CVE-2024-10183 Arbitrary File Write Vulnerability in Jamf Remote Assist Leading to Privilege Escalation

A vulnerability in Jamf Pro's Jamf Remote Assist tool allows a local, non-privileged user to escalate their privileges to root on MacOS systems...

CVE-2024-10183 Arbitrary File Write Vulnerability in Jamf Remote Assist Leading to Privilege Escalation

A vulnerability in Jamf Pro's Jamf Remote Assist tool allows a local, non-privileged user to escalate their privileges to root on MacOS systems...

CVE-2024-10183

CVE-2024-10183 describes an arbitrary file write vulnerability in Jamf Pro’s Jamf Remote Assist tool that enables a local, non-privileged user to escalate privileges to root on macOS. The connected sources confirm the affected component and the privilege-escalation impact, but do not provide conc...

WordPress ProfilePress Pro Plugin <= 4.11.1 is vulnerable to Broken Authentication

Software ProfilePress Pro Type Plugin Vulnerable versions = 4.11.1 Fixed in 4.11.2 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-9947 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID adce137ed816 Credits wesl...

The vulnerability of Intel Quartus Prime Pro’s automated design system lies in its uncontrolled search path, which allows attackers to escalate their privileges.

The vulnerability of Intel Quartus Prime Pro automated design systems is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

Jamf Pro 安全漏洞

Jamf Pro is an Apple device management solution from Jamf USA. A security vulnerability exists in Jamf Pro that stems from a flaw in the Jamf Remote Assist tool that allows a local, unprivileged user to elevate their privileges to root privileges on MacOS systems...

CVE-2024-50037

In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Only cleanup deferred I/O if necessary Commit 5a498d4d06d6 "drm/fbdev-dma: Only install deferred I/O if necessary" initializes deferred I/O only if it is used. drmfbdevdmafbdestroy however calls fbdeferrediocleanup...

Adobe Premiere Pro < 14.5 Arbitrary Code Execution (APSB20-64) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 14.5. It is, therefore, affected by a vulnerability as referenced in the APSB20-64 advisory. - Adobe Premiere Pro version 14.4 and earlier is affected by an uncontrolled search path element that could result in...

Adobe Premiere Pro < 14.3 Multiple Arbitrary Code Execution (APSB20-38) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 14.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-38 advisory. - Adobe Premiere Pro versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation...

Adobe Premiere Pro < 15.4.2 Multiple Vulnerabilities (APSB21-100) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 15.4.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-100 advisory. - Adobe Premiere Pro version 15.4.1 and earlier is affected by a memory corruption vulnerability due to insecur...

Adobe Premiere Pro < 15.4.3 / 22.0.0 < 22.1.1 Multiple Vulnerabilities (APSB21-117) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 15.4.3, 22.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-117 advisory. - Adobe Premiere Pro versions 22.0 and earlier and 15.4.2 and earlier are affected by an out-of-bounds...

Adobe Premiere Pro < 15.4 Arbitrary Code Execution (APSB21-56) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 15.4. It is, therefore, affected by a vulnerability as referenced in the APSB21-56 advisory. - Adobe Premiere Pro version 15.2 and earlier is affected by a memory corruption vulnerability when parsing a specially...

Adobe Premiere Pro < 13.1.3 Arbitrary code execution (APSB19-33)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 13.1.3. It is, therefore, affected by a vulnerability as referenced in the APSB19-33 advisory. - Adobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading dll hijacking vulnerability...

Adobe Premiere Pro < 14.2 Information Disclosure (APSB20-27) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 14.2. It is, therefore, affected by a vulnerability as referenced in the APSB20-27 advisory. - Adobe Premiere Pro versions 14.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead...

Adobe Premiere Pro < 13.1.3 Arbitrary code execution (APSB19-33) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 13.1.3. It is, therefore, affected by a vulnerability as referenced in the APSB19-33 advisory. - Adobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading dll hijacking vulnerability...

Adobe Premiere Pro < 15.4.1 Arbitrary Code Execution (APSB21-67) (macOS)

The version of Adobe Premiere Pro installed on the remote macOS host is prior to 15.4.1. It is, therefore, affected by a vulnerability as referenced in the APSB21-67 advisory. - Adobe Premiere Pro version 15.4 and earlier are affected by a memory corruption vulnerability. An unauthenticated...

CVE-2024-49290

Cross-Site Request Forgery CSRF vulnerability in Gora Tech LLC Cooked Pro allows Cross Site Request Forgery.This issue affects Cooked Pro: from n/a before 1.8.0...

CVE-2024-49290

Cross-Site Request Forgery CSRF vulnerability in Gora Tech LLC Cooked Pro allows Cross Site Request Forgery.This issue affects Cooked Pro: from n/a before 1.8.0...

CVE-2024-49290 WordPress Cooked Pro plugin < 1.8.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Gora Tech LLC Cooked Pro allows Cross Site Request Forgery.This issue affects Cooked Pro: from n/a before 1.8.0...

CVE-2024-49290

CVE-2024-49290 pertains to a Cross-Site Request Forgery (CSRF) in Cooked Pro (WordPress plugin by Gora Tech LLC) affecting versions prior to 1.8.0. The linked sources note that the vulnerability is addressed in version 1.8.0 and advise upgrading to mitigate exposure. No exploit specifics are prov...