2024 CVEs (page 198)
Page 198 of 385 — CVEs published in 2024, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-41852 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code executio… |
CVE-2024-41851 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code exec… |
CVE-2024-41850 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2024-41840 | High | 7.8 | 2024-08-14 | Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of… |
CVE-2024-41835 | Medium | 5.5 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead… |
CVE-2024-41834 | Medium | 5.5 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead… |
CVE-2024-41833 | Medium | 5.5 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead… |
CVE-2024-41832 | Medium | 5.5 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability that could lead… |
CVE-2024-41831 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-41830 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-41727 | High | 7.5 | 2024-08-14 | In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traffic can cause an inc… |
CVE-2024-41723 | Medium | 4.3 | 2024-08-14 | Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names. Note: Software versions which have reached End of Technical S… |
CVE-2024-41719 | Medium | 4.2 | 2024-08-14 | When generating QKView of BIG-IP Next instance from the BIG-IP Next Central Manager (CM), F5 iHealth credentials will be logged in the BIG-IP Central Manager… |
CVE-2024-41164 | Medium | 5.9 | 2024-08-14 | When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control c… |
CVE-2024-39809 | High | 7.5 | 2024-08-14 | The Central Manager user session refresh token does not expire when a user logs out. Note: Software versions which have reached End of Technical Support (EoTS… |
CVE-2024-39792 | High | 7.5 | 2024-08-14 | When the NGINX Plus is configured to use the MQTT pre-read module, undisclosed requests can cause an increase in memory resource utilization. Note: Software v… |
CVE-2024-39778 | High | 7.5 | 2024-08-14 | When a stateless virtual server is configured on BIG-IP system with a High-Speed Bridge (HSB), undisclosed requests can cause TMM to terminate. Note: Softwa… |
CVE-2024-39426 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds read vulnerability when parsing a c… |
CVE-2024-39425 | High | 7.0 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition… |
CVE-2024-39424 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-39423 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by an out-of-bounds write vulnerability that could resu… |
CVE-2024-39422 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-39420 | High | 7.0 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.21005, 24.001.30159, 20.005.30655, 24.002.20965, 24.002.20964, 24.001.30123, 24.003.20054 and earlier are affected… |
CVE-2024-39395 | Medium | 5.5 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-ser… |
CVE-2024-39394 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2024-39393 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a… |
CVE-2024-39391 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2024-39390 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2024-39389 | High | 7.8 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code executio… |
CVE-2024-39388 | High | 7.8 | 2024-08-14 | Substance3D - Stager versions 3.0.2 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of… |
CVE-2024-39387 | Medium | 5.5 | 2024-08-14 | Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2024-39386 | High | 7.8 | 2024-08-14 | Bridge versions 13.0.8, 14.1.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of… |
CVE-2024-39383 | High | 7.8 | 2024-08-14 | Acrobat Reader versions 20.005.30636, 24.002.20965, 24.002.20964, 24.001.30123 and earlier are affected by a Use After Free vulnerability that could result in… |
CVE-2024-37028 | Medium | 5.3 | 2024-08-14 | BIG-IP Next Central Manager may allow an attacker to lock out an account that has never been logged in. Note: Software versions which have reached End of Tech… |
CVE-2024-34138 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS… |
CVE-2024-34137 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS… |
CVE-2024-34136 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to an application denial-of-service (DoS… |
CVE-2024-34135 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacke… |
CVE-2024-34134 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacke… |
CVE-2024-34133 | High | 7.8 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context… |
CVE-2024-34127 | Medium | 5.5 | 2024-08-14 | InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2024-34126 | Medium | 5.5 | 2024-08-14 | Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could… |
CVE-2024-34125 | Medium | 5.5 | 2024-08-14 | Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could… |
CVE-2024-34124 | High | 7.8 | 2024-08-14 | Dimension versions 3.4.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2024-34118 | Medium | 5.5 | 2024-08-14 | Illustrator versions 28.5, 27.9.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service co… |
CVE-2024-34117 | High | 7.8 | 2024-08-14 | Photoshop Desktop versions 24.7.3, 25.9.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the conte… |
CVE-2024-25157 | Medium | 6.5 | 2024-08-14 | An authentication bypass vulnerability in GoAnywhere MFT prior to 7.6.0 allows Admin Users with access to the Agent Console to circumvent some permission check… |
CVE-2024-20790 | Medium | 5.5 | 2024-08-14 | Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could… |
CVE-2024-20789 | High | 7.8 | 2024-08-14 | Dimension versions 3.4.11 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the curren… |
CVE-2024-7790 | Medium | 6.5 | 2024-08-14 | A stored cross site scripting vulnerabilities exists in DevikaAI from commit 6acce21fb08c3d1123ef05df6a33912bf0ee77c2 onwards via improperly decoded user input. |
CVE-2024-39283 | Medium | 6.0 | 2024-08-14 | Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may allow an authenticated user to potentially enable… |
CVE-2024-34163 | High | 7.5 | 2024-08-14 | Improper input validation in firmware for some Intel(R) NUC may allow a privileged user to potentially enableescalation of privilege via local access. |
CVE-2024-29015 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some Intel(R) VTune(TM) Profiler software before versions 2024.1 may allow an authenticated user to potentially enable escalation o… |
