Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-20835 State: PUBLISHED Published: 2021-11-24T08:25:38 Last Updated: 2024-08-03T17:53:23.012Z Vendors: Mercari, Inc. Products: Android App 'Mercari (Merpay) - Marketplace and Mobile Payments App' (Japan version) Problem Types: Improper Authorization in Handler for Custom URL Scheme Description: Improper authorization in handler for custom URL scheme vulnerability in Android App 'Mercari (Merpay) - Marketplace and Mobile Payments App' (Japan version) versions prior to 4.49.1 allows a remote attacker to lead a user to access an arbitrary website and the website launches an arbitrary Activity of the app via the vulnerable App, which may result in Mercari account's access token b
e launches an arbitrary Activity of the app via the vulnerable App, which may result in Mercari account's access token being obtained. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN49465877/index.html
CVE ID: CVE-2021-20836 State: PUBLISHED Published: 2021-10-19T02:00:22 Last Updated: 2024-08-03T17:53:22.875Z Vendors: OMRON Corporation Products: OMRON CX-Supervisor Problem Types: Out-of-bounds Read Description: Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privileges to cause information disclosure and/or arbitrary code execution by opening a specially crafted SCS project files. Additional Analyst Notes: - CVE Program Container: References: - https://www.myomron.com/index.php?action=kb&article=1692 - https://jvn.jp/en/vu/JVNVU90041391/index.html
CVE ID: CVE-2021-20837 State: PUBLISHED Published: 2021-10-26T05:15:12 Last Updated: 2024-08-03T17:53:22.821Z Vendors: Six Apart Ltd. Products: Movable Type Problem Types: OS Command Injection Description: Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002 and earlier (Movable Type Advanced 7 Series), Movable Type Advanced 6.8.2 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.46 and earlier, and Movable Type Premium Advanced 1.46 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors. Note that all versions of Movable Type 4.0 or later inclu
kers to execute arbitrary OS commands via unspecified vectors. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://movabletype.org/news/2021/10/mt-782-683-released.html - https://jvn.jp/en/jp/JVN41119755/index.html - http://packetstormsecurity.com/files/164705/Movable-Type-7-r.5002-XMLRPC-API-Remote-Command-Injection.html - http://packetstormsecurity.com/files/164818/Movable-Type-7-r.5002-XMLRPC-API-Remote-Command-Injection.html
CVE ID: CVE-2021-20838 State: PUBLISHED Published: 2021-11-01T01:50:14 Last Updated: 2024-08-03T17:53:22.724Z Vendors: Antenna House, Inc. Products: Office Server Document Converter Problem Types: XML external entities (XXE) Description: Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition by processing a specially crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - https://www.antenna.co.jp/news/2021/osdc72-20211027.html - https://jvn.jp/en/jp/JVN33453839/index.html
CVE ID: CVE-2021-20839 State: PUBLISHED Published: 2021-11-01T01:50:16 Last Updated: 2024-08-03T17:53:22.634Z Vendors: Antenna House, Inc. Products: Office Server Document Converter Problem Types: XML external entities (XXE) Description: Office Server Document Converter V7.2MR4 and earlier and V7.1MR7 and earlier allows a remote unauthenticated attacker to conduct an XML External Entity (XXE) attack to cause a denial of service (DoS) condition to the other servers by processing a specially crafted XML document. Additional Analyst Notes: - CVE Program Container: References: - https://www.antenna.co.jp/news/2021/osdc72-20211027.html - https://jvn.jp/en/jp/JVN33453839/index.html
CVE ID: CVE-2021-20840 State: PUBLISHED Published: 2021-11-24T08:25:40 Last Updated: 2024-08-03T17:53:22.545Z Vendors: Saasproject Products: Booking Package - Appointment Booking Calendar System Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Booking Package - Appointment Booking Calendar System versions prior to 1.5.11 allows a remote attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/booking-package/ - https://saasproject.net/ja/fixed/20211019.php - https://jvn.jp/en/jp/JVN68066589/index.html
CVE ID: CVE-2021-20841 State: PUBLISHED Published: 2021-11-24T08:25:41 Last Updated: 2024-08-03T17:53:22.649Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE 2 series Problem Types: Fails to restrict access Description: Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker to bypass access restriction and to alter System settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/info/weakness/20211111/ - https://jvn.jp/en/jp/JVN75444925/index.html
CVE ID: CVE-2021-20842 State: PUBLISHED Published: 2021-11-24T08:25:42 Last Updated: 2024-08-03T17:53:22.672Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE 2 series Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in EC-CUBE 2 series 2.11.0 to 2.17.1 allows a remote attacker to hijack the authentication of Administrator and delete Administrator via a specially crafted web page. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/info/weakness/20211111/ - https://jvn.jp/en/jp/JVN75444925/index.html
