CVEs published August 20, 2021
73 CVEs were published on August 20, 2021: 0 critical, 30 high.
- Published
- 73
- Critical
- 0
- High
- 30
- Medium
- 4
- Low
- 17
- Unrated
- 22
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Adobe Acrobat Reader
- 17
- Adobe Illustrator
- 7
- Adobe Bridge
- 5
- Adobe Media Encoder
- 5
- AT&T
- 3
- GitLab
- 3
- Adobe Character Animator
- 2
- Adobe Photoshop
- 2
- Adobe Prelude
- 2
- Adobe Dimension
- 1
High 30
- CVE-2021-21828A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7.AT&T
- CVE-2021-21827A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7.AT&T
- CVE-2021-21826A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT&T Labs Xmill 0.7.AT&T
- CVE-2021-36015Adobe Media Encoder Memory Corruption Could Lead To Remote Code ExecutionAdobe Media Encoder
- CVE-2021-36011Adobe Illustrator improper neutralization of special elements used in an OS commandAdobe Illustrator
- CVE-2021-36009Adobe Illustrator PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2021-36005Adobe Photoshop PSD File Parsing Stack Overflow VulnerabilityAdobe Photoshop
- CVE-2021-35999Adobe Prelude Memory Corruption Remote Code Execution VulnerabilityAdobe Prelude
- CVE-2021-36000Adobe Character Animator Memory Corruption Arbitrary Code Execution VulnerabilityAdobe Character Animator
- CVE-2021-35990Adobe Bridge JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2021-35997Adobe Premiere Pro Memory Corruption Remote Code Execution VulnerabilityAdobe Premiere
- CVE-2021-35989Adobe Bridge PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2021-35981Adobe Acrobat Reader DC launchURL Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-35983Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-28640Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-28642Adobe Acrobat Pro DC Out-of-Bounds Write Arbitrary Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-28641Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-28638Adobe Acrobat Reader DC PDF File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-28639Adobe Acrobat Reader DC setAction Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-28636Adobe Acrobat Reader Unquoted Search Path VulnerabilityAdobe Acrobat Reader
- CVE-2021-28635Adobe Acrobat Reader Use-After-Free VulnerabilityAdobe Acrobat Reader
- CVE-2021-28637Adobe Acrobat Pro DC PDFLibTool Out-of-Bounds Read Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-28634Adobe Acrobat Reader AcrobatUtils.scpt Extension OS Command Injection VulnerabilityAdobe Acrobat Reader
- CVE-2021-28595Adobe Dimension Uncontrolled Search Path Element Could Lead To Remote Code ExecutionAdobe Dimension
- CVE-2021-28591Adobe Illustrator PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2021-28624Adobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe Bridge
- CVE-2021-28592Adobe Illustrator JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2021-22255SSRF in URL file upload in Baserow <1.1.0 allows remote authenticated users to retrieve files from the internal server network exposed over Baserow B.V. Baserow
- CVE-2021-22246A vulnerability was discovered in GitLab versions before 14.0.2, 13.12.6, 13.11.6.GitLab
- CVE-2021-35529Password in Memory Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB)Hitachi ABB Power Grids Retail Operations · Hitachi ABB Pow…
Medium, low and unrated 43
- CVE-2020-24130A cross site request forgery (CSRF) vulnerability in the configure.html component of Ponzu 0.11.0 allows attackers to change user and admini
- CVE-2020-27466An arbitrary file write vulnerability in lib/AjaxHandlers/ajaxEditTemplate.php of rConfig 3.9.6 allows attackers to execute arbitrary code v
- CVE-2020-27464An insecure update feature in the /updater.php component of rConfig 3.9.6 and below allows attackers to execute arbitrary code via a crafted
- CVE-2020-27461A remote code execution vulnerability in SEOPanel 4.6.0 has been fixed for 4.7.0.
- CVE-2020-25359An arbitrary file deletion vulnerability in rConfig 3.9.5 has been fixed for 3.9.6.
- CVE-2020-25353A server-side request forgery (SSRF) vulnerability in rConfig 3.9.5 has been fixed for 3.9.6.
