CVE-2021-27666

CVE-2021-27666 is referenced in the TencentOS Server 3 advisory (TSSA-2022:0125) as a kernel issue: a possible buffer overflow in ESP transformation. The Nessus plugin notes TencentOS Server 3 versions prior to the tested release are affected and packages are available to fix the vulnerabilities,...

CVE-2021-44228228

CVE-2021-44228 (Log4j RCE) is described as a remote code execution vulnerability in the Apache Log4j Java library. Check Point reports that their Infinity portfolio products are not vulnerable due to a hardened Java environment, and they provide IPS protection and guidance to apply Apache patches...

CVE-2018-3546

CVE-2018-3546 is addressed in Slackware’s SSA-2018-240-01 by upgrading the Slackware 14.2 kernel to 4.4.153 to mitigate Foreshadow (L1 Terminal Fault) and Foreshadow-NG. The Slackware changelog and NSS plugin indicate updated packages for both x86_64 and i386, including kernel and related modules...

CVE-2018-36464

Technical details for CVE-2018-36464 are not provided in the available documents. The Connected Huawei advisory discusses L1TF-related CVEs (e.g., CVE-2018-3646) but does not reveal specifics for 2018-36464. Monitor for updates.

CVE-2019-16447

Adobe Illustrator prior to version 24.0 is affected by CVE-2019-16447 as part of APSB19-36. The issue is described as Binary Planting potentially leading to Local Code Execution. The linked advisories indicate this affects Windows and macOS deployments, alongside other vulnerabilities in the same...

CVE-2021-40746

Adobe Illustrator CVE-2021-40746 is an Out-of-Bounds Read leading to Arbitrary Code Execution in Illustrator prior to version 25.4.2. Affected platforms include Windows and macOS per APSB21-98. Patch: update to Illustrator 25.4.2 or later as advised in APSB21-98 to remediate. Other sources (Threa...

CVE-2021-40748

Adobe Illustrator is affected by multiple vulnerabilities referenced under APSB21-98 with CVE-2021-40718, CVE-2021-40746, CVE-2021-40747, CVE-2021-40748, and CVE-2021-40749. The issues apply to Illustrator installations prior to version 25.4.2 on Windows and macOS, and include out-of-bounds reads...

CVE-2021-40718

Adobe Illustrator is affected by CVE-2021-40718 (Out-of-bounds Read) on Windows/macOS prior to version 25.4.2, potentially causing memory leaks. The issue is part of multiple vulnerabilities addressed in APSB21-98; Adobe recommends updating to Illustrator 25.4.2 or later to mitigate. Other linked...

CVE-2021-43014

Adobe Connect is affected by CSRF leading to arbitrary file system write (CVE-2021-43014) as described in APSB21-112. The vulnerability is tied to Adobe Connect versions prior to the fixed release (vendor fix listed in APSB21-112). Exploitation context is a CSRF flaw without token authentication ...

CVE-2021-28577

Adobe Animate is affected by multiple vulnerabilities including CVE-2021-28577, an out-of-bounds write that can lead to arbitrary code execution. According to APSB21-35, affected versions are Adobe Animate 20.x before 20.5.2 and 21.x before 21.0.6. The issue is addressed by a security update; use...

CVE-2021-28572

Adobe Animate is affected by CVE-2021-28572 (out-of-bounds read) in versions prior to 20.5.2 or 21.0.6. The issue, documented under APSB21-35, can lead to information disclosure. Remediation is to update to 20.5.2/21.0.6 or later as specified by the advisory.

CVE-2019-7966

CVE-2019-7966 details are not provided in the supplied documents. No product, impact, or remediation information is available. Monitor for updates from official disclosures.

CVE-2019-7967

Technical details for CVE-2019-7967 are not provided in the connected documents. The entry remains reserved/no public details here. Monitor for updates as information may be released later.

CVE-2015-4130

Consolidated details show CVE-2015-4130’s connected advisories describe a command-injection vulnerability in ungit (URL parameter) affecting versions prior to 0.9.0. Affected software: ungit. Root cause: command injection via the url parameter. Impact: not explicitly quantified in the provided do...

CVE-2016-1000228

Summary: The provided connected advisories describe a DOM-based XSS vulnerability in the npm package Gmail.js (gmail-js). Affected versions contain unsafe handling in the functions tools.parse_response, helper.get.visible_emails_post, and helper.get.email_data_post, which pass user input directly...

CVE-2013-3364

CVE-2013-3364 aligns with a GitHub advisory and OSV entry describing unauthenticated remote command injection in the ep_imageconvert plugin for Etherpad Lite. The vulnerability affects ep_imageconvert

CVE-2016-1000241

The CVE entry (CVE-2016-1000241) is linked to a known XSS vulnerability in pivottable. Affected software: pivottable (JavaScript library). Issue: a new rendering mechanism for JSON elements introduces cross-site scripting, enabling injection through JSON-rendered content. References from connecte...

CVE-2016-1000230

CVE-2016-1000230 : The connected advisories describe an XSS vulnerability in the client-side rendering of Rendr templates inside a _block, with server-side rendering unaffected. Affected versions of Rendr are vulnerable to cross-site scripting when client-side rendering occurs in that block conte...

CVE-2016-1000227

CVE-2016-1000227 is a reserved placeholder entry; connected advisories describe a cross-site scripting vulnerability in bootstrap-tagsinput. All versions are affected by unsanitized input passed to the itemTitle parameter, leading to XSS. The issue is not actively maintained (last updates circa 2...

CVE-2016-1000233

CVE-2016-1000233 is a Swagger-UI cross-site scripting vulnerability described in the connected IBM bulletin. The issue arises when a Content-Type: application/javascript header is included while Swagger-UI processes a URL query string parameter, allowing a remote attacker to inject and execute ma...