Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-40906 State: PUBLISHED Published: 2022-03-25T22:20:04 Last Updated: 2024-08-04T02:51:07.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: CheckMK Raw Edition software (versions 1.5.0 to 1.6.0) does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser (such as JavaScript or other client-side scripts) or to steal the session cookies of a user who has previously authenticated via a man in the middle. Successful exploitation requires access to the web service resource without authentication. Additional Analyst Note
dle. Successful exploitation requires access to the web service resource without authentication. Additional Analyst Notes: - CVE Program Container: References: - http://checkmk.com - https://github.com/Edgarloyola/CVE-2021-40906
CVE ID: CVE-2021-40907 State: PUBLISHED Published: 2022-01-24T14:41:01 Last Updated: 2024-08-04T02:59:31.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Sourcecodester Storage Unit Rental Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /storage/classes/Login.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-08-09072021
CVE ID: CVE-2021-40908 State: PUBLISHED Published: 2022-01-24T14:54:07 Last Updated: 2024-08-04T02:59:30.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-09
CVE ID: CVE-2021-40909 State: PUBLISHED Published: 2022-01-24T15:15:05 Last Updated: 2024-08-04T02:59:30.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the first_name, last_name, and email parameters to /ajax_crud. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-10-09102021
CVE ID: CVE-2021-40910 State: PUBLISHED Published: 2022-06-15T15:37:38 Last Updated: 2024-08-04T02:59:30.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a reflective cross-site scripting (XSS) vulnerability in the PHPCMS V9.6.3 management side. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/phpcms/phpcms/issues/I493K8
CVE ID: CVE-2021-40921 State: PUBLISHED Published: 2021-10-01T15:42:04 Last Updated: 2024-08-04T02:59:31.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in _contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dmolsen/Detector/issues/35
CVE ID: CVE-2021-40922 State: PUBLISHED Published: 2021-10-01T15:42:06 Last Updated: 2024-08-04T02:59:30.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the last_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pixeline/bugs/issues/552 - https://github.com/pixeline/bugs
CVE ID: CVE-2021-40923 State: PUBLISHED Published: 2021-10-01T15:42:07 Last Updated: 2024-08-04T02:59:30.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pixeline/bugs/issues/552 - https://github.com/pixeline/bugs
CVE ID: CVE-2021-40924 State: PUBLISHED Published: 2021-10-01T15:42:08 Last Updated: 2024-08-04T02:59:30.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in install/index.php in bugs 1.8 and below version allows remote attackers to inject arbitrary web script or HTML via the first_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pixeline/bugs/issues/552 - https://github.com/pixeline/bugs
CVE ID: CVE-2021-40925 State: PUBLISHED Published: 2021-10-01T15:42:08 Last Updated: 2024-08-04T02:59:30.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dompdf/dompdf/www/demo.php infaveo-helpdesk v1.11.0 and below allow remote attackers to inject arbitrary web script or HTML via the $_SERVER["PHP_SELF"] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ladybirdweb/faveo-helpdesk/issues/5423 - https://github.com/ladybirdweb/faveo-helpdesk
CVE ID: CVE-2021-40926 State: PUBLISHED Published: 2021-10-01T15:42:09 Last Updated: 2024-08-04T02:59:30.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in demos/demo.mysqli.php in getID3 1.X and v2.0.0-beta allows remote attackers to inject arbitrary web script or HTML via the showtagfiles parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JamesHeinrich/getID3/issues/341 - https://github.com/JamesHeinrich/getID3
CVE ID: CVE-2021-40927 State: PUBLISHED Published: 2021-10-01T15:42:09 Last Updated: 2024-08-04T02:59:30.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in callback.php in Spotify-for-Alfred 0.13.9 and below allows remote attackers to inject arbitrary web script or HTML via the error parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/citelao/Spotify-for-Alfred/issues/137 - https://github.com/citelao/Spotify-for-Alfred
CVE ID: CVE-2021-40928 State: PUBLISHED Published: 2021-10-01T15:42:10 Last Updated: 2024-08-04T02:59:31.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in FlexTV beta development version allows remote attackers to inject arbitrary web script or HTML via the PHP_SELF parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/d8ahazard/FlexTV/issues/37 - https://github.com/d8ahazard/FlexTV
CVE ID: CVE-2021-40940 State: PUBLISHED Published: 2022-06-15T16:28:43 Last Updated: 2024-08-04T02:59:30.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monstra-cms/monstra/issues/471
CVE ID: CVE-2021-40941 State: PUBLISHED Published: 2022-06-27T17:44:08 Last Updated: 2024-08-04T02:59:30.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Bento4 1.6.0-638, there is an allocator is out of memory in the function AP4_Array<AP4_TrunAtom::Entry>::EnsureCapacity in Ap4Array.h:172, as demonstrated by GPAC. This can cause a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/644
