Lucene search
+L

2227 matches found

Qualys Blog
Qualys Blog
added 2018/04/10 6:22 p.m.47 views

April Patch Tuesday – 63 Microsoft vulnerabilities, 19 for Adobe

Today's Patch Tuesday is smaller than last month, but there are more critical updates this time. Out of the 63 vulnerabilities covered by the Microsoft patches, 22 of them are critical. Adobe has released 6 bulletins covering 19 vulnerabilities. According to Microsoft and Adobe, there are no acti...

7.9AI score
SaveExploits0
ThreatPost
ThreatPost
added 2018/04/10 4:21 p.m.30 views

Adobe Patches Four Critical Bugs in Flash, InDesign

Adobe fixed four critical vulnerabilities in its Flash Player and InDesign products as part of its regularly scheduled April Security Bulletin Tuesday morning. In all, Adobe released 19 patches for products including Adobe Experience Manager, Adobe InDesign CC, Adobe Digital Editions and the Adob...

10CVSS8.9AI score0.28745EPSS
SaveExploits12References12
CISA
CISA
added 2018/04/10 12:0 a.m.13 views

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe PhoneGap Push Plugin, Adobe Digital Editions, Adobe InDesign, Adobe Experience Manager, and Adobe Flash Player. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC...

7AI score
SaveExploits0References5
Adobe
Adobe
added 2018/04/10 12:0 a.m.44 views

APSB18-11 Security update available for InDesign CC

Adobe has released a security update for Adobe InDesign CC. This update resolves a critical memory corruption vulnerability CVE-2018-4928 caused by unsafe parsing of a specially crafted .inx file. This update also resolves an untrusted search path vulnerability CVE-2018-4927 in the InDesign...

9.3CVSS7.9AI score0.04362EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/03/06 12:0 a.m.6 views

The vulnerability of Adobe InDesign’s computer layout automation tool arises from an operation that goes beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.4AI score0.0647EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2017/12/12 12:0 a.m.7 views

Adobe InDesign Memory Corruption Vulnerability (CNVD-2018-00766)

Adobe InDesign for Windows and Macintosh is the United States of America Odobie Adobe company's set of Windows and Macintosh platform based on the layout and editing applications. A memory corruption vulnerability exists in Adobe InDesign. A remote attacker could exploit this vulnerability to...

10CVSS7.6AI score0.0647EPSS
SaveExploits0References1
OSV
OSV
added 2017/12/09 6:29 a.m.7 views

CVE-2017-11302

An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution...

9.8CVSS6AI score0.0647EPSS
SaveExploits0References3
Prion
Prion
added 2017/12/09 6:29 a.m.20 views

Memory corruption

An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution...

10CVSS9.7AI score0.0647EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2017/12/09 6:29 a.m.24 views

CVE-2017-11302

An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution...

10CVSS9.8AI score0.0647EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2017/12/09 6:0 a.m.26 views

CVE-2017-11302

An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution...

9.8AI score0.0647EPSS
SaveExploits0References3
CVE
CVE
added 2017/12/09 6:0 a.m.84 views

CVE-2017-11302

CVE-2017-11302 affects Adobe InDesign 12.1.0 and earlier on Windows/macOS, due to an exploitable memory corruption vulnerability that could allow arbitrary code execution. The referenced APSB17-38 advisory states an update fixes the issue; patch to InDesign 13.0.0 or later (critical, CVSS 3.x/10....

10CVSS9.7AI score0.0647EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2017/11/16 12:0 a.m.27 views

Adobe InDesign Memory Corruption Vulnerability (APSB17-38) - Mac OS X

Adobe InDesign is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS9.8AI score0.0647EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2017/11/16 12:0 a.m.70 views

Adobe InDesign Memory Corruption Vulnerability (APSB17-38) - Windows

Adobe InDesign is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS9.8AI score0.0647EPSS
SaveExploits0References2
ThreatPost
ThreatPost
added 2017/11/14 12:14 p.m.33 views

Adobe Patches Flash Player, 56 Bugs in Reader and Acrobat

Adobe kicked off today’s Patch Tuesday barrage with a monster update for Acrobat and Reader patching dozens of remote code execution vulnerabilities, along with the near-customary Flash Player update addressing a handful of critical flaws. None of the vulnerabilities patched today are under activ...

10CVSS0.8AI score0.06518EPSS
SaveExploits0References9
CISA
CISA
added 2017/11/14 12:0 a.m.10 views

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Flash Player, Photoshop CC, Adobe Connect, DNG Converter, InDesign, Digital Editions, Shockwave Player, and Experience Manager. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affecte...

7AI score
SaveExploits0References8
Adobe
Adobe
added 2017/11/14 12:0 a.m.41 views

APSB17-38 Security update available for InDesign

Adobe has released an update for InDesign for Windows and Macintosh. This update addresses a critical memory corruption vulnerability due to improper handling of a malformed .inx file...

10CVSS1.6AI score0.0647EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/01/13 12:0 a.m.9 views

The vulnerability of Adobe InDesign’s computer layout automation tool and the Adobe InDesign Server’s computer layout automation system allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool and the Adobe InDesign Server lies in the execution of operations outside the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

10CVSS8.5AI score0.0632EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2016/12/22 12:0 a.m.11 views

The vulnerability of the InDesign computer layout automation tool and the InDesign Server automation server, which allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of InDesign computer layout automation tools and the InDesign Server automation server arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure due to a memory...

10CVSS8.4AI score0.0632EPSS
SaveExploits0References3Affected Software2
NVD
NVD
added 2016/12/15 6:59 a.m.22 views

CVE-2016-7886

Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...

10CVSS9.8AI score0.0632EPSS
SaveExploits0References3
OSV
OSV
added 2016/12/15 6:59 a.m.6 views

CVE-2016-7886

Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...

9.8CVSS6AI score0.0632EPSS
SaveExploits0References3
Rows per page
Query Builder