CVE-2018-36464

Technical details for CVE-2018-36464 are not provided in the available documents. The Connected Huawei advisory discusses L1TF-related CVEs (e.g., CVE-2018-3646) but does not reveal specifics for 2018-36464. Monitor for updates.

CVE-2019-16447

Adobe Illustrator prior to version 24.0 is affected by CVE-2019-16447 as part of APSB19-36. The issue is described as Binary Planting potentially leading to Local Code Execution. The linked advisories indicate this affects Windows and macOS deployments, alongside other vulnerabilities in the same...

CVE-2021-40746

Adobe Illustrator CVE-2021-40746 is an Out-of-Bounds Read leading to Arbitrary Code Execution in Illustrator prior to version 25.4.2. Affected platforms include Windows and macOS per APSB21-98. Patch: update to Illustrator 25.4.2 or later as advised in APSB21-98 to remediate. Other sources (Threa...

CVE-2021-40748

Adobe Illustrator is affected by multiple vulnerabilities referenced under APSB21-98 with CVE-2021-40718, CVE-2021-40746, CVE-2021-40747, CVE-2021-40748, and CVE-2021-40749. The issues apply to Illustrator installations prior to version 25.4.2 on Windows and macOS, and include out-of-bounds reads...

CVE-2021-40718

Adobe Illustrator is affected by CVE-2021-40718 (Out-of-bounds Read) on Windows/macOS prior to version 25.4.2, potentially causing memory leaks. The issue is part of multiple vulnerabilities addressed in APSB21-98; Adobe recommends updating to Illustrator 25.4.2 or later to mitigate. Other linked...

CVE-2021-43014

Adobe Connect is affected by CSRF leading to arbitrary file system write (CVE-2021-43014) as described in APSB21-112. The vulnerability is tied to Adobe Connect versions prior to the fixed release (vendor fix listed in APSB21-112). Exploitation context is a CSRF flaw without token authentication ...

CVE-2021-28577

Adobe Animate is affected by multiple vulnerabilities including CVE-2021-28577, an out-of-bounds write that can lead to arbitrary code execution. According to APSB21-35, affected versions are Adobe Animate 20.x before 20.5.2 and 21.x before 21.0.6. The issue is addressed by a security update; use...

CVE-2021-28572

Adobe Animate is affected by CVE-2021-28572 (out-of-bounds read) in versions prior to 20.5.2 or 21.0.6. The issue, documented under APSB21-35, can lead to information disclosure. Remediation is to update to 20.5.2/21.0.6 or later as specified by the advisory.

CVE-2019-7966

CVE-2019-7966 details are not provided in the supplied documents. No product, impact, or remediation information is available. Monitor for updates from official disclosures.

CVE-2019-7967

Technical details for CVE-2019-7967 are not provided in the connected documents. The entry remains reserved/no public details here. Monitor for updates as information may be released later.

CVE-2016-1000228

Summary: The provided connected advisories describe a DOM-based XSS vulnerability in the npm package Gmail.js (gmail-js). Affected versions contain unsafe handling in the functions tools.parse_response, helper.get.visible_emails_post, and helper.get.email_data_post, which pass user input directly...

CVE-2015-4130

Consolidated details show CVE-2015-4130’s connected advisories describe a command-injection vulnerability in ungit (URL parameter) affecting versions prior to 0.9.0. Affected software: ungit. Root cause: command injection via the url parameter. Impact: not explicitly quantified in the provided do...

CVE-2013-3364

CVE-2013-3364 aligns with a GitHub advisory and OSV entry describing unauthenticated remote command injection in the ep_imageconvert plugin for Etherpad Lite. The vulnerability affects ep_imageconvert

CVE-2016-1000241

The CVE entry (CVE-2016-1000241) is linked to a known XSS vulnerability in pivottable. Affected software: pivottable (JavaScript library). Issue: a new rendering mechanism for JSON elements introduces cross-site scripting, enabling injection through JSON-rendered content. References from connecte...

CVE-2016-1000225

The connected advisories identify a SQL Injection vulnerability in Sequelize involving models with the GEOMETRY DataType and GeoJSON handling. Specifically, unescaped single quotes in GeoJSON documents processed by ST_GeomFromGeoJSON (and GeomFromText for MySQL) allow injection in affected models...

CVE-2016-1000230

CVE-2016-1000230 : The connected advisories describe an XSS vulnerability in the client-side rendering of Rendr templates inside a _block, with server-side rendering unaffected. Affected versions of Rendr are vulnerable to cross-site scripting when client-side rendering occurs in that block conte...

CVE-2014-8882

The connected advisories identify a Regular Expression Denial of Service in the validator library’s isURL method affecting versions prior to 3.22.1; remediation is to update to 3.22.1 or later (GHSA-f5w6-r7rg-mcgq, OSV GHSA, and NODEJS advisory 42 reference validator.js). No exploitation details ...

CVE-2016-1000233

CVE-2016-1000233 is a Swagger-UI cross-site scripting vulnerability described in the connected IBM bulletin. The issue arises when a Content-Type: application/javascript header is included while Swagger-UI processes a URL query string parameter, allowing a remote attacker to inject and execute ma...

CVE-2016-1000234

The CVE-2016-1000234 entry maps to a Cross-Site Scripting issue in the jqTree component. Connected advisories (GHSA-GJHX-GXWX-JX9J and OSV) describe that affected versions of jqtree are vulnerable to XSS via the drag-and-drop operation when modifying tree data, allowing script content within a no...

CVE-2016-1000227

CVE-2016-1000227 is a reserved placeholder entry; connected advisories describe a cross-site scripting vulnerability in bootstrap-tagsinput. All versions are affected by unsanitized input passed to the itemTitle parameter, leading to XSS. The issue is not actively maintained (last updates circa 2...