CVE-2020-6929

Technical details for CVE-2020-6929 are not provided in the supplied documents; the Initial Description indicates reservation. Monitor for updates as more information may be released.

CVE-2020-28418

HP advisory HPSBGN03722 rev.1 details a vulnerability in HP Support Assistant involving a weak ACL and DLL loading that could permit an attacker to execute arbitrary code. The advisory cites a patch released on March 10, 2021 that updates HP Support Assistant clients on the weekly update scan for...

CVE-2018-4177

CVE-2018-4177 is listed in the Apple iOS 11.3 security content as affecting the Apple TV App on iOS 11.3. The vulnerability is described as an input-validation issue that could allow an attacker with a privileged network position to spoof password prompts in the Apple TV App. The Apple document a...

CVE-2014-1687

Huawei AR router SSH module DoS vulnerability (CVE-2014-1687): when subjected to a large volume of malformed SSH authentication packets, legitimate users may be unable to log in via SSH due to resource exhaustion. This vulnerability is documented in HWPSIRT-2013-1255 and linked CVE-2014-1687. Aff...

CVE-2014-1688

CVE-2014-1688 is associated with Huawei CloudEngine switches. The Huawei HWPSIRT advisory and the NASL plugin describe a security bypass in the HWTACACS authorization module caused by a failure of access control. An authenticated attacker can exploit this to execute commands with higher‑level per...

CVE-2014-4704

CVE-2014-4704 is associated with a DoS vulnerability in Huawei devices (Campus Switch, AR, SRG, WLAN). The flaw in the RADIUS component allows a remote, authenticated attacker to send malformed RADIUS packets to trigger device restarts. Affected products and exact firmware versions are described ...

CVE-2016-10278

CVE-2016-10278 is listed in the Android 2017-05-01 bulletin as a High-severity vulnerability in Qualcomm components, affecting Pixel and Pixel XL. The entry notes the issue is tied to Qualcomm internal references (QC-CR#1043004) and that a patch is not publicly available; the fix is provided only...

CVE-2018-11817

CVE-2018-11817 is listed as a critical issue in Qualcomm DSP_Services within the Android 2019-03 bulletin context. The connected document confirms the CVE is associated with Qualcomm DSP_Services (as part of Qualcomm components) and is rated Critical, but does not provide further technical detail...

CVE-2021-0846

Technical details for CVE-2021-0846 are not publicly available in the provided documents. No affected products, root cause, or impact are specified. Monitor for updates.

CVE-2021-27666

CVE-2021-27666 is referenced in the TencentOS Server 3 advisory (TSSA-2022:0125) as a kernel issue: a possible buffer overflow in ESP transformation. The Nessus plugin notes TencentOS Server 3 versions prior to the tested release are affected and packages are available to fix the vulnerabilities,...

CVE-2021-44228228

CVE-2021-44228 (Log4j RCE) is described as a remote code execution vulnerability in the Apache Log4j Java library. Check Point reports that their Infinity portfolio products are not vulnerable due to a hardened Java environment, and they provide IPS protection and guidance to apply Apache patches...

CVE-2018-3546

CVE-2018-3546 is addressed in Slackware’s SSA-2018-240-01 by upgrading the Slackware 14.2 kernel to 4.4.153 to mitigate Foreshadow (L1 Terminal Fault) and Foreshadow-NG. The Slackware changelog and NSS plugin indicate updated packages for both x86_64 and i386, including kernel and related modules...

CVE-2018-36464

Technical details for CVE-2018-36464 are not provided in the available documents. The Connected Huawei advisory discusses L1TF-related CVEs (e.g., CVE-2018-3646) but does not reveal specifics for 2018-36464. Monitor for updates.

CVE-2019-16447

Adobe Illustrator prior to version 24.0 is affected by CVE-2019-16447 as part of APSB19-36. The issue is described as Binary Planting potentially leading to Local Code Execution. The linked advisories indicate this affects Windows and macOS deployments, alongside other vulnerabilities in the same...

CVE-2021-40746

Adobe Illustrator CVE-2021-40746 is an Out-of-Bounds Read leading to Arbitrary Code Execution in Illustrator prior to version 25.4.2. Affected platforms include Windows and macOS per APSB21-98. Patch: update to Illustrator 25.4.2 or later as advised in APSB21-98 to remediate. Other sources (Threa...

CVE-2021-40718

Adobe Illustrator is affected by CVE-2021-40718 (Out-of-bounds Read) on Windows/macOS prior to version 25.4.2, potentially causing memory leaks. The issue is part of multiple vulnerabilities addressed in APSB21-98; Adobe recommends updating to Illustrator 25.4.2 or later to mitigate. Other linked...

CVE-2021-40748

Adobe Illustrator is affected by multiple vulnerabilities referenced under APSB21-98 with CVE-2021-40718, CVE-2021-40746, CVE-2021-40747, CVE-2021-40748, and CVE-2021-40749. The issues apply to Illustrator installations prior to version 25.4.2 on Windows and macOS, and include out-of-bounds reads...

CVE-2021-43014

Adobe Connect is affected by CSRF leading to arbitrary file system write (CVE-2021-43014) as described in APSB21-112. The vulnerability is tied to Adobe Connect versions prior to the fixed release (vendor fix listed in APSB21-112). Exploitation context is a CSRF flaw without token authentication ...

CVE-2021-28577

Adobe Animate is affected by multiple vulnerabilities including CVE-2021-28577, an out-of-bounds write that can lead to arbitrary code execution. According to APSB21-35, affected versions are Adobe Animate 20.x before 20.5.2 and 21.x before 21.0.6. The issue is addressed by a security update; use...

CVE-2021-28572

Adobe Animate is affected by CVE-2021-28572 (out-of-bounds read) in versions prior to 20.5.2 or 21.0.6. The issue, documented under APSB21-35, can lead to information disclosure. Remediation is to update to 20.5.2/21.0.6 or later as specified by the advisory.