Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-42378 State: PUBLISHED Published: 2021-11-15T00:00:00.000Z Last Updated: 2025-11-03T20:34:05.561Z Vendors: busybox Products: busybox Problem Types: CWE-416 Description: A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/ - https://lists.fedoraproject.org/arc
ckage-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/ - https://security.netapp.com/advisory/ntap-20211223-0002/ - https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog
CVE ID: CVE-2021-42379 State: PUBLISHED Published: 2021-11-15T00:00:00.000Z Last Updated: 2025-11-03T20:34:06.953Z Vendors: busybox Products: busybox Problem Types: CWE-416 Description: A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/ - https://lists.fedoraproject.
list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/ - https://security.netapp.com/advisory/ntap-20211223-0002/ - https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog
CVE ID: CVE-2021-42380 State: PUBLISHED Published: 2021-11-15T00:00:00.000Z Last Updated: 2025-11-03T20:34:08.357Z Vendors: busybox Products: busybox Problem Types: CWE-416 Description: A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/ - https://lists.fedoraproject.org/archi
age-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/ - https://security.netapp.com/advisory/ntap-20211223-0002/ - https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog
CVE ID: CVE-2021-42381 State: PUBLISHED Published: 2021-11-15T00:00:00.000Z Last Updated: 2025-11-03T20:34:09.730Z Vendors: busybox Products: busybox Problem Types: CWE-416 Description: A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/ - https://lists.fedoraproject.org/ar
ackage-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/ - https://security.netapp.com/advisory/ntap-20211223-0002/ - https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog
CVE ID: CVE-2021-42382 State: PUBLISHED Published: 2021-11-15T00:00:00.000Z Last Updated: 2025-11-03T20:34:11.109Z Vendors: busybox Products: busybox Problem Types: CWE-416 Description: A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/ - https://lists.fedoraproject.org/arc
CVE ID: CVE-2021-42383 State: PUBLISHED Published: 2021-11-15T00:00:00.000Z Last Updated: 2025-04-23T19:23:16.547Z Vendors: busybox Products: busybox Problem Types: CWE-416 Description: A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/ - https://lists.fedoraproject.org/arc
CVE ID: CVE-2021-42384 State: PUBLISHED Published: 2021-11-15T00:00:00.000Z Last Updated: 2025-11-03T20:34:12.518Z Vendors: busybox Products: busybox Problem Types: CWE-416 Description: A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/ - https://lists.fedoraproject.o
ist/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/ - https://security.netapp.com/advisory/ntap-20211223-0002/ - https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog
CVE ID: CVE-2021-42385 State: PUBLISHED Published: 2021-11-15T00:00:00.000Z Last Updated: 2025-11-03T20:34:13.955Z Vendors: busybox Products: busybox Problem Types: CWE-416 Description: A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/ - https://lists.fedoraproject.org/arc
CVE ID: CVE-2021-42386 State: PUBLISHED Published: 2021-11-15T00:00:00.000Z Last Updated: 2025-11-03T20:34:15.336Z Vendors: busybox Products: busybox Problem Types: CWE-416 Description: A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/ - https://lists.fedoraproject.org/arch
kage-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/ - https://security.netapp.com/advisory/ntap-20211223-0002/ - https://claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog
CVE ID: CVE-2021-42387 State: PUBLISHED Published: 2022-03-14T00:00:00 Last Updated: 2024-08-04T03:30:38.465Z Vendors: yandex Products: clickhouse Problem Types: CWE-125 Description: Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the upper bounds of the source of the copy operation. Additional Analyst Notes: - CVE Program Container: References: - https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms - https://lists.debian.
ner: References: - https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms - https://lists.debian.org/debian-lts-announce/2022/11/msg00002.html
CVE ID: CVE-2021-42388 State: PUBLISHED Published: 2022-03-14T00:00:00 Last Updated: 2024-08-04T03:30:38.323Z Vendors: yandex Products: clickhouse Problem Types: CWE-125 Description: Heap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As part of the LZ4::decompressImpl() loop, a 16-bit unsigned user-supplied value ('offset') is read from the compressed data. The offset is later used in the length of a copy operation, without checking the lower bounds of the source of the copy operation. Additional Analyst Notes: - CVE Program Container: References: - https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms - https://lists.debian.
