BIG-IP Next Central Manager may allow an attacker to lock out an account that has never been logged in. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
AFFECTED_PRODUCTS:
F5 Big Ip Next Central Manager
Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could exploit this vulnerability to crash the application, resulting in a denial of service condition. Exploitation of this is...
AFFECTED_PRODUCTS:
Adobe Illustrator,
Adobe Illustrator
Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS) condition. An attacker could exploit this vulnerability to crash the application, resulting in a DoS. Exploitation of this issue requires u...
AFFECTED_PRODUCTS:
Adobe Illustrator,
Adobe Illustrator
Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS). An attacker could exploit this vulnerability to crash the application, resulting in a denial of service condition. Exploitation of this is...
AFFECTED_PRODUCTS:
Adobe Illustrator,
Adobe Illustrator
Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...
AFFECTED_PRODUCTS:
Adobe Illustrator,
Adobe Illustrator
Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...
AFFECTED_PRODUCTS:
Adobe Illustrator,
Adobe Illustrator
Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Illustrator,
Adobe Illustrator
InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that...
AFFECTED_PRODUCTS:
Adobe Indesign,
Adobe Indesign
Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must op...
AFFECTED_PRODUCTS:
Adobe Dimension
Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must op...
AFFECTED_PRODUCTS:
Adobe Dimension
Dimension versions 3.4.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Dimension
Illustrator versions 28.5, 27.9.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service condition. An attacker could exploit this vulnerability to render the application unresponsive or terminate its execution. Exploitation of this...
AFFECTED_PRODUCTS:
Adobe Illustrator,
Adobe Illustrator
Photoshop Desktop versions 24.7.3, 25.9.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Photoshop,
Adobe Photoshop
An authentication bypass vulnerability in GoAnywhere MFT prior to 7.6.0 allows Admin Users with access to the Agent Console to circumvent some permission checks when attempting to visit other pages. This could lead to unauthorized information disclosure or modification.
AFFECTED_PRODUCTS:
Fortra Goanywhere Managed File Transfer
Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must op...
AFFECTED_PRODUCTS:
Adobe Dimension
Dimension versions 3.4.11 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Dimension
A stored cross site scripting vulnerabilities exists in DevikaAI from commit 6acce21fb08c3d1123ef05df6a33912bf0ee77c2 onwards via improperly decoded user input.
AFFECTED_PRODUCTS:
Stitionai Devika
Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Tdx Module
Improper input validation in firmware for some Intel(R) NUC may allow a privileged user to potentially enableescalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Nuc X15 Laptop Kit Lapac71h Firmware,
Intel Nuc X15 Laptop Kit Lapac71g Firmware,
Intel Nuc X15 Laptop Kit Lapkc71f Firmware
... (+6)
Uncontrolled search path in some Intel(R) VTune(TM) Profiler software before versions 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Vtune Profiler,
Intel Oneapi Base Toolkit
Uncontrolled search path in some EMON software before version 11.44 may allow an authenticated user to potentially enable escalation of privilege via local access.
Improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Server Board S2600st Firmware
Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Integrated Performance Primitives,
Intel Oneapi Base Toolkit
Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Mpi Library,
Intel Oneapi Hpc Toolkit
Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Trace Analyzer And Collector,
Intel Oneapi Hpc Toolkit
Improper access control in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access.
AFFECTED_PRODUCTS:
Intel Iris Xe Graphics,
Intel Arc A Graphics
Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Graphics Performance Analyzers
Incorrect default permissions in software installer for Intel(R) MAS (GUI) may allow an authenticated user to potentially enable denial of service via local access.
AFFECTED_PRODUCTS:
Intel Memory And Storage Tool Gui
Uncontrolled search path for some Intel(R) Simics Package Manager software before version 1.8.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Simics Package Manager
Incorrect default permissions for some Intel(R) Advisor software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Advisor,
Intel Oneapi Base Toolkit
Improper access control in some Intel(R) UEFI Integrator Tools on Aptio V for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Aptio V Uefi Firmware Integrator Tools,
Intel Aptio V Uefi Firmware Integrator Tools,
Intel Aptio V Uefi Firmware Integrator Tools
... (+1)
Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.
improper access control in firmware for some Intel(R) FPGA products before version 24.1 may allow a privileged user to enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Agilex 7 Fpga Firmware
Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access.
AFFECTED_PRODUCTS:
Intel Oneapi Base Toolkit,
Intel Distribution For Gdb
Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Hid Event Filter Driver
Improper access control in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Ethernet 800 Series Controllers Driver
Protection mechanism failure in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticated user to potentially enable denial of service via network access.
Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Uncontrolled search path for some Intel(R) License Manager for FLEXlm product software before version 11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel License Manager For Flexim
Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access.
AFFECTED_PRODUCTS:
Intel Oneapi Base Toolkit,
Intel Distribution For Gdb
Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access.
Improper conditions check in some Intel(R) Data Center GPU Max Series 1100 and 1550 products may allow a privileged user to potentially enable denial of service via local access.
Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Ethernet 800 Series Controllers Driver
Incorrect default permissions in some Intel(R) ISH software installers may allow an authenticated user to potentially enable escalation of privilege via local access.
Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Field Programmable Gate Array Software Development Kit For Opencl,
Intel Field Programmable Gate Array Software Development Kit For Opencl,
Intel Field Programmable Gate Array Software Development Kit For Opencl
... (+13)
Insecure inherited permissions in some Flexlm License Daemons for Intel(R) FPGA software before version v11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Flexlm License Daemons For Intel Fpga
Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Quartus Prime,
Intel Oneapi Dpc\+\+\/c\+\+ Compiler,
Intel High Level Synthesis Compiler
Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access.
AFFECTED_PRODUCTS:
Intel Ethernet 800 Series Controllers Driver
Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Ethernet 800 Series Controllers Driver
Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Oneapi Base Toolkit,
Intel Distribution For Gdb