Lucene search
+L

4595 matches found

Cvelist
Cvelist
added 2024/08/14 8:19 a.m.31 views

CVE-2024-41861 Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing PSD file

Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

5.5CVSS0.00228EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/14 8:19 a.m.18 views

CVE-2024-41860 Adobe Substance 3D Sampler Memory Corruption Vulnerability I, when parsing PSD file

Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

5.5CVSS5.1AI score0.00228EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/14 8:19 a.m.58 views

CVE-2024-41860

Summary: CVE-2024-41860 affects Adobe Substance 3D Sampler (Substance3D - Sampler) versions 4.5 and earlier. The vulnerability is an out-of-bounds read in PSD/file parsing that could lead to disclosure of sensitive memory and potentially bypass mitigations such as ASLR. Exploitation requires user...

5.5CVSS5.1AI score0.00228EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/08/14 8:19 a.m.24 views

CVE-2024-41860 Adobe Substance 3D Sampler Memory Corruption Vulnerability I, when parsing PSD file

Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

5.5CVSS0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/14 8:19 a.m.27 views

CVE-2024-41863 Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability III, when parsing DNG file

Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

5.5CVSS0.00228EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/14 8:19 a.m.19 views

CVE-2024-41863 Adobe Substance 3D Sampler Memory Corruption Out-of-Bounds-READ Vulnerability III, when parsing DNG file

Substance3D - Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

5.5CVSS6.1AI score0.00228EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/14 8:19 a.m.68 views

CVE-2024-41863

CVE-2024-41863 (Adobe Substance 3D Sampler) affects Substance3D Sampler 4.5 and earlier with an out-of-bounds read that could disclose memory and bypass ASLR. Exploitation requires a user to open a malicious file. Remediation is available: Adobe’s APSB24-65 advisory notes a critical/important upd...

5.5CVSS5.1AI score0.00228EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 2024/08/13 2:29 p.m.823 views

Exploit for Heap-based Buffer Overflow in Adobe Acrobat_Dc

CVE-2021-39863 - Adobe Acrobat Reader DC 21.005.20048.43252...

7.8CVSS7.6AI score0.13191EPSS
SaveExploits1
NVD
NVD
added 2024/08/02 7:16 a.m.37 views

CVE-2024-39396

InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

5.5CVSS0.00233EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/02 6:47 a.m.25 views

CVE-2024-39396 Adobe Indesign 2024 PCX File Parsing Out Of Bound Read

InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

5.5CVSS0.00233EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/02 6:47 a.m.54 views

CVE-2024-39396

CVE-2024-39396 affects Adobe InDesign Desktop for ID18.5.2, ID19.3 and earlier, due to an out-of-bounds read in the PCX parsing path that can disclose memory. Exploitation requires user interaction (victim opens a malicious file). Mitigation details across connected sources indicate a patch path ...

5.5CVSS5.3AI score0.00233EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/07/09 8:15 p.m.22 views

CVE-2024-34140

Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

5.5CVSS0.00333EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2024/07/09 8:15 p.m.36 views

CVE-2024-34140

Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

5.5CVSS6.2AI score0.00333EPSS
SaveExploits0
CVE
CVE
added 2024/07/09 7:26 p.m.72 views

CVE-2024-34140

CVE-2024-34140 affects Adobe Bridge as shipped in Bridge versions 14.0.4, 13.0.7, 14.1 and earlier. The issue is an out-of-bounds read that could disclose memory and potentially bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). The connected sources corroborate ...

5.5CVSS5.6AI score0.00333EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/09 7:26 p.m.18 views

CVE-2024-34140 Adobe Bridge PDF File Parsing Memory Corruption

Bridge versions 14.0.4, 13.0.7, 14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...

5.5CVSS6.3AI score0.00333EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/07/09 12:0 a.m.7 views

PT-2024-8566 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 14.1 and earlier Adobe Bridge versions 14.0.4 Adobe Bridge versions 13.0.7 Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could...

5.5CVSS6.1AI score0.00333EPSS
SaveExploits0References5
Schneier on Security
Schneier on Security
added 2024/07/03 3:27 p.m.52 views

New Open SSH Vulnerability

Its a serious one: The vulnerability, which is a signal handler race condition in OpenSSHs server sshd, allows unauthenticated remote code execution RCE as root on glibc-based Linux systems; that presents a significant security risk. This race condition affects sshd in its default configuration. ...

8.1CVSS8.7AI score0.99506EPSS
SaveExploits70
OpenVAS
OpenVAS
added 2024/07/03 12:0 a.m.53 views

QNAP QuTS hero OpenSSH RCE Vulnerability (QSA-24-31, regreSSHion)

QNAP QuTS hero is prone to a remote code execution RCE vulnerability in OpenSSH dubbed SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.1CVSS8AI score0.99506EPSS
SaveExploits70References7
NVD
NVD
added 2024/07/01 3:15 p.m.34 views

CVE-2024-21460

Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space...

7.1CVSS0.00101EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/01 2:17 p.m.46 views

CVE-2024-21460 Use of Insufficiently Random Values in Core

Information disclosure when ASLR relocates the IMEM and Secure DDR portions as one chunk in virtual address space...

7.1CVSS0.00101EPSS
SaveExploits0References1
Rows per page
Query Builder