37 matches found
CVE-2025-21160
Illustrator versions 29.1, 28.7.3 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-21160
creationtimestamp| type| source ---|---|--- 2025-02-11 17:32:05+00:00| seen| https://infosec.exchange/users/cve/statuses/113986445327566247 2025-02-11 18:16:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbcxxblf2d...
CVE-2025-21160 Illustrator | Integer Underflow (Wrap or Wraparound) (CWE-191)
Illustrator versions 29.1, 28.7.3 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-21160 Illustrator | Integer Underflow (Wrap or Wraparound) (CWE-191)
Illustrator versions 29.1, 28.7.3 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2025-21160
CVE-2025-21160 affects Adobe Illustrator versions 29.1, 28.7.3 and earlier. It is caused by an Integer Underflow (Wrap or Wraparound) in a component/file that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a ...
Azure Linux 3.0 Security Update: mysql (CVE-2024-21160)
The version of mysql installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21160 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are...
CVE-2024-21160 affecting package mysql for versions less than 8.0.40-1
CVE-2024-21160 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-21160 affecting package mysql for versions less than 8.0.40-1
CVE-2024-21160 affecting package mysql for versions less than 8.0.40-1. An upgraded version of the package is available that resolves this issue...
CBL Mariner 2.0 Security Update: mysql (CVE-2024-21160)
The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-21160 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are...
K000140735: Oracle MySQL vulnerabilities CVE-2024-21160, CVE-2024-21162, and CVE-2024-21173
Security Advisory Description Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...
CVE-2024-21160 vulnerabilities
Vulnerabilities for packages: mysql...
AZL-50529 CVE-2024-21160 affecting package mysql for versions less than 8.0.40-1
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
CVE-2024-21160
...
CVE-2024-21160
...
CVE-2023-44426
D-Link DIR-X3260 SetSysEmailSettings AccountPassword Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this...
CVE-2023-44426 D-Link DIR-X3260 SetSysEmailSettings AccountPassword Command Injection Remote Code Execution Vulnerability
D-Link DIR-X3260 SetSysEmailSettings AccountPassword Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this...
CVE-2023-44426
CVE-2023-44426 affects the D-Link DIR-X3260 router. The flaw is in prog.cgi handling HNAP requests to the lighttpd webserver (ports 80/443). It lacks proper validation of a user-supplied string used to invoke a system call, allowing an attacker to execute code with root privileges. Authentication...
CVE-2023-21160
CVE-2023-21160 affects the Android kernel via a heap buffer overflow in BuildSetTcsFci (protocolmiscbuilder.cpp) that can cause a local out-of-bounds read and information disclosure without requiring user interaction. Public details across sources confirm the impact as local information disclosur...
SUSE CVE-2021-21160
Heap buffer overflow in WebAudio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2022-21160
Improper buffer restrictions for some IntelR PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access...