Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-42196 State: PUBLISHED Published: 2022-05-31T16:42:37 Last Updated: 2024-08-04T03:30:37.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function traits_parse() located in abc.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/172
CVE ID: CVE-2021-42197 State: PUBLISHED Published: 2022-05-31T16:51:23 Last Updated: 2024-08-04T03:30:37.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20201222 through a memory leak in the swftools when swfdump is used. It allows an attacker to cause code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/177
CVE ID: CVE-2021-42198 State: PUBLISHED Published: 2022-05-31T17:19:30 Last Updated: 2024-08-04T03:30:37.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_GetBits() located in rfxswf.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/168
CVE ID: CVE-2021-42199 State: PUBLISHED Published: 2022-05-31T17:25:39 Last Updated: 2024-08-04T03:30:38.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20201222. A heap buffer overflow exists in the function swf_FontExtract_DefineTextCallback() located in swftext.c. It allows an attacker to cause code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/173
CVE ID: CVE-2021-42200 State: PUBLISHED Published: 2022-05-31T17:36:52 Last Updated: 2024-08-04T03:30:37.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function main() located in swfdump.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/170
CVE ID: CVE-2021-42201 State: PUBLISHED Published: 2022-05-31T18:16:53 Last Updated: 2024-08-04T03:30:38.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetD64() located in rfxswf.c. It allows an attacker to cause code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/175
CVE ID: CVE-2021-42202 State: PUBLISHED Published: 2022-05-31T18:35:50 Last Updated: 2024-08-04T03:30:38.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the function swf_DeleteFilter() located in swffilter.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/171
CVE ID: CVE-2021-42203 State: PUBLISHED Published: 2022-05-31T18:49:21 Last Updated: 2024-08-04T03:30:37.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the function swf_FontExtract_DefineTextCallback() located in swftext.c. It allows an attacker to cause code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/176
CVE ID: CVE-2021-42204 State: PUBLISHED Published: 2022-05-31T22:36:02 Last Updated: 2024-08-04T03:30:37.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function swf_GetBits() located in rfxswf.c. It allows an attacker to cause code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/169
CVE ID: CVE-2021-42205 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-02T18:36:23.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.emc.com.tw/upload/F2E/Vulnerability%20Report/Vulnerability%20Report_Miniport%20touchpad%20Windows%20driver_20221107.pdf
CVE ID: CVE-2021-42216 State: PUBLISHED Published: 2021-12-15T17:53:54 Last Updated: 2024-08-04T03:30:37.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php. Additional Analyst Notes: - CVE Program Container: References: - http://anonaddy.com - https://github.com/anonaddy/anonaddy/blob/0478d9e8d364787f203113544123048a41f022c0/app/Http/Controllers/Auth/VerificationController.php#L67 - https://huntr.dev/bounties/419f4e8a-ee15-4f80-bcbf-5c83513515dd
CVE ID: CVE-2021-42218 State: PUBLISHED Published: 2022-05-03T10:31:21 Last Updated: 2024-08-04T03:30:37.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: OMPL v1.5.2 contains a memory leak in VFRRT.cpp Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ompl/ompl/issues/839
CVE ID: CVE-2021-42219 State: PUBLISHED Published: 2022-03-16T23:02:06 Last Updated: 2024-08-04T03:30:37.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service (DoS) via sending an excessive amount of messages to a node. This is caused by missing memory in the component /ethash/algorithm.go. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/document/d/1dYFSpNZPC0OV-n1mMqdc269u9yYU1XQy/edit?usp=sharing&ouid=112110745137218798745&rtpof=true&sd=true
CVE ID: CVE-2021-42220 State: PUBLISHED Published: 2021-12-15T06:32:03 Last Updated: 2024-08-04T03:30:37.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admin copies the payload into a box. Additional Analyst Notes: - CVE Program Container: References: - https://truedigitalsecurity.com/advisory-summary-2021 - https://packetstormsecurity.com/files/164544/Dolibarr-ERP-CRM-14.0.2-Cross-Site-Scripting-Privilege-Escalation.html
CVE ID: CVE-2021-42223 State: PUBLISHED Published: 2021-10-13T17:42:43 Last Updated: 2024-08-04T03:30:37.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS).vulnerability exists in Online DJ Booking Management System 1.0 in view-booking-detail.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50386
