Adobe Animate 23.x < 23.0.8 / 24.x < 24.0.5 Multiple Vulnerabilities (APSB24-76)

The version of Adobe Animate installed on the remote Windows host is prior to 23.0.8 or 24.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-76 advisory. - Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that...

Mozilla Thunderbird < 131.0

The version of Thunderbird installed on the remote Windows host is prior to 131.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-50 advisory. - An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the...

Mozilla Firefox ESR < 128.3

The version of Firefox ESR installed on the remote Windows host is prior to 128.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-47 advisory. - An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the...

Foxit PDF Editor < 2024.3 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 2024.3. It is, therefore affected by multiple vulnerabilities: - A use-after-free vulnerability exists in the way Foxit Reade 2024.1.0.23997 handles a...

Exploit for Improper Privilege Management in Oracle Vm_Virtualbox

cve-2023-21987-poc Oracle VirtualBox VGA OOB-Read Vulnerab...

Foxit PDF Reader < 2024.2.3 Multiple Vulnerabilities

According to its version, the Foxit PDF Reader application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 2024.2.3. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability. This...

CVE-2024-39342

Entrust Instant Financial Issuance formerly known as Cardwizard 6.10.0, 6.9.0, 6.9.1, 6.9.2, and 6.8.x and earlier uses a DLL library i.e. DCG.Security.dll with a custom AES encryption process that relies on static hard-coded key values. These keys are not uniquely generated per installation of t...

CVE-2024-39342

Entrust Instant Financial Issuance (Cardwizard) versions 6.8.x–6.10.0 are affected by a flaw in the DCG.Security.dll AES implementation that uses static, hard-coded keys. The vulnerability is exacerbated by an encrypted password obtainable from WebAPI.cfg.xml (see CVE-2024-39341), allowing decryp...

CVE-2024-39342

Entrust Instant Financial Issuance formerly known as Cardwizard 6.10.0, 6.9.0, 6.9.1, 6.9.2, and 6.8.x and earlier uses a DLL library i.e. DCG.Security.dll with a custom AES encryption process that relies on static hard-coded key values. These keys are not uniquely generated per installation of t...

PT-2024-28460 · Entrust · Entrust Instant Financial Issuance

Name of the Vulnerable Software and Affected Versions: Entrust Instant Financial Issuance formerly known as Cardwizard versions 6.8.x and earlier, 6.9.0, 6.9.1, 6.9.2, 6.10.0 Description: The issue concerns the use of a DLL library with a custom AES encryption process that relies on static...

CVE-2024-39342

Entrust Instant Financial Issuance formerly known as Cardwizard 6.10.0, 6.9.0, 6.9.1, 6.9.2, and 6.8.x and earlier uses a DLL library i.e. DCG.Security.dll with a custom AES encryption process that relies on static hard-coded key values. These keys are not uniquely generated per installation of t...

Rockwell FactoryTalk Batch View < 3.00 Authentication Bypass

The version of Rockwell FactoryTalk Batch View installed on the remote Windows host is prior to 3.00. It is, therefore, affected by a vulnerability. - An authentication bypass vulnerability exists in the affected product. The vulnerability exists due to shared secrets across accounts and could...

PDF-XChange Editor < 10.4.0.388 Multiple Vulnerabilities

The version of PDF-XChange Editor installed on the remote Windows host is prior to 10.4.0.388. It is, therefore, affected by multiple vulnerabilities: - A specific flaw exists within the handling of Doc objects. The issue results from the lack of proper validation of user-supplied data, which can...

Microsoft Power Automate For Desktop Remote Code Execution (CVE-2024-43479)

The version of Microsoft Power Automate for desktop installed on the remote Windows host is 2.41.x 2.41.178.24249, 2.42.x 2.42.331.24249, 2.43.x 2.43.249.24249, 2.44.x 2.44.55.24249, 2.45.x 2.45.404.24249, 2.46.x 2.46.181.24249, or 2.47.x 2.47.119.24249. It is, therefore, affected by a remote cod...

Google Chrome < 128.0.6613.138 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 128.0.6613.138. It is, therefore, affected by multiple vulnerabilities as referenced in the 202409stable-channel-update-for-desktop10 advisory. - Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137...

Adobe Illustrator < 27.9.6 / 28.0.0 < 28.7.1 Multiple Vulnerabilities (APSB24-66)

The version of Adobe Illustrator installed on the remote Windows host is prior to 27.9.6, 28.7.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-66 advisory. - Illustrator versions 28.6, 27.9.5 and earlier are affected by an Integer Underflow Wrap or Wraparound...

Adobe After Effects < 23.6.9 / 24.0 < 24.6 Multiple Vulnerabilities (APSB24-55)

The version of Adobe After Effects installed on the remote Windows host is prior to 23.6.9, 24.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-55 advisory. - After Effects versions 23.6.6, 24.5 and earlier are affected by an out-of-bounds write vulnerability...

Mozilla Thunderbird < 128.2

The version of Thunderbird installed on the remote Windows host is prior to 128.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-43 advisory. - Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed...

Foxit PDF Editor < 2024.2.3 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 2024.2.3. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Editor Doc Object Use-After-Free Information Disclosure Vulnerability. This...

Kingsoft WPS Office 12.2.0.13110 < 12.2.0.17119 Arbitrary Code Execution (CVE-2024-7263)

The version of Kingsoft WPS Office installed on the remote Windows host is at least 12.2.0.13110 and prior to 12.2.0.17119. It is, therefore, affected by an arbitrary code execution vulnerability: - Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from...