Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-42952 State: PUBLISHED Published: 2022-02-25T19:43:22 Last Updated: 2024-08-04T03:47:12.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zepl Notebooks before 2021-10-25 are affected by a sandbox escape vulnerability. Upon launching Remote Code Execution from the Notebook, users can then use that to subsequently escape the running context sandbox and proceed to access internal Zepl assets including cloud metadata services. Additional Analyst Notes: - CVE Program Container: References: - http://zepl.com - https://seclists.org/fulldisclosure/2022/Feb/32
CVE ID: CVE-2021-42954 State: PUBLISHED Published: 2021-11-17T12:13:26 Last Updated: 2024-08-04T03:47:13.126Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by incorrect access control. The installation directory is vulnerable to weak file permissions by allowing full control for Windows Everyone user group (non-admin or any guest users), thereby allowing privilege escalation, unauthorized password reset, stealing of sensitive data, access to credentials in plaintext, access to registry values, tampering with configuration
stealing of sensitive data, access to credentials in plaintext, access to registry values, tampering with configuration files, etc. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/nestedif/vulnerability-disclosure-improper-filesystem-permission-misconfigured-acls-zoho-r-a-p-56e195464b51
CVE ID: CVE-2021-42955 State: PUBLISHED Published: 2021-11-17T12:26:22 Last Updated: 2024-08-04T03:47:13.195Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AC:L/AV:L/A:L/C:N/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/nestedif/vulnerability-disclosure-improper-acl-unauthorized-password-reset-zoho-r-a-p-
References: - https://medium.com/nestedif/vulnerability-disclosure-improper-acl-unauthorized-password-reset-zoho-r-a-p-62efcdceb7a6
CVE ID: CVE-2021-42956 State: PUBLISHED Published: 2021-11-17T11:51:58 Last Updated: 2024-08-04T03:47:12.395Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dump all sensitive information including DB Connection string, entire IT infrastructure details, commands executed by IT admin including credentials, secrets, private
nnection string, entire IT infrastructure details, commands executed by IT admin including credentials, secrets, private keys and more. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/nestedif/vulnerability-disclosure-sensitive-info-leakage-agent-memory-dump-zoho-r-a-p-3d5ebc8928af
CVE ID: CVE-2021-42966 State: REJECTED Published: 2022-05-16T13:33:03 Last Updated: 2022-05-16T13:33:03 Description: No description available.
CVE ID: CVE-2021-42967 State: PUBLISHED Published: 2022-05-13T11:05:10 Last Updated: 2024-08-04T03:47:13.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller/FileController.java in novel-plus all versions allows allows an attacker to upload malicious JSP files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/201206030/novel-plus/issues/62
CVE ID: CVE-2021-42969 State: PUBLISHED Published: 2022-05-13T11:39:43 Last Updated: 2024-08-04T03:47:12.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Anaconda3 2021.05 are affected by OS command injection. When a user installs Anaconda, an attacker can create a new file and write something in usercustomize.py. When the user opens the terminal or activates Anaconda, the command will be executed. Additional Analyst Notes: - CVE Program Container: References: - https://yuaneuro.cn/anaconda/anaconda_command_execution.docx
CVE ID: CVE-2021-42970 State: PUBLISHED Published: 2022-03-29T17:19:54 Last Updated: 2024-08-04T03:47:12.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/ content parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cbkhwx/cxuucmsv3/issues/8
CVE ID: CVE-2021-42972 State: PUBLISHED Published: 2021-12-07T19:22:22 Last Updated: 2024-08-04T03:47:12.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: NoMachine Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42973 State: PUBLISHED Published: 2021-12-07T19:24:08 Last Updated: 2024-08-04T03:47:12.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42976 State: PUBLISHED Published: 2021-12-07T19:26:40 Last Updated: 2024-08-04T03:47:12.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: NoMachine Enterprise Desktop is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42977 State: PUBLISHED Published: 2021-12-07T19:30:48 Last Updated: 2024-08-04T03:47:12.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: NoMachine Enterprise Desktop is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42979 State: PUBLISHED Published: 2021-12-07T19:33:47 Last Updated: 2024-08-04T03:47:13.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: NoMachine Cloud Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Cloud Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42980 State: PUBLISHED Published: 2021-12-07T19:35:34 Last Updated: 2024-08-04T03:47:13.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: NoMachine Cloud Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Cloud Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42983 State: PUBLISHED Published: 2021-12-07T19:37:32 Last Updated: 2024-08-04T03:47:13.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: NoMachine Enterprise Client is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42986 State: PUBLISHED Published: 2021-12-07T19:39:42 Last Updated: 2024-08-04T03:47:12.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: NoMachine Enterprise Client is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42987 State: PUBLISHED Published: 2021-12-07T19:41:24 Last Updated: 2024-08-04T03:47:12.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eltima USB Network Gate is affected by Integer Overflow. IOCTL Handler 0x22001B in the USB Network Gate above 7.0.1370 below 9.2.2420 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42988 State: PUBLISHED Published: 2021-12-07T19:46:10 Last Updated: 2024-08-04T03:47:13.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eltima USB Network Gate is affected by Buffer Overflow. IOCTL Handler 0x22001B in the USB Network Gate above 7.0.1370 below 9.2.2420 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42990 State: PUBLISHED Published: 2021-12-07T19:47:36 Last Updated: 2024-08-04T03:47:13.