CVE ID: CVE-2021-42389 State: PUBLISHED Published: 2022-03-14T22:20:30 Last Updated: 2024-08-04T03:30:38.260Z Vendors: yandex Products: clickhouse Problem Types: CWE-369 Description: Divide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0. Additional Analyst Notes: - CVE Program Container: References: - https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms
CVE ID: CVE-2021-42390 State: PUBLISHED Published: 2022-03-14T22:20:31 Last Updated: 2024-08-04T03:30:38.448Z Vendors: yandex Products: clickhouse Problem Types: CWE-369 Description: Divide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0. Additional Analyst Notes: - CVE Program Container: References: - https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms
CVE ID: CVE-2021-42391 State: PUBLISHED Published: 2022-03-14T22:20:33 Last Updated: 2024-08-04T03:30:38.353Z Vendors: yandex Products: clickhouse Problem Types: CWE-369 Description: Divide-by-zero in Clickhouse's Gorilla compression codec when parsing a malicious query. The first byte of the compressed buffer is used in a modulo operation without being checked for 0. Additional Analyst Notes: - CVE Program Container: References: - https://jfrog.com/blog/7-rce-and-dos-vulnerabilities-found-in-clickhouse-dbms
CVE ID: CVE-2021-42392 State: PUBLISHED Published: 2022-01-07T00:00:00 Last Updated: 2024-08-04T03:30:38.345Z Vendors: h2database Products: h2 Problem Types: CWE-502 Description: The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote code execution. This can be exploited through various attack vectors, most notably through the H2 Console which leads to unauthenticated remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/h2database/h2database/security/advisor
ditional Analyst Notes: - CVE Program Container: References: - https://github.com/h2database/h2database/security/advisories/GHSA-h376-j262-vhq6 - https://lists.debian.org/debian-lts-announce/2022/02/msg00017.html - https://www.debian.org/security/2022/dsa-5076 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://jfrog.com/blog/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console/ - https://security.netapp.com/advisory/ntap-20220119-0001/ - https://www.secpod.com/blog/log4shell-critical-remote-code-execution-vulnerability-in-h2database-console/
CVE ID: CVE-2021-42521 State: PUBLISHED Published: 2022-08-25T00:00:00 Last Updated: 2024-08-04T03:30:38.337Z Vendors: n/a Products: vtk Problem Types: CWE-400 Description: There is a NULL pointer dereference vulnerability in VTK before 9.2.5, and it lies in IO/Infovis/vtkXMLTreeReader.cxx. The vendor didn't check the return value of libxml2 API 'xmlDocGetRootElement', and try to dereference it. It is unsafe as the return value can be NULL and that NULL pointer dereference may crash the application. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.kitware.com/vtk/vtk/issues/17818 - https://discourse.vtk.org/t/vtk-9-2-5-is-out/10549 - https://lists.fedoraproject
tlab.kitware.com/vtk/vtk/issues/17818 - https://discourse.vtk.org/t/vtk-9-2-5-is-out/10549 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PCTMSAAVP4BW2HTZLDWMGKZ2WEC5OFLK/
CVE ID: CVE-2021-42522 State: PUBLISHED Published: 2022-08-25T17:27:07 Last Updated: 2024-08-04T03:30:38.251Z Vendors: n/a Products: GNOME anjuta Problem Types: CWE-200 Description: There is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta-bookmarks.c. This issue was caused by the incorrect use of libxml2 API. The vendor forgot to call 'g_free()' to release the return value of 'xmlGetProp()'. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/anjuta/-/issues/12
CVE ID: CVE-2021-42523 State: PUBLISHED Published: 2022-08-25T17:27:21 Last Updated: 2024-08-04T03:30:38.667Z Vendors: n/a Products: colord Problem Types: CWE-200 Description: There are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd-device-db.c and colord/src/cd-profile-db.c separately. They exist because the 'err_msg' of 'sqlite3_exec' is not releasing after use, while libxml2 emphasizes that the caller needs to release it. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hughsie/colord/issues/110
CVE ID: CVE-2021-42524 State: PUBLISHED Published: 2021-11-18T16:45:26.796Z Last Updated: 2025-04-23T19:20:13.228Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-787 Description: Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/animate/apsb21-105.html