CVE ID: CVE-2021-40942 State: PUBLISHED Published: 2022-06-27T20:21:56 Last Updated: 2024-08-04T02:59:30.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GPAC MP4Box v1.1.0, there is a heap-buffer-overflow in the function filter_parse_dyn_args function in filter_core/filter.c:1454, as demonstrated by GPAC. This can cause a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1908
CVE ID: CVE-2021-40943 State: PUBLISHED Published: 2022-06-28T09:57:53 Last Updated: 2024-08-04T02:59:30.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Bento4 1.6.0-638, there is a null pointer reference in the function AP4_DescriptorListInspector::Action function in Ap4Descriptor.h:124 , as demonstrated by GPAC. This can cause a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/643
CVE ID: CVE-2021-40944 State: PUBLISHED Published: 2022-06-28T00:00:00 Last Updated: 2024-08-04T02:59:30.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gf_filter_pid_get_packet function in src/filter_core/filter_pid.c:5394, as demonstrated by GPAC. This can cause a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1906 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-40954 State: PUBLISHED Published: 2022-06-23T09:03:51 Last Updated: 2024-08-04T02:59:30.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bettershop/LaikeTui/issues/11
CVE ID: CVE-2021-40955 State: PUBLISHED Published: 2022-06-23T09:17:24 Last Updated: 2024-08-04T02:59:30.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection exists in LaiKetui v3.5.0 the background administrator list. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bettershop/LaikeTui/issues/12
CVE ID: CVE-2021-40956 State: PUBLISHED Published: 2022-06-23T09:31:51 Last Updated: 2024-08-04T02:59:30.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bettershop/LaikeTui/issues/13
CVE ID: CVE-2021-40959 State: PUBLISHED Published: 2024-12-20T00:00:00 Last Updated: 2024-12-25T02:29:58.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting vulnerability in MONITORAPP Application Insight Web Application Firewall (AIWAF) <= 4.1.6 and <=5.0 was identified on the subpage `/process_management/process_status.xhr.php`. This vulnerability allows an attacker to inject malicious scripts that execute in the context of the victim's session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://rubiya.kr/CVE-2021-40959/
CVE ID: CVE-2021-40960 State: PUBLISHED Published: 2021-10-01T13:12:02 Last Updated: 2024-08-04T02:59:30.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Galera WebTemplate 1.0 is affected by a directory traversal vulnerability that could reveal information from /etc/passwd and /etc/shadow. Additional Analyst Notes: - CVE Program Container: References: - http://www.galera.com.tr/ - http://www.omrylmz.com/galera-webtemplate-1-0-directory-traversal-vulnerability-cve-2021-40960/
CVE ID: CVE-2021-40961 State: PUBLISHED Published: 2022-06-09T00:00:00 Last Updated: 2024-08-04T02:59:30.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple <=2.2.15 is affected by SQL injection in modules/News/function.admin_articlestab.php. The $sortby variable is concatenated with $query1, but it is possible to inject arbitrary SQL language without using the '. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2021/Mar/49 - https://github.com/beerpwn/CVE/blob/master/cms_made_simple_2021/sqli_order_by/CMS-MS-SQLi-report.md - https://packetstormsecurity.com/files/161895/CMS-Made-Simple-2.2.15-SQL-Injection.html -
rder_by/CMS-MS-SQLi-report.md - https://packetstormsecurity.com/files/161895/CMS-Made-Simple-2.2.15-SQL-Injection.html - https://www.soteritsecurity.com/blog/2023/01/CMS-Made-Simple_CVE-2021-40961.html
CVE ID: CVE-2021-40964 State: PUBLISHED Published: 2021-09-15T17:12:28 Last Updated: 2024-08-04T02:59:30.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file (with Admin credentials or with the CSRF vulnerability) with the "fullpath" parameter containing path traversal strings (../ and ..\) in order to escape the server's intended working directory and write malicious files onto any directory on the computer. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/prasathmani/tinyfilemanager - https://gist.github.com/omri
es: - CVE Program Container: References: - https://github.com/prasathmani/tinyfilemanager - https://gist.github.com/omriinbar/953368dcdd9e5eeefd83920166099528 - http://packetstormsecurity.com/files/166330/Tiny-File-Manager-2.4.6-Shell-Upload.html
CVE ID: CVE-2021-40965 State: PUBLISHED Published: 2021-09-15T17:11:27 Last Updated: 2024-08-04T02:59:30.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload files and run OS commands by inducing the Administrator user to browse a URL controlled by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/prasathmani/tinyfilemanager - https://gist.github.com/omriinbar/953368dcdd9e5eeefd83920166099528
CVE ID: CVE-2021-40966 State: PUBLISHED Published: 2021-09-15T17:10:32 Last Updated: 2024-08-04T02:59:30.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored XSS exists in TinyFileManager All version up to and including 2.4.6 in /tinyfilemanager.php when the server is given a file that contains HTML and javascript in its name. A malicious user can upload a file with a malicious filename containing javascript code and it will run on any user browser when they access the server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/prasathmani/tinyfilemanager - https://gist.github.com/omriinbar/953368dcdd9e5eeefd83920166099528
CVE ID: CVE-2021-40968 State: PUBLISHED Published: 2021-10-01T15:42:10 Last Updated: 2024-08-04T02:59:30.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/spotweb/spotweb - https://github.com/spotweb/spotweb/issues/711
CVE ID: CVE-2021-40969 State: PUBLISHED Published: 2021-10-01T15:42:11 Last Updated: 2024-08-04T02:59:30.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/spotweb/spotweb - https://github.com/spotweb/spotweb/issues/711
CVE ID: CVE-2021-40970 State: PUBLISHED Published: 2021-10-01T15:42:11 Last Updated: 2024-08-04T02:59:31.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/spotweb/spotweb - https://github.com/spotweb/spotweb/issues/711
CVE ID: CVE-2021-40971 State: PUBLISHED Published: 2021-10-01T15:42:12 Last Updated: 2024-08-04T02:59:30.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword1 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/spotweb/spotweb - https://github.com/spotweb/spotweb/issues/711
CVE ID: CVE-2021-40972 State: PUBLISHED Published: 2021-10-01T15:42:12 Last Updated: 2024-08-04T02:59:31.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/spotweb/spotweb - https://github.com/spotweb/spotweb/issues/711
CVE ID: CVE-2021-40973 State: PUBLISHED Published: 2021-10-01T15:42:13 Last Updated: 2024-08-04T02:59:30.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the lastname parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/spotweb/spotweb - https://github.com/spotweb/spotweb/issues/711
CVE ID: CVE-2021-40975 State: PUBLISHED Published: 2021-10-01T15:42:13 Last Updated: 2024-08-04T02:59:30.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in application/modules/admin/views/ecommerce/products.php in Ecommerce-CodeIgniter-Bootstrap (Codeigniter 3.1.11, Bootstrap 3.3.7) allows remote attackers to inject arbitrary web script or HTML via the search_title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/blob/c546a716ba56e8e33b3a5def1c18a6d89c3608f5/application/modules/admin/views/ecommerce/products.php#L37
CVE ID: CVE-2021-40978 State: PUBLISHED Published: 2021-10-07T13:23:41 Last Updated: 2024-08-04T02:59:30.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/2601.] and https://github.com/nisdn/CVE-2021-40978/issues/1 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/mkdocs/mkdocs - https://github.com/nisdn/CVE-2021-40978 - https://github.com/mkdocs/mkdocs/issues/2601 - https://github.com
ocs/mkdocs - https://github.com/nisdn/CVE-2021-40978 - https://github.com/mkdocs/mkdocs/issues/2601 - https://github.com/nisdn/CVE-2021-40978/issues/1
CVE ID: CVE-2021-40981 State: PUBLISHED Published: 2021-09-27T05:43:59 Last Updated: 2024-08-04T02:59:30.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS ROG Armoury Crate Lite before 4.2.10 allows local users to gain privileges by placing a Trojan horse file in the publicly writable %PROGRAMDATA%\ASUS\GamingCenterLib directory. Additional Analyst Notes: - CVE Program Container: References: - https://aptw.tf/2021/09/24/armoury-crate-privesc.html
CVE ID: CVE-2021-40985 State: PUBLISHED Published: 2021-11-03T16:08:46 Last Updated: 2024-08-04T02:59:31.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/michaelrsweet/htmldoc/commit/f12b9666e582a8e7b70f11b28e5ffc49ad625d43 - https://github.com/michaelrsweet/htmldoc/issues/444 - https://lists.debian.org/debian-lts-announce/2022/02/msg00022.html
CVE ID: CVE-2021-40986 State: PUBLISHED Published: 2021-10-15T13:35:37 Last Updated: 2024-08-04T02:59:30.996Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/aler
CVE ID: CVE-2021-40987 State: PUBLISHED Published: 2021-10-15T13:33:06 Last Updated: 2024-08-04T02:59:30.315Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/aler
CVE ID: CVE-2021-40988 State: PUBLISHED Published: 2021-10-15T13:42:47 Last Updated: 2024-08-04T02:59:30.923Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote directory traversal Description: A remote directory traversal vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021
ditional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-018.txt
CVE ID: CVE-2021-40989 State: PUBLISHED Published: 2021-10-15T13:41:30 Last Updated: 2024-08-04T02:59:30.887Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: local escalation of privilege Description: A local escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PS
ty. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-018.txt
CVE ID: CVE-2021-40990 State: PUBLISHED Published: 2021-10-15T13:44:08 Last Updated: 2024-08-04T02:59:31.009Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote disclosure of sensitive information Description: A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks