KLA62090 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Memor...

Adobe Bridge Multiple Vulnerabilities (APSB23-57) - Windows

Adobe Bridge is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:bridgecc"; ifdescription...

PT-2023-30382 · WordPress · Scott Paterson Easy Paypal Shopping Cart

Name of the Vulnerable Software and Affected Versions: Scott Paterson Easy PayPal Shopping Cart plugin versions = 1.1.10 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with contributor or higher permissions. This allows for malicious script...

PT-2023-7080 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions 2023.5 and earlier Adobe ColdFusion versions 2021.11 and earlier Description: The issue is related to Deserialization of Untrusted Data, which could result in Arbitrary code execution. Exploitation of this issue does...

Medium: vim

Issue Overview: Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist...

Zoom Client < 5.15.10 DoS Vulnerability (ZSB-23048) - Windows

The Zoom Client is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom";...

Intel Rapid Storage Technology Software Advisory - Lenovo Support US

No description provided...

NetApp SnapCenter Privilege Escalation Vulnerability - Lenovo Support US

No description provided...

CVE-2023-47628 Session Expiration Misconfiguration in datahub

DataHub is an open-source metadata platform. DataHub Frontend's sessions are configured using Play Framework's default settings for stateless session which do not set an expiration time for a cookie. Due to this, if a session cookie were ever leaked, it would be valid forever. DataHub uses a...

PT-2023-6990 · Siemens · Scalance Xb205-3

Name of the Vulnerable Software and Affected Versions: SCALANCE XB205-3 SC, PN versions prior to V4.5 SCALANCE XB205-3 ST, E/IP versions prior to V4.5 Description: The issue is related to the use of a hardcoded cryptographic key in the software of industrial switches. This could allow a remote...

PT-2023-7150 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.006.20360 and earlier Adobe Acrobat Reader versions 20.005.30524 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. This...

PT-2023-7157 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions ID18.5 and earlier Adobe InDesign versions ID17.4.2 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage thi...

PT-2023-7344 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions ID18.5 and earlier Adobe InDesign versions ID17.4.2 and earlier Description: The issue is related to an out-of-bounds read that could lead to disclosure of sensitive memory. An attacker could leverage this to bypass...

PT-2023-7137 · Adobe · Audition

Name of the Vulnerable Software and Affected Versions: Adobe Audition versions 24.0 and earlier Adobe Audition versions 23.6.1 and earlier Description: The issue is related to an Access of Uninitialized Pointer, which could lead to disclosure of sensitive memory. An attacker could leverage this t...

PT-2023-7372 · Adobe · Premiere Pro

Name of the Vulnerable Software and Affected Versions: Adobe Premiere Pro versions 24.0 and earlier Adobe Premiere Pro versions 23.6 and earlier Description: The issue is related to an Access of Uninitialized Pointer, which could lead to disclosure of sensitive memory. An attacker could leverage...

PT-2023-7388 · Intel · Intel Connectivity Performance Suite

Name of the Vulnerable Software and Affected Versions: Intel Connectivity Performance Suite versions prior to 2.1123.214.2 Description: The issue is related to improper access control in the user mode driver for Intel Connectivity Performance Suite, which may allow an unauthenticated user to...

PT-2023-7391 · Intel · Intel Arc Control

Name of the Vulnerable Software and Affected Versions: IntelR ArcTM Control software versions prior to 1.73.5335.2 Description: The issue is related to incorrect default permissions in some IntelR ArcTM Control software, which may allow an authenticated user to potentially enable escalation of...

PT-2023-7380 · Fortinet · Fortimanager +1

Name of the Vulnerable Software and Affected Versions: Fortinet FortiAnalyzer and FortiManager versions 7.0.0 through 7.0.8 Fortinet FortiAnalyzer and FortiManager versions 7.2.0 through 7.2.3 Fortinet FortiAnalyzer and FortiManager version 7.4.0 Description: A use of hard-coded credentials issue...

PT-2023-18421 · Intel +1 · Intel Qat Library +1

Name of the Vulnerable Software and Affected Versions: IntelR QAT Library versions prior to 22.07.1 Description: The issue is related to improper buffer restrictions, which may allow a privileged user to potentially enable information disclosure via local access. Recommendations: For versions pri...

PT-2023-6919 · Fortinet · Fortiwlm

Name of the Vulnerable Software and Affected Versions: Fortinet FortiWLM versions 8.2.2 through 8.6.5 Fortinet FortiWLM versions 8.3.0 through 8.3.2 Fortinet FortiWLM versions 8.4.0 through 8.4.2 Fortinet FortiWLM versions 8.5.0 through 8.5.4 Description: The issue is related to an improper...