Latest CVE Feed
-
9.8
CRITICALCVE-2021-40814
The Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection.... Read more
Affected Products : customer_photo_gallery- Published: Sep. 08, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-40813
A cross-site scripting (XSS) vulnerability in the "Zip content" feature in Element-IT HTTP Commander 3.1.9 allows remote authenticated users to inject arbitrary web script or HTML via filenames.... Read more
Affected Products : http_commander- Published: Jan. 13, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2021-40812
The GD Graphics Library (aka LibGD) through 2.3.2 has an out-of-bounds read because of the lack of certain gdGetBuf and gdPutBuf return value checks.... Read more
Affected Products : libgd- Published: Sep. 08, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-40809
An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921. An account can be granted incorrect privileges in response to authentication that uses specific sign-on workflows.... Read more
Affected Products : jamf- Published: Dec. 01, 2021
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2021-40797
An issue was discovered in the routes middleware in OpenStack Neutron before 16.4.1, 17.x before 17.2.1, and 18.x before 18.1.1. By making API requests involving nonexistent controllers, an authenticated user may cause the API worker to consume increasing... Read more
- Published: Sep. 08, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40796
Adobe Premiere Pro 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context... Read more
- Published: Mar. 16, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-40795
Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execut... Read more
- Published: Sep. 07, 2023
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-40794
Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is requir... Read more
- Published: Mar. 16, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-40793
Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is requir... Read more
- Published: Mar. 16, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-40792
Adobe Premiere Pro version 15.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is requir... Read more
- Published: Mar. 16, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40791
Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR... Read more
- Published: Sep. 07, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40790
Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Ex... Read more
- Published: Sep. 07, 2023
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40789
Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-s... Read more
- Published: Mar. 16, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40788
Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-s... Read more
- Published: Mar. 16, 2022
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2021-40787
Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interact... Read more
- Published: Mar. 16, 2022
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2021-40786
Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious file, potentially resulting in arbitrary code execution in the context of the current user. User interact... Read more
- Published: Mar. 16, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40785
Adobe Premiere Elements 20210809.daily.2242976 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-s... Read more
- Published: Mar. 16, 2022
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-40784
Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is r... Read more
- Published: Dec. 20, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-40783
Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is r... Read more
- Published: Dec. 20, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-40782
Adobe Media Encoder 15.4.1 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the contex... Read more
- Published: Mar. 16, 2022
- Modified: Nov. 21, 2024