deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-28601
Published: 2021-08-24
Description: Adobe After Effects version 18.2 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 3.3 (LOW)
CWE: CWE-476
References: https://helpx.adobe.com/security/products/after_effects/apsb21-49.html; https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
CVE: CVE-2021-28602
Published: 2021-08-24
Description: Adobe After Effects version 18.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/after_effects/apsb21-49.html; https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
CVE: CVE-2021-28603
Published: 2021-08-24
Description: Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/after_effects/apsb21-49.html; https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
CVE: CVE-2021-28604
Published: 2021-08-24
Description: Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/after_effects/apsb21-49.html; https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
CVE: CVE-2021-28605
Published: 2021-08-24
Description: Adobe After Effects version 18.2 (and earlier) is affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/after_effects/apsb21-49.html; https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
CVE: CVE-2021-28606
Published: 2021-08-24
Description: Adobe After Effects version 18.2 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://helpx.adobe.com/security/products/after_effects/apsb21-49.html; https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
CVE: CVE-2021-28607
Published: 2021-08-24
Description: Adobe After Effects version 18.2 (and earlier) is affected by a heap corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/after_effects/apsb21-49.html; https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
CVE: CVE-2021-28608
Published: 2021-08-24
Description: Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/after_effects/apsb21-49.html; https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
CVE: CVE-2021-28609
Published: 2021-08-24
Description: Adobe After Effects version 18.2 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb21-49.html; https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
CVE: CVE-2021-28610
Published: 2021-08-24
Description: Adobe After Effects version 18.2 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://helpx.adobe.com/security/products/after_effects/apsb21-49.html; https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
CVE: CVE-2021-28611
Published: 2021-08-24
Description: Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information and cause a denial of service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb21-49.html; https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
CVE: CVE-2021-28615
Published: 2021-08-24
Description: Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb21-49.html; https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
CVE: CVE-2021-28616
Published: 2021-08-24
Description: Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information and cause a denial of service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb21-49.html; https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
CVE: CVE-2021-28625
Published: 2021-08-24
Description: Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb21-39.html; https://helpx.adobe.com/security/products/experience-manager/apsb21-39.html
CVE: CVE-2021-28626
Published: 2021-08-24
Description: Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by an Improper Authorization vulnerability allowing users to create nodes under a location. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service. Exploitation of this issue does not require user interaction.
CVSS Score: 3.7 (LOW)
CWE: CWE-285
References: https://helpx.adobe.com/security/products/experience-manager/apsb21-39.html; https://helpx.adobe.com/security/products/experience-manager/apsb21-39.html
CVE: CVE-2021-28627
Published: 2021-08-24
Description: Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Server-side Request Forgery. An authenticated attacker could leverage this vulnerability to contact systems blocked by the dispatcher. Exploitation of this issue does not require user interaction.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://helpx.adobe.com/security/products/experience-manager/apsb21-39.html; https://helpx.adobe.com/security/products/experience-manager/apsb21-39.html
CVE: CVE-2021-28628
Published: 2021-08-24
Description: Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb21-39.html; https://helpx.adobe.com/security/products/experience-manager/apsb21-39.html
CVE: CVE-2021-28631
Published: 2021-08-24
Description: Acrobat Reader DC versions versions 2[PII_REDACTED]5 (and earlier), 2[PII_REDACTED]5 (and earlier) and 2[PII_REDACTED]6 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb21-37.html; https://helpx.adobe.com/security/products/acrobat/apsb21-37.html
CVE: CVE-2021-28632
Published: 2021-08-24
Description: Acrobat Reader DC versions versions 2[PII_REDACTED]5 (and earlier), 2[PII_REDACTED]5 (and earlier) and 2[PII_REDACTED]6 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://helpx.adobe.com/security/products/acrobat/apsb21-37.html; https://helpx.adobe.com/security/products/acrobat/apsb21-37.html
CVE: CVE-2021-32263
Published: 2021-08-24
Description: ok-file-formats through 2021-04-29 has a heap-based buffer overflow in the ok_csv_circular_buffer_read function in ok_csv.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/brackeen/ok-file-formats/issues/13; https://github.com/brackeen/ok-file-formats/issues/13
CVE: CVE-2021-28594
Published: 2021-08-24
Description: Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Uncontrolled Search Path Element vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://helpx.adobe.com/security/products/creative-cloud/apsb21-41.html; https://helpx.adobe.com/security/products/creative-cloud/apsb21-41.html
