deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-29367
Published: 2021-09-28
Description: A buffer overflow vulnerability in WPG+0x1dda of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted WPG file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/moshekaplan/Research/tree/main/IrfanView; https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE: CVE-2021-41104
Published: 2021-09-28
Description: ESPHome is a system to control the ESP8266/ESP32. Anyone with web_server enabled and HTTP basic auth configured on version 2021.9.1 or older is vulnerable to an issue in which `web_server` allows over-the-air (OTA) updates without checking user defined basic auth username & password. This issue is patched in version 2021.9.2. As a workaround, one may disable or remove `web_server`.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306, CWE-306
References: https://github.com/esphome/esphome/pull/2409/commits/207cde1667d8c799a197b78ca8a5a14de8d5ca1e; https://github.com/esphome/esphome/releases/tag/2021.9.2; https://github.com/esphome/esphome/security/advisories/GHSA-48mj-p7x2-5jfm
CVE: CVE-2021-36363
Published: 2021-09-28
Description: Nagios XI before 5.8.5 has Incorrect Permission Assignment for migrate.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT; https://www.nagios.com/downloads/nagios-xi/change-log/; https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT
CVE: CVE-2021-36364
Published: 2021-09-28
Description: Nagios XI before 5.8.5 incorrectly allows backup_xi.sh wildcards.
CVSS Score: 9.8 (CRITICAL)
References: https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT; https://www.nagios.com/downloads/nagios-xi/change-log/; https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT
CVE: CVE-2021-36365
Published: 2021-09-28
Description: Nagios XI before 5.8.5 has Incorrect Permission Assignment for repairmysql.sh.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT; https://www.nagios.com/downloads/nagios-xi/change-log/; https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT
CVE: CVE-2021-36366
Published: 2021-09-28
Description: Nagios XI before 5.8.5 incorrectly allows manage_services.sh wildcards.
CVSS Score: 9.8 (CRITICAL)
References: https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT; https://www.nagios.com/downloads/nagios-xi/change-log/; https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT
CVE: CVE-2021-37273
Published: 2021-09-28
Description: A Denial of Service issue exists in China Telecom Corporation EPON Tianyi Gateway ZXHN F450(EPON ONU) 3.0. Tianyi Gateway is a hardware terminal of "Optical Modem Smart Router." Attackers can use this vulnerability to restart the device multiple times.
CVSS Score: 7.5 (HIGH)
References: https://www.cnvd.org.cn/flaw/show/2958526; https://www.cnvd.org.cn/flaw/show/2958526
CVE: CVE-2021-41318
Published: 2021-09-28
Description: In Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately sanitize malicious input. which could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/164359/WhatsUpGold-21.0.3-Cross-Site-Scripting.html; https://knowledgebase.progress.com/articles/Knowledge/WhatsUp-Gold-Security-Bulletin-September-2021; http://packetstormsecurity.com/files/164359/WhatsUpGold-21.0.3-Cross-Site-Scripting.html
CVE: CVE-2021-30086
Published: 2021-09-28
Description: Cross Site Scripting (XSS) vulnerability exists in KindEditor (Chinese versions) 4.1.12, which can be exploited by an attacker to obtain user cookie information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kindsoft/kindeditor/; https://www.cnvd.org.cn/flaw/show/3257066; https://github.com/kindsoft/kindeditor/
CVE: CVE-2021-37267
Published: 2021-09-28
Description: Cross Site Scripting (XSS) vulnerability exists in all versions of KindEditor, which can be exploited by an attacker to obtain user cookie information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.cnvd.org.cn/flaw/show/3257066; https://www.cnvd.org.cn/flaw/show/3257066
CVE: CVE-2021-37271
Published: 2021-09-28
Description: Cross Site Scripting (XSS) vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.cnvd.org.cn/flaw/show/3243916; https://www.freebuf.com/vuls/269956.html; https://www.cnvd.org.cn/flaw/show/3243916
CVE: CVE-2021-38303
Published: 2021-09-28
Description: A SQL injection vulnerability exists in Sureline SUREedge Migrator 7.0.7.29360.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/ederdemattos/Sureline_SUREedge_Migrator; https://github.com/ederdemattos/Sureline_SUREedge_Migrator/blob/main/4.png; https://github.com/ederdemattos/Sureline_SUREedge_Migrator
CVE: CVE-2021-21522
Published: 2021-09-28
Description: Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive information on an NVMe storage by resetting the BIOS password on the system via the Manageability Interface.
