaws, three are rated Critical, 113 are rated Important, and two are rated Moderate in severity. The Patch Tuesday...
PT-2024-6924 · Docker · Docker Desktop
Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.34.3 Description: The issue is related to a lack of output encoding or sanitization mechanism in Docker Desktop, which can be exploited by a remote attacker to execute arbitrary code by injecting it through ...
Adobe Lightroom Desktop 缓冲区错误漏洞
Adobe Lightroom Desktop is a professional photo management and editing software from Adobe USA designed to provide photographers and image editors with powerful workflow and editing tools. Adobe Lightroom Desktop suffers from a buffer error vulnerability that stems from allowing out-of-bounds...
Microsoft Windows Multiple Vulnerabilities (KB5044285)
This host is missing an important security update according to Microsoft KB5044285 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the categories of damage listed below. The most serious vulnerability has been assigned attribute CVE-2024-38124 and is located in the NETLOGON functionality...
Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities
The largest Microsoft Patch Tuesday since July includes two vulnerabilities that have been exploited in the wild and three other critical issues across the company's range of hardware and software offerings. October's monthly security update from Microsoft includes fixes for 117 CVEs, the most in...
CVE-2024-43599
Remote Desktop Client Remote Code Execution Vulnerability...
CVE-2024-43599
Remote Desktop Client Remote Code Execution Vulnerability...
CVE-2024-43582
Remote Desktop Protocol Server Remote Code Execution Vulnerability...
CVE-2024-43582
Remote Desktop Protocol Server Remote Code Execution Vulnerability...
CVE-2024-43533
Remote Desktop Client Remote Code Execution Vulnerability...
CVE-2024-43533
Remote Desktop Client Remote Code Execution Vulnerability...
CVE-2024-43456
Windows Remote Desktop Services Tampering Vulnerability...
CVE-2024-43456
Windows Remote Desktop Services Tampering Vulnerability...
CVE-2024-38262
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...
