CVE-2023-42867

CVE-2023-42867 affects Apple GarageBand prior to fix; issue stems from insufficient validation of process entitlement and Team ID, potentially allowing an app to obtain root privileges. The known fix is GarageBand 10.4.9, which includes an updated validation safeguard. According to the sources, t...

WordPress Back Button Widget Plugin < 1.6.4 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpfactory:backbuttonwidget"; if description...

CVE-2024-35141

CVE-2024-35141 affects IBM Security Verify Access Docker 10.0.0–10.0.6. Root cause: execution of unnecessary privileges enables local privilege escalation. Impact: local attacker could escalate privileges (high). IBM bulletins indicate fixes in 10.0.7/FP0 or later; remediation is to upgrade to th...

CVE-2023-30443

CVE-2023-30443 affects IBM Db2 for Linux/ UNIX/ Windows (incl. Db2 Connect Server) on 10.5, 11.1, and 11.5, with denial of service caused by a specially crafted query. Connected sources consistently describe multiple variants of the same vulnerability across IBM Db2 components and related Cloud P...

Ubuntu: Security Advisory (USN-7159-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-21586

CVE-2023-21586 — Adobe Acrobat Reader : NULL pointer dereference vulnerability affecting versions 22.003.20282 and earlier, 22.003.20281 and earlier, and 20.005.30418 and earlier. An unauthenticated attacker could cause an application denial-of-service, with exploit requiring user interaction (vi...

CVE-2022-44518

CVE-2022-44518 affects Adobe Acrobat Reader DC (and earlier/Classic variants) with a use-after-free vulnerability that could lead to arbitrary code execution in the current user context. The issue requires user interaction: a victim must open a malicious file. Public details list affected product...

CVE-2022-44519

CVE-2022-44519 affects Acrobat Reader DC (versions 22.001.20085 and earlier, 20.005.3031x and earlier, 17.012.30205 and earlier). Root cause: a use-after-free in a component used when opening a malicious file, leading to possible disclosure of sensitive memory and the ability to bypass ASLR. Expl...

CVE-2022-44512

Adobe Acrobat Reader DC is affected by out-of-bounds write (CWE-787) in parsing that could lead to arbitrary code execution in the current user context. Affected versions include 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. Exploitation requires user interacti...

CVE-2022-44516

CVE-2022-44516 is an out-of-bounds read in Acrobat Reader DC when parsing a crafted file, potentially bypassing ASLR. Affected: Acrobat Reader DC 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier. Exploitation requires user interaction (the victim must open a malicious ...

CVE-2022-44520

CVE-2022-44520 affects Adobe Acrobat/Reader: Acrobat Reader DC versions 22.001.20085 and earlier, 20.005.3031x and earlier, and 17.012.30205 and earlier. It is a use‑after‑free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user i...

CVE-2022-44513

CVE-2022-44513 affects Adobe Acrobat Reader DC (versions including 22.001.20085 and earlier; 20.005.3031x and earlier; 17.012.30205 and earlier). The vulnerability is an out-of-bounds write in the processing of certain files that could lead to arbitrary code execution in the context of the curren...

SUSE: Security Advisory (SUSE-SU-2024:4360-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-c4377d35e6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-44149

CVE-2023-44149 affects the WordPress plugin Brands for WooCommerce (versions

CVE-2023-44147

CVE-2023-44147 affects the WordPress Comment Blacklist Updater plugin up to version 1.1.0. The root cause is a missing/incorrect authorization in access control (Broken Access Control), exploitable by unauthenticated users to exploit misconfigurations. The CVSS 3.1 base score is 5.3 (Medium). Rem...

CVE-2023-41952

CVE-2023-41952 affects FluentForm for WordPress (

CVE-2023-41875

CVE-2023-41875 describes a Missing Authorization vulnerability in the WordPress plugin WP Directory Kit (versions

CVE-2023-41951

CVE-2023-41951 affects rtMedia for WordPress, BuddyPress and bbPress (vulnerable from n/a up to and including 4.6.14). It is a Missing Authorization/Broken Access Control vulnerability allowing exploitation via incorrectly configured access levels. Patch 4.6.15 fixes the issue; base CVSS v3.1 sco...

CVE-2023-41873

CVE-2023-41873 targets the WordPress plugin “miniOrange SAML SP Single Sign On.” The issue is a Missing Authorization vulnerability (Broken Access Control) in the plugin’s access checks, allowing exploitation of misconfigured security levels for SAML SSO. Affected: versions up to 5.0.4 (from n/a ...