CVSS Score: 8.2 (HIGH)
CWE: CWE-255
References: https://www.dell.com/support/kbdoc/000191495; https://www.dell.com/support/kbdoc/000191495
CVE: CVE-2021-21569
Published: 2021-09-28
Description: Dell NetWorker, versions 18.x and 19.x contain a Path traversal vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and gain access to unauthorized information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78, CWE-22
References: https://www.dell.com/support/kbdoc/en-us/000188311/; https://www.dell.com/support/kbdoc/en-us/000188311/
CVE: CVE-2021-21570
Published: 2021-09-28
Description: Dell NetWorker, versions 18.x and 19.x contain an Information disclosure vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and gain access to unauthorized information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://www.dell.com/support/kbdoc/en-us/000188311/dsa-2021-124-dell-networker-security-update-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000188311/dsa-2021-124-dell-networker-security-update-for-multiple-vulnerabilities
CVE: CVE-2021-36283
Published: 2021-09-28
Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.dell.com/support/kbdoc/000191495/; https://www.dell.com/support/kbdoc/000191495/
CVE: CVE-2021-36284
Published: 2021-09-28
Description: Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive admin password attempt mitigations in order to carry out a brute force attack.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-307
References: https://www.dell.com/support/kbdoc/000191495; https://www.dell.com/support/kbdoc/000191495
CVE: CVE-2021-36285
Published: 2021-09-28
Description: Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive NVMe password attempt mitigations in order to carry out a brute force attack.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-307
References: https://www.dell.com/support/kbdoc/000191495/; https://www.dell.com/support/kbdoc/000191495/
CVE: CVE-2021-36286
Published: 2021-09-28
Description: Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 contain an arbitrary file deletion vulnerability that can be exploited by using the Windows feature of NTFS called Symbolic links. Symbolic links can be created by any(non-privileged) user under some object directories, but by themselves are not sufficient to successfully escalate privileges. However, combining them with a different object, such as the NTFS junction point allows for the exploitation. Support assist clean files functionality do not distinguish junction points from the physical folder and proceeds to clean the target of the junction that allows nonprivileged users to create junction points and delete arbitrary files on the system which can be accessed only by the admin.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22, CWE-59
References: https://www.dell.com/support/kbdoc/en-us/000191057/dsa-2021-163-dell-supportassist-client-consumer-security-update-for-two-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000191057/dsa-2021-163-dell-supportassist-client-consumer-security-update-for-two-vulnerabilities
CVE: CVE-2021-36297
Published: 2021-09-28
Description: SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dll planting/hijacking, only by a separate administrative action that is not a default part of the SOSInstallerTool.exe installation for executing arbitrary dll's,
CVSS Score: 7.8 (HIGH)
CWE: CWE-426, CWE-426
References: https://www.dell.com/support/kbdoc/en-us/000191057/dsa-2021-163-dell-supportassist-client-consumer-security-update-for-two-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000191057/dsa-2021-163-dell-supportassist-client-consumer-security-update-for-two-vulnerabilities
CVE: CVE-2021-41106
Published: 2021-09-28
Description: JWT is a library to work with JSON Web Token and JSON Web Signature. Prior to versions 3.4.6, 4.0.4, and 4.1.5, users of HMAC-based algorithms (HS256, HS384, and HS512) combined with `Lcobucci\JWT\Signer\Key\LocalFileReference` as key are having their tokens issued/validated using the file path as hashing key - instead of the contents. The HMAC hashing functions take any string as input and, since users can issue and validate tokens, users are lead to believe that everything works properly. Versions 3.4.6, 4.0.4, and 4.1.5 have been patched to always load the file contents, deprecated the `Lcobucci\JWT\Signer\Key\LocalFileReference`, and suggest `Lcobucci\JWT\Signer\Key\InMemory` as the alternative. As a workaround, use `Lcobucci\JWT\Signer\Key\InMemory` instead of `Lcobucci\JWT\Signer\Key\LocalFileReference` to create the instances of one's keys.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-345, CWE-345
References: https://github.com/lcobucci/jwt/commit/8175de5b841fbe3fd97d2d49b3fc15c4ecb39a73; https://github.com/lcobucci/jwt/commit/c45bb8b961a8e742d8f6b88ef5ff1bd5cca5d01c; https://github.com/lcobucci/jwt/security/advisories/GHSA-7322-jrq4-x5hf
CVE: CVE-2020-20120
Published: 2021-09-28
