Latest CVE Feed
-
7.8
HIGHCVE-2024-47452
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open ... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
7.8
HIGHCVE-2024-47451
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open ... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
7.8
HIGHCVE-2024-47450
Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2024-47449
Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issu... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2024-47446
After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2024-47445
After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2024-47444
After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
7.8
HIGHCVE-2024-47443
After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim ... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
7.8
HIGHCVE-2024-47442
After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim ... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
7.8
HIGHCVE-2024-47441
After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim ... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
5.5
MEDIUMCVE-2024-45147
Bridge versions 13.0.9, 14.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue ... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
7.8
HIGHCVE-2024-45114
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open ... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
7.2
HIGHCVE-2024-43613
Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability... Read more
Affected Products : azure_database_for_postgresql_flexible_server- Published: Nov. 12, 2024
- Modified: Jan. 07, 2025
-
7.5
HIGHCVE-2024-40592
An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version 7.2.4 and below, version 7.0.10 and below, version 6.4.10 and below may allow a local authenticated attacker to swap the installer with... Read more
Affected Products : forticlient- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
8.8
HIGHCVE-2024-36513
A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts.... Read more
Affected Products : forticlient- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
4.4
MEDIUMCVE-2024-36509
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiWeb version 7.6.0, version 7.4.3 and below, version 7.2.10 and below, version 7.0.10 and below, version 6.3.23 and below may allow an authenticat... Read more
Affected Products : fortiweb- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
7.8
HIGHCVE-2024-36507
A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering.... Read more
Affected Products : forticlient- Published: Nov. 12, 2024
- Modified: Nov. 14, 2024
-
2.3
LOWCVE-2024-35274
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions below 7.4.2, Fortinet FortiManager versions below 7.4.2 and Fortinet FortiAnalyzer-BigData version 7.4.0 and below ... Read more
- Published: Nov. 12, 2024
- Modified: Jan. 17, 2025
-
4.3
MEDIUMCVE-2024-33510
An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability [CWE-74] in FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.16 and below; FortiProxy version 7.4.3 and below, version... Read more
- Published: Nov. 12, 2024
- Modified: Jan. 17, 2025
-
7.3
HIGHCVE-2024-33505
A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 ... Read more
- Published: Nov. 12, 2024
- Modified: Jan. 31, 2025