CVE-2022-48282

CVE-2022-48282 affects MongoDB .NET/C# Driver up to version 2.18.0. Under very specific conditions, a privileged user can cause arbitrary code execution via deserialization, involving applications written in C# running on Windows with the full .NET Framework, taking user data, and serializing wit...

CVE-2022-48282 Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution

Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...

CVE-2022-48282 Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution

Under very specific circumstances see Required configuration section below, a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C. This affects all MongoDB .NET/C Driver versions prior to and...

PT-2023-15661 · Mongodb · Mongodb .Net/C# Driver

Name of the Vulnerable Software and Affected Versions: MongoDB .NET/C Driver versions prior to and including v2.18.0 Description: Under very specific circumstances, a privileged user is able to cause arbitrary code to be executed, which may cause further disruption to services. This issue is...

Adobe FrameMaker 2020 < 16.0.5 (2020.0.5) / Adobe FrameMaker 2022 < 17.0.1 (2022.0.1) Multiple Vulnerabilities (APSB23-06)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2020 16.0.5 / Adobe FrameMaker 2022 17.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-06 advisory. - FrameMaker 2020 Update 4 and earlier, 2022 and earlier ar...

Adobe Bridge 12.x < 12.0.4 / 13.x < 13.0.2 Multiple Vulnerabilities (APSB23-09)

The version of Adobe Bridge installed on the remote Windows host is prior to 12.0.4 or 13.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-09 advisory. - Adobe Bridge versions 12.0.3 and earlier and 13.0.1 and earlier are affected by an out-of-bounds write...

Adobe After Effects < 22.6.4 / 23.0 < 23.2 Multiple Vulnerabilities (APSB23-02)

The version of Adobe After Effects installed on the remote Windows host is prior to 22.6.4, 23.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-02 advisory. - After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an Improper Input...

SAP BusinessObjects Business Intelligence Platform Unrestricted File Upload (3256787)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.2 SP9 P12, 4.3 SP2 P9, 4.3 SP3 P1 or 4.3 SP4. It may, therefore, be affected by an unrestricted file upload vulnerability in the Central Management Console CMC. A remote attacker,...

SAP BusinessObjects Business Intelligence Platform XSS (3263863)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.3 SP2 P9, 4.3 SP3 P1 or 4.3 SP4. It is, therefore, affected by a cross-site scripting XSS vulnerability. In SAP BusinessObjects Business Intelligence Web Intelligence user interfac...

Adobe Animate 22.x < 22.0.9 / 23.x < 23.0.1 Multiple Vulnerabilities (APSB23-15)

The version of Adobe Animate installed on the remote Windows host is prior to 22.0.9 or 23.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-15 advisory. - Adobe Animate versions 22.0.8 and earlier and 23.0.0 and earlier are affected by a Use After Free...

Trend Micro Apex One Multiple Vulnerabilities (000291830)

According to its self-reported version, the Trend Micro application running on the remote Windows host is Apex One prior to SP1 Server Build 11136 and Agent Build 11136. It is, therefore, affected by multiple vulnerabilities: - An arbitrary file deletion vulnerability in the Damage Cleanup Engine...

ImageMagick 7.1.0-49 Multiple Vulnerabilities

The remote Windows host has a version of ImageMagick installed that is 7.1.0-49. It is, therefore, affected by the following vulnerabilities: - Denial of Service DoS. When it parses a PNG image e.g., for resize, the convert process could be left waiting for stdin input. CVE-2022-44267 - Informati...

Microsoft Edge (Chromium) < 109.0.1518.52 Elevation of Privilege (CVE-2023-21795)

The version of Microsoft Edge installed on the remote Windows host is prior to 109.0.1518.52. It is, therefore, affected by a vulnerability as referenced in the January 13, 2023 advisory. - Microsoft Edge Chromium-based Elevation of Privilege Vulnerability. This CVE ID is unique from...

Mozilla Thunderbird < 102.7

The version of Thunderbird installed on the remote Windows host is prior to 102.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-03 advisory. - Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 102.6. Some of...

Google Chrome < 109.0.5414.119 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 109.0.5414.119. It is, therefore, affected by multiple vulnerabilities as referenced in the 202301stable-channel-update-for-desktop24 advisory. - Use after free in GuestView in Google Chrome prior to 109.0.5414.119...

Foxit PDF Editor < 11.2.6 and < 12.1.2 Vulnerability

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host, with versions prior to 11.2.6 and 12.1.2 are vulnerable: - This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF...

Mozilla Firefox ESR < 102.7

The version of Firefox ESR installed on the remote Windows host is prior to 102.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-02 advisory. - Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR...

Wireshark 4.0.x < 4.0.2 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.0.2 advisory. - Infinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6...

CVE-2023-0012

In SAP Host Agent Windows - versions 7.21, 7.22, an attacker who gains local membership to SAPLocalAdmin could be able to replace executables with a malicious file that will be started under a privileged account. Note that by default all user members of SAPLocaAdmin are denied the ability to logo...

SAP BusinessObjects Business Intelligence Platform 4.1 < 4.1 SP12 P9 / 4.2 < 4.2 SP8 P5 XSS (2965154)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.1 SP12 P9, 4.2 SP8 P5 or 4.2 SP9 P0. It is, therefore, affected by a XSS vulnerability. An authenticated attacker is allowed to inject malicious JavaScript payload into the custom...