CVE: CVE-2021-28612
Published: 2021-08-24
Description: Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information and cause a denial of service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb21-49.html; https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
CVE: CVE-2021-28614
Published: 2021-08-24
Description: Adobe After Effects version 18.2 (and earlier) is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information and cause a denial of service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb21-49.html; https://helpx.adobe.com/security/products/after_effects/apsb21-49.html
CVE: CVE-2021-28617
Published: 2021-08-24
Description: Adobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb21-50.html; https://helpx.adobe.com/security/products/animate/apsb21-50.html
CVE: CVE-2021-28618
Published: 2021-08-24
Description: Adobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb21-50.html; https://helpx.adobe.com/security/products/animate/apsb21-50.html
CVE: CVE-2021-28619
Published: 2021-08-24
Description: Adobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb21-50.html; https://helpx.adobe.com/security/products/animate/apsb21-50.html
CVE: CVE-2021-28620
Published: 2021-08-24
Description: Adobe Animate version 21.0.6 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://helpx.adobe.com/security/products/animate/apsb21-50.html; https://helpx.adobe.com/security/products/animate/apsb21-50.html
CVE: CVE-2021-28621
Published: 2021-08-24
Description: Adobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb21-50.html; https://helpx.adobe.com/security/products/animate/apsb21-50.html
CVE: CVE-2021-28622
Published: 2021-08-24
Description: Adobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/animate/apsb21-50.html; https://helpx.adobe.com/security/products/animate/apsb21-50.html
CVE: CVE-2021-28629
Published: 2021-08-24
Description: Adobe Animate version 21.0.6 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://helpx.adobe.com/security/products/animate/apsb21-50.html; https://helpx.adobe.com/security/products/animate/apsb21-50.html
CVE: CVE-2021-28630
Published: 2021-08-24
Description: Adobe Animate version 21.0.6 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose potential sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/animate/apsb21-50.html; https://helpx.adobe.com/security/products/animate/apsb21-50.html
CVE: CVE-2021-28633
Published: 2021-08-24
Description: Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Insecure temporary file creation vulnerability. An attacker could leverage this vulnerability to cause arbitrary file overwriting in the context of the current user. Exploitation of this issue requires physical interaction to the system.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-379, CWE-668
References: https://helpx.adobe.com/security/products/creative-cloud/apsb21-41.html; https://helpx.adobe.com/security/products/creative-cloud/apsb21-41.html
CVE: CVE-2021-30851
Published: 2021-08-24
Description: A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2021/10/31/1; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H6MGXCX7P5AHWOQ6IRT477UKT7IS4DAD/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ON5SDVVPVPCAGFPW2GHYATZVZYLPW2L4/
CVE: CVE-2021-30852
Published: 2021-08-24
Description: A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: https://support.apple.com/en-us/HT212807; https://support.apple.com/en-us/HT212814; https://support.apple.com/en-us/HT212815
CVE: CVE-2021-30853
Published: 2021-08-24
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6. A malicious application may bypass Gatekeeper checks.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212804; https://support.apple.com/en-us/HT212804
CVE: CVE-2021-30854
Published: 2021-08-24
Description: A logic issue was addressed with improved state management. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A sandboxed process may be able to circumvent sandbox restrictions.
CVSS Score: 8.6 (HIGH)
References: https://support.apple.com/en-us/HT212814; https://support.apple.com/en-us/HT212815; https://support.apple.com/en-us/HT212819
CVE: CVE-2021-30855
Published: 2021-08-24
Description: A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, iOS 15 and iPadOS 15, watchOS 8, macOS Big Sur 11.6. An application may be able to access restricted files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: https://support.apple.com/en-us/HT212804; https://support.apple.com/en-us/HT212805; https://support.apple.com/en-us/HT212807
CVE: CVE-2021-30856
Published: 2021-08-24
Description: This issue was addressed by adding a new Remote Login option for opting into Full Disk Access for Secure Shell sessions. This issue is fixed in macOS Big Sur 11.3. A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-863
References: https://support.apple.com/en-us/HT212325; https://support.apple.com/en-us/HT212325
CVE: CVE-2021-30857
Published: 2021-08-24
Description: A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, watchOS 8, macOS Big Sur 11.6. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://support.apple.com/en-us/HT212804; https://support.apple.com/en-us/HT212805; https://support.apple.com/en-us/HT212807
CVE: CVE-2021-30858
Published: 2021-08-24
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://seclists.org/fulldisclosure/2021/Sep/25; http://seclists.org/fulldisclosure/2021/Sep/27; http://seclists.org/fulldisclosure/2021/Sep/29
CVE: CVE-2021-30859
Published: 2021-08-24
Description: A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://support.apple.com/en-us/HT212804; https://support.apple.com/en-us/HT212805; https://support.apple.com/en-us/HT212807