Description: ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/top-think/thinkphp/issues/553; https://github.com/top-think/thinkphp/issues/553
CVE: CVE-2020-20122
Published: 2021-09-28
Description: Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle() function in /coreframe/app/content/admin/content.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/SuperSalsa20/WUZHICMS-SQL-Injection/blob/master/README.md; https://github.com/SuperSalsa20/WUZHICMS-SQL-Injection/blob/master/README.md
CVE: CVE-2020-20124
Published: 2021-09-28
Description: Wuzhi CMS v4.1.0 contains a remote code execution (RCE) vulnerability in \attachment\admin\index.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://cwe.mitre.org/data/definitions/96.html; https://github.com/wuzhicms/wuzhicms/issues/188; https://cwe.mitre.org/data/definitions/96.html
CVE: CVE-2020-20125
Published: 2021-09-28
Description: EARCLINK ESPCMS-P8 contains a cross-site scripting (XSS) vulnerability in espcms_web\espcms_load.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.cnblogs.com/feizianquan/p/11910530.html; https://www.cnblogs.com/feizianquan/p/11910530.html
CVE: CVE-2021-33923
Published: 2021-09-29
Description: Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access some sensitive information (private keys, state database).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://confluent.io; https://www.detack.de/en/cve-2021-33923; https://confluent.io
CVE: CVE-2021-33924
Published: 2021-09-29
Description: Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to Incorrect Access Control via its auxiliary component that allows remote attackers to access sensitive information.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://confluent.io; https://www.detack.de/en/cve-2021-33924; https://confluent.io
CVE: CVE-2021-32466
Published: 2021-09-29
Description: An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attacker to escalate privileges by placing a custom crafted file in a specific directory to load a malicious library. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.
CVSS Score: 7.0 (HIGH)
CWE: CWE-427, CWE-427
References: https://helpcenter.trendmicro.com/en-us/article/tmka-10626; https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10621; https://www.zerodayinitiative.com/advisories/ZDI-21-1112/
CVE: CVE-2021-35027
Published: 2021-09-29
Description: A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-27, CWE-22
References: https://www.zyxel.com/support/Zyxel_security_advisory_for_directory_traversal_and_command_injection_vulnerabilities_of_VPN2S_Firewall.shtml; https://www.zyxel.com/support/Zyxel_security_advisory_for_directory_traversal_and_command_injection_vulnerabilities_of_VPN2S_Firewall.shtml
CVE: CVE-2021-35028
Published: 2021-09-29
Description: A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to execute arbitrary OS commands.
CVSS Score: 7.3 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.zyxel.com/support/Zyxel_security_advisory_for_directory_traversal_and_command_injection_vulnerabilities_of_VPN2S_Firewall.shtml; https://www.zyxel.com/support/Zyxel_security_advisory_for_directory_traversal_and_command_injection_vulnerabilities_of_VPN2S_Firewall.shtml
CVE: CVE-2021-36745
Published: 2021-09-29
Description: A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-425
References: https://success.trendmicro.com/jp/solution/000289030; https://success.trendmicro.com/solution/000289038; https://www.zerodayinitiative.com/advisories/ZDI-21-1115/
CVE: CVE-2021-40651
Published: 2021-09-29
Description: OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arbitrary file from the server's filesystem as long as the application has access to the file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/MiSERYYYYY/Vulnerability-Reports-and-Disclosures/blob/main/OpenSIS-Community-8.0.md; https://www.exploit-db.com/exploits/50259; https://youtu.be/wFwlbXANRCo
CVE: CVE-2021-25959
Published: 2021-09-29
Description: In OpenCRX, versions v4.0.0 through v5.1.0 are vulnerable to reflected Cross-site Scripting (XSS), due to unsanitized parameters in the password reset functionality. This allows execution of external javascript files on any user of the openCRX instance.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/opencrx/opencrx/commit/14e75f95e5f56fbe7ee897bdf5d858788072e818; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25959; https://github.com/opencrx/opencrx/commit/14e75f95e5f56fbe7ee897bdf5d858788072e818
CVE: CVE-2021-25960
Published: 2021-09-29
Description: In “SuiteCRM” application, v7.11.18 through v7.11.19 and v7.10.29 through v7.10.31 are affected by “CSV Injection” vulnerability (Formula Injection). A low privileged attacker can use accounts module to inject payloads in the input fields. When an administrator access accounts module to export the data as a CSV file and opens it, the payload gets executed. This was not fixed properly as part of CVE-2020-15301, allowing the attacker to bypass the security measure.
