This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-27327.
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2024-27326.
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2024-27325.
What is the Vulnerability?
On February 19, 2024, ConnectWise published a security advisory for their remote desktop application software called ScreenConnect. One of the flaws, CVE-2024-1709 is an authentication bypass vulnerability that could let attackers gain administrative access to a ScreenConnect instance. That vulnerability has a public proof-of-concept (PoC) available and recently been added to CISA’s known exploited catalog. The second flaw tracked as CVE-2024-1708 is a path traversal vulnerability that may allow an attacker to execute remote code.
What is the Vendor Solution?
ConnectWise has released a patch covering both vulnerabilities. [ Link ]
What FortiGuard Coverage is available?
FortiGuard Labs is currently investigating related protections and will update as soon as they are available.
FortiGuard Labs recommends companies to apply the most recent upgrade or patch from the vendor as soon as possible.
wpa_supplicant-2.10-9.fc39
backport fix for PEAP client (CVE-2023-52160)
wpa_supplicant-2.10-7.fc38
backport fix for PEAP client (CVE-2023-52160)
Multiple security issues were discovered in Chromium, which could result
in the execution of arbitrary code, denial of service or information
disclosure.
Multiple security issues were discovered in Thunderbird, which could
result in denial of service or the execution of arbitrary code.
freeipa-4.11.1-4.fc40
Automatic update for freeipa-4.11.1-4.fc40.
* Wed Feb 21 2024 Rob Crittenden <rcritten@redhat.com> – 4.11.1-4
– Security release: CVE-2024-1481
– Resolves: rhbz#2265129
freeipa-4.11.1-4.fc41
Automatic update for freeipa-4.11.1-4.fc41.
* Wed Feb 21 2024 Rob Crittenden <rcritten@redhat.com> – 4.11.1-4
– Security release: CVE-2024-1481
– Resolves: rhbz#2265129
