CVE-2020-9709

CVE-2020-9709 is referenced in APSB20-45 as a security bypass that could lead to privilege escalation in Adobe Photoshop CC 2019/2020. The connected Nessus entries indicate affected products are Photoshop on Windows and macOS prior to 20.0.10/21.2.1, with the advisory describing multiple vulnerab...

CVE-2021-28582

Adobe Photoshop is affected by a buffer overflow vulnerability (CVE-2021-28582) described in APSB21-38. The issue is reported to allow arbitrary code execution and is tied to Photoshop versions prior to 21.2.9/22.4.2 on Windows and macOS. Connected sources indicate a vulnerability in Photoshop (C...

CVE-2021-44184

Adobe Photoshop (Windows/macOS) versions 22.x prior to 22.5.4 and 23.x prior to 23.1 are affected by multiple vulnerabilities referenced in APSB21-113, including a buffer overflow (CVE-2021-44184) that can lead to arbitrary code execution. The issue stems from an out-of-bounds write (CVE-2021-430...

CVE-2021-43020

CVE-2021-43020 is discussed in connected advisories for Adobe Photoshop (APSB21-113). The vulnerability is described as an out-of-bounds/End-of-buffer issue that can lead to a memory leak through an access-after-end-of-buffer condition (CWE-788). Affected products include Photoshop on Windows and...

CVE-2021-427171

The connected CNNVD entry links CVE-2021-427171 to a vulnerability in ModSecurity used with NGINX, where the ModSecurity JSON parser can be triggered by specially formatted JSON messages, causing high resource utilization and a potential denial of service. Affected component: ModSecurity WAF inte...

CVE-2021-442255

CVE-2021-442255 is referenced in a Huawei EulerOS keepalived advisory (EulerOS-SA-2022-2565) affecting EulerOS Virtualization 3.0.6.0, where the keepalived component relies on IPVS for Layer4 load balancing. The connected OpenVAS/Nessus entries confirm the vulnerability association and assign a C...

CVE-2020-1867

Technical details for CVE-2020-1867 are not publicly available in the provided documents. The connected sources do not specify affected products, versions, or impact. Monitor for updates as more information is released.

CVE-2099-1234

Technical details for CVE-2099-1234 are not publicly available in the provided documents. Monitor for updates; no affected products, vectors, or remediation information can be stated at this time.

CVE-2021-9951

This CVE (CVE-2021-9951) is addressed in OpenSUSE/SUSE security updates for webkit2gtk3. Affected component: WebKitGTK’s webkit2gtk3, updated to version 2.30.3. Root cause: a use-after-free in the relevant code path. Impact: could allow arbitrary code execution on vulnerable hosts. Remediation: a...

CVE-2016-11107

CVE-2016-11107 in this dataset is a placeholder; connected documents reveal the related concrete issue CVE-2017-11107 affecting phpldapadmin (Debian Jessie). It is a cross-site scripting (XSS) vulnerability in phpldapadmin that was fixed in Debian 8 (Jessie) with version 1.2.2-5.2+deb8u1. The Deb...

CVE-2018-100022

Technical details for CVE-2018-100022 are not provided in the supplied documents; no affected products, versions, impact, or remediation are stated. Monitor for updates.

CVE-2018-147189

Technical details for CVE-2018-147189 are not publicly available in the provided documents; no affected products, vulnerability type, or fixes are described. Monitor for updates.

CVE-2021-13584

CVE-2021-13584 is addressed in OpenSUSE/SUSE security advisories for webkit2gtk3. The updates fix use-after-free vulnerabilities that could allow arbitrary code execution (CVE-2021-13543, CVE-2021-13584) and related issues (CVE-2021-9948, CVE-2021-9951, CVE-2021-9983) by upgrading webkit2gtk3 to ...

CVE-2020-11752

CVE-2020-11752 is tied to the OpenWrt relayd component. OpenWrt advisory states that relayd up to OpenWrt 18.06.8 and 19.07.0–19.07.2 is vulnerable to out-of-bounds reads of heap data and possible buffer overflow, via specially crafted DHCP packets in a local-network context. The issue affects th...

CVE-2020-11750

OpenWrt’s umdns (Multicast DNS Daemon) is affected by CVE-2020-11750, with out-of-bounds reads of heap data and potential buffer overflow in OpenWrt 18.06.0–18.06.8 and 19.07.0–19.07.2. An attacker on the same local network could exploit by sending a crafted mDNS packet. The advisory notes no kno...

CVE-2021-23829

Technical details for CVE-2021-23829 are not provided in the supplied documents. The connected OpenSSL advisory covers CVE-2021-23839/23840/23841 affecting AIX; monitor for updates regarding CVE-2021-23829.

CVE-2019-27690

CVE-2019-27690 is reported as part of ALAS-2019-1268 for Amazon Linux 2, affecting Java SE/Java SE Embedded components with the Networking subcomponent. Affected are Java SE: 7u221, 8u212, 11.0.3, 12.0.1 and Java SE Embedded: 8u211. The vulnerability allows an unauthenticated attacker with networ...

CVE-2016-1000212

CVE-2016-1000212 affects lighttpd: a vulnerability where the server could propagate the client’s HTTP_PROXY value to internal processes via the HTTP_PROXY environment variable when processing a Proxy header, enabling a remote attacker to influence outbound requests. Multiple connected advisories ...

CVE-2011-1631

Cisco IOS Software contains a denial-of-service vulnerability (CVE-2011-1631) affecting devices that use Gambino DSP components. An unauthenticated, remote attacker can exploit malformed RTP packet processing by sending crafted network packets, potentially causing device components to become unre...

CVE-2019-20970

OpenDMARC vulnerability CVE-2019-20970 (OpenDMARC before 1.4.1.1) enables remote attackers to spoof SPF/DMARC/DKIM authentication results due to parsing/interpretation issues, allowing authentication bypass. The Arch Linux advisory confirms the issue and lists the fixed version 1.4.1.1. нет