CVE-2021-1978

CVE-2021-1978 is listed in the 2021-08 Android bulletin under Qualcomm closed‑source components, with High severity in the WLAN area (QC-CR#2859124). The connected data confirms affected component as WLAN in Qualcomm components; no explicit root cause, impact details, exploit info, or remediation...

CVE-2021-27666

CVE-2021-27666 is referenced in the TencentOS Server 3 advisory (TSSA-2022:0125) as a kernel issue: a possible buffer overflow in ESP transformation. The Nessus plugin notes TencentOS Server 3 versions prior to the tested release are affected and packages are available to fix the vulnerabilities,...

CVE-2019-13609

Citrix CVE-2019-13609 is a CRLF injection vulnerability in Citrix License Server for Windows and VPX. It could allow an unauthenticated attacker to bypass authentication and cause a malicious website to read or modify license server data on an existing session. Affected products include License S...

CVE-2018-3546

CVE-2018-3546 is addressed in Slackware’s SSA-2018-240-01 by upgrading the Slackware 14.2 kernel to 4.4.153 to mitigate Foreshadow (L1 Terminal Fault) and Foreshadow-NG. The Slackware changelog and NSS plugin indicate updated packages for both x86_64 and i386, including kernel and related modules...

CVE-2021-22297

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2021-22297

CVE-2021-22297 affects curl/libcurl with multiple advisories listing vulnerable 7.1.1–7.78.0 and related curl variants. The described issue is due to STARTTLS handling that can enable a MITM to inject data over TLS handshakes (noted in PTSecurity PT-2021-4653; Slackware SSA-2021-146-01 references...

CVE-1234-1234

Technical details for CVE-1234-1234 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation are stated. Monitor for updates as the entry remains reserved.

CVE-2021-40743

Adobe InDesign (Windows and macOS) versions before 17.0.0 are affected by APSB21-107. CVE-2021-40743 is a NULL pointer dereference that could lead to a denial-of-service. Other related CVEs in the same advisory include CVE-2021-42731 and CVE-2021-42732. The vulnerability set is tied to InDesign 1...

CVE-2019-16447

Adobe Illustrator prior to version 24.0 is affected by CVE-2019-16447 as part of APSB19-36. The issue is described as Binary Planting potentially leading to Local Code Execution. The linked advisories indicate this affects Windows and macOS deployments, alongside other vulnerabilities in the same...

CVE-2021-40747

CVE-2021-40747 appears in multiple advisories as a NULL pointer dereference in Adobe Illustrator . Public sources indicate affected versions include Illustrator 2022 up to 25.4.1 (and earlier builds), with the issue addressed in the 25.4.2 update referenced by APSB21-98. Other connected findings ...

CVE-2021-40749

Adobe Illustrator is affected by CVE-2021-40749 as part of APSB21-98; a NULL pointer dereference in Illustrator 25.4.1 and earlier (Windows/macOS) can cause DoS. The issue is addressed by Adobe in the 25.4.2 update (APSB21-98). Affected products/versions and explicit exploit details are corrobora...

CVE-2021-40718

Adobe Illustrator is affected by CVE-2021-40718 (Out-of-bounds Read) on Windows/macOS prior to version 25.4.2, potentially causing memory leaks. The issue is part of multiple vulnerabilities addressed in APSB21-98; Adobe recommends updating to Illustrator 25.4.2 or later to mitigate. Other linked...

CVE-2021-21081

Adobe Connect is affected by CVE-2021-21081, an XSS issue that could allow arbitrary JavaScript execution in the victim’s browser. The vulnerability is documented alongside other CVEs (21079, 21080) in APSB21-19 and affects versions prior to the 11.2 update. Public details in connected sources in...

CVE-2021-40744

CVE-2021-40744 is linked in connected sources to an Adobe Campaign vulnerability affecting Adobe Campaign Classic (ACC). The exposed flaw is a cross-site scripting (XSS) vulnerability stemming from insufficient input validation, enabling potential injection and execution of client-side code. The ...

CVE-2021-28578

Adobe Animate contains a Use After Free vulnerability (CVE-2021-28578) that can lead to arbitrary code execution. Affected products are Adobe Animate on Windows and macOS versions prior to 20.5.2 (Windows) or 21.0.6 (macOS), as noted in APSB21-35. The issue is listed among multiple vulnerabilitie...

CVE-2021-28577

Adobe Animate is affected by multiple vulnerabilities including CVE-2021-28577, an out-of-bounds write that can lead to arbitrary code execution. According to APSB21-35, affected versions are Adobe Animate 20.x before 20.5.2 and 21.x before 21.0.6. The issue is addressed by a security update; use...

CVE-2019-7967

Technical details for CVE-2019-7967 are not provided in the connected documents. The entry remains reserved/no public details here. Monitor for updates as information may be released later.

CVE-2017-16087

The connected advisories describe a vulnerability in the npm package fs-git where strings passed to the buildCommand method are not sanitized, allowing arbitrary code execution. Affected versions of fs-git do not sanitize inputs, enabling code execution via crafted input in buildCommand. The issu...

CVE-2016-1000226

The connected advisory GHSA-7F59-X49P-V8MQ documents a Cross-Site Scripting vulnerability in swagger-ui. Affected versions of swagger-ui are vulnerable to XSS in both the consumes and produces parameters of the swagger JSON document for a given API. Additionally, an attacker can trick users into ...

CVE-2014-8883

The relevant advisories describe a directory traversal vulnerability in the nhouston static file server module, affecting all versions. An attacker can supply traversal input (e.g., ../) to read files outside the served directory. This VHS is documented in GHSA-44G9-W23C-5RW7 and mirrored in OSV ...