CVE-2024-28953 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some EMON software before version 11.44 may allow an authenticated user to potentially enable escalation of privilege via local acc… |
CVE-2024-28947 | High | 8.2 | 2024-08-14 | Improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to… |
CVE-2024-28887 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2024-28876 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of priv… |
CVE-2024-28172 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable es… |
CVE-2024-28050 | Medium | 5.0 | 2024-08-14 | Improper access control in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially ena… |
CVE-2024-28046 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2024-27461 | Medium | 5.6 | 2024-08-14 | Incorrect default permissions in software installer for Intel(R) MAS (GUI) may allow an authenticated user to potentially enable denial of service via local ac… |
CVE-2024-26027 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) Simics Package Manager software before version 1.8.3 may allow an authenticated user to potentially enable escalatio… |
CVE-2024-26025 | Medium | 6.7 | 2024-08-14 | Incorrect default permissions for some Intel(R) Advisor software before version 2024.1 may allow an authenticated user to potentially enable escalation of priv… |
CVE-2024-26022 | High | 7.8 | 2024-08-14 | Improper access control in some Intel(R) UEFI Integrator Tools on Aptio V for Intel(R) NUC may allow an authenticated user to potentially enable escalation of… |
CVE-2024-25939 | Medium | 6.0 | 2024-08-14 | Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of servi… |
CVE-2024-25576 | High | 7.9 | 2024-08-14 | improper access control in firmware for some Intel(R) FPGA products before version 24.1 may allow a privileged user to enable escalation of privilege via local… |
CVE-2024-25562 | Medium | 5.8 | 2024-08-14 | Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denia… |
CVE-2024-25561 | Medium | 6.7 | 2024-08-14 | Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enab… |
CVE-2024-24986 | High | 8.8 | 2024-08-14 | Improper access control in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated… |
CVE-2024-24983 | Medium | 6.5 | 2024-08-14 | Protection mechanism failure in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticate… |
CVE-2024-24980 | Medium | 6.1 | 2024-08-14 | Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of p… |
CVE-2024-24977 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) License Manager for FLEXlm product software before version 11.19.5.0 may allow an authenticated user to potentially… |
CVE-2024-24973 | Low | 2.2 | 2024-08-14 | Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial… |
CVE-2024-24853 | High | 7.2 | 2024-08-14 | Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to poten… |
CVE-2024-24580 | Medium | 6.5 | 2024-08-14 | Improper conditions check in some Intel(R) Data Center GPU Max Series 1100 and 1550 products may allow a privileged user to potentially enable denial of servic… |
CVE-2024-23981 | High | 8.8 | 2024-08-14 | Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user t… |
CVE-2024-23974 | Medium | 6.7 | 2024-08-14 | Incorrect default permissions in some Intel(R) ISH software installers may allow an authenticated user to potentially enable escalation of privilege via local… |
CVE-2024-23909 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privi… |
CVE-2024-23908 | Medium | 6.7 | 2024-08-14 | Insecure inherited permissions in some Flexlm License Daemons for Intel(R) FPGA software before version v11.19.5.0 may allow an authenticated user to potential… |
CVE-2024-23907 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software before version 23.4 may allow an authenticated user to potentially enable esca… |
CVE-2024-23499 | Medium | 6.5 | 2024-08-14 | Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow… |
CVE-2024-23497 | High | 8.8 | 2024-08-14 | Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user… |
CVE-2024-23495 | Medium | 6.7 | 2024-08-14 | Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable esca… |
CVE-2024-23491 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalatio… |
CVE-2024-23489 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) VROC software before version 8.6.0.1191 may allow an authenticated user to potentially enable escalation of privileg… |
CVE-2024-22378 | Medium | 6.7 | 2024-08-14 | Incorrect default permissions in some Intel Unite(R) Client Extended Display Plugin software installers before version 1.1.352.157 may allow an authenticated u… |
CVE-2024-22376 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path element in some installation software for Intel(R) Ethernet Adapter Driver Pack before version 28.3 may allow an authenticated user to… |
CVE-2024-22374 | Medium | 6.5 | 2024-08-14 | Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of service via local access. |
CVE-2024-22184 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition Design Software before version 24.1 may allow an authenticated user to potentially enab… |
CVE-2024-21857 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially enable escalation of p… |
CVE-2024-21844 | Medium | 4.3 | 2024-08-14 | Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of service via adjacent access. |
CVE-2024-21810 | High | 8.8 | 2024-08-14 | Improper input validation in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenti… |
CVE-2024-21807 | High | 8.8 | 2024-08-14 | Improper initialization in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authentica… |
CVE-2024-21806 | Medium | 5.5 | 2024-08-14 | Improper conditions check in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an… |
CVE-2024-21801 | High | 7.1 | 2024-08-14 | Insufficient control flow management in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial… |
CVE-2024-21787 | Medium | 6.4 | 2024-08-14 | Inadequate encryption strength for some BMRA software before version 22.08 may allow an authenticated user to potentially enable escalation of privilege via lo… |
CVE-2024-21784 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of… |
CVE-2024-21769 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some Intel(R) Ethernet Connection I219-LM install software may allow an authenticated user to potentially enable escalation of priv… |
CVE-2024-21766 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software before version 2024.1 may allow an authenticated user to potentially enable esca… |
CVE-2024-39419 | Medium | 4.3 | 2024-08-14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Secur… |