CVE Brief Security Intelligence

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network

Bitrix24 contains an authenticated remote code execution vulnerability that allows logged-in attackers to execute arbitrary system commands through the PHP command line admin interface

TYPO3's mail‑file spool deserialization flaw lets local users with write access to the spool directory craft a malicious file that is deserialized during the mailer:spool:send command, enabling arbitrary PHP code execution on the web server

Hono is a Web application framework that provides support for any JavaScript runtime

Hono is a Web application framework that provides support for any JavaScript runtime

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network

Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability

Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally

A vulnerability has been identified in the installation/uninstallation of the Nessus Agent Tray App on Windows Hosts which could lead to escalation of privileges

Pimcore is an Open Source Data & Experience Management Platform

External Control of File Name or Path (CWE-73) combined with Server-Side Request Forgery (CWE-918) can allow an attacker to cause arbitrary file disclosure through a specially crafted credentials JSON payload in the Google Gemini connector configuration

SumatraPDF is a multi-format reader for Windows

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to execute code locally

TeamSpeak 3

Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the TCA - regardless of whether they had permission to that particular table

Memory safety bugs present in Firefox ESR 140

Improper input validation in Windows Server Update Service allows an unauthorized attacker to execute code over a network

External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network

Time-of-check time-of-use (toctou) race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally

Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally

Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally

Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally

Improper handling of insufficient permissions or privileges in Windows Error Reporting allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Tablet Windows User Interface (TWINUI) Subsystem allows an authorized attacker to elevate privileges locally

Time-of-check time-of-use (toctou) race condition in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally

Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Services allows an authorized attacker to elevate privileges locally

OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API input parameters

OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API input parameters

ProtonVPN 1

Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue in the initiate remote session functionality

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of resources reference counting creating a potential use after free scenario

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause mismanagement of reference counting to cause a potential use after free

Heap-based buffer overflow in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally

A vulnerability exists in Progress Flowmon ADS versions prior to 12

Sandbox escape due to integer overflow in the Graphics component

Use-after-free in the IPC component

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles

4images 1

NanoCMS 0

e107 CMS version 3

Algo 8028 Control Panel version 3

e107 CMS version 3

WBCE CMS version 1

An issue in Semantic machines v5

Dreamweaver Desktop versions 21

Dreamweaver Desktop versions 21

Dreamweaver Desktop versions 21

Dreamweaver Desktop versions 21

Illustrator versions 29

Splashtop 8

CoolerMaster MasterPlus 1

Wondershare Dr

Wondershare Dr

Wondershare FamiSafe 1

Wondershare MobileTrans 3

Wondershare UBackit 2

ITeC ITeCProteccioAppServer contains an unquoted service path vulnerability that allows local attackers to execute code with elevated system privileges

EaseUS Data Recovery 15

PTPublisher 2

VIVE Runtime Service 1

Sandboxie-Plus 5

WOW21 5

Cobian Backup 0

Private Internet Access 3

BlueSoleilCS 5

Connectify Hotspot 2018 contains an unquoted service path vulnerability in its ConnectifyService executable that allows local attackers to potentially execute arbitrary code

Emerson PAC Machine Edition 9

Cain & Abel 4

CONTPAQi AdminPAQ 14

Clevo HotKey Clipboard 2

Outline 1

Mediconta 3

Tftpd32 SE 4

Multi-thread race condition vulnerability in the card framework module

Multi-thread race condition vulnerability in the video framework module

An insecure authentication mechanism in the safe_exec

Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc, valloc, pvalloc) in the GNU C Library version 2

Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system

Senayan Library Management System 9

VIAVIWEB Wallpaper Admin 1

Aero CMS 0

Social-Share-Buttons 2

WorkOrder CMS 0

Mitigation bypass in the DOM: Security component

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Multi-thread race condition vulnerability in the card framework module

Multi-thread race condition vulnerability in the card framework module

Multi-thread race condition vulnerability in the card framework module