Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 6.5

    MEDIUM
    CVE-2021-28567

    Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Improper Authorization vulnerability in the customers module. Successful exploitation could allow a low-privileged user to modify customer data. A... Read more

    Affected Products : magento magento_commerce
    • EPSS Score: %0.08
    • Published: Sep. 08, 2021
    • Modified: Nov. 21, 2024
  • 4.0

    MEDIUM
    CVE-2021-28566

    Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Information Disclosure vulnerability when uploading a modified png file to a product image. Successful exploitation could lead to the disclosure o... Read more

    Affected Products : magento magento_commerce
    • EPSS Score: %0.84
    • Published: Sep. 08, 2021
    • Modified: Nov. 21, 2024
  • 9.3

    HIGH
    CVE-2021-28565

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability in the PDFLibTool component. An unauthenticated attacker could leverage thi... Read more

    • EPSS Score: %11.80
    • Published: Sep. 02, 2021
    • Modified: Nov. 21, 2024
  • 8.8

    HIGH
    CVE-2021-28564

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Write vulnerability within the ImageTool component. An unauthenticated attacker could leverage... Read more

    • EPSS Score: %31.08
    • Published: Sep. 02, 2021
    • Modified: Nov. 21, 2024
  • 6.5

    MEDIUM
    CVE-2021-28563

    Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by an Improper Authorization vulnerability via the 'Create Customer' endpoint. Successful exploitation could lead to unauthorized modification of customer... Read more

    Affected Products : magento magento_commerce
    • EPSS Score: %0.19
    • Published: Jun. 28, 2021
    • Modified: Nov. 21, 2024
  • 8.8

    HIGH
    CVE-2021-28562

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Use After Free vulnerability when executing search queries through Javascript. An unauthenticated attacker co... Read more

    • EPSS Score: %28.24
    • Published: Jun. 28, 2021
    • Modified: Nov. 21, 2024
  • 8.8

    HIGH
    CVE-2021-28561

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arb... Read more

    • EPSS Score: %8.02
    • Published: Sep. 02, 2021
    • Modified: Nov. 21, 2024
  • 8.8

    HIGH
    CVE-2021-28560

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to ac... Read more

    • EPSS Score: %37.35
    • Published: Sep. 02, 2021
    • Modified: Nov. 21, 2024
  • 5.3

    MEDIUM
    CVE-2021-28559

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Information Exposure vulnerability. An unauthenticated attacker could leverage this vulnerability to get acc... Read more

    • EPSS Score: %0.86
    • Published: Sep. 02, 2021
    • Modified: Nov. 21, 2024
  • 8.8

    HIGH
    CVE-2021-28558

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Heap-based buffer overflow vulnerability in the PDFLibTool component. An unauthenticated attacker could leve... Read more

    • EPSS Score: %41.54
    • Published: Sep. 02, 2021
    • Modified: Nov. 21, 2024
  • 4.3

    MEDIUM
    CVE-2021-28557

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to leak sens... Read more

    • EPSS Score: %1.32
    • Published: Sep. 02, 2021
    • Modified: Nov. 21, 2024
  • 6.9

    MEDIUM
    CVE-2021-28556

    Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a DOM-based Cross-Site Scripting vulnerability on mage-messages cookies. Successful exploitation could lead to arbitrary JavaScript execution by an una... Read more

    Affected Products : magento magento_commerce
    • EPSS Score: %29.38
    • Published: Jun. 28, 2021
    • Modified: Nov. 21, 2024
  • 6.5

    MEDIUM
    CVE-2021-28555

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to get acces... Read more

    • EPSS Score: %2.08
    • Published: Sep. 02, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-28554

    Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve a... Read more

    • EPSS Score: %33.25
    • Published: Aug. 24, 2021
    • Modified: Nov. 21, 2024
  • 8.8

    HIGH
    CVE-2021-28553

    Acrobat Reader DC versions versions 2021.001.20150 (and earlier), 2020.001.30020 (and earlier) and 2017.011.30194 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbit... Read more

    • EPSS Score: %42.44
    • Published: Sep. 02, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-28552

    Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbit... Read more

    • EPSS Score: %8.88
    • Published: Aug. 24, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-28551

    Acrobat Reader DC versions versions 2021.001.20155 (and earlier), 2020.001.30025 (and earlier) and 2017.011.30196 (and earlier) are affected by an Out-of-bounds read vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve a... Read more

    • EPSS Score: %24.70
    • Published: Aug. 24, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-28549

    Adobe Photoshop versions 21.2.6 (and earlier) and 22.3 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code executi... Read more

    Affected Products : macos windows photoshop
    • EPSS Score: %4.34
    • Published: Apr. 15, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-28548

    Adobe Photoshop versions 21.2.6 (and earlier) and 22.3 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code executi... Read more

    Affected Products : macos windows photoshop
    • EPSS Score: %4.34
    • Published: Apr. 15, 2021
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-28547

    Adobe Creative Cloud Desktop Application for macOS version 5.3 (and earlier) is affected by a privilege escalation vulnerability that could allow a normal user to delete the OOBE directory and get permissions of any directory under the administrator autho... Read more

    • EPSS Score: %0.07
    • Published: Sep. 29, 2021
    • Modified: Nov. 21, 2024
Showing 20 of 291756 Results