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlexiHub For Windows is affected by Buffer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42993 State: PUBLISHED Published: 2021-12-07T19:50:27 Last Updated: 2024-08-04T03:47:13.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: FlexiHub For Windows is affected by Integer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42994 State: PUBLISHED Published: 2021-12-07T19:51:54 Last Updated: 2024-08-04T03:47:13.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Donglify is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Donglify above 1.0.12309 below 1.7.14110 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42996 State: PUBLISHED Published: 2021-12-07T19:53:22 Last Updated: 2024-08-04T03:47:12.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Donglify is affected by Integer Overflow. IOCTL Handler 0x22001B in the Donglify above 1.0.12309 below 1.7.14110 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-43000 State: PUBLISHED Published: 2021-12-07T19:54:43 Last Updated: 2024-08-04T03:47:13.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amzetta zPortal Windows zClient is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal Windows zClient <= v3.2.8180.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-43002 State: PUBLISHED Published: 2021-12-07T19:55:57 Last Updated: 2024-08-04T03:47:13.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amzetta zPortal DVM Tools is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal DVM Tools <= v3.3.148.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-43003 State: PUBLISHED Published: 2021-12-07T19:57:09 Last Updated: 2024-08-04T03:47:12.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Amzetta zPortal Windows zClient is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal Windows zClient <= v3.2.8180.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-43006 State: PUBLISHED Published: 2021-12-07T19:58:25 Last Updated: 2024-08-04T03:47:12.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: AmZetta Amzetta zPortal DVM Tools is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal DVM Tools <= v3.3.148.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-43008 State: PUBLISHED Published: 2022-04-05T01:46:09 Last Updated: 2024-08-04T03:47:13.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vrana/adminer/releases/tag/v4.6.3 - https://www.adminer.org/ - https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability - https://podalirius.net/en/cves/2021-43008/ - https://lists.debian.org/debian-lts-announce/
le-disclosure-vulnerability - https://podalirius.net/en/cves/2021-43008/ - https://lists.debian.org/debian-lts-announce/2022/05/msg00012.html
CVE ID: CVE-2021-43009 State: PUBLISHED Published: 2022-04-08T19:57:47 Last Updated: 2024-08-04T03:47:13.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Scripting (XSS) vulnerability exists in OpServices OpMon through 9.11 via the search parameter in the request URL. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/166619/Opmon-9.11-Cross-Site-Scripting.html - https://www.exploit-db.com/exploits/50857
CVE ID: CVE-2021-43010 State: PUBLISHED Published: 2022-05-10T18:29:00 Last Updated: 2024-08-04T03:47:13.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Safedog Apache v4.0.30255, attackers can bypass this product for SQL injection. Attackers can bypass access to sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/crow821/crowsec/tree/master/bypass_safedog1025
CVE ID: CVE-2021-43011 State: PUBLISHED Published: 2021-11-16T21:19:01.492Z Last Updated: 2025-04-23T19:22:23.907Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Prelude Problem Types: CWE-788 Description: Adobe Prelude version 10.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
e. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/prelude/apsb21-96.html
CVE ID: CVE-2021-43012 State: PUBLISHED Published: 2021-11-16T21:18:07.029Z Last Updated: 2025-04-23T19:22:32.031Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Prelude Problem Types: CWE-788 Description: Adobe Prelude version 10.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/sec
CVE ID: CVE-2021-43013 State: PUBLISHED Published: 2021-11-16T19:53:30.345Z Last Updated: 2025-04-23T19:22:45.958Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Media Encoder Problem Types: CWE-788 Description: Adobe Media Encoder version 15.4.1 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.ado
icious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/media-encoder/apsb21-99.html
CVE ID: CVE-2021-43015 State: PUBLISHED Published: 2021-11-22T15:32:47.618Z Last Updated: 2025-04-23T19:18:58.377Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-788 Description: Adobe InCopy version 16.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious GIF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.ado
lnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb21-110.html
CVE ID: CVE-2021-43016 State: PUBLISHED Published: 2021-11-22T15:33:50.695Z Last Updated: 2025-04-23T19:18:51.559Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-476 Description: Adobe InCopy version 16.4 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
ction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb21-110.html
CVE ID: CVE-2021-43017 State: PUBLISHED Published: 2021-11-18T18:35:31.913Z Last Updated: 2025-04-23T19:20:06.028Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: GoCart Problem Types: CWE-379 Description: Adobe Creative Cloud version 5.5 (and earlier) are affected by an Application denial of service vulnerability in the Creative Cloud Desktop installer. An authenticated attacker with root privileges could leverage this vulnerability to achieve denial of service by planting a malicious file on the victim's local machine. User interaction is required before product installation to abuse this vulnerability. Additional Analyst Notes: - CVE Progr
r interaction is required before product installation to abuse this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/creative-cloud/apsb21-111.html