Latest CVE Feed
-
9.3
HIGHCVE-2021-21048
Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by a Memory Corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code executi... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2021-21047
Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current us... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
4.3
MEDIUMCVE-2021-21046
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to cause an a... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2021-21045
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elev... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2021-21044
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Write vulnerability when parsing a crafted jpeg file. An unauthenticated attacker could levera... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2021-21043
ACS Commons version 4.9.2 (and earlier) suffers from a Reflected Cross-site Scripting (XSS) vulnerability in version-compare and page-compare due to invalid JCR characters that are not handled correctly. An attacker could potentially exploit this vulnerab... Read more
- Published: Feb. 02, 2021
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2021-21042
Acrobat Reader DC versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Read vulnerability that could lead to arbitrary disclosure of information in the memory stack. An attac... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-21041
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitr... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-21040
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitr... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-21039
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitr... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-21038
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Write vulnerability when parsing a crafted jpeg file. An unauthenticated attacker could levera... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-21037
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Path Traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitr... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-21036
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Integer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arb... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-21035
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitr... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
4.3
MEDIUMCVE-2021-21034
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to locally e... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-21033
Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitr... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-21032
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate user sessions. Successful exploitation of this issue could lead to unauthorized access to restricted resources. Access to the admin console i... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-21031
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate user sessions. Successful exploitation could lead to unauthorized access to restricted resources. Access to the admin console is not required... Read more
Affected Products : magento- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
8.1
HIGHCVE-2021-21030
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a stored cross-site scripting (XSS) in the customer address upload feature. Successful exploitation could lead to arbitrary JavaScript execution in the ... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024
-
4.8
MEDIUMCVE-2021-21029
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a Reflected Cross-site Scripting vulnerability via 'file' parameter. Successful exploitation could lead to arbitrary JavaScript execution in the victim's ... Read more
- Published: Feb. 11, 2021
- Modified: Nov. 21, 2024