- CVE-2020-25352A stored cross-site scripting (XSS) vulnerability in the /devices.php function inrConfig 3.9.5 has been fixed for version 3.9.6.
- CVE-2020-25351An information disclosure vulnerability in rConfig 3.9.5 has been fixed for version 3.9.6.
- CVE-2021-36016Adobe Media Encoder FLV File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Media Encoder
- CVE-2021-36014Adobe Media Encoder MP4 File Parsing Uninitialized Variable Information Disclosure VulnerabilityAdobe Media Encoder
- CVE-2021-36010Adobe Illustrator SVG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Illustrator
- CVE-2021-36008Adobe Illustrator PDF File Parsing Use-After-Free Information Disclosure VulnerabilityAdobe Illustrator
- CVE-2021-36006Adobe Photoshop MP4 File Parsing Uninitialized Variable Information Disclosure VulnerabilityAdobe Photoshop
- CVE-2021-36007Adobe Prelude MP4 File Parsing Uninitialized Variable Information Disclosure VulnerabilityAdobe Prelude
- CVE-2021-36001Adobe Character Animator PNG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Character Animator
- CVE-2021-35992Adobe Bridge PostScript Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Bridge
- CVE-2021-35991Adobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure VulnerabilityAdobe Bridge
- CVE-2021-35988Adobe Acrobat Pro DC Out-of-Bounds Read BugAdobe Acrobat Reader
- CVE-2021-35984Adobe Acrobat Pro DC PDFLibTool Null Pointer Dereference BugAdobe Acrobat Reader
- CVE-2021-35987Adobe Acrobat Pro DC PDFLibTool Out-of-Bound ReadAdobe Acrobat Reader
- CVE-2021-35986Adobe Acrobat Pro DC getAnnot Type Confusion Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2021-35985Adobe Acrobat Pro DC PDFLibTool Null Pointer Dereference BugAdobe Acrobat Reader
- CVE-2021-28643Adobe Acrobat Pro DC embedDocAsDataObject Type Confusion Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2021-28589Adobe Media Encoder TS File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Media Encoder
- CVE-2021-28593Adobe Illustrator PostScript Parsing Use-After-Free Information Disclosure VulnerabilityAdobe Illustrator
- CVE-2021-28590Adobe Media Encoder VOB File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Media Encoder
- CVE-2021-22238An issue has been discovered in GitLab affecting all versions starting with 13.3.GitLab
- CVE-2021-22254Under very specific conditions a user could be impersonated using Gitlab shell.GitLab
- CVE-2021-36748A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simpleblog) module before 1.7.8 for Prestashop allows a remote a
- CVE-2021-21823An information disclosure vulnerability exists in the Friend finder functionality of GmbH Komoot version 10.26.9 up to 11.1.11.Komoot
- CVE-2021-34433In Eclipse Californium version 2.0.0 to 2.6.4 and 3.0.0-M1 to 3.0.0-M3, the certificate based (x509 and RPK) DTLS handshakes accidentally suThe Eclipse Foundation Eclipse Californium
- CVE-2021-34228Cross-site scripting in parent_control.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execut
- CVE-2021-34223Cross-site scripting in urlfilter.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arb
- CVE-2021-34220Cross-site scripting in tr069config.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute a
- CVE-2021-34218Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /add/ , /img/, /js/, an
- CVE-2021-34215Cross-site scripting in tcpipwan.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbi
- CVE-2021-34207Cross-site scripting in ddns.htm in TOTOLINK A3002R version V1.1.1-B20200824 (Important Update, new UI) allows attackers to execute arbitrar
- CVE-2020-36474SafeCurl before 0.9.2 has a DNS rebinding vulnerability.vanilla/safecurl
- CVE-2020-18886Unrestricted File Upload in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the component 'admin/upload_file_do.php'.
- CVE-2020-18885Command Injection in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the "text color" field of the component '/admin/we
- CVE-2020-18879Unrestricted File Upload in Bludit v3.8.1 allows remote attackers to execute arbitrary code by uploading malicious files via the component '
- CVE-2020-18878Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=l
- CVE-2020-18877SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/corefr