Latest CVE Feed
-
5.5
MEDIUMCVE-2021-46822
The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_w... Read more
Affected Products : libjpeg-turbo- Published: Jun. 18, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-10323
The xfs_bmap_extents_to_btree function in fs/xfs/libxfs/xfs_bmap.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service (xfs_bmapi_write NULL pointer dereference) via a crafted xfs image.... Read more
- Published: Apr. 24, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2012-6136
tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.... Read more
- Published: Nov. 20, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21614
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vuln... Read more
- Published: Jan. 18, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21620
FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio... Read more
- Published: Feb. 17, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21601
Adobe Dimension version 3.4.6 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requ... Read more
- Published: Jan. 18, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21603
Adobe Dimension version 3.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue... Read more
- Published: Jan. 18, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21586
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an appli... Read more
- Published: Dec. 19, 2024
- Modified: Feb. 06, 2025
-
5.5
MEDIUMCVE-2023-21593
Adobe InDesign versions ID18.1 (and earlier) and ID17.4 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the... Read more
- Published: Feb. 17, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21591
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploita... Read more
- Published: Jan. 13, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21592
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploita... Read more
- Published: Jan. 13, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21583
Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Ex... Read more
- Published: Feb. 17, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21585
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vuln... Read more
- Published: Jan. 18, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21569
Azure DevOps Server Spoofing Vulnerability... Read more
Affected Products : azure_devops_server- Published: Jun. 14, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21577
Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio... Read more
- Published: Feb. 17, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-10212
An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization leading to creation of folders within another account via a modified device value.... Read more
Affected Products : enterprise_file_sharing- Published: Apr. 25, 2018
- Modified: May. 30, 2025
-
5.5
MEDIUMCVE-2023-21578
Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio... Read more
- Published: Feb. 17, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-10196
NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.... Read more
- Published: May. 30, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21550
Windows Cryptographic Information Disclosure Vulnerability... Read more
- Published: Jan. 10, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-10187
In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. Note that this issue is different from ... Read more
Affected Products : radare2- Published: Apr. 17, 2018
- Modified: Nov. 21, 2024