CVEs published September 29, 2021
74 CVEs were published on September 29, 2021: 1 critical, 28 high.
- Published
- 74
- Critical
- 1
- High
- 28
- Medium
- 19
- Low
- 7
- Unrated
- 19
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- Adobe Acrobat Reader
- 25
- Adobe FrameMaker
- 10
- Adobe Premiere
- 2
- https://github.com/curl/curl
- 2
- salesagility SuiteCRM
- 2
- Zyxel ZyWALL VPN2S Firmware
- 2
- Adobe Creative Cloud
- 1
- Adobe GoCart
- 1
- Adobe InDesign
- 1
- Adobe XMP Toolkit
- 1
Critical 1
High 28
- CVE-2021-41732An issue was discovered in zeek version 4.1.0.
- CVE-2021-41573Hitachi Content Platform Anywhere (HCP-AW) 4.4.5 and later allows information disclosure.
- CVE-2021-23446Regular Expression Denial of Service (ReDoS)handsontable
- CVE-2021-28547Adobe Creative Cloud for macOS Privilege Escalation VulnerabilityAdobe Creative Cloud
- CVE-2021-40710Adobe Premiere Pro 2021 SVG File Parsing Leads to Memory CorruptionAdobe Premiere
- CVE-2021-39863Adobe Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-40715Adobe Premiere Pro 2021 EXR File Parsing Leads to Memory CorruptionAdobe Premiere
- CVE-2021-40708Adobe Genuine Service Installer Privilege Escalation VulnerabilityAdobe GoCart
- CVE-2021-39843Adobe Acrobat Reader XObject Out-of-Bound Write VulnerabilityAdobe Acrobat Reader
- CVE-2021-39842Adobe Acrobat Reader DC messageHandler.OnMessage Use-After-Free VulnerabilityAdobe Acrobat Reader
- CVE-2021-39841Adobe Acrobat Pro DC DocMedia Type Confusion Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-39840Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-39838Adobe Acrobat Reader DC AcroForm buttonGetCaption Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-39839Adobe Acrobat Reader DC AcroForm getItemAt Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-39837Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-39836Adobe Acrobat Reader DC AcroForm buttonGetIcon Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-39829Adobe FrameMaker PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe FrameMaker
- CVE-2021-39832Adobe FrameMaker PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityAdobe FrameMaker
- CVE-2021-39830Adobe FrameMaker PDF File Parsing Memory Corruption Remote Code Execution VulnerabilityAdobe FrameMaker
- CVE-2021-39831Adobe FrameMaker PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe FrameMaker
- CVE-2021-39821Adobe InDesign TIF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2021-35982Adobe Reader DC Windows Installer Uncontrolled Search Path element could lead to Arbitrary Code ExecutionAdobe Acrobat Reader
- CVE-2021-25960SuiteCRM - CSV Injection in Accounts Modulesalesagility SuiteCRM
- CVE-2021-25962Shuup - Formula Injection in Checkout Addressesshuup
- CVE-2021-25961SuiteCRM - Account Takeover in Password Reset Functionalitysalesagility SuiteCRM
- CVE-2021-35028A command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 could allow an authenticated, local user to exZyxel ZyWALL VPN2S Firmware
- CVE-2021-35027A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access Zyxel ZyWALL VPN2S Firmware
- CVE-2021-22946A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqhttps://github.com/curl/curl
Medium, low and unrated 45
- CVE-2021-41826PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sessions_controller.rb open redirect.
- CVE-2021-41824Craft CMS before 3.7.14 allows CSV injection.craftcms/cms
- CVE-2021-41821Wazuh Manager in Wazuh through 4.1.5 is affected by a remote Integer Underflow vulnerability that might lead to denial of service.
- CVE-2020-20781A stored cross-site scripting (XSS) vulnerability in /ucms/index.php?do=list_edit of UCMS 1.4.7 allows attackers to execute arbitrary web sc
- CVE-2021-41034The build of some language stacks of Eclipse Che version 6 includes pulling some binaries from an unsecured HTTP endpoint.The Eclipse Foundation Eclipse Che
- CVE-2020-20131LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows atackers to execute arbitrary web scripts or HTML via
- CVE-2020-20129LaraCMS v1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML viwanglelecc/laracms
- CVE-2020-20128LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers.
