CVE-2018-4991

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitation could lead to a security bypass...

CVE-2018-4991

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable improper certificate validation vulnerability (CVE-2018-4991) that could lead to a security bypass. Affected product: Creative Cloud Desktop. Root cause: improper certificate validation. Impact: security b...

CVE-2018-4873

CVE-2018-4873 affects Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier. The root cause is an unquoted search path, enabling local privilege escalation if exploited. Public sources describe this as an elevation of privilege vulnerability in Creative Cloud with potential impa...

CVE-2018-4992

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper input validation vulnerability. Successful exploitation could lead to local privilege escalation...

CVE-2018-4873: Unquoted Search Path or Element

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Unquoted Search Path vulnerability. Successful exploitation could lead to local privilege escalation...

PT-2018-16583

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier Description The issue concerns an Unquoted Search Path vulnerability that could be exploited to achieve local privilege escalation. Recommendations For Adobe Creative Clou...

PT-2018-16691

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier Description The issue is related to improper input validation, which could lead to local privilege escalation if successfully exploited. Recommendations For Adobe Creative...

CVE-2018-4991: Improper Certificate Validation

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitation could lead to a security bypass...

CVE-2018-4992: Improper Input Validation

Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper input validation vulnerability. Successful exploitation could lead to local privilege escalation...

PT-2018-16690

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier Description The issue is related to an improper certificate validation, which could lead to a security bypass if successfully exploited. Recommendations For Adobe Creative...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Connect, Adobe Flash Player, and Adobe Creative Cloud Desktop Application. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to revi...

[SECURITY] Fedora 27 Update: torbrowser-launcher-0.2.9-1.fc27

Tor Browser Launcher is intended to make Tor Browser easier to install and use for GNU/Linux users. You install torbrowser-launcher from your distribution's package manager and it handles everything else: Downloads and installs the most recent version of Tor Browser in your lan guage and for your...

Gdk-Pixbuf JPEG gdk_pixbuf__jpeg_image_load_increment Code Execution Vulnerability

Summary An exploitable heap overflow vulnerability exists in the gdkpixbufjpegimageloadincrement functionality of Gdk-Pixbuf 2.36.6. A specially crafted jpeg file can cause a heap overflow resulting in remote code execution. An attacker can send a file or url to trigger this vulnerability. Tested...

SoftBank PrimeDrive Desktop Application Code Execution Vulnerability

SoftBank PrimeDrive Desktop Application is a set of client applications from SoftBank Japan that provide online storage services for PrimeDrive. A security vulnerability exists in SoftBank PrimeDrive Desktop Application 1.4.4 and earlier versions. An attacker can exploit the vulnerability to...

CVE-2017-2167

Untrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4 and earlier allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory...

PT-2017-15227

Name of the Vulnerable Software and Affected Versions PrimeDrive Desktop Application versions 1.4.4 and earlier Description The issue allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory due to an untrusted search path vulnerability...

CVE-2017-2167: Untrusted Search Path

Untrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4 and earlier allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory...

CVE-2017-2108

Untrusted search path vulnerability in PrimeDrive Desktop Application 1.4.3 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in PrimeDrive Desktop Application 1.4.3 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2108

CVE-2017-2108 affects PrimeDrive Desktop Application (1.4.3 and earlier). The vulnerability is an untrusted search path/DLL hijacking in the installer, allowing arbitrary code execution with the privileges of the user during installation via a Trojan horse DLL located in an unspecified directory ...