Latest CVE Feed
-
5.5
MEDIUMCVE-2012-6136
tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.... Read more
- Published: Nov. 20, 2019
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21614
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vuln... Read more
- Published: Jan. 18, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21620
FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio... Read more
- Published: Feb. 17, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21601
Adobe Dimension version 3.4.6 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requ... Read more
- Published: Jan. 18, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21603
Adobe Dimension version 3.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue... Read more
- Published: Jan. 18, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21586
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an appli... Read more
- Published: Dec. 19, 2024
- Modified: Feb. 06, 2025
-
5.5
MEDIUMCVE-2023-21593
Adobe InDesign versions ID18.1 (and earlier) and ID17.4 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the... Read more
- Published: Feb. 17, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21591
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploita... Read more
- Published: Jan. 13, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21592
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploita... Read more
- Published: Jan. 13, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21583
Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Ex... Read more
- Published: Feb. 17, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21585
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vuln... Read more
- Published: Jan. 18, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21569
Azure DevOps Server Spoofing Vulnerability... Read more
Affected Products : azure_devops_server- Published: Jun. 14, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21577
Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio... Read more
- Published: Feb. 17, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-10212
An issue was discovered in Vaultize Enterprise File Sharing 17.05.31. There is improper authorization leading to creation of folders within another account via a modified device value.... Read more
Affected Products : enterprise_file_sharing- Published: Apr. 25, 2018
- Modified: May. 30, 2025
-
5.5
MEDIUMCVE-2023-21578
Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitatio... Read more
- Published: Feb. 17, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-10196
NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application crash) via a crafted file.... Read more
- Published: May. 30, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2023-21550
Windows Cryptographic Information Disclosure Vulnerability... Read more
- Published: Jan. 10, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-10187
In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. Note that this issue is different from ... Read more
Affected Products : radare2- Published: Apr. 17, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2018-10186
In radare2 2.5.0, there is a heap-based buffer over-read in the r_hex_bin2str function (libr/util/hex.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. This issue is different from CVE-2017-15368.... Read more
Affected Products : radare2- Published: Apr. 17, 2018
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-3679
A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to st... Read more
- Published: Aug. 05, 2021
- Modified: Nov. 21, 2024