Search vulnerabilities

Expected end of text, found '/' (at char 18), (line:1, col:19)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,864

CVE-2021-44182

Adobe Dimension SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious SVG file.

CVSS 3.1 · 3.3 Low EPSS 1.8% KEV · Not listed
Vendors
Adobe Apple Microsoft
Products
Dimension Macos Windows
CVE-2021-44181

Adobe Dimension GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious GIF file.

CVSS 3.0 · 7.8 High EPSS 3.2% KEV · Not listed
Vendors
Adobe Apple Microsoft
Products
Dimension Macos Windows
CVE-2021-44180

Adobe Dimension PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious GIF file.

CVSS 3.0 · 7.8 High EPSS 3.2% KEV · Not listed
Vendors
Adobe Apple Microsoft
Products
Dimension Macos Windows
CVE-2021-43990

ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform

The affected product is vulnerable to a network-based attack by threat actors supplying a crafted, malicious XML payload designed to trigger an external entity reference call.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Fanuc
Products
Roboguide
CVE-2021-43988

ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform

The affected product is vulnerable to a network-based attack by threat actors utilizing crafted naming conventions of files to gain unauthorized access rights.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Fanuc
Products
Roboguide
CVE-2021-43986

ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform

The setup program for the affected product configures its files and folders with full access, which may allow unauthorized users permission to replace original binaries and achieve privilege escalation.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Fanuc
Products
Roboguide
CVE-2021-43937

Elcomplus SmartPTT SCADA Server Cross-site Request Forgery

Elcomplus SmartPTT SCADA Server web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Smartptt
Products
Scada Server
CVE-2021-43934

Elcomplus SmartPtt Unrestricted Upload of File with Dangerous Type

Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate upload requests, enabling a malicious user to potentially upload arbitrary files.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Smartptt
Products
Smartptt Scada
CVE-2021-43933

ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform

The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receiving server, which could cause a denial-of-service condition due to lack of heap memory resources.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Fanuc
Products
Roboguide
CVE-2021-43930

Elcomplus SmartPtt Path Traversal

Elcomplus SmartPTT is vulnerable as the backup and restore system does not adequately validate download requests, enabling malicious users to perform path traversal attacks and potentially download arbitrary files from the system.

CVSS 3.1 · 4.9 Medium EPSS 1.0% KEV · Not listed
Vendors
Smartptt
Products
Smartptt Scada
CVE-2021-43850

Denial of Service in discourse

Discourse is an open source platform for community discussion. In affected versions admins users can trigger a Denial of Service attack via the `/message-bus/_diagnostics` path. The impact of this vulnerability is greater on multisite Discourse instances (where multiple forums are served from a single application server) where any admin user on any of the forums are able to visit the `/message-bus/_diagnostics` path. The problem has been patched. Please upgrade to 2.8.0.beta10 or 2.7.12. No workarounds for this issue exist.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Discourse
Products
Discourse
CVE-2021-43755

Adobe After Effects Memory Corruption could lead to Arbitrary Code Execution

Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVSS 3.1 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Adobe Apple Microsoft
Products
After Effects Macos Windows
CVE-2021-43754

Adobe Prelude Corruption could lead to Arbitrary code execution

Adobe Prelude version 22.1.1 (and earlier) is affected by an Out-of-bounds Write vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVSS 3.1 · 7.8 High EPSS 1.7% KEV · Not listed
Vendors
Adobe Apple Microsoft
Products
Prelude Macos Windows
CVE-2021-43749

Adobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service

Adobe Premiere Rush versions 1.5.16 (and earlier) are affected by a Null pointer dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Adobe Microsoft
Products
Premiere Rush Windows
CVE-2021-42735

Adobe Photoshop Memory Corruption could lead to Arbitrary code execution

Adobe Photoshop version 22.5.1 (and earlier versions ) is affected by an Access of Memory Location After End of Buffer vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVSS 3.1 · 7.8 High EPSS 2.2% KEV · Not listed
Vendors
Adobe Apple Microsoft
Products
Photoshop Macos Windows
CVE-2021-42730

Adobe Bridge Memory Corruption could lead to Arbitrary code execution

Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious PSD file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVSS 3.1 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Adobe Microsoft
Products
Bridge Windows
CVE-2021-42728

Adobe Bridge Buffer Overflow Arbitrary code execution

Adobe Bridge 11.1.1 (and earlier) is affected by a stack overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Bridge.

CVSS 3.1 · 7.8 High EPSS 4.0% KEV · Not listed
Vendors
Adobe Microsoft
Products
Bridge Windows
CVE-2021-42724

Adobe Bridge Memory Corruption could lead to Arbitrary code execution

Adobe Bridge version 11.1.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability.

CVSS 3.1 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Adobe Microsoft
Products
Bridge Windows
CVE-2021-42264

Adobe Premiere Pro Null Pointer Dereference Application denial-of-service

Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Adobe Apple Microsoft
Products
Premiere Pro Macos Windows
CVE-2021-41161

XSS in csvimport in 3.0.0-beta versions

Combodo iTop is a web based IT Service Management tool. In versions prior to 3.0.0-beta6 the export CSV page don't properly escape the user supplied parameters, allowing for javascript injection into rendered csv files. Users are advised to upgrade. There are no known workarounds for this issue.

CVSS 3.1 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Combodo
Products
Itop