Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-40663 State: PUBLISHED Published: 2022-06-30T11:52:46 Last Updated: 2024-08-04T02:51:06.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: deep.assign npm package 0.0.0-alpha.0 is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/janbialostok/deep-assign/issues/1 - https://www.npmjs.com/package/deep.assign - https://security.netapp.com/advisory/ntap-20220826-0002/
CVE ID: CVE-2021-40668 State: PUBLISHED Published: 2022-06-09T12:51:35 Last Updated: 2024-08-04T02:51:06.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Android application HTTP File Server (Version 1.4.1) by 'slowscript' is affected by a path traversal vulnerability that permits arbitrary directory listing, file read, and file write. Additional Analyst Notes: - CVE Program Container: References: - https://eddiez.me/path-traversal-in-slowscript-httpfileserver/ - https://play.google.com/store/apps/details?id=slowscript.httpfileserver
CVE ID: CVE-2021-40669 State: PUBLISHED Published: 2021-09-16T18:02:54 Last Updated: 2024-08-04T02:51:06.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/196
CVE ID: CVE-2021-40670 State: PUBLISHED Published: 2021-09-16T18:45:25 Last Updated: 2024-08-04T02:51:06.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/197
CVE ID: CVE-2021-40674 State: PUBLISHED Published: 2021-09-20T14:32:47 Last Updated: 2024-08-04T02:51:06.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wuzhicms/wuzhicms/issues/198
CVE ID: CVE-2021-40678 State: PUBLISHED Published: 2022-06-14T12:16:48 Last Updated: 2024-08-04T02:51:06.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batch_manager&mode=unit. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/1476
CVE ID: CVE-2021-40680 State: PUBLISHED Published: 2022-04-25T04:12:10 Last Updated: 2024-08-04T02:51:06.700Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Directory Traversal vulnerability in Artica Proxy (4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP273) via the filename parameter to /cgi-bin/main.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2022/Apr/39
CVE ID: CVE-2021-40683 State: PUBLISHED Published: 2021-10-04T16:29:56 Last Updated: 2024-08-04T02:51:06.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack the flow of execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.akamai.com/products/enterprise-application-access - https://akamai.com/blog/news/eaa-client-escalation-of-privilege-vulnerability
CVE ID: CVE-2021-40684 State: PUBLISHED Published: 2021-09-22T16:35:35 Last Updated: 2024-08-04T02:51:06.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09, has an unauthenticated Jolokia HTTP endpoint which allows remote access to the JMX of the runtime container, which would allow an attacker the ability to read or modify the container or software running in the container. Additional Analyst Notes: - CVE Program Container: References: - https://help.talend.com/r/en-US/7.3/release-notes-esb-products - https://jira.talendforge.org/browse/SF-141
CVE ID: CVE-2021-40690 State: PUBLISHED Published: 2021-09-19T00:00:00 Last Updated: 2024-08-04T02:51:06.487Z Vendors: Apache Software Foundation Products: Apache Santuario Problem Types: CWE-200 Description: All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dc
VE Program Container: References: - https://lists.apache.org/thread.html/r8848751b6a5dd78cc9e99d627e74fecfaffdfa1bb615dce827aad633%40%3Cdev.santuario.apache.org%3E - https://lists.apache.org/thread.html/rbdac116aef912b563da54f4c152222c0754e32fb2f785519ac5e059f%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/re294cfc61f509512874ea514d8d64fd276253d54ac378ffa7a4880c8%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/r8a5c0ce9014bd07303aec1e5eed55951704878016465d3dae00e0c28%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/r9c100d53c84d54cf71975e3f0cfcc2856a8846554a04c99390156ce4%40%3Ccommits.tomee.apache.org%3E - https://lists.