CVE ID: CVE-2021-42224 State: PUBLISHED Published: 2021-10-13T17:47:25 Last Updated: 2024-08-04T03:30:37.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability exists in IFSC Code Finder Project 1.0 via the searchifsccode POST parameter in /search.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50391 - http://packetstormsecurity.com/files/164514/IFSC-Code-Finder-Project-1.0-SQL-Injection.html - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42224
CVE ID: CVE-2021-42227 State: PUBLISHED Published: 2021-10-14T16:35:26 Last Updated: 2024-08-04T03:30:37.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross SIte Scripting (XSS) vulnerability exists in KindEditor 4.1.x via a Google search inurl:/examples/uploadbutton.html and then the .html file on the website that uses this editor (the file suffix is allowed). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kindsoft/kindeditor/issues/336
CVE ID: CVE-2021-42228 State: PUBLISHED Published: 2021-10-14T16:38:58 Last Updated: 2024-08-04T03:30:37.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Request Forgery (CSRF) vulnerability exists in KindEditor 4.1.x, as demonstrated by examples/uploadbutton.html. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kindsoft/kindeditor/issues/337
CVE ID: CVE-2021-42230 State: PUBLISHED Published: 2022-04-15T16:17:21 Last Updated: 2024-08-04T03:30:37.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Seowon 130-SLC router all versions as of 2021-09-15 is vulnerable to Remote Code Execution via the queriesCnt parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50295
CVE ID: CVE-2021-42232 State: PUBLISHED Published: 2022-08-23T00:41:43 Last Updated: 2024-08-04T03:30:38.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link Archer A7 Archer A7(US)_V5_210519 is affected by a command injection vulnerability in /usr/bin/tddp. The vulnerability is caused by the program taking part of the received data packet as part of the command. This will cause an attacker to execute arbitrary commands on the router. Additional Analyst Notes: - CVE Program Container: References: - http://tp-link.com - http://archer.com - https://github.com/mQaLeX/IoT/blob/main/tp-link/Archer%20A7%28US%29_V5_20519_tddp.md
CVE ID: CVE-2021-42233 State: PUBLISHED Published: 2022-05-23T18:04:14 Last Updated: 2024-08-04T03:30:37.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Simple Blog plugin in Wondercms 3.4.1 is vulnerable to stored cross-site scripting (XSS) vulnerability. When any user opens a particular blog hosted on an attackers' site, XSS may occur. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/485748 - https://hackerone.com/reports/647130 - https://hackerone.com/reports/961046
CVE ID: CVE-2021-42235 State: PUBLISHED Published: 2022-05-04T16:56:50 Last Updated: 2024-08-04T03:30:37.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/osTicket/osTicket/commit/e28291022e662ffa754e170c09cade7bdadf3fd9
CVE ID: CVE-2021-42237 State: PUBLISHED Published: 2021-11-05T09:51:18.000Z Last Updated: 2025-10-21T23:25:27.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://sitecore.com - https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1000776 - https://blog.assetnote.io/2021/11/02/sitecore-rce/ - http://pack
e.com/kb?id=kb_article_view&sysparm_article=KB1000776 - https://blog.assetnote.io/2021/11/02/sitecore-rce/ - http://packetstormsecurity.com/files/164988/Sitecore-Experience-Platform-XP-Remote-Code-Execution.html
CVE ID: CVE-2021-42242 State: PUBLISHED Published: 2022-05-05T12:10:36 Last Updated: 2024-08-04T03:30:37.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command execution vulnerability exists in jfinal_cms 5.0.1 via com.jflyfox.component.controller.Ueditor. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/28
CVE ID: CVE-2021-42244 State: PUBLISHED Published: 2022-02-25T18:15:47 Last Updated: 2024-08-04T03:30:37.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in PaquitoSoftware Notimoo v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted title or message in a notification. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PaquitoSoft/Notimoo/issues/3
CVE ID: CVE-2021-42245 State: PUBLISHED Published: 2022-06-06T11:05:47 Last Updated: 2024-08-04T03:30:37.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlatCore-CMS 2.0.9 has a cross-site scripting (XSS) vulnerability in pages.edit.php through meta tags and content sections. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCore-CMS/issues/69
CVE ID: CVE-2021-42248 State: REJECTED Published: N/A Last Updated: 2024-05-02T21:39:59.647571 Description: No description available.