CVSS Score: 8.0 (HIGH)
CWE: CWE-1236, CWE-1236
References: https://github.com/salesagility/SuiteCRM/commit/7124482fe07ee164923d974456ed31e45f65e513; https://github.com/salesagility/SuiteCRM/commit/f463031bee59676d7d5be53bb32d551cd70a5648; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25960
CVE: CVE-2021-25961
Published: 2021-09-29
Description: In “SuiteCRM” application, v7.1.7 through v7.10.31 and v7.11-beta through v7.11.20 fail to properly invalidate password reset links that is associated with a deleted user id, which makes it possible for account takeover of any newly created user with the same user id.
CVSS Score: 8.0 (HIGH)
CWE: CWE-640, CWE-640
References: https://github.com/salesagility/SuiteCRM/commit/7124482fe07ee164923d974456ed31e45f65e513; https://github.com/salesagility/SuiteCRM/commit/f463031bee59676d7d5be53bb32d551cd70a5648; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25961
CVE: CVE-2021-25962
Published: 2021-09-29
Description: “Shuup” application in versions 0.4.2 to 2.10.8 is affected by the “Formula Injection” vulnerability. A customer can inject payloads in the name input field in the billing address while buying a product. When a store administrator accesses the reports page to export the data as an Excel file and opens it, the payload gets executed.
CVSS Score: 8.0 (HIGH)
CWE: CWE-1236, CWE-1236
References: https://github.com/shuup/shuup/commit/0a2db392e8518410c[PII_REDACTED]61cd8797eea51; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25962; https://github.com/shuup/shuup/commit/0a2db392e8518410c[PII_REDACTED]61cd8797eea51
CVE: CVE-2021-28547
Published: 2021-09-29
Description: Adobe Creative Cloud Desktop Application for macOS version 5.3 (and earlier) is affected by a privilege escalation vulnerability that could allow a normal user to delete the OOBE directory and get permissions of any directory under the administrator authority.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html; https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html
CVE: CVE-2021-29834
Published: 2021-09-29
Description: IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3,20.0.0.1, 20.0.0.2, and 21.0.2 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204832.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/204832; https://www.ibm.com/support/pages/node/6493271; https://exchange.xforce.ibmcloud.com/vulnerabilities/204832
CVE: CVE-2021-35982
Published: 2021-09-29
Description: Acrobat Reader DC versions 2[PII_REDACTED]0 (and earlier), 2[PII_REDACTED]6 (and earlier) and 2[PII_REDACTED]9 (and earlier) are affected by an Uncontrolled Search Path Element vulnerability. A local attacker with non-administrative privileges can plant a malicious DLL to achieve arbitrary code execution in the context of the current user via DLL hijacking. Exploitation of this issue requires user interaction.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427
References: https://helpx.adobe.com/security/products/acrobat/apsb21-55.html; https://helpx.adobe.com/security/products/acrobat/apsb21-55.html
CVE: CVE-2021-39821
Published: 2021-09-29
Description: Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) are affected by an out-of-bounds read vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious TIF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb21-73.html; https://helpx.adobe.com/security/products/indesign/apsb21-73.html
CVE: CVE-2021-39829
Published: 2021-09-29
Description: Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb21-74.html; https://helpx.adobe.com/security/products/framemaker/apsb21-74.html
CVE: CVE-2021-39830
Published: 2021-09-29
Description: Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious PDF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/framemaker/apsb21-74.html; https://helpx.adobe.com/security/products/framemaker/apsb21-74.html
CVE: CVE-2021-39831
Published: 2021-09-29
Description: Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/framemaker/apsb21-74.html; https://helpx.adobe.com/security/products/framemaker/apsb21-74.html
CVE: CVE-2021-39832
Published: 2021-09-29
Description: Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by a memory corruption vulnerability due to insecure handling of a malicious PDF file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-788, CWE-119
References: https://helpx.adobe.com/security/products/framemaker/apsb21-74.html; https://helpx.adobe.com/security/products/framemaker/apsb21-74.html
CVE: CVE-2021-39833
Published: 2021-09-29
Description: Adobe Framemaker versions 2019 Update 8 (and earlier) and 2020 Release Update 2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious TIF file.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/framemaker/apsb21-74.html; https://helpx.adobe.com/security/products/framemaker/apsb21-74.html