- CVE-2021-41795The Safari app extension bundled with 1Password for Mac 7.7.0 through 7.8.x before 7.8.7 is vulnerable to authorization bypass.
- CVE-2021-3653A flaw was found in the KVM's AMD code for supporting SVM nested virtualization.kernel
- CVE-2021-39342Credova_Financial <= 1.4.8 Sensitive Information DisclosureCredova Financial Credova_Financial
- CVE-2021-35944Couchbase Server 6.5.x, 6.6.x through 6.6.2, and 7.0.0 has a Buffer Overflow.
- CVE-2021-35943Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control.
- CVE-2021-35945Couchbase Server 6.5.x, 6.6.0 through 6.6.2, and 7.0.0, has a Buffer Overflow.
- CVE-2021-41764A cross-site request forgery (CSRF) vulnerability exists in Streama up to and including v1.10.3.
- CVE-2021-29834IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3,20.0.0.1, 20.0.0.2, and 21.0.2 and IBM Business IBM Business Automation Workflow · IBM Business Process Man…
- CVE-2021-40716XMP Toolkit SDK SVG_Adapter Out-of-bounds Read Information DisclosureAdobe XMP Toolkit
- CVE-2021-40697Adobe FrameMaker PDF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe FrameMaker
- CVE-2021-39862Adobe FrameMaker PostScript File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe FrameMaker
- CVE-2021-39865Adobe FrameMaker TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe FrameMaker
- CVE-2021-39858Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2021-39861Adobe Acrobat Reader DC Catalog Plugin Out-of-Bounds Read BugAdobe Acrobat Reader
- CVE-2021-39856Adobe Acrobat Reader DC NTLMv2 SSO Information Disclosure via LoadFileAdobe Acrobat Reader
- CVE-2021-39860Adobe Acrobat Reader DC Search Plugin Null Pointer DereferenceAdobe Acrobat Reader
- CVE-2021-39854Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-ServiceAdobe Acrobat Reader
- CVE-2021-39855Adobe Acrobat Reader DC NTLMv2 SSO Information Disclosure via src ParameterAdobe Acrobat Reader
- CVE-2021-39849Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-ServiceAdobe Acrobat Reader
- CVE-2021-39857Adobe Acrobat Reader DC Information Disclosure via ActiveX LoadFileAdobe Acrobat Reader
- CVE-2021-39850Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-ServiceAdobe Acrobat Reader
- CVE-2021-39852Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-ServiceAdobe Acrobat Reader
- CVE-2021-39846Adobe Acrobat Reader /Parent Property Recursive Stack OverflowAdobe Acrobat Reader
- CVE-2021-39851Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-ServiceAdobe Acrobat Reader
- CVE-2021-39853Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-ServiceAdobe Acrobat Reader
- CVE-2021-39845Adobe Acrobat Reader Page Tree Node Recursive Stack OverflowAdobe Acrobat Reader
- CVE-2021-39844Adobe Acrobat Reader CalRGB Out-of-Bounds Read VulnerabilityAdobe Acrobat Reader
- CVE-2021-39835Adobe FrameMaker PDF File Parsing Use-After-Free Information Disclosure VulnerabilityAdobe FrameMaker
- CVE-2021-39834Adobe FrameMaker TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe FrameMaker
- CVE-2021-39833Adobe FrameMaker TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe FrameMaker
- CVE-2021-25959OpenCRX - Reflected Cross-Site Scripting in Password Reset Functionalityorg.opencrx opencrx-core-config · org.opencrx:opencrx-co… +4
- CVE-2021-40651OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arb
- CVE-2021-36745A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers Trend Micro ServerProtect for Storage · Trend Micro Serv… +2
- CVE-2021-32466An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and belowTrend Micro HouseCall for Home Networks
- CVE-2021-33924Confluent Ansible (cp-ansible) version 5.5.0, 5.5.1, 5.5.2 and 6.0.0 is vulnerable to Incorrect Access Control via its auxiliary component t
- CVE-2021-33923Insecure permissions in Confluent Ansible (cp-ansible) 5.5.0, 5.5.1, 5.5.2 and 6.0.0 allows local attackers to access some sensitive informa
- CVE-2021-22947When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server https://github.com/curl/curl