Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Azure Database For Postgresql Flexible Server,
Microsoft Azure Database For Postgresql Flexible Server,
Microsoft Azure Database For Postgresql Flexible Server
... (+2)
Bridge versions 13.0.9, 14.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of service condition. Exploitation of this issue requi...
AFFECTED_PRODUCTS:
Adobe Bridge,
Adobe Bridge
Illustrator versions 28.7.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires...
AFFECTED_PRODUCTS:
Adobe Illustrator
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must...
AFFECTED_PRODUCTS:
Adobe Illustrator
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must...
AFFECTED_PRODUCTS:
Adobe Illustrator
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must...
AFFECTED_PRODUCTS:
Adobe Illustrator
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must...
AFFECTED_PRODUCTS:
Adobe Illustrator
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Illustrator
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Illustrator
Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Illustrator
Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...
AFFECTED_PRODUCTS:
Adobe Audition,
Adobe Audition
After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a vi...
AFFECTED_PRODUCTS:
Adobe After Effects,
Adobe After Effects
After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a vi...
AFFECTED_PRODUCTS:
Adobe After Effects,
Adobe After Effects
After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a vi...
AFFECTED_PRODUCTS:
Adobe After Effects,
Adobe After Effects
After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe After Effects,
Adobe After Effects
After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe After Effects,
Adobe After Effects
After Effects versions 23.6.9, 24.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe After Effects,
Adobe After Effects
Bridge versions 13.0.9, 14.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim mu...
AFFECTED_PRODUCTS:
Adobe Bridge,
Adobe Bridge
Illustrator versions 28.7.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Illustrator
Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Azure Database For Postgresql Flexible Server,
Microsoft Azure Database For Postgresql Flexible Server,
Microsoft Azure Database For Postgresql Flexible Server
... (+2)
An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version 7.2.4 and below, version 7.0.10 and below, version 6.4.10 and below may allow a local authenticated attacker to swap the installer with a malicious package via a race condition dur...
AFFECTED_PRODUCTS:
Fortinet Forticlient,
Fortinet Forticlient
A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts.
AFFECTED_PRODUCTS:
Fortinet Forticlient,
Fortinet Forticlient,
Fortinet Forticlient
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiWeb version 7.6.0, version 7.4.3 and below, version 7.2.10 and below, version 7.0.10 and below, version 6.3.23 and below may allow an authenticated attacker to access the encrypted passwords...
AFFECTED_PRODUCTS:
Fortinet FortiWeb,
Fortinet FortiWeb
A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering.
AFFECTED_PRODUCTS:
Fortinet Forticlient,
Fortinet Forticlient,
Fortinet Forticlient
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiAnalyzer versions below 7.4.2, Fortinet FortiManager versions below 7.4.2 and Fortinet FortiAnalyzer-BigData version 7.4.0 and below 7.2.7 allows a privileged attacker with read...
AFFECTED_PRODUCTS:
Fortinet FortiManager,
Fortinet Fortianalyzer,
Fortinet Fortianalyzer Big Data
An improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability [CWE-74] in FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.16 and below; FortiProxy version 7.4.3 and below, version 7.2.9 and below, version 7.0.16 and below; F...
AFFECTED_PRODUCTS:
Fortinet FortiOS,
Fortinet FortiOS,
Fortinet Fortiproxy
... (+2)
A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to escalation of privilege vi...
AFFECTED_PRODUCTS:
Fortinet FortiManager,
Fortinet FortiManager,
Fortinet Fortianalyzer
... (+3)
Multiple improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and Fortinet FortiAnalyzer-BigData b...
AFFECTED_PRODUCTS:
Fortinet FortiManager,
Fortinet FortiManager,
Fortinet Fortianalyzer
... (+3)
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and below 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and below 7.2.5 & FortiAnalyzer-BigData version 7.4.0 and below 7.2.7 allows a priv...
AFFECTED_PRODUCTS:
Fortinet FortiManager,
Fortinet FortiManager,
Fortinet Fortianalyzer
... (+3)
Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData version 7.4.0 and before 7.2.7 allows a privileged attacker to delete files from the u...
AFFECTED_PRODUCTS:
Fortinet FortiManager,
Fortinet FortiManager,
Fortinet Fortianalyzer
... (+3)
A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData 7.4.0 and before 7.2.7 allows a privileged attacker to execute unauthorized code or comman...
AFFECTED_PRODUCTS:
Fortinet FortiManager,
Fortinet FortiManager,
Fortinet Fortianalyzer
... (+3)
A missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14, FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 t...
AFFECTED_PRODUCTS:
Fortinet FortiOS,
Fortinet FortiOS,
Fortinet FortiOS
... (+11)
A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData
at least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through...
AFFECTED_PRODUCTS:
Fortinet FortiManager,
Fortinet FortiManager,
Fortinet FortiManager
... (+7)
The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a session token can be sent to the /auth endpoint. NOTE: this module is not part of freescout-helpdesk/freescout on GitHub.
A session fixation in Fortinet FortiOS version 7.4.0 through 7.4.3 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or commands via phishing SAML authentication link.
AFFECTED_PRODUCTS:
Fortinet FortiOS,
Fortinet FortiOS,
Fortinet FortiOS
An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0 through 7.0.3 allows an authenticated attacker to interact with ressources of other organizations via HTTP or HTTPS requests.
AFFECTED_PRODUCTS:
Fortinet Fortiportal
An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-BigData before 7.2.5 may allow a privileged attacker with administrative read permissions to read event logs of another adom via crafted HTTP or...
AFFECTED_PRODUCTS:
Fortinet FortiManager,
Fortinet Fortianalyzer,
Fortinet Fortianalyzer Big Data
Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server
AFFECTED_PRODUCTS:
Citrix Session Recording,
Citrix Session Recording,
Citrix Session Recording
... (+2)
Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain
AFFECTED_PRODUCTS:
Citrix Session Recording,
Citrix Session Recording,
Citrix Session Recording
... (+2)
An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication (SCA) Server of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially enroll an attacker-controlled device to the victim’s account and telephone number.
Authentication bypass by assumed-immutable data on airlift.microsoft.com allows an authorized attacker to elevate privileges over a network.
Microsoft PC Manager Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Pc Manager
Visual Studio Code Python Extension Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Python
Visual Studio Code Remote Extension Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Remote Ssh
TorchGeo Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Torchgeo
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Visual Studio Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Visual Studio 2022,
Microsoft Visual Studio 2022,
Microsoft Visual Studio 2022
... (+1)
Microsoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Sql Server 2019,
Microsoft Sql Server 2019,
Microsoft Sql Server 2022
... (+5)
Microsoft Exchange Server Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Exchange Server,
Microsoft Exchange Server
Windows Task Scheduler Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2016,
Microsoft Windows Server 2019,
Microsoft Windows 10 1507
... (+20)