CVE ID: CVE-2021-42250 State: PUBLISHED Published: 2021-11-17T15:10:10 Last Updated: 2024-08-04T03:30:37.952Z Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-117 Description: Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/53lkszw6d3tybp5t99nvgcj538b9trw9 - http://www.openwall.com/lists/oss-security/2021/11/17/2
CVE ID: CVE-2021-42252 State: PUBLISHED Published: 2021-10-11T18:45:27 Last Updated: 2024-08-04T03:30:37.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before 5.14.6. Local attackers able to access the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileges, aka CID-b49a0e69a7b1. This occurs because a certain comparison uses values that are not memory sizes. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b49a0e69a7b1a68c8d3f64097d
: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b49a0e69a7b1a68c8d3f64097d06dabb770fec96 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.6 - https://security.netapp.com/advisory/ntap-20211112-0006/
CVE ID: CVE-2021-42254 State: PUBLISHED Published: 2021-11-19T18:04:10 Last Updated: 2024-08-04T03:30:37.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.beyondtrust.com/blog - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0008/MNDT-2021-0008.md
CVE ID: CVE-2021-42255 State: PUBLISHED Published: 2022-04-12T15:48:48 Last Updated: 2024-08-04T03:30:37.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user. Additional Analyst Notes: - CVE Program Container: References: - https://www.beyondtrust.com/blog - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0022/MNDT-2022-0022.md
CVE ID: CVE-2021-42257 State: PUBLISHED Published: 2021-10-11T00:00:00 Last Updated: 2024-08-04T03:30:38.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: check_smart before 6.9.1 allows unintended drive access by an unprivileged user because it only checks for a substring match of a device path (the /dev/bus substring and a number), aka an unanchored regular expression. Additional Analyst Notes: - CVE Program Container: References: - https://www.claudiokuenzler.com/monitoring-plugins/check_smart.php - https://www.claudiokuenzler.com/blog/1068/check_smart-6.9.1-security-fix-release-pseudo-device-path - https://bugzilla.suse.com/show_bug.cgi?id=1183057 - http://www.openwall.com/
1-security-fix-release-pseudo-device-path - https://bugzilla.suse.com/show_bug.cgi?id=1183057 - http://www.openwall.com/lists/oss-security/2021/10/14/2 - https://nvd.nist.gov/vuln/detail/CVE-2021-42257
CVE ID: CVE-2021-42258 State: PUBLISHED Published: 2021-10-22T21:25:55.000Z Last Updated: 2025-10-21T23:25:28.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation. SQL injection can, for example, use the txtID (aka username) parameter. Successful exploitation can include the ability to execute arbitrary code as MSSQLSERVER$ via xp_cmdshell. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.huntress.com/blog/threat-advisory-hackers-are-exploit
gram Container: - CISA ADP Vulnrichment: References: - https://www.huntress.com/blog/threat-advisory-hackers-are-exploiting-a-vulnerability-in-popular-billing-software-to-deploy-ransomware
CVE ID: CVE-2021-42260 State: PUBLISHED Published: 2021-10-11T00:00:00.000Z Last Updated: 2025-11-04T18:14:19.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/tinyxml/bugs/141/ - https://lists.debian.org/debian-lts-announce/2022/04/msg00019.html - https://lists.debian.org/debian-lts-announce/2022/09/msg00041.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedor
debian-lts-announce/2022/09/msg00041.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QCR5PIOBGDIDS6SYRESTMDJSEDFSCOE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HOMBSHRIW5Q34SQSXYURYAOYDZD2NQF6/
CVE ID: CVE-2021-42261 State: PUBLISHED Published: 2021-10-19T11:09:22 Last Updated: 2024-08-04T03:30:37.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Revisor Video Management System (VMS) before 2.0.0 has a directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directories that are outside of restricted directory on the remote server. This could lead to the disclosure of sensitive data on the vulnerable server. Additional Analyst Notes: - CVE Program Container: References: - https://revisorlab.com/ - https://github.com/jet-pentest/CVE-2021-42261
CVE ID: CVE-2021-42262 State: PUBLISHED Published: 2022-03-11T22:05:46 Last Updated: 2024-08-04T03:30:38.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type dictionary makes the OPC/UA client crash due to an out-of-memory condition. Additional Analyst Notes: - CVE Program Container: References: - https://industrial.softing.com/us/solutions/opc-and-opc-ua.html - https://industrial.softing.com/fileadmin/sof-files/pdf/ia/support/Security_Bulletin_CVE-2021-42262.pdf
CVE ID: CVE-2021-42263 State: PUBLISHED Published: 2022-03-16T14:03:12.172Z Last Updated: 2025-04-23T18:49:22.420Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Premiere Problem Types: CWE-476 Description: Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
CVE ID: CVE-2021-42264 State: PUBLISHED Published: 2022-03-16T14:03:17.829Z Last Updated: 2025-04-23T18:48:47.272Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Premiere Problem Types: CWE-476 Description: Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnr
CVE ID: CVE-2021-42265 State: PUBLISHED Published: 2023-09-07T12:54:36.875Z Last Updated: 2025-02-27T20:59:47.266Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Premiere Pro Problem Types: CWE-125 Description: Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referen
CVE ID: CVE-2021-42266 State: PUBLISHED Published: 2021-11-18T16:39:38.102Z Last Updated: 2025-04-23T19:20:56.140Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-788 Description: Adobe Animate version 21.0.9 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious FLA file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/animate/apsb21-105.html
CVE ID: CVE-2021-42267 State: PUBLISHED Published: 2021-11-18T16:40:24.929Z Last Updated: 2025-04-23T19:20:50.087Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-788 Description: Adobe Animate version 21.0.9 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious FLA file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/animate/apsb21-105.html
CVE ID: CVE-2021-42268 State: PUBLISHED Published: 2021-11-18T16:41:17.134Z Last Updated: 2025-04-23T19:20:44.064Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-476 Description: Adobe Animate version 21.0.9 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted FLA file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP
r interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/animate/apsb21-105.html