prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write.

...

CVE-2021-32627

An integer overflow issue was found in redis. The vulnerability involves changing the default "proto-max-bulk-len" and "client-query-buffer-limit" configuration parameters to very large values and constructing specially crafted large stream elements. This flaw allows a remote attacker to corrupt...

CVE-2021-41465

Cross-site scripting XSS vulnerability in concrete/elements/collectiontheme.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the rel parameter...

CVE-2021-41462

Cross-site scripting XSS vulnerability in concrete/elements/collectionadd.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the ctID parameter...

CVE-2021-41461

Cross-site scripting XSS vulnerability in concrete/elements/collectionadd.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the mode parameter...

CVE-2021-41465: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in concrete/elements/collectiontheme.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the rel parameter...

CVE-2021-41461: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in concrete/elements/collectionadd.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the mode parameter...

CVE-2021-41464: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in concrete/elements/collectionadd.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the rel parameter...

PT-2021-15646

Name of the Vulnerable Software and Affected Versions: Fortinet FortiManager versions 6.4.3 and below Fortinet FortiManager versions 6.2.7 and below Description: The issue is related to the improper neutralization of formula elements in a csv file. This allows an attacker to execute arbitrary...

Adobe Premiere Elements Buffer Overflow

The vulnerability of Adobe Premiere Elements software-related video editing software is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Adobe Premiere Elements Buffer Overflow

The vulnerability of Adobe Premiere Elements software-related video editing programs lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...

Adobe Premiere Elements Buffer Overflow

The vulnerability of Adobe Premiere Elements software-related video editing software is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Adobe Premiere Elements Buffer Overflow

The vulnerability of Adobe Premiere Elements software-related video editing software is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

CVE-2021-38124: Improper Neutralization of Special Elements used in a Command

Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager ESM product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution...

CVE-2021-40701

Adobe Premiere Elements version 2021.2235820 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this...

CVE-2021-40702

Adobe Premiere Elements version 2021.2235820 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious psd file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this...

CVE-2021-39824

Adobe Premiere Elements version 2021.2235820 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious png file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this...

CVE-2021-39825

Photoshop Elements versions 2021 build 19.0 20210304.m.156367 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...

CVE-2021-40700

Adobe Premiere Elements version 2021.2235820 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this...

CVE-2021-39824

Adobe Premiere Elements version 2021.2235820 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious png file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this...