Podatności

Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS 5,5 · EPSS 0,26 % · rekomendacja wg zapisanej polityki

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.

CVSS 5,5 · EPSS 0,25 % · rekomendacja wg zapisanej polityki

A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Directory or LDAP search queries without sufficient input neutralization. An authenticated administrator could supply crafted input that modifies the intended LDAP query and causes…

CVSS 5,5 · EPSS 0,25 % · rekomendacja wg zapisanej polityki

phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in UserController::updateUserRights that drops per-right language restrictions when rights are re-granted. Administrators holding USER_EDIT can submit language-scoped rights to the update-rights API,…

CVSS 5,5 · EPSS 0,23 % · rekomendacja wg zapisanej polityki

phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in the group permission API, whose updatePermissions and updateMembers endpoints check held rights without regard to language or category scope and write unrestricted group grants. Non-superadmin…

CVSS 5,5 · EPSS 0,23 % · rekomendacja wg zapisanej polityki

Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.

CVSS 5,5 · EPSS 0,23 % · rekomendacja wg zapisanej polityki

Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

CVSS 5,5 · EPSS 0,22 % · rekomendacja wg zapisanej polityki

CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended…

CVSS 5,5 · EPSS 0,22 % · rekomendacja wg zapisanej polityki

Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.

CVSS 5,5 · EPSS 0,22 % · rekomendacja wg zapisanej polityki

libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a font with unitsPerEm of 0 in the head table. Attackers can provide a crafted TrueType font whose NaN glyph coordinates bypass clip_points(), causing an out-of-bounds raster…

CVSS 5,5 · EPSS 0,2 % · rekomendacja wg zapisanej polityki

Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS 5,5 · EPSS 0,2 % · rekomendacja wg zapisanej polityki

Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in…

CVSS 5,5 · EPSS 0,19 % · rekomendacja wg zapisanej polityki

7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler (SquashfsHandler.cpp) that allows attackers to leak heap memory by crafting a malicious archive where the superblock’s no_ids field is set so that the final metadata block’s expected…

CVSS 5,5 · EPSS 0,19 % · rekomendacja wg zapisanej polityki

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in…

CVSS 5,5 · EPSS 0,18 % · rekomendacja wg zapisanej polityki

unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield_get_file_table() that allows attackers to read past heap allocations via unchecked cabinet header offsets. Attackers can supply a crafted InstallShield cabinet with out-of-range file_table_offset or large file…

CVSS 5,5 · EPSS 0,17 % · rekomendacja wg zapisanej polityki

ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation_section_accessor get_entry() that allows attackers to crash applications via an unvalidated sh_link index. Attackers can supply a crafted ELF file whose SHT_REL or SHT_RELA section has a dangling sh_link, causing…

CVSS 5,5 · EPSS 0,17 % · rekomendacja wg zapisanej polityki

quirc through 1.2 contains an excessive-iteration vulnerability in find_alignment_pattern() in lib/identify.c that allows attackers to hang quirc_end() with a crafted image. Attackers can arrange three finder patterns producing a near-degenerate perspective transform, causing billions of…

CVSS 5,5 · EPSS 0,17 % · rekomendacja wg zapisanej polityki

OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analyze() that allows attackers to exhaust memory and CPU via crafted class files. Attackers can supply class files analysed through BasicVerifier, SimpleVerifier or SourceInterpreter to trigger…

CVSS 5,5 · EPSS 0,17 % · rekomendacja wg zapisanej polityki

OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons JSRInlinerAdapter that inlines JSR/RET subroutines without memory or work limits. Attackers can supply a crafted class file with nested subroutines to force O(2^n) memory allocation, causing an…

CVSS 5,5 · EPSS 0,17 % · rekomendacja wg zapisanej polityki

OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions() that allows attackers to cause denial of service through crafted class files. Attackers can supply a class with a large method containing many long forward jumps, triggering unbounded…

CVSS 5,5 · EPSS 0,17 % · rekomendacja wg zapisanej polityki

OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal() and computeAllFrames() when using COMPUTE_MAXS or COMPUTE_FRAMES. Attackers can supply a crafted class file with thousands of overlapping exception handlers, causing excessive…

CVSS 5,5 · EPSS 0,17 % · rekomendacja wg zapisanej polityki

Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS 5,5 · EPSS 0,17 % · rekomendacja wg zapisanej polityki

Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS 5,5 · EPSS 0,16 % · rekomendacja wg zapisanej polityki

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious…

CVSS 5,5 · EPSS 0,15 % · rekomendacja wg zapisanej polityki

Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious…

CVSS 5,5 · EPSS 0,15 % · rekomendacja wg zapisanej polityki