CVE-2021-22297

CVE-2021-22297 affects curl/libcurl with multiple advisories listing vulnerable 7.1.1–7.78.0 and related curl variants. The described issue is due to STARTTLS handling that can enable a MITM to inject data over TLS handshakes (noted in PTSecurity PT-2021-4653; Slackware SSA-2021-146-01 references...

CVE-1234-1234

Technical details for CVE-1234-1234 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation are stated. Monitor for updates as the entry remains reserved.

CVE-2021-40743

Adobe InDesign (Windows and macOS) versions before 17.0.0 are affected by APSB21-107. CVE-2021-40743 is a NULL pointer dereference that could lead to a denial-of-service. Other related CVEs in the same advisory include CVE-2021-42731 and CVE-2021-42732. The vulnerability set is tied to InDesign 1...

CVE-2019-16447

Adobe Illustrator prior to version 24.0 is affected by CVE-2019-16447 as part of APSB19-36. The issue is described as Binary Planting potentially leading to Local Code Execution. The linked advisories indicate this affects Windows and macOS deployments, alongside other vulnerabilities in the same...

CVE-2021-40718

Adobe Illustrator is affected by CVE-2021-40718 (Out-of-bounds Read) on Windows/macOS prior to version 25.4.2, potentially causing memory leaks. The issue is part of multiple vulnerabilities addressed in APSB21-98; Adobe recommends updating to Illustrator 25.4.2 or later to mitigate. Other linked...

CVE-2021-40747

CVE-2021-40747 appears in multiple advisories as a NULL pointer dereference in Adobe Illustrator . Public sources indicate affected versions include Illustrator 2022 up to 25.4.1 (and earlier builds), with the issue addressed in the 25.4.2 update referenced by APSB21-98. Other connected findings ...

CVE-2021-40749

Adobe Illustrator is affected by CVE-2021-40749 as part of APSB21-98; a NULL pointer dereference in Illustrator 25.4.1 and earlier (Windows/macOS) can cause DoS. The issue is addressed by Adobe in the 25.4.2 update (APSB21-98). Affected products/versions and explicit exploit details are corrobora...

CVE-2021-21081

Adobe Connect is affected by CVE-2021-21081, an XSS issue that could allow arbitrary JavaScript execution in the victim’s browser. The vulnerability is documented alongside other CVEs (21079, 21080) in APSB21-19 and affects versions prior to the 11.2 update. Public details in connected sources in...

CVE-2021-40744

CVE-2021-40744 is linked in connected sources to an Adobe Campaign vulnerability affecting Adobe Campaign Classic (ACC). The exposed flaw is a cross-site scripting (XSS) vulnerability stemming from insufficient input validation, enabling potential injection and execution of client-side code. The ...

CVE-2021-28578

Adobe Animate contains a Use After Free vulnerability (CVE-2021-28578) that can lead to arbitrary code execution. Affected products are Adobe Animate on Windows and macOS versions prior to 20.5.2 (Windows) or 21.0.6 (macOS), as noted in APSB21-35. The issue is listed among multiple vulnerabilitie...

CVE-2021-28577

Adobe Animate is affected by multiple vulnerabilities including CVE-2021-28577, an out-of-bounds write that can lead to arbitrary code execution. According to APSB21-35, affected versions are Adobe Animate 20.x before 20.5.2 and 21.x before 21.0.6. The issue is addressed by a security update; use...

CVE-2019-7967

Technical details for CVE-2019-7967 are not provided in the connected documents. The entry remains reserved/no public details here. Monitor for updates as information may be released later.

CVE-2017-16087

The connected advisories describe a vulnerability in the npm package fs-git where strings passed to the buildCommand method are not sanitized, allowing arbitrary code execution. Affected versions of fs-git do not sanitize inputs, enabling code execution via crafted input in buildCommand. The issu...

CVE-2016-1000235

Vulnerability context (CVE-2016-1000235 / FuelUX) A cross-site scripting flaw affects the FuelUX library’s Pillbox feature. By supplying a script as the value for a new pillbox, an attacker can achieve arbitrary script execution. Affected versions are stated as vulnerable; no exact version range ...

CVE-2014-8883

The relevant advisories describe a directory traversal vulnerability in the nhouston static file server module, affecting all versions. An attacker can supply traversal input (e.g., ../) to read files outside the served directory. This VHS is documented in GHSA-44G9-W23C-5RW7 and mirrored in OSV ...

CVE-2016-1000223

The CVE entry CVE-2016-1000223 has no public details in the Initial document. Connected documents reveal a vulnerability in the jws package (GitHub advisory GHSA-GJCW-V447-2W7Q / OSV entry) where users can select the JWT verification algorithm, allowing a malicious actor to modify a JWT while sti...

CVE-2016-1000226

The connected advisory GHSA-7F59-X49P-V8MQ documents a Cross-Site Scripting vulnerability in swagger-ui. Affected versions of swagger-ui are vulnerable to XSS in both the consumes and produces parameters of the swagger JSON document for a given API. Additionally, an attacker can trick users into ...

CVE-2013-3364

CVE-2013-3364 aligns with a GitHub advisory and OSV entry describing unauthenticated remote command injection in the ep_imageconvert plugin for Etherpad Lite. The vulnerability affects ep_imageconvert

CVE-2014-8881

Summary: The connected advisories indicate a Regular Expression Denial of Service (ReDoS) affecting all versions of the Python package bleach during its sanitize function. The issue is not tied to a specific version release in the provided documents; the advisories state all versions are vulnerab...

CVE-2016-1000238

The CVE-2016-1000238 entry is linked to node-krb5 SPOOFING via unvalidated KDC. Affected: node-krb5 (Node.js module). Issue: KDC is not validated before authentication, allowing a network-attacker with time and access to spoof the KDC and impersonate a valid user without credentials. Impact: pote...