CVE-2026-21285

CVE-2026-21285 affects Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier. The issue is an Incorrect Authorization vulnerability that could allow a low-privileged attacker to bypass security measures and gain limited unauthorized access to a feat...

CVE-2025-21285

Technical details (affected products, root cause, impact or fixes for CVE-2025-21285 MSMQ DoS) are not included in the provided documents. Monitor updates from Microsoft and CVE/CIRCL references for remedies and exposure.

CVE-2025-21285 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

...

CVE-2025-21285

creationtimestamp| type| source ---|---|--- 2025-01-14 17:29:48+00:00| seen| https://www.thezdi.com/blog/2025/1/14/the-january-2025-security-update-review 2025-01-14 18:20:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpui4a63u2b 2025-01-14 22:41:20+00:00| seen|...

CVE-2024-21285

creationtimestamp| type| source ---|---|--- 2024-10-15 22:47:48+00:00| seen| https://t.me/cvedetector/7945...

CVE-2024-21285

...

CVE-2024-21285

...

Photon OS 4.0: Mysql PHSA-2022-4.0-0153

An update of the mysql package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0153. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security Bulletin: IBM Storage Ceph is vulnerable to assorted vulnerabilities in Grafana

Summary Moby is used by IBM Storage Ceph in Grafana as part of Metrics. This bulletin identifies the steps to take to address the vulnerability in Grafana. CVE-2021-21285, CVE-2021-31525, CVE-2021-3121, CVE-2022-34038, CVE-2021-41103, CVE-2021-41089, CVE-2020-29652, CVE-2022-27536, CVE-2021-44716...

Amazon Linux 2 : docker (ALASECS-2023-015)

The version of docker installed on the remote host is prior to 20.10.4-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2023-015 advisory. A flaw was found in the userns-remap feature of Docker. The root user in the remapped namespace can modify files under...

BELL-CVE-2021-21285 CVE-2021-21285 does not affect BellSoft software

Bulletin has no description...

CVE-2023-21285

creationtimestamp| type| source ---|---|--- 2023-08-15 02:20:01+00:00| seen| https://t.me/cibsecurity/68514 2023-12-11 17:48:44+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9566 2024-08-16 08:56:11+00:00| published-proof-of-concept| https://t.me/Rootsec2/2244...

CVE-2023-21285

In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21285

In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21285

CVE-2023-21285 affects Android’s MediaSessionRecord.java, where a flawed setMetadata function could allow a local attacker to view another user’s images via a confused deputy. The issue enables local information disclosure without additional execution privileges and does not require user interact...

CVE-2023-21285

In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-21285 affecting package mysql for versions less than 8.0.28-1

CVE-2022-21285 affecting package mysql for versions less than 8.0.28-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-21285 affecting package mysql 8.0.27-2

CVE-2022-21285 affecting package mysql 8.0.27-2. An upgraded version of the package is available that resolves this issue...

CVE-2022-21285

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

AZL-7541 CVE-2022-21285 affecting package mysql for versions less than 8.0.28-1

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...