20533 matches found
CVE-2024-39384
CVE-2024-39384 affects Adobe Premiere Pro versions 24.5, 23.6.8 and earlier, with an out-of-bounds write that can result in arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must open a malicious file). According to APSB24-58, Adobe releas...
CVE-2024-39384 Premiere Pro | Out-of-bounds Write (CWE-787)
Premiere Pro versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2024-39385 Premiere Pro | Use After Free (CWE-416)
Premiere Pro versions 24.5, 23.6.8 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...
CVE-2024-39385 Premiere Pro | Use After Free (CWE-416)
Premiere Pro versions 24.5, 23.6.8 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...
CVE-2024-39385
CVE-2024-39385 affects Adobe Premiere Pro versions 24.5, 23.6.8 and earlier. The issue is a Use-After-Free vulnerability that could disclose memory and potentially bypass mitigations like ASLR. Exploitation requires user interaction (victim opens a malicious file). Multiple connected sources corr...
RHSA-2014:0037 Red Hat Security Advisory: jasperreports-server-pro security, bug fix, and enhancement update
Bulletin has no description...
Adobe Premiere Pro 资源管理错误漏洞
Adobe Premiere Pro is a suite of video editing software for non-linear editing from Audobee Adobe USA. Adobe Premiere Pro suffers from a Resource Management Error vulnerability that stems from being affected by a post-release reuse vulnerability that could lead to a sensitive memory disclosure...
Adobe Premiere Pro 缓冲区错误漏洞
Adobe Premiere Pro is a suite of video editing software for non-linear editing from Adobe USA. A buffer error vulnerability exists in Adobe Premiere Pro versions 23.6.8 and earlier and 24.5 and earlier, which stems from being affected by an out-of-bounds write vulnerability that could lead to the...
CVE-2024-8750
Cross-site Scripting XSS vulnerability in idoit pro version 28. This vulnerability allows an attacker to retrieve session details of an authenticated user due to lack of proper sanitization of the following parameters id,lang,mNavID,name,pID,treeNode,type,view...
CVE-2024-8750
Cross-site Scripting XSS vulnerability in idoit pro version 28. This vulnerability allows an attacker to retrieve session details of an authenticated user due to lack of proper sanitization of the following parameters id,lang,mNavID,name,pID,treeNode,type,view...
CVE-2024-8749
SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially crafted query to the ID parameter in /var/www/html/src/classes/modules/api/model/cmdb/isysapimodelcmdbobjectsbyrelation.class.php and retrieve all the information stored in the...
CVE-2024-8749
SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially crafted query to the ID parameter in /var/www/html/src/classes/modules/api/model/cmdb/isysapimodelcmdbobjectsbyrelation.class.php and retrieve all the information stored in the...
Adobe Releases Security Updates for Multiple Products
Adobe released security updates to address multiple vulnerabilities in Adobe software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the...
CVE-2024-8750 Cross-site Scripting vulnerability in Idoit pro
Cross-site Scripting XSS vulnerability in idoit pro version 28. This vulnerability allows an attacker to retrieve session details of an authenticated user due to lack of proper sanitization of the following parameters id,lang,mNavID,name,pID,treeNode,type,view...
CVE-2024-8750 Cross-site Scripting vulnerability in Idoit pro
Cross-site Scripting XSS vulnerability in idoit pro version 28. This vulnerability allows an attacker to retrieve session details of an authenticated user due to lack of proper sanitization of the following parameters id,lang,mNavID,name,pID,treeNode,type,view...
CVE-2024-8750
CVE-2024-8750 concerns i-doit pro (version 28) with a Cross-site Scripting (XSS) flaw caused by insufficient sanitization of the parameters id, lang, mNavID, name, pID, treeNode, type, and view. Exploitation could allow an attacker to retrieve session details from an authenticated user. The publi...
CVE-2024-8749 SQL Injection vulnerability in Idoit pro
SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially crafted query to the ID parameter in /var/www/html/src/classes/modules/api/model/cmdb/isysapimodelcmdbobjectsbyrelation.class.php and retrieve all the information stored in the...
CVE-2024-8749 SQL Injection vulnerability in Idoit pro
SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially crafted query to the ID parameter in /var/www/html/src/classes/modules/api/model/cmdb/isysapimodelcmdbobjectsbyrelation.class.php and retrieve all the information stored in the...
CVE-2024-8749
Affects idoit pro v28. The SQL injection vulnerability resides in the API endpoint component isys_api_model_cmdb_objects_by_relation.class.php (ID parameter). Exploitation could allow an attacker to retrieve full database information. Based on the connected PT-2024-39224 entry, the issue can be e...