/thread.html/r9c100d53c84d54cf71975e3f0cfcc2856a8846554a04c99390156ce4%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/r3b3f5ba9b0de8c9c125077b71af06026d344a709a8ba67db81ee9faa%40%3Ccommits.tomee.apache.org%3E - https://lists.apache.org/thread.html/raf352f95c19c0c4051af3180752cb69acbea88d0d066ab176c6170e8%40%3Cuser.poi.apache.org%3E - https://lists.debian.org/debian-lts-announce/2021/09/msg00015.html - https://lists.apache.org/thread.html/r401ecb7274794f040cd757b259ebe3e8c463ae74f7961209ccad3c59%40%3Cissues.cxf.apache.org%3E - https://lists.apache.org/thread.html/rbbbac0759b12472abd0c278d32b5e0867bb21934df8e14e5e641597c%40%3Ccommits.tomee.apache.org%3E - https://www.d
g/thread.html/rbbbac0759b12472abd0c278d32b5e0867bb21934df8e14e5e641597c%40%3Ccommits.tomee.apache.org%3E - https://www.debian.org/security/2021/dsa-5010 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20230818-0002/
CVE ID: CVE-2021-40691 State: PUBLISHED Published: 2022-01-21T18:17:49 Last Updated: 2024-08-04T02:51:06.538Z Vendors: n/a Products: moodle Problem Types: Session Hijack Description: A session hijack risk was identified in the Shibboleth authentication plugin. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2043411
CVE ID: CVE-2021-40692 State: PUBLISHED Published: 2022-01-21T18:17:47 Last Updated: 2024-08-04T02:51:06.544Z Vendors: n/a Products: moodle Problem Types: information disclosure Description: Insufficient capability checks made it possible for teachers to download users outside of their courses. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2043414
CVE ID: CVE-2021-40693 State: PUBLISHED Published: 2022-01-21T18:17:47 Last Updated: 2024-08-04T02:51:06.455Z Vendors: n/a Products: moodle Problem Types: authentication bypass Description: An authentication bypass risk was identified in the external database authentication functionality, due to a type juggling vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2043417
CVE ID: CVE-2021-40694 State: PUBLISHED Published: 2022-01-21T18:17:34 Last Updated: 2024-08-04T02:51:06.549Z Vendors: n/a Products: moodle Problem Types: arbitrary file read Description: Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2043421
CVE ID: CVE-2021-40695 State: PUBLISHED Published: 2022-01-21T18:17:48 Last Updated: 2024-08-04T02:51:06.977Z Vendors: n/a Products: moodle Problem Types: information disclosure Description: It was possible for a student to view their quiz grade before it had been released, using a quiz web service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2043424
CVE ID: CVE-2021-40696 State: REJECTED Published: 2022-02-09T22:05:54 Last Updated: 2022-02-09T22:05:54 Description: No description available.
CVE ID: CVE-2021-40697 State: PUBLISHED Published: 2021-09-29T15:41:01.311Z Last Updated: 2025-04-23T19:25:42.639Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: FrameMaker Problem Types: CWE-125 Description: Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
eraction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb21-74.html
CVE ID: CVE-2021-40698 State: PUBLISHED Published: 2023-09-07T12:54:33.320Z Last Updated: 2024-09-04T20:07:49.774Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: Adobe Products: ColdFusion Problem Types: CWE-242 Description: ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an Use of Inherently Dangerous Function vulnerability that can lead to a security feature bypass . An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on the environment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/pr
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb21-75.html
CVE ID: CVE-2021-40699 State: PUBLISHED Published: 2023-09-07T12:54:41.029Z Last Updated: 2024-09-04T20:05:00.151Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: Adobe Products: ColdFusion Problem Types: CWE-284 Description: ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an improper access control vulnerability when checking permissions in the CFIDE path. An authenticated attacker could leverage this vulnerability to access and manipulate arbitrary data on the environment. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfu
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb21-75.html
CVE ID: CVE-2021-40700 State: PUBLISHED Published: 2021-09-27T15:43:44.274724Z Last Updated: 2024-09-16T23:36:24.959Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Problem Types: CWE-788 Description: Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious TIFF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/premiere_elements/apsb21-78.h
st Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/premiere_elements/apsb21-78.html
CVE ID: CVE-2021-40701 State: PUBLISHED Published: 2021-09-27T15:43:32.682442Z Last Updated: 2024-09-17T03:27:36.807Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Problem Types: CWE-788 Description: Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/premiere_elements/apsb21-78.ht
CVE ID: CVE-2021-40702 State: PUBLISHED Published: 2021-09-27T15:42:53.629975Z Last Updated: 2024-09-16T18:29:38.512Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Problem Types: CWE-788 Description: Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious psd file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/premiere_elements/apsb21-78.ht
CVE ID: CVE-2021-40703 State: PUBLISHED Published: 2021-09-27T15:43:19.972696Z Last Updated: 2024-09-16T23:25:48.386Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Not a product Problem Types: CWE-788 Description: Adobe Premiere Elements version 2021.2235820 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious m4a file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/premiere_elements/apsb21-
nalyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/premiere_elements/apsb21-78.html
CVE ID: CVE-2021-40708 State: PUBLISHED Published: 2021-09-29T15:40:31.225251Z Last Updated: 2024-09-17T03:23:14.619Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: GoCart Problem Types: CWE-379 Description: Adobe Genuine Service versions 7.3 (and earlier) are affected by a privilege escalation vulnerability in the AGSService installer. An authenticated attacker could leverage this vulnerability to achieve read / write privileges to execute arbitrary code. User interaction is required to abuse this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/integrity_service/apsb21-
nalyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/integrity_service/apsb21-81.html
CVE ID: CVE-2021-40709 State: PUBLISHED Published: 2021-09-27T15:43:38.164Z Last Updated: 2025-04-23T19:27:09.434Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Photoshop Problem Types: CWE-120 Description: Adobe Photoshop versions 21.2.11 (and earlier) and 22.5 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted SVG file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container:
equires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/photoshop/apsb21-84.html
CVE ID: CVE-2021-40710 State: PUBLISHED Published: 2021-09-29T15:41:07.817013Z Last Updated: 2024-09-16T17:48:08.014Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Problem Types: CWE-788 Description: Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .svg file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/securi
loit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/premiere_pro/apsb21-67.html
CVE ID: CVE-2021-40711 State: PUBLISHED Published: 2021-09-27T15:42:36.051Z Last Updated: 2025-04-23T19:27:30.869Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a stored XSS vulnerability when creating Content Fragments. An authenticated attacker can send a malformed POST request to achieve arbitrary code execution. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
e containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/experience-manager/apsb21-82.html
CVE ID: CVE-2021-40712 State: PUBLISHED Published: 2021-09-27T15:44:26.043Z Last Updated: 2025-04-23T19:26:53.223Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Experience Manager Problem Types: CWE-20 Description: Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a improper input validation vulnerability via the path parameter. An authenticated attacker can send a malformed POST request to achieve server-side denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/experience-manager/apsb21-82.html
CVE ID: CVE-2021-40713 State: PUBLISHED Published: 2021-09-27T15:43:07.324Z Last Updated: 2025-04-23T19:27:22.676Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-295 Description: Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a improper certificate validation vulnerability in the cold storage component. If an attacker can achieve a man in the middle when the cold server establishes a new certificate, they would be able to harvest sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/experience-manager/apsb21-82.html
CVE ID: CVE-2021-40714 State: PUBLISHED Published: 2021-09-27T15:44:19.637Z Last Updated: 2025-04-23T19:27:02.957Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager version 6.5.9.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability via the accesskey parameter. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx
victim's browser Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/experience-manager/apsb21-82.html
CVE ID: CVE-2021-40715 State: PUBLISHED Published: 2021-09-29T15:40:49.624842Z Last Updated: 2024-09-16T18:39:04.496Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Problem Types: CWE-788 Description: Adobe Premiere Pro version 15.4 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .exr file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a specially crafted file to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/securi
CVE ID: CVE-2021-40716 State: PUBLISHED Published: 2021-09-29T15:41:13.553Z Last Updated: 2025-11-03T19:26:20.232Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: XMP Toolkit Problem Types: CWE-125 Description: XMP Toolkit SDK versions 2021.07 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xm
ious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/xmpcore/apsb21-85.html - https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html
CVE ID: CVE-2021-40719 State: PUBLISHED Published: 2021-10-21T19:33:44.022Z Last Updated: 2025-04-23T19:24:36.012Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Connect Problem Types: CWE-502 Description: Adobe Connect version 11.2.3 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary method invocation when AMF messages are deserialized on an Adobe Connect server. An attacker can leverage this to execute remote code execution on the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/connect/apsb21-91.htm
rogram Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/connect/apsb21-91.html
CVE ID: CVE-2021-40720 State: PUBLISHED Published: 2021-10-15T14:22:00.184846Z Last Updated: 2024-09-16T16:17:57.614Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Ops-CLI Problem Types: CWE-502 Description: Ops CLI version 2.0.4 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkout_repo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/ops_cli/apsb21-88.html