Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is a suite of 2D and 3D compositing design tools from Adobe. A buffer error vulnerability exists in Adobe Dimension version 3.4.8 and prior versions, which stems from being affected by an out-of-bounds read vulnerability that could lead to a sensitive memory disclosure...

Adobe Substance 3D Stager 缓冲区错误漏洞

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. An uninitialized pointer access vulnerability exists in Adobe Substance 3D Stager 2.0.1 and prior versions, which can be exploited by an attacker to cause a sensitive memory disclosure and bypass mitigations...

PT-2023-6397 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.8 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...

CVE-2023-26376 ZDI-CAN-20155: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension version 3.4.8 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

Adobe Dimension 缓冲区错误漏洞

Adobe Dimension is a suite of 2D and 3D compositing design tools from Adobe. A buffer error vulnerability exists in Adobe Dimension version 3.4.8 and prior versions, which stems from being affected by an out-of-bounds read vulnerability that could lead to a sensitive memory disclosure...

CVE-2023-26374

Adobe Dimension 3.4.8 and earlier is affected by an out-of-bounds read vulnerability (CVE-2023-26374) that can disclose sensitive memory and bypass ASLR. Exploitation requires user interaction (victim must open a malicious file). The issue is documented across multiple sources (NVD/NCSC/CNVD/CVEL...

CVE-2023-26401

Adobe Dimension 3.4.8 and earlier are affected by an out-of-bounds read that can disclose sensitive memory and potentially bypass ASLR. Exploitation requires a user to open a malicious file. A fix is available in Dimension 3.4.9 (per APSB23-27); update to mitigate.

CVE-2023-28271

Windows Kernel Memory Information Disclosure Vulnerability...

Updated openssl packages fix security vulnerability

A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the application to continue certificate...

postgresql: Client memory disclosure when connecting with Kerberos to modified server

A flaw was found In PostgreSQL. A modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions, a server can cause a libpq client to over-read and report an error message containing uninitialized bytes...

PT-2023-6607 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.8 and earlier Description: The issue is related to an out-of-bounds read vulnerability in memory, which could allow an attacker to bypass the Address Space Layout Randomization ASLR protection mechanism. This...

PT-2023-6416 · Adobe · Acrobat 2020 +3

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat versions prior to 23.001.20094 Adobe Acrobat Reader versions 23.001.20093 and earlier Adobe Acrobat 2020 versions prior to 20.005.30442 Adobe Acrobat Reader 2020 versions 20.005.30441 and earlier Description: The issue is relate...

PT-2023-6615 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.8 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...

PT-2023-6610 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.8 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...

PT-2023-6613 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.8 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as...

PT-2023-6620 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.8 and earlier Description: The issue is related to an out-of-bounds read vulnerability. This could allow an attacker to disclose sensitive memory, potentially bypassing mitigations like ASLR. Exploitation requires...

ALSA-2023:1693 Moderate: postgresql security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: Extension scripts replace objects not belonging to the extension. CVE-2022-2625 postgresql: Client memory disclosure when connecting with Kerberos to modified server CVE-2022-41862 For more...

postgresql:13 security update

An update is available for module.pgaudit, module.postgres-decoderbufs, postgresql, pgrepack, postgres-decoderbufs, module.postgresql, pgaudit, module.pgrepack. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

postgresql: Client memory disclosure when connecting with Kerberos to modified server

A flaw was found In PostgreSQL. A modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions, a server can cause a libpq client to over-read and report an error message containing uninitialized bytes...

Moderate: Red Hat Security Advisory: postgresql:13 security update

An update for the postgresql:13 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...