DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Adobe Creative Cloud Applikationen: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-12-10
Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, erhöhte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu erzeugen.
01
beschreibt (69)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-53007US | — | — | ||
Bentley Systems ProjectWise Integration Server before 10.00.03.288 allows unintended SQL query execution by an authenticated user via an API call. | ||||
| CVE-2024-54035US | — | — | ||
Уязвимость программного обеспечения для веб-конференций Adobe Connect связана с недостатками процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему… | ||||
| CVE-2024-53958US | — | — | ||
Substance3D - Painter versions 10.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2024-53957US | — | — | ||
Substance3D - Painter versions 10.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cur… | ||||
| CVE-2024-53956US | — | — | ||
Premiere Pro versions 25.0, 24.6.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the curren… | ||||
| CVE-2024-53955US | — | — | ||
Bridge versions 14.1.3, 15.0 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the… | ||||
| CVE-2024-53006US | — | — | ||
Substance3D - Modeler versions 1.14.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could… | ||||
| CVE-2024-53005US | — | — | ||
Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage… | ||||
| CVE-2024-53004US | — | — | ||
Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage… | ||||
| CVE-2024-53003US | — | — | ||
Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2024-53002US | — | — | ||
Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2024-53001US | — | — | ||
Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2024-53000US | — | — | ||
Substance3D - Modeler versions 1.14.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current u… | ||||
| CVE-2024-52999US | — | — | ||
Substance3D - Modeler versions 1.14.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cur… | ||||
| CVE-2024-52833US | — | — | ||
Substance3D - Modeler versions 1.14.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could… | ||||
| CVE-2024-54051US | — | — | ||
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability t… | ||||
| CVE-2024-54050US | — | — | ||
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability t… | ||||
| CVE-2024-54049US | — | — | ||
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL ref… | ||||
| CVE-2024-54048US | — | — | ||
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to… | ||||
| CVE-2024-54047US | — | — | ||
Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to… | ||||
20 von 69 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Adobe Security Bulletin APSB24-95 vom 2024-12-10external
- Adobe Security Bulletin APSB24-96 vom 2024-12-10external
- Adobe Security Bulletin APSB24-103 vom 2024-12-10external
- Adobe Security Bulletin APSB24-99 vom 2024-12-10external
- Adobe Security Bulletin APSB24-94 vom 2024-12-10external
- Adobe Security Bulletin APSB24-97 vom 2024-12-10external
- Adobe Security Bulletin APSB24-93 vom 2024-12-10external
- Adobe Security Bulletin APSB24-98 vom 2024-12-10external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan