Veille cybersécurité : alertes, vulnérabilités, actualités et outils pour se protéger.
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a vict…
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in …
Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Expl…
Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances.
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.
ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability t…
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.
Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.