Archive
14 August 2024
Vulnerabilities first published on this day (UTC), newest first.
123 results · Clear filters · Feed
-
Medium 5.5
Adobe Illustrator PSD File Parsing Null Pointer dereference
Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could exploit this vulnerability to crash the application, resulting in a denial of s…
-
Medium 5.5
Adobe illustrator 2024 TIF File parsing Division by zero denial of service
Illustrator versions 28.5, 27.9.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service condition. An attacker could exploit this vulnerability to render the application unresponsive or term…
-
Medium 5.5
Adobe Illustrator CGM File Parsing Division By zero
Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could exploit this vulnerability to crash the application, resulting in a denial of s…
-
Medium 5.5
Adobe Illustrator 2024 CGM File Parsing Null Pointer Dereference
Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS) condition. An attacker could exploit this vulnerability to crash the application, resulting in a D…
-
Medium 5.5
Adobe Illustrator CC 2023 v27.9 Vulnerability II
Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue r…
-
Medium 5.5
ZDI-CAN-24027: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires …
-
Medium 5.5
ZDI-CAN-24028: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires …
-
Medium 5.5
Adobe Dimension Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing FBX file
Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires …
-
Medium 4.7
NGINX MP4 module vulnerability
NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with…
-
Medium 5.3
BIG-IP Next Central Manager vulnerability
BIG-IP Next Central Manager may allow an attacker to lock out an account that has never been logged in. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
Medium 4.2
BIG-IP Next Central Manager vulnerability
When generating QKView of BIG-IP Next instance from the BIG-IP Next Central Manager (CM), F5 iHealth credentials will be logged in the BIG-IP Central Manager logs. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
Medium 5.9
BIG-IP MPTCP vulnerability
When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS…
-
Medium 4.3
BIG-IP iControl REST vulnerability
Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
Medium 6.5
DevikaAI Stored Cross-Site Scripting
A stored cross site scripting vulnerabilities exists in DevikaAI from commit 6acce21fb08c3d1123ef05df6a33912bf0ee77c2 onwards via improperly decoded user input.
-
Medium 6.4
Inadequate encryption strength for some BMRA software before version 22.08 may allow an authenticated user to potential…
-
Medium 5.5
Improper conditions check in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 …
-
Medium 6.5
Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E8…
-
Medium 6.7
Uncontrolled search path in some Intel(R) Ethernet Connection I219-LM install software may allow an authenticated user …
-
Medium 6.5
Protection mechanism failure in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before…
-
Medium 6.8
Improper buffer restrictions in firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileg…
-
Medium 4.4
Improper input validation in firmware for some Intel(R) CSME may allow a privileged user to potentially enable denial o…
-
Medium 4.3
Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of s…
-
Medium 5.7
Unchecked return value in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable escal…
-
Medium 6.0
Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may allow an …
-
Medium 6.7
Uncontrolled search path for some Intel(R) oneAPI Compiler software before version 2024.1 may allow an authenticated us…
-
Medium 6.7
Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software before version 2024.1 may allow an authe…
-
Medium 6.5
Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially e…
-
Medium 6.7
Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authe…
-
Medium 6.7
Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authentica…
-
Medium 5.8
Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authen…
-
Medium 4.3
Uncaught exception in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.14-0, bhs-0.27 may allo…
-
Medium 6.7
Out of bounds read in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.15-0, bhs-0.27 may allo…
-
Medium 6.7
Incorrect default permissions in some Intel(R) ISH software installers may allow an authenticated user to potentially e…
-
Medium 6.5
Improper conditions check in some Intel(R) Data Center GPU Max Series 1100 and 1550 products may allow a privileged use…
-
Medium 6.7
Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow a…
-
Medium 6.1
Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged us…
-
Medium 6.7
Incorrect default permissions in some Intel Unite(R) Client Extended Display Plugin software installers before version …
-
Medium 6.7
Incorrect default permissions for some Intel(R) Connectivity Performance Suite software installers before version 2.0 m…
-
Medium 6.7
Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user t…
-
Medium 6.7
Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potenti…