CVE ID: CVE-2021-42525 State: PUBLISHED Published: 2021-11-18T16:46:02.226041Z Last Updated: 2024-09-16T16:47:42.558Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Animate Problem Types: CWE-125 Description: Acrobat Animate versions 21.0.9 (and earlier)is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/animate/a
le. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/animate/apsb21-105.html
CVE ID: CVE-2021-42526 State: PUBLISHED Published: 2022-03-16T14:03:08.940Z Last Updated: 2025-04-23T18:49:49.898Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Elements Problem Types: CWE-788 Description: Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/p
CVE ID: CVE-2021-42527 State: PUBLISHED Published: 2022-03-16T14:03:05.545Z Last Updated: 2025-04-23T18:50:21.921Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Elements Problem Types: CWE-788 Description: Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/p
CVE ID: CVE-2021-42528 State: PUBLISHED Published: 2022-05-02T22:24:04.931Z Last Updated: 2025-11-03T19:26:23.079Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-476 Description: XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https
tion in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-108.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
CVE ID: CVE-2021-42529 State: PUBLISHED Published: 2022-05-02T22:24:18.976Z Last Updated: 2025-11-03T19:26:24.465Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-121 Description: XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-108.html - https://lists.debian.org/debian-lts
r: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-108.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
CVE ID: CVE-2021-42530 State: PUBLISHED Published: 2022-05-02T22:24:11.866Z Last Updated: 2025-11-03T19:26:25.858Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-121 Description: XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-108.html - https://lists.debian.org/debian-lts
CVE ID: CVE-2021-42531 State: PUBLISHED Published: 2022-05-02T22:24:15.474Z Last Updated: 2025-11-03T19:26:27.268Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-121 Description: XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-108.html - https://lists.debian.org/debian-lts
CVE ID: CVE-2021-42532 State: PUBLISHED Published: 2022-05-02T22:24:08.727Z Last Updated: 2025-11-03T19:26:28.669Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-121 Description: XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-108.html - https://lists.debian.org/debian-lts
CVE ID: CVE-2021-42533 State: PUBLISHED Published: 2022-03-16T14:02:43.412Z Last Updated: 2025-04-23T18:52:28.547Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-415 Description: Adobe Bridge version 11.1.1 (and earlier) is affected by a double free vulnerability when parsing a crafted DCM file, which could result in arbitrary code execution in the context of the current user. This vulnerability requires user interaction to exploit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb21-94.html
CVE ID: CVE-2021-42534 State: PUBLISHED Published: 2021-10-22T13:17:15.735964Z Last Updated: 2024-09-16T23:52:08.538Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Trane Products: Tracer SC Problem Types: CWE-79 Description: The affected product’s web application does not properly neutralize the input during webpage generation, which could allow an attacker to inject code in the input forms. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-292-02
CVE ID: CVE-2021-42535 State: PUBLISHED Published: 2022-07-27T20:21:04.000Z Last Updated: 2025-04-17T15:50:12.708Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: VISAM Products: VBASE Pro-RT/ Server-RT (Web Remote) Problem Types: CVE-79 Description: VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutralizes user-controllable input before the data is placed in output used as a public-facing webpage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-308-01
CVE ID: CVE-2021-42536 State: PUBLISHED Published: 2021-10-22T13:23:15.613414Z Last Updated: 2024-09-17T00:41:22.230Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Emerson Products: WirelessHART Gateway Problem Types: CWE-200 Description: The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-278-02