agosto 2024 - Página 88 de 135

14 Ago 2024

CVE-2024-39413

Título es

CVE-2024-39413

Mié, 14/08/2024 – 12:15

Tipo

NVD-CWE-noinfo

Gravedad 2.0 Txt

Pendiente de análisis

CPE

cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*————2.4.3___cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*————___cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:*————2.4.3___cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*————

Título en

CVE-2024-39413

Descripción en

Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.

14/08/2024

Fabricante

adobe

Producto

commerce

magento

Vector CVSS:3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Gravedad 3.1 (CVSS 3.1 Base Score)

4.30

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

MEDIUM

Referencias

https://helpx.adobe.com/security/products/magento/apsb24-61.html

Enviar en el boletín

Off

14 Ago 2024

CVE-2024-39414

Título es

CVE-2024-39414

Mié, 14/08/2024 – 12:15

Tipo

NVD-CWE-noinfo

Gravedad 2.0 Txt

Pendiente de análisis

CPE

Título en

CVE-2024-39414

Descripción en

14/08/2024

Fabricante

adobe

Producto

commerce

magento

Vector CVSS:3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Gravedad 3.1 (CVSS 3.1 Base Score)

4.30

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

MEDIUM

Referencias

https://helpx.adobe.com/security/products/magento/apsb24-61.html

Enviar en el boletín

Off

14 Ago 2024

CVE-2024-39415

Título es

CVE-2024-39415

Mié, 14/08/2024 – 12:15

Tipo

NVD-CWE-noinfo

Gravedad 2.0 Txt

Pendiente de análisis

CPE

Título en

CVE-2024-39415

Descripción en

14/08/2024

Fabricante

adobe

Producto

commerce

magento

Vector CVSS:3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Gravedad 3.1 (CVSS 3.1 Base Score)

4.30

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

MEDIUM

Referencias

https://helpx.adobe.com/security/products/magento/apsb24-61.html

Enviar en el boletín

Off

14 Ago 2024

CVE-2024-39416

Título es

CVE-2024-39416

Mié, 14/08/2024 – 12:15

Tipo

NVD-CWE-noinfo

Gravedad 2.0 Txt

Pendiente de análisis

CPE

Título en

CVE-2024-39416

Descripción en

14/08/2024

Fabricante

adobe

Producto

commerce

magento

Vector CVSS:3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Gravedad 3.1 (CVSS 3.1 Base Score)

4.30

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

MEDIUM

Referencias

https://helpx.adobe.com/security/products/magento/apsb24-61.html

Enviar en el boletín

Off

14 Ago 2024

CVE-2024-39417

Título es

CVE-2024-39417

Mié, 14/08/2024 – 12:15

Tipo

NVD-CWE-noinfo

Gravedad 2.0 Txt

Pendiente de análisis

CPE

Título en

CVE-2024-39417

Descripción en

14/08/2024

Fabricante

adobe

Producto

commerce

magento

Vector CVSS:3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Gravedad 3.1 (CVSS 3.1 Base Score)

4.30

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

MEDIUM

Referencias

https://helpx.adobe.com/security/products/magento/apsb24-61.html

Enviar en el boletín

Off

14 Ago 2024

CVE-2024-39418

Título es

CVE-2024-39418

Mié, 14/08/2024 – 12:15

Tipo

NVD-CWE-noinfo

Gravedad 2.0 Txt

Pendiente de análisis

CPE

Título en

CVE-2024-39418

Descripción en

Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures to view and edit low-sensitivity information. Exploitation of this issue does not require user interaction.

14/08/2024

Fabricante

adobe

Producto

commerce

magento

Vector CVSS:3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Gravedad 3.1 (CVSS 3.1 Base Score)

5.40

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

MEDIUM

Referencias

https://helpx.adobe.com/security/products/magento/apsb24-61.html

Enviar en el boletín

Off

14 Ago 2024

CVE-2024-39419

Título es

CVE-2024-39419

Mié, 14/08/2024 – 12:15

Tipo

NVD-CWE-noinfo

Gravedad 2.0 Txt

Pendiente de análisis

CPE

Título en

CVE-2024-39419

Descripción en

Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.

14/08/2024

Fabricante

adobe

Producto

commerce

magento

Vector CVSS:3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Gravedad 3.1 (CVSS 3.1 Base Score)

4.30

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

MEDIUM

Referencias

https://helpx.adobe.com/security/products/magento/apsb24-61.html

Enviar en el boletín

Off

14 Ago 2024

CVE-2024-41860

Título es

CVE-2024-41860

Mié, 14/08/2024 – 09:15

Tipo

CWE-125

Gravedad 2.0 Txt

Pendiente de análisis

Título en

CVE-2024-41860

Descripción en

Substance3D – Sampler versions 4.5 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

14/08/2024

Vector CVSS:3.1

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Gravedad 3.1 (CVSS 3.1 Base Score)

5.50

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

MEDIUM

Referencias

https://helpx.adobe.com/security/products/substance3d-sampler/apsb24-65.html

Enviar en el boletín

Off

14 Ago 2024

CVE-2024-41858

Título es

CVE-2024-41858

Mié, 14/08/2024 – 09:15

Tipo

CWE-190

Gravedad 2.0 Txt

Pendiente de análisis

Título en

CVE-2024-41858

Descripción en

InCopy versions 18.5.2, 19.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

14/08/2024

Vector CVSS:3.1

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Gravedad 3.1 (CVSS 3.1 Base Score)

7.80

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

HIGH

Referencias

https://helpx.adobe.com/security/products/incopy/apsb24-64.html

Enviar en el boletín

Off

14 Ago 2024

CVE-2024-41864

Título es

CVE-2024-41864

Mié, 14/08/2024 – 09:15

Tipo

CWE-787

Gravedad 2.0 Txt

Pendiente de análisis

Título en

CVE-2024-41864

Descripción en

Substance3D – Designer versions 13.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

14/08/2024

Vector CVSS:3.1

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Gravedad 3.1 (CVSS 3.1 Base Score)

7.80

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)

HIGH

Referencias

https://helpx.adobe.com/security/products/substance3d_designer/apsb24-67.html

Enviar en el boletín

Off

Archivos mensuales: agosto 2024