CVE-2026-21268

creationtimestamp| type| source ---|---|--- 2026-01-14 07:03:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mceiv4irbt2u...

CVE-2026-21268 Dreamweaver Desktop | Improper Input Validation (CWE-20)

Dreamweaver Desktop versions 21.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file and scope is...

CVE-2018-21268

The traceroute aka node-traceroute package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character...

CVE-2022-21268

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications component: Pipeline Manager. Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows low privileged attacker with logon to the...

CVE-2025-21268

CVE-2025-21268 is a Windows MapUrlToZone security feature bypass. Affected component: MapUrlToZone logic; impact is circumvention of security boundaries (CVSS v3.1: 4.3, NETWORK attack vector, user interaction required). Connected sources confirm it as a security feature bypass vulnerability and ...

CVE-2025-21268 MapUrlToZone Security Feature Bypass Vulnerability

...

CVE-2025-21268

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:19:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpugtoelm2r 2025-01-14 21:41:16+00:00| seen|...

CVE-2024-21268

creationtimestamp| type| source ---|---|--- 2024-10-15 22:48:08+00:00| seen| https://t.me/cvedetector/7959...

CVE-2024-21268

...

CVE-2024-21268

...

Type confusion

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to...

CVE-2023-45204

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to...

CVE-2023-21268

creationtimestamp| type| source ---|---|--- 2023-08-15 01:27:49+00:00| seen| https://t.me/cibsecurity/68479...

CVE-2023-21268

CVE-2023-21268 concerns a path traversal issue in the Android MmsProvider.java update that can alter directory permissions. The vulnerability enables a local attacker to trigger a denial of service affecting SIM recognition, without requiring additional execution privileges. Exploitation is descr...

CVE-2020-21268

Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via the lastComment parameter...

CVE-2020-21268

Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via the lastComment parameter...

CVE-2020-21268

The CVE-2020-21268 entry concerns EasySoft ZenTao v11.6.4 with a Cross Site Scripting vulnerability in the lastComment parameter that can enable a remote attacker to execute arbitrary code. Affected component: ZenTao/lastComment handling. Root cause details are not explicitly provided in the conn...

CVE-2020-21268

Cross Site Scripting vulnerability in EasySoft ZenTao v.11.6.4 allows a remote attacker to execute arbitrary code via the lastComment parameter...

@rebelware/fibonacci-generator (=0.0.3), @tgwf/greentrace-cli (>=0.0.1 <=0.2.0) +4 more potentially affected by CVE-2018-21268 via traceroute (>=0.0.3 <=1.0.0)

traceroute NPM version =0.0.3, =0.0.1, =0.0.1, =1.0.1, =1.0.2 - securiwiser-web-check =1.0.0 Source cves: CVE-2018-21268 Source advisory: OSV:GHSA-8J9V-QHP4-WV55...

CVE-2022-21268

creationtimestamp| type| source ---|---|--- 2022-01-19 14:26:07+00:00| seen| https://t.me/cibsecurity/35792...