Skip to content
OpenAdvisories

Archive

16 March 2022

Vulnerabilities first published on this day (UTC), newest first.

151 results · Feed

  • Critical 9.8

    PTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials

    Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) uses hard-coded credentials for its UltraVNC installation. Successful exploitation of this vulnerability could allow a remote authenticated attacker to take full remote control of …

  • Critical 9.8

    PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function

    Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain commands to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacke…

  • High 7.8

    Adobe Audition Memory Corruption could lead to Arbitrary code execution

    Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

  • High 7.8

    Adobe Audition WAV file Memory corruption could lead to Arbitrary code execution

    Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit…

  • Medium 5.5

    Adobe Audition NULL Pointer Dereference Application denial-of-service

    Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context o…

  • High 7.8

    Adobe Audition Memory Corruption could lead to Arbitrary code execution

    Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a SVG file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit…

  • Medium 5.5

    Adobe Audition NULL Pointer Dereference Application denial-of-service

    Adobe Audition version 14.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context o…

  • High 7.8

    Adobe Audition Memory Corruption could lead to Arbitrary code execution

    Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit…

  • Medium 5.5

    Adobe Audition Memory Corruption could lead to Application denial-of-service

    Adobe Audition version 14.4 (and earlier) is affected by an Access of Memory Location After End of Buffer vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-se…

  • High 7.8

    Adobe Audition Memory Corruption could lead to Arbitrary code execution

    Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerabilit…

  • High 7.8

    Adobe Audition Memory Corruption could lead to Arbitrary code execution

    Adobe Audition version 14.4 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

  • High 7.8

    Adobe Bridge Buffer Overflow Arbitrary code execution

    Adobe Bridge 11.1.1 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a …

  • Medium 5.5

    Adobe Premiere Pro Null Pointer Dereference Application denial-of-service

    Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of …

  • High 7.8

    Adobe Premiere Pro WAV file memory corruption vulnerability could lead to arbitrary code execution

    Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required t…

  • High 7.8

    Adobe Character Animator Memory Corruption could lead to Arbitrary code execution

    Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vul…

  • High 7.8

    Adobe Premiere Pro MOV file memory corruption vulnerability could lead to arbitrary code execution

    Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required t…

  • High 7.8

    Adobe Premiere Pro WAV file memory corruption vulnerability could lead to arbitrary code execution

    Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required t…

  • Medium 5.5

    Adobe Premiere Pro Null Pointer Dereference Application denial-of-service

    Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of …

  • Medium 5.5

    Adobe Premiere Pro Null Pointer Dereference Application denial-of-service

    Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of …

  • Medium 5.5

    Adobe Premiere Elements Null Pointer Dereference Application denial-of-service

    Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-servi…

  • High 7.8

    Adobe Premiere Elements WAV file memory corruption vulnerability could lead to arbitrary code execution

    Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction …

  • Medium 5.5

    Adobe Premiere Elements Null Pointer Dereference Application denial-of-service

    Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-servi…

  • Medium 5.5

    Adobe Premiere Elements Null Pointer Dereference Application denial-of-service

    Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-servi…

  • High 7.8

    Adobe Premiere Elements PSD file memory corruption vulnerability could lead to arbitrary code execution

    Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction …

  • Low 3.3

    Adobe Character Animator SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

    Adobe Character Animator version 4.4 (and earlier versions) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation o…

  • High 7.8

    Adobe Premiere Elements M4A file memory corruption vulnerability could lead to arbitrary code execution

    Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction …

  • High 7.8

    Adobe Premiere Elements M4A file memory corruption vulnerability could lead to arbitrary code execution

    Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction …

  • High 7.8

    Adobe Bridge Memory Corruption could lead to Arbitrary code execution

    Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to expl…

  • High 7.8

    Adobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution

    Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code…

  • Medium 5.5

    Adobe Character Animator NULL Pointer Dereference Application denial-of-service

    Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the …

  • High 7.8

    Adobe Bridge Memory Corruption could lead to Arbitrary code execution

    Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to …

  • High 7.8

    Adobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution

    Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code…

  • High 7.8

    Adobe Character Animator Memory Corruption could lead to Arbitrary code execution

    Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when parsing a WAF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vul…

  • High 7.8

    Adobe Character Animator Memory Corruption could lead to Arbitrary code execution

    Adobe Character Animator version 4.4 (and earlier) is affected by a memory corruption vulnerability when parsing a M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vul…

  • Low 3.3

    Adobe Character Animator SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

    Adobe Character Animator version 4.4 (and earlier versions) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation o…

  • High 7.8

    Adobe Bridge Memory Corruption could lead to Arbitrary code execution

    Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious PSD file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to …

  • Medium 5.5

    Adobe Character Animator Memory Corruption could lead to Application denial-of-service

    Adobe Character Animator version 4.4 (and earlier) is affected by an Access of Memory Location After End of Buffer vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application den…

  • Medium 5.5

    Adobe Character Animator NULL Pointer Dereference Application denial-of-service

    Adobe Character Animator version 4.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the …

  • High 7.1

    Adobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution

    Adobe Bridge version 11.1.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted .jpe file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute…

  • High 7.8

    Adobe Bridge DCM File Parsing Double Free Remote Code Execution Vulnerability

    Adobe Bridge version 11.1.1 (and earlier) is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit.