Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-31196 State: PUBLISHED Published: 2021-07-14T17:53:12.000Z Last Updated: 2025-10-21T23:25:41.532Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2019 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 20, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2016 Cumulative Update 21, Microsoft Exchange Server 2019 Cumulative Update 10 Problem Types: Remote Code Execution Description: Microsoft Exchange Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31196
CVE ID: CVE-2021-31198 State: PUBLISHED Published: 2021-05-11T19:11:39.000Z Last Updated: 2025-02-28T20:55:39.432Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2019 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 20, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8 Problem Types: Remote Code Execution Description: Microsoft Exchange Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:/
xecution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31198 - https://www.zerodayinitiative.com/advisories/ZDI-21-894/
CVE ID: CVE-2021-31199 State: PUBLISHED Published: 2021-06-08T22:46:13.000Z Last Updated: 2025-10-21T23:25:43.672Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Serv
r Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.micro
lity Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31199
CVE ID: CVE-2021-31200 State: PUBLISHED Published: 2021-05-11T19:11:39 Last Updated: 2024-08-03T22:55:53.300Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Microsoft Products: common_utils.py Problem Types: Remote Code Execution Description: Common Utilities Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31200
CVE ID: CVE-2021-31201 State: PUBLISHED Published: 2021-06-08T22:46:13.000Z Last Updated: 2025-10-21T23:25:43.529Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N/E:F/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Serv
lity Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31201
CVE ID: CVE-2021-31204 State: PUBLISHED Published: 2021-05-11T19:11:40 Last Updated: 2024-08-03T22:55:53.545Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: .NET Core 3.1, .NET 5.0, Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8), Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3), Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6), Visual Studio 2019 for Mac version 8.9 Problem Types: Elevation of Privilege Description: .NET and Visual Studio Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-U
ge Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31204 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVMWZPF4FR6JPFSNAIDIUDULHZJBVCW6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6M7KL3KTHJVQNRA3CWFUTESQJARQEHSZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4F3VM3RMPE7PNNLLI3BPCSAXITQZCFCA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWF25Z3CZ6LYCOHZ7FPSFAQ426JUBUZ4/ - ht
edoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWF25Z3CZ6LYCOHZ7FPSFAQ426JUBUZ4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UV4ITB3SUDGR23G7XALUVKFJMZERFUKF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFXJPQUYUITJMV75YN3XIGE3KKN5GOCU/
CVE ID: CVE-2021-31205 State: PUBLISHED Published: 2021-05-11T19:11:40 Last Updated: 2024-08-03T22:55:53.518Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 Problem Types: Security Feature Bypass Description: Windows SMB Client Security Feature Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31205
CVE ID: CVE-2021-31206 State: PUBLISHED Published: 2021-07-14T17:53:13 Last Updated: 2024-08-03T22:55:52.209Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L/E:F/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2019 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 20, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2016 Cumulative Update 21, Microsoft Exchange Server 2019 Cumulative Update 10 Problem Types: Remote Code Execution Description: Microsoft Exchange Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en
tion Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31206 - https://www.zerodayinitiative.com/advisories/ZDI-21-826/
CVE ID: CVE-2021-31207 State: PUBLISHED Published: 2021-05-11T19:11:41.000Z Last Updated: 2025-10-21T23:25:45.697Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 20, Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8 Problem Types: Defense in Depth Description: Microsoft Exchange Server Security Feature Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31207 - https://www.zerodayinitiative.com/advisories/ZDI-21-819/ - http://packetstormsecurity.com/files/163895/Microsoft-Exchange-ProxyShell-Remote-Code-Execution.html
CVE ID: CVE-2021-31208 State: PUBLISHED Published: 2021-05-11T19:11:42 Last Updated: 2024-08-03T22:55:53.593Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 Problem Types: Elevation of Privilege Description: Windows Container Manager Service Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31208
CVE ID: CVE-2021-31209 State: PUBLISHED Published: 2021-05-11T19:11:43.000Z Last Updated: 2025-02-28T19:57:20.647Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2019 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 20, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8 Problem Types: Spoofing Description: Microsoft Exchange Server Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.c
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31209 - https://www.zerodayinitiative.com/advisories/ZDI-21-615/
CVE ID: CVE-2021-31211 State: PUBLISHED Published: 2021-05-11T19:11:43 Last Updated: 2024-08-03T22:55:52.248Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Visual Studio Code Problem Types: Remote Code Execution Description: Visual Studio Code Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31211
CVE ID: CVE-2021-31213 State: PUBLISHED Published: 2021-05-11T19:11:44 Last Updated: 2024-08-03T22:55:53.506Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Visual Studio Code Remote - Containers Extension Problem Types: Remote Code Execution Description: Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31213
CVE ID: CVE-2021-31214 State: PUBLISHED Published: 2021-05-11T19:11:45 Last Updated: 2024-08-03T22:55:52.219Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Visual Studio Code Problem Types: Remote Code Execution Description: Visual Studio Code Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31214
CVE ID: CVE-2021-31215 State: PUBLISHED Published: 2021-05-13T05:51:41 Last Updated: 2024-08-03T22:55:53.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: SchedMD Slurm before 20.02.7 and 20.03.x through 20.11.x before 20.11.7 allows remote code execution as SlurmUser because use of a PrologSlurmctld or EpilogSlurmctld script leads to environment mishandling. Additional Analyst Notes: - CVE Program Container: References: - https://www.schedmd.com/news.php?id=248#OPT_248 - https://lists.schedmd.com/pipermail/slurm-announce/2021/000055.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3ODMJQNY4FAV7G3DSKVIO5KY7Q7DKBPU/ - https:
aproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3ODMJQNY4FAV7G3DSKVIO5KY7Q7DKBPU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PRHTASFAU5FNB2MJOG67YID2ONQS5MCQ/ - https://lists.debian.org/debian-lts-announce/2022/01/msg00011.html
CVE ID: CVE-2021-31216 State: PUBLISHED Published: 2021-07-19T12:29:21 Last Updated: 2024-08-03T22:55:52.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siren Investigate before 11.1.1 contains a server side request forgery (SSRF) defect in the built-in image proxy route (which is enabled by default). An attacker with access to the Investigate installation can specify an arbitrary URL in the parameters of the image proxy route and fetch external URLs as the Investigate process on the host. Additional Analyst Notes: - CVE Program Container: References: - https://community.siren.io/c/announcements - https://docs.siren.io/siren-platform-user-guide/11.1/release-notes.html
CVE ID: CVE-2021-31217 State: PUBLISHED Published: 2021-07-13T17:57:06 Last Updated: 2024-08-03T22:55:53.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://support.solarwinds.com/SuccessCenter/s/ - https://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_12-2_release_notes.htm
CVE ID: CVE-2021-31220 State: PUBLISHED Published: 2021-07-13T13:15:34 Last Updated: 2024-08-03T22:55:53.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu - https://advisories.stormshield.eu/2021-022/
CVE ID: CVE-2021-31221 State: PUBLISHED Published: 2021-07-13T13:31:26 Last Updated: 2024-08-03T22:55:53.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu - https://advisories.stormshield.eu/2021-023/
CVE ID: CVE-2021-31222 State: PUBLISHED Published: 2021-07-13T13:27:50 Last Updated: 2024-08-03T22:55:53.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the administration console installed. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu - https://advisories.stormshield.eu/2021-024/
CVE ID: CVE-2021-31223 State: PUBLISHED Published: 2021-07-13T13:19:21 Last Updated: 2024-08-03T22:55:53.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration console installed. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu - https://advisories.stormshield.eu/2021-025/
CVE ID: CVE-2021-31224 State: PUBLISHED Published: 2021-07-13T13:10:42 Last Updated: 2024-08-03T22:55:53.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu - https://advisories.stormshield.eu/2021-026/
CVE ID: CVE-2021-31225 State: PUBLISHED Published: 2021-07-13T12:57:06 Last Updated: 2024-08-03T22:55:53.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu - https://advisories.stormshield.eu/2021-027/
CVE ID: CVE-2021-31226 State: PUBLISHED Published: 2021-08-19T10:48:28 Last Updated: 2024-08-03T22:55:53.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to lack of size validation. This vulnerability requires the attacker to send a crafted HTTP POST request with a URI longer than 50 bytes. This leads to a heap overflow in wbs_post() via an strcpy() call. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/ - https:/
ces: - https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/ - https://www.kb.cert.org/vuls/id/608209
CVE ID: CVE-2021-31227 State: PUBLISHED Published: 2021-08-19T10:50:28 Last Updated: 2024-08-03T22:55:53.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to an incorrect signed integer comparison. This vulnerability requires the attacker to send a malformed HTTP packet with a negative Content-Length, which bypasses the size checks and results in a large heap overflow in the wbs_multidata buffer copy. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/new-critical-operational-technology-
nalyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/ - https://www.kb.cert.org/vuls/id/608209
CVE ID: CVE-2021-31228 State: PUBLISHED Published: 2021-08-19T10:51:21 Last Updated: 2024-08-03T22:55:53.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS query's source port in order to send forged DNS response packets that will be accepted as valid answers to the DNS client's requests (without sniffing the specific request). Data is predictable because it is based on the time of day, and has too few bits. Additional Analyst Notes: - CVE Program Container: References: - https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nich
ontainer: References: - https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/ - https://www.kb.cert.org/vuls/id/608209
CVE ID: CVE-2021-31229 State: PUBLISHED Published: 2021-04-15T14:28:01 Last Updated: 2024-08-03T22:55:53.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd() performs incorrect memory handling while parsing crafted XML files, which leads to an out-of-bounds write of a one byte constant. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/ezxml/bugs/26/ - https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html
CVE ID: CVE-2021-31231 State: PUBLISHED Published: 2021-04-30T12:34:28 Last Updated: 2024-08-03T22:55:53.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Alertmanager in Grafana Enterprise Metrics before 1.2.1 and Metrics Enterprise 1.2.1 has a local file disclosure vulnerability when experimental.alertmanager.enable-api is used. The HTTP basic auth password_file can be used as an attack vector to send any file content via a webhook. The alertmanager templates can be used as an attack vector to send any file content because the alertmanager can load any text file specified in the templates list. Additional Analyst Notes: - CVE Program Container: References: - https://grafa
ext file specified in the templates list. Additional Analyst Notes: - CVE Program Container: References: - https://grafana.com/docs/metrics-enterprise/ - https://community.grafana.com/c/security-announcements - https://grafana.com/docs/metrics-enterprise/latest/downloads/#v113----april-27-2021 - https://grafana.com/docs/metrics-enterprise/latest/downloads/#v121----april-27-2021 - https://security.netapp.com/advisory/ntap-20210611-0001/
CVE ID: CVE-2021-31232 State: PUBLISHED Published: 2021-04-30T12:46:32 Last Updated: 2024-08-03T22:55:53.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Alertmanager in CNCF Cortex before 1.8.1 has a local file disclosure vulnerability when -experimental.alertmanager.enable-api is used. The HTTP basic auth password_file can be used as an attack vector to send any file content via a webhook. The alertmanager templates can be used as an attack vector to send any file content because the alertmanager can load any text file specified in the templates list. Additional Analyst Notes: - CVE Program Container: References: - https://community.grafana.com/c/security-announcements -
dditional Analyst Notes: - CVE Program Container: References: - https://community.grafana.com/c/security-announcements - https://github.com/cortexproject/cortex - https://github.com/cortexproject/cortex/pull/4129/files - https://lists.cncf.io/g/cortex-users/message/50
CVE ID: CVE-2021-31233 State: PUBLISHED Published: 2023-05-31T00:00:00 Last Updated: 2025-01-10T16:35:19.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability found in Fighting Cock Information System v.1.0 allows a remote attacker to obtain sensitive information via the edit_breed.php parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/12824/fighting-cock-information-system.html - https://github.com/gabesolomon/CVE-2021-31233
CVE ID: CVE-2021-31239 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-05-05T16:53:03.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sqlite.org/cves.html - https://www.sqlite.org/forum/forumpost/d9fce1a89b - https://github.com/Tsiming/Vulnerabilities/blob/main/SQLite/CVE-2021-31239 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/ - https://
roject.org/archives/list/package-announce%40lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/ - https://security.netapp.com/advisory/ntap-20230609-0010/ - https://security.gentoo.org/glsa/202311-03