CVE-2019-16447

Adobe Illustrator prior to version 24.0 is affected by CVE-2019-16447 as part of APSB19-36. The issue is described as Binary Planting potentially leading to Local Code Execution. The linked advisories indicate this affects Windows and macOS deployments, alongside other vulnerabilities in the same...

CVE-2021-40748

Adobe Illustrator is affected by multiple vulnerabilities referenced under APSB21-98 with CVE-2021-40718, CVE-2021-40746, CVE-2021-40747, CVE-2021-40748, and CVE-2021-40749. The issues apply to Illustrator installations prior to version 25.4.2 on Windows and macOS, and include out-of-bounds reads...

CVE-2021-40747

CVE-2021-40747 appears in multiple advisories as a NULL pointer dereference in Adobe Illustrator . Public sources indicate affected versions include Illustrator 2022 up to 25.4.1 (and earlier builds), with the issue addressed in the 25.4.2 update referenced by APSB21-98. Other connected findings ...

CVE-2021-40749

Adobe Illustrator is affected by CVE-2021-40749 as part of APSB21-98; a NULL pointer dereference in Illustrator 25.4.1 and earlier (Windows/macOS) can cause DoS. The issue is addressed by Adobe in the 25.4.2 update (APSB21-98). Affected products/versions and explicit exploit details are corrobora...

CVE-2021-40718

Adobe Illustrator is affected by CVE-2021-40718 (Out-of-bounds Read) on Windows/macOS prior to version 25.4.2, potentially causing memory leaks. The issue is part of multiple vulnerabilities addressed in APSB21-98; Adobe recommends updating to Illustrator 25.4.2 or later to mitigate. Other linked...

CVE-2021-40744

CVE-2021-40744 is linked in connected sources to an Adobe Campaign vulnerability affecting Adobe Campaign Classic (ACC). The exposed flaw is a cross-site scripting (XSS) vulnerability stemming from insufficient input validation, enabling potential injection and execution of client-side code. The ...

CVE-2019-7966

CVE-2019-7966 details are not provided in the supplied documents. No product, impact, or remediation information is available. Monitor for updates from official disclosures.

CVE-2019-7967

Technical details for CVE-2019-7967 are not provided in the connected documents. The entry remains reserved/no public details here. Monitor for updates as information may be released later.

CVE-2017-16087

The connected advisories describe a vulnerability in the npm package fs-git where strings passed to the buildCommand method are not sanitized, allowing arbitrary code execution. Affected versions of fs-git do not sanitize inputs, enabling code execution via crafted input in buildCommand. The issu...

CVE-2015-4130

Consolidated details show CVE-2015-4130’s connected advisories describe a command-injection vulnerability in ungit (URL parameter) affecting versions prior to 0.9.0. Affected software: ungit. Root cause: command injection via the url parameter. Impact: not explicitly quantified in the provided do...

CVE-2016-1000228

Summary: The provided connected advisories describe a DOM-based XSS vulnerability in the npm package Gmail.js (gmail-js). Affected versions contain unsafe handling in the functions tools.parse_response, helper.get.visible_emails_post, and helper.get.email_data_post, which pass user input directly...

CVE-2016-1000226

The connected advisory GHSA-7F59-X49P-V8MQ documents a Cross-Site Scripting vulnerability in swagger-ui. Affected versions of swagger-ui are vulnerable to XSS in both the consumes and produces parameters of the swagger JSON document for a given API. Additionally, an attacker can trick users into ...

CVE-2016-1000238

The CVE-2016-1000238 entry is linked to node-krb5 SPOOFING via unvalidated KDC. Affected: node-krb5 (Node.js module). Issue: KDC is not validated before authentication, allowing a network-attacker with time and access to spoof the KDC and impersonate a valid user without credentials. Impact: pote...

CVE-2014-8883

The relevant advisories describe a directory traversal vulnerability in the nhouston static file server module, affecting all versions. An attacker can supply traversal input (e.g., ../) to read files outside the served directory. This VHS is documented in GHSA-44G9-W23C-5RW7 and mirrored in OSV ...

CVE-2016-1000224

The connected advisories describe a vulnerability in ezseed-transmission: affected versions download/run a script over HTTP, enabling a privileged-network attacker to perform a Man‑in‑the‑Middle attack and replace the script with malicious code, compromising the system running ezseed-transmission...

CVE-2017-16034

The CVE-2017-16034 entry maps to a real vulnerability in the Node.js pidusage package: affected versions pass unsanitized input to child_process.exec(), allowing arbitrary code execution in the ps method. The PoC is viable on Darwin, SunOS, FreeBSD, and AIX; Windows and Linux are not affected. Re...

CVE-2016-1000234

The CVE-2016-1000234 entry maps to a Cross-Site Scripting issue in the jqTree component. Connected advisories (GHSA-GJHX-GXWX-JX9J and OSV) describe that affected versions of jqtree are vulnerable to XSS via the drag-and-drop operation when modifying tree data, allowing script content within a no...

CVE-2016-1000231

The CVE placeholder CVE-2016-1000231 is linked to a real issue in the emoji rendering library emojione. Affected versions are vulnerable to cross-site scripting (XSS) when user input is fed into functions such as toShort(), shortnameToImage(), unicodeToImage(), and toImage(). The root cause is im...

CVE-2016-1000242

The connected advisories describe a Denial of Service in the mqtt package (GHSA-HG78-C92R-HVWR / OSV entry). Affected mqtt versions crash the Node.js process when handling specially crafted MQTT packets, leading to a DoS. Remediation: upgrade to v1.0.0 or later. References include GitHub Advisory...

CVE-2016-1000230

CVE-2016-1000230 : The connected advisories describe an XSS vulnerability in the client-side rendering of Rendr templates inside a _block, with server-side rendering unaffected. Affected versions of Rendr are vulnerable to cross-site scripting when client-side rendering occurs in that block conte...