{"vulnerability": "cve-2021-4016", "sightings": [{"uuid": "cc26bbcf-fcd3-40c0-9046-66c4472801fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-40161", "type": "seen", "source": "https://t.me/cibsecurity/34579", "content": "\u203c CVE-2021-40161 \u203c\n\nA Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDF earlier than 9.0.7 version.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-23T22:19:30.000000Z"}, {"uuid": "5276ed20-00ad-4411-be5b-422b245fbd6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-4016", "type": "seen", "source": "https://t.me/cibsecurity/36041", "content": "\u203c CVE-2021-4016 \u203c\n\nRapid7 Insight Agent, versions prior to 3.1.3, suffer from an improper access control vulnerability whereby, the user has access to the snapshot directory. An attacker can access, read and copy any of the files in this directory e.g. asset_info.json or file_info.json, leading to a loss of confidentiality. This issue was fixed in Rapid7 Insight Agent 3.1.3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-21T20:13:24.000000Z"}, {"uuid": "e7f58365-7e51-4d23-ad5d-4e880be88597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-40166", "type": "seen", "source": "https://t.me/cibsecurity/51019", "content": "\u203c CVE-2021-40166 \u203c\n\nA maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T22:17:56.000000Z"}, {"uuid": "55fcdc4b-d66a-4f96-937c-9cf5910a47cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-40164", "type": "seen", "source": "https://t.me/cibsecurity/51009", "content": "\u203c CVE-2021-40164 \u203c\n\nA heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T22:17:40.000000Z"}, {"uuid": "a2f38b62-d99d-4d7a-a396-1b136077dd59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-40162", "type": "seen", "source": "https://t.me/cibsecurity/51004", "content": "\u203c CVE-2021-40162 \u203c\n\nA maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-07T22:17:32.000000Z"}]}