7349 matches found
CVE-2024-52982 Animate | Improper Input Validation (CWE-20)
Animate versions 23.0.8, 24.0.5 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2024-52982
Adobe Animate (versions 23.0.8, 24.0.5 and earlier) is affected by an Improper Input Validation vulnerability (CVE-2024-52982) that could allow arbitrary code execution in the context of the current user, requiring the user to open a malicious file. Connected sources confirm the issue and that up...
CVE-2024-10495
An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects...
CVE-2024-10496 Out of bounds read in BuildFontMap in fontmgr.cpp in NI LabVIEW
An out of bounds read due to improper input validation in BuildFontMap in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q...
CVE-2024-10496
CVE-2024-10496 concerns NI LabVIEW, where an out-of-bounds read arises from improper input validation in the function BuildFontMap (fontmgr.cpp). Affected product/version: LabVIEW 2024 Q3 and earlier. Impact stated in sources: disclosure of information or arbitrary code execution if a user opens ...
CVE-2024-10495 Out of bounds read when loading the font table in fontmgr.cpp in NI LabVIEW
An out of bounds read due to improper input validation when loading the font table in fontmgr.cpp in NI LabVIEW may disclose information or result in arbitrary code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects...
CVE-2024-10495
CVE-2024-10495 concerns an out-of-bounds read in NI LabVIEW’s font loading: fontmgr.cpp font table loading can disclose information or allow arbitrary code execution. Exploitation requires a user to open a specially crafted VI, affecting LabVIEW 2024 Q3 and earlier. Connected sources also referen...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.7
Red Hat OpenShift Service Mesh Containers for 2.5.7 This update has a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift...
Improper Input Validation
Synapse is vulnerable to Improper Input Validation. The vulnerability is due to improper validation of invites received over federation, allowing a malicious server to send crafted invites that disrupt the affected user's ability to perform /sync operations...
PT-2024-9901 · Adobe · Experience Manager
Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.21 and earlier Description: The issue is related to improper input validation, which could result in a security feature bypass. A low-privileged attacker could leverage this to bypass security measures an...
Adobe Animate 23.x < 23.0.9 / 24.x < 24.0.6 Multiple Vulnerabilities (APSB24-96)
The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 23.0.9 or 24.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-96 advisory. - Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow Wrap or...
NI LabVIEW 安全漏洞
NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW that originates from improper input validation of HeapObjMapImpl.cpp, resulting in an out-of-bounds read that could disclose information ...
PT-2024-9900 · Adobe · Experience Manager
Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.21 and earlier Description: The issue is related to an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability t...
Adobe Animate 23.x < 23.0.9 / 24.x < 24.0.6 Multiple Vulnerabilities (APSB24-96)
The version of Adobe Animate installed on the remote Windows host is prior to 23.0.9 or 24.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-96 advisory. - Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow Wrap or Wraparound...
CVE-2024-12355
A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs to be approached...
CVE-2024-12353
A vulnerability, which was classified as problematic, has been found in SourceCodester Phone Contact Manager System 1.0. This issue affects the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation of the argument name leads to improper input validation. Attacking...
CVE-2024-12355 SourceCodester Phone Contact Manager System ContactBook.cpp adding input validation
A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs to be approached...
SourceCodester Phone Contact Manager System 安全漏洞
SourceCodester Phone Contact Manager System is an open source phone contact management system from SourceCodester. A security vulnerability exists in version 1.0 of the SourceCodester Phone Contact Manager System, which stems from an incorrect input validation issue contained in the...
ROS-20241209-02
A vulnerability in some IntelR TDX modules is related to improper input validation. Exploitation of the vulnerability could allow a privileged attacker to potentially escalate privileges through local access. Vulnerability related to processor instruction sequencing causes unexpected behavior on...
