153 matches found
Open-xchange OX App Suite 安全特征问题特征问题漏洞
Open-xchange OX App Suite is a Web cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in Open-xchange OX App Suite, which can be exploited by...
CVE-2021-43017: Creation of Temporary File in Directory with Insecure Permissions
Adobe Creative Cloud version 5.5 and earlier are affected by an Application denial of service vulnerability in the Creative Cloud Desktop installer. An authenticated attacker with root privileges could leverage this vulnerability to achieve denial of service by planting a malicious file on the...
Adobe Creative Cloud Desktop Application 安全漏洞
A denial of service vulnerability exists in Adobe Creative Cloud Desktop Application 5.5 and earlier, which is the management software for Creative Cloud applications and services. The vulnerability stems from the creation of temporary files in a directory with incorrect permissions. An attacker...
CVE-2021-28547: Improper Input Validation
Adobe Creative Cloud Desktop Application for macOS version 5.3 and earlier is affected by a privilege escalation vulnerability that could allow a normal user to delete the OOBE directory and get permissions of any directory under the administrator authority...
CVE-2021-28613: Creation of Temporary File in Directory with Insecure Permissions
Adobe Creative Cloud Desktop Application version 5.4 and earlier is affected by a file handling vulnerability that could allow an attacker to arbitrarily overwrite a file. Exploitation of this issue requires local access, administrator privileges and user interaction...
CVE-2021-28581
Adobe Creative Cloud Desktop 3.5 and earlier is affected by an Uncontrolled Search Path vulnerability that can lead to local privilege escalation. The root cause is an uncontrolled search path element in the application's runtime, enabling a high-privilege context to be gained on the local machin...
CVE-2021-28581: Uncontrolled Search Path Element
Adobe Creative Cloud Desktop 3.5 and earlier is affected by an uncontrolled search path vulnerability that could result in elevation of privileges. Exploitation of this issue requires user interaction in that a victim must log on to the attacker's local machine...
CVE-2021-28594: Uncontrolled Search Path Element
Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Uncontrolled Search Path Element vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this...
CVE-2021-28633: Creation of Temporary File in Directory with Insecure Permissions
Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Insecure temporary file creation vulnerability. An attacker could leverage this vulnerability to cause arbitrary file overwriting in the context of the current user. Exploitation of this issue requires...
Open-xchange OX App Suite code issue vulnerability (CNVD-2022-28453)
Open-xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange Open-xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. A code issue vulnerability exists in Open-xchange OX App Suite, no detailed vulnerability details are...
PT-2021-6643 · Adobe · Adobe Creative Cloud Desktop Application
Name of the Vulnerable Software and Affected Versions: Adobe Creative Cloud Desktop Application version 2.4 and earlier Description: The issue is related to an insecure temporary file creation, which could allow an attacker to overwrite arbitrary files in the context of the current user...
Alert: Hackers Exploit Adobe Reader 0-Day Vulnerability in the Wild
Adobe has released Patch Tuesday updates for the month of May with fixes for multiple vulnerabilities spanning 12 different products, including a zero-day flaw affecting Adobe Reader that's actively exploited in the wild. The list of updated applications includes Adobe Experience Manager, Adobe...
CVE-2021-21068
Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction...
CVE-2021-21078: Untrusted Search Path
Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction...
CVE-2021-21068: Creation of Temporary File in Directory with Insecure Permissions
Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction...
CVE-2021-21069: Improper Input Validation
Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction...
Vulnerabilities fixed in Adobe Creative Cloud
Adobe has fixed vulnerabilities in Creative Cloud Desktop Application. A malicious party can exploit the vulnerabilities to injecting system commands which are then executed by the application. Also, the vulnerabilities can be exploited to obtain elevated privileges and to overwrite arbitrary...
March 2021 Patch Tuesday – 82 Vulnerabilities, 10 Critical, Adobe
This month’s Microsoft Patch Tuesday addresses 82 vulnerabilities, of which 10 are rated with Critical severity. This follows an out-of-band security update on March 2 to address critical vulnerabilities in Microsoft Exchange. Adobe released patches today for its FrameMaker, Creative Cloud Deskto...
CVE-2020-24422
Adobe Creative Cloud Desktop Application version 5.2 and earlier and 2.1 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that ...