Adobe Reader < 20.005.30655 / 24.002.21005 Multiple Vulnerabilities (APSB24-57) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 20.005.30655 or 24.002.21005. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free...

Adobe Reader < 20.005.30655 / 24.002.21005 Multiple Vulnerabilities (APSB24-57)

The version of Adobe Reader installed on the remote Windows host is a version prior to 20.005.30655 or 24.002.21005. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Fre...

Adobe Acrobat < 20.005.30655 / 24.001.30159 / 24.002.21005 Multiple Vulnerabilities (APSB24-57) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 20.005.30655, 24.001.30159, or 24.002.21005. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a...

PT-2024-8097

Name of the Vulnerable Software and Affected Versions: Acrobat Reader versions 20.005.30636 through 24.002.20965 and earlier Description: The issue is related to a Time-of-check Time-of-use TOCTOU Race Condition that could lead to privilege escalation. Exploitation requires local low-privilege...

CVE-2024-23456: Improper Verification of Cryptographic Signature

Anti-tampering can be disabled under certain conditions without signature validation. This affects Zscaler Client Connector 4.2.0.190 with anti-tampering enabled...

CVE-2023-28806: Improper Verification of Cryptographic Signature

An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering. This issue affects Client Connector on Windows 4.2.0.190...

CVE-2024-38886

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Traffic Injection attack due to improper verification of the source of a communication channel...

CVE-2024-38886: Improper Verification of Source of a Communication Channel

An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Traffic Injection attack due to improper verification of the source of a communication channel...

CVE-2024-41258: Improper Verification of Cryptographic Signature

An issue was discovered in filestash v0.4. The usage of the ssh.InsecureIgnoreHostKey disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack...

PT-2024-28965

Name of the Vulnerable Software and Affected Versions matrix-sdk-crypto versions prior to 0.7.2 Description The UserIdentity::is verified method in the matrix-sdk-crypto crate does not take into account the verification status of the user's own identity while performing the check, potentially...

CVE-2024-40516: Improper Verification of Source of a Communication Channel

An issue in H3C Technologies Co., Limited H3C Magic RC3000 RC3000V100R009 allows a remote attacker to execute arbitrary code via the Routing functionality...

Authorization Bypass

org.opensearch.plugin, opensearch-observability is vulnerable to Authorization Bypass. The vulnerability is due to improper verification of the resource author, allowing attackers to access private tenant resources such as notebooks...

CVE-2024-38069: Improper Verification of Cryptographic Signature

Windows Enroll Engine Security Feature Bypass Vulnerability...

CVE-2024-20892

Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute privileged behaviors. User interaction is required for triggering this vulnerability...

CVE-2024-20892

Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute privileged behaviors. User interaction is required for triggering this vulnerability...

CVE-2024-20892

CVE-2024-20892 concerns Samsung Mobile devices and targets the FilterProvider component. The public reports state an improper verification of the signature in FilterProvider prior to SMR Jul-2024 Release 1, enabling a local attacker to trigger privileged behaviors. The exploit requires user inter...

CVE-2024-20892

Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute privileged behaviors. User interaction is required for triggering this vulnerability...

PT-2024-26015 · Samsung · Samsung Flow

Name of the Vulnerable Software and Affected Versions: Samsung Flow versions prior to 4.9.13.0 Description: The issue is related to improper verification of intent by a broadcast receiver in Samsung Flow, allowing local attackers to copy image files to external storage. Recommendations: For...

CVE-2024-34600: Undefined Security Weakness

Improper verification of intent by broadcast receiver vulnerability in Samsung Flow prior to version 4.9.13.0 allows local attackers to copy image files to external storage...

CVE-2024-37886: Improper Verification of Cryptographic Signature

useroidc app is an OpenID Connect user backend for Nextcloud. An attacker could potentially trick the app into accepting a request that is not signed by the correct server. It is recommended that the Nextcloud useroidc app is upgraded to 1.3.5, 2.0.0, 3.0.0, 4.0.0 or 5.0.0...