CVE-2024-1530

CVE-2024-1530 affects ECshop 4.1.8. The vulnerability is in an unknown functionality of the file /admin/view_sendlist.php, where manipulation leads to a SQL injection. The issue can be exploited remotely, and multiple sources note that the exploit has been disclosed publicly. Remediation details ...

CVE-2023-32462

Dell OS10 Networking Switches running 10.5.2.x and above have an OS command injection vulnerability in the remote user authentication path. The root cause is an OS command injection that allows a remote unauthenticated attacker to execute arbitrary OS commands, potentially taking over the system....

CVE-2023-28078

CVE-2023-28078 affects Dell OS10 Networking Switches versions 10.5.2.x and above . A vulnerability in the zeroMQ component when VLT is configured allows a remote unauthenticated attacker to cause information disclosure and potential Denial of Service by sending a large volume of requests. The iss...

CVE-2024-20750

CVE-2024-20750 affects Adobe Substance 3D Designer, specifically versions 13.1.0 and earlier. The vulnerability is an out-of-bounds read during parsing of a crafted file, which could cause a read past the end of an allocated memory structure and allow code execution in the context of the current ...

CVE-2024-20738

Adobe FrameMaker Publishing Server (versions 2022.1 and earlier) is affected by an Improper Authentication vulnerability that could bypass security features and allow an unauthenticated attacker to gain unauthorized access. The issue enables authentication bypass without user interaction and is r...

CVE-2024-20726

CVE-2024-20726 affects Adobe Acrobat Reader DC (Continuous and Classic) versions including 20.005.30539 and 23.008.20470 and earlier. The issue is an out-of-bounds write that could lead to arbitrary code execution in the user context; exploitation requires the user to open a malicious file. Publi...

CVE-2024-20731

CVE-2024-20731 affects Adobe Acrobat Reader (DC/Continuous) versions 20.005.30539, 23.008.20470 and earlier. It is described as a Use-After-Free in PDAnnot destroy that can lead to arbitrary code execution in the context of the current user, requiring user interaction (victim opens a malicious fi...

CVE-2024-20730

Public description states an Integer Overflow/Wraparound in Adobe Acrobat Reader (versions 20.005.30539, 23.008.20470 and earlier) could lead to arbitrary code execution with user interaction. No additional technical details are provided in the connected documents.

CVE-2024-20727

CVE-2024-20727 affects Adobe Acrobat Reader DC (Continuous and Classic) across Windows and macOS. It describes an out-of-bounds write vulnerability in parsing JPEG2000 that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim mu...

CVE-2024-20733

CVE-2024-20733 affects Adobe Acrobat Reader/DC (and related Continuous/Classic releases) with an Improvident input validation in font parsing (OTF) that can cause a denial-of-service. The issue is triggered when a user opens a specially crafted file, leading to an application crash. The vulnerabi...

CVE-2024-20734

CVE-2024-20734 affects Adobe Acrobat Reader DC/Continuous and related variants, with a Use-After-Free in AcroForm that can disclose memory content. Affected versions include 20.005.30539 and 23.008.20470 and earlier. Exploitation requires user interaction (opening a malicious file) and could bypa...

CVE-2024-20748

Adobe Acrobat Reader (DC/Classic/Continuous) versions such as 20.005.30539 and 23.008.20470 and earlier are affected by CVE-2024-20748, an out-of-bounds read vulnerability in the font avar SegmentMaps that can disclose memory and potentially bypass ASLR. Exploitation requires user interaction (vi...

CVE-2024-20728

Acrobat Reader 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The vulnerability is described in C...

CVE-2024-20736

Adobe Acrobat Reader DC/Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a local out-of-bounds read vulnerability that could disclose memory and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file). CVSSv3.1 base score 5.5 (Medium); confidentia...

CVE-2024-20749

CVE-2024-20749 affects Adobe Acrobat Reader and related components. The advisory notes an out-of-bounds read vulnerability in Acrobat Reader versions such as 20.005.30539, 23.008.20470 and earlier, allowing disclosure of sensitive memory and potential bypass of mitigations like ASLR. Exploitation...

CVE-2024-20729

CVE-2024-20729 affects Adobe Acrobat Reader (DC/Continuous) with Use-After-Free in the Annot3D object zoom handling, impacting v20.005.30539, v23.008.20470 and earlier. The issue can lead to arbitrary code execution in the context of the current user and requires the user to open a malicious file...

CVE-2024-20735

CVE-2024-20735 affects Adobe Acrobat Reader/DC clients (e.g., Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier) via an out-of-bounds read that can disclose memory contents and bypass ASLR. Exploitation requires user interaction (victim opens a malicious file); impact is confidential...

Design/Logic Flaw

Substance3D - Painter versions 9.1.1 and earlier are affected by a Write-what-where Condition vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Buffer overflow

Substance3D - Painter versions 9.1.1 and earlier are affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Design/Logic Flaw

Substance3D - Painter versions 9.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a...