Latest CVE Feed
-
5.5
MEDIUMCVE-2024-49510
InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 16, 2024
-
5.5
MEDIUMCVE-2024-49511
InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 16, 2024
-
5.5
MEDIUMCVE-2024-49512
InDesign Desktop versions ID18.5.3, ID19.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 16, 2024
-
7.8
HIGHCVE-2024-49508
InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in tha... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 16, 2024
-
7.8
HIGHCVE-2024-49507
InDesign Desktop versions ID18.5.2, ID19.5 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in tha... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 16, 2024
-
8.1
HIGHCVE-2024-45670
IBM Security SOAR 51.0.1.0 and earlier contains a mechanism for users to recover or change their passwords without knowing the original password, but the user account must be compromised prior to the weak recovery mechanism.... Read more
Affected Products : soar- Published: Nov. 14, 2024
- Modified: Nov. 16, 2024
-
5.3
MEDIUMCVE-2024-45642
IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a tr... Read more
- Published: Nov. 14, 2024
- Modified: Nov. 16, 2024
-
4.8
MEDIUMCVE-2024-45099
IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a tr... Read more
- Published: Nov. 14, 2024
- Modified: Nov. 16, 2024
-
7.8
HIGHCVE-2024-49027
Microsoft Excel Remote Code Execution Vulnerability... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 16, 2024
-
7.8
HIGHCVE-2024-49026
Microsoft Excel Remote Code Execution Vulnerability... Read more
Affected Products : office 365_apps excel office_online_server office_long_term_servicing_channel office_2024 office_2021 office_2019- Published: Nov. 12, 2024
- Modified: Nov. 16, 2024
-
7.8
HIGHCVE-2024-49030
Microsoft Excel Remote Code Execution Vulnerability... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 16, 2024
-
7.8
HIGHCVE-2024-49029
Microsoft Excel Remote Code Execution Vulnerability... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 16, 2024
-
7.5
HIGHCVE-2024-49033
Microsoft Word Security Feature Bypass Vulnerability... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 16, 2024
-
7.5
HIGHCVE-2024-49040
Microsoft Exchange Server Spoofing Vulnerability... Read more
Affected Products : exchange_server- Published: Nov. 12, 2024
- Modified: Nov. 16, 2024
-
6.7
MEDIUM- Published: Nov. 12, 2024
- Modified: Nov. 16, 2024
-
8.8
HIGHCVE-2024-43620
Windows Telephony Service Remote Code Execution Vulnerability... Read more
Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products- Published: Nov. 12, 2024
- Modified: Nov. 15, 2024
-
8.8
HIGHCVE-2024-43621
Windows Telephony Service Remote Code Execution Vulnerability... Read more
Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products- Published: Nov. 12, 2024
- Modified: Nov. 15, 2024
-
8.8
HIGHCVE-2024-43622
Windows Telephony Service Remote Code Execution Vulnerability... Read more
Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products- Published: Nov. 12, 2024
- Modified: Nov. 15, 2024
-
7.8
HIGHCVE-2024-43623
Windows NT OS Kernel Elevation of Privilege Vulnerability... Read more
Affected Products : windows_server_2008 windows_server_2012 windows_server_2016 windows_server_2019 windows_10_1607 windows_10_1809 windows_10_21h2 windows_10_22h2 windows_server_2022 windows_11_22h2 +10 more products- Published: Nov. 12, 2024
- Modified: Nov. 15, 2024
-
8.1
HIGHCVE-2024-43625
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 15, 2024