CVE ID: CVE-2021-20843 State: PUBLISHED Published: 2021-11-24T08:25:44 Last Updated: 2024-08-03T17:53:22.719Z Vendors: Yamaha Corporation Products: RTX830, NVR510, NVR700W, RTX1210 Problem Types: Inclusion of Functionality from Untrusted Control Sphere Description: Cross-site script inclusion vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier, and RTX1210 Rev.14.01.38 and earlier allows a remote authenticated attacker to alter the settings of the product via a specially crafted web page. Additional Analyst Notes: - CVE Program Container: References: - https://www.ntt-west.co.jp/smb/kiki_info/info/211109.html - ht
nal Analyst Notes: - CVE Program Container: References: - https://www.ntt-west.co.jp/smb/kiki_info/info/211109.html - https://business.ntt-east.co.jp/topics/2021/11_09.html - http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVNVU91161784.html - https://jvn.jp/en/vu/JVNVU91161784/index.html
CVE ID: CVE-2021-20844 State: PUBLISHED Published: 2021-11-24T08:25:45 Last Updated: 2024-08-03T17:53:22.863Z Vendors: Yamaha Corporation Products: RTX830, NVR510, NVR700W, RTX1210 Problem Types: Improper Neutralization of HTTP Headers for Scripting Syntax Description: Improper neutralization of HTTP request headers for scripting syntax vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier, and RTX1210 Rev.14.01.38 and earlier allows a remote authenticated attacker to obtain sensitive information via a specially crafted web page. Additional Analyst Notes: - CVE Program Container: References: - https://www.ntt-west.c
ia a specially crafted web page. Additional Analyst Notes: - CVE Program Container: References: - https://www.ntt-west.co.jp/smb/kiki_info/info/211109.html - https://business.ntt-east.co.jp/topics/2021/11_09.html - http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVNVU91161784.html - https://jvn.jp/en/vu/JVNVU91161784/index.html
CVE ID: CVE-2021-20845 State: PUBLISHED Published: 2021-11-24T08:25:47 Last Updated: 2024-08-03T17:53:22.974Z Vendors: XML-Sitemaps Products: Unlimited Sitemap Generator Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Unlimited Sitemap Generator versions prior to v8.2 allows a remote attacker to hijack the authentication of an administrator and conduct arbitrary operation via a specially crafted web page. Additional Analyst Notes: - CVE Program Container: References: - https://www.xml-sitemaps.com/standalone-google-sitemap-generator.html - https://www.xml-sitemaps.com/news-20210831.html - https://jvn.jp/en/jp/JVN58407606/index.html
CVE ID: CVE-2021-20846 State: PUBLISHED Published: 2021-11-24T08:25:48 Last Updated: 2024-08-03T17:53:22.680Z Vendors: Delite Studio Products: Push Notifications for WordPress (Lite) Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Push Notifications for WordPress (Lite) versions prior to 6.0.1 allows a remote attacker to hijack the authentication of an administrator and conduct an arbitrary operation via a specially crafted web page. Additional Analyst Notes: - CVE Program Container: References: - https://delitestudio.com/en/ - https://wordpress.org/plugins/push-notifications-for-wp/ - https://jvn.jp/en/jp/JVN85492429/index.html
CVE ID: CVE-2021-20847 State: PUBLISHED Published: 2021-12-01T02:15:37 Last Updated: 2024-08-03T17:53:22.731Z Vendors: NTT DOCOMO, INC. Products: Wi-Fi STATION SH-52A Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Wi-Fi STATION SH-52A (38JP_1_11G, 38JP_1_11J, 38JP_1_11K, 38JP_1_11L, 38JP_1_26F, 38JP_1_26G, 38JP_1_26J, 38JP_2_03B, and 38JP_2_03C) allows a remote unauthenticated attacker to inject an arbitrary script via WebUI of the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.nttdocomo.co.jp/support/product_update/sh52a/index.html - https://jvn.jp/en/jp/JVN19482703/index.html
CVE ID: CVE-2021-20848 State: PUBLISHED Published: 2021-11-24T08:25:50 Last Updated: 2024-08-03T17:53:22.781Z Vendors: Zack Scholl Products: rwtxt Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/schollz/rwtxt - https://jvn.jp/en/jp/JVN22515597/index.html
CVE ID: CVE-2021-20850 State: PUBLISHED Published: 2021-11-24T08:25:51 Last Updated: 2024-08-03T17:53:22.643Z Vendors: Alfasado Inc. Products: PowerCMS XMLRPC API Problem Types: OS Command Injection Description: PowerCMS XMLRPC API of PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and earlier, and PowerCMS 2 Series (End-of-Life, EOL) allows a remote attacker to execute an arbitrary OS command via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.powercms.jp/news/release-patch-xmlrpc-api-202110.html - https://jvn.jp/en/jp/JVN17645965/index.html
CVE ID: CVE-2021-20851 State: PUBLISHED Published: 2021-12-01T02:15:39 Last Updated: 2024-08-03T17:53:22.474Z Vendors: Aftab Muni Products: Browser and Operating System Finder Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Browser and Operating System Finder versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/browser-and-operating-system-finder/ - https://jvn.jp/en/jp/JVN93562098/index.html
CVE ID: CVE-2021-20852 State: PUBLISHED Published: 2021-12-01T02:15:40 Last Updated: 2024-08-03T17:53:22.655Z Vendors: ELECOM CO.,LTD. Products: ELECOM LAN routers Problem Types: Buffer Overflow Description: Buffer overflow vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute an arbitrary OS command via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20211130-01/ - https://jvn.jp/en/jp/JVN88993473/index.html
CVE ID: CVE-2021-20853 State: PUBLISHED Published: 2021-12-01T02:15:41 Last Updated: 2024-08-03T17:53:23.052Z Vendors: ELECOM CO.,LTD. Products: ELECOM LAN routers Problem Types: OS Command Injection Description: ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20211130-01/ - https://jvn.jp/en/jp/JVN88993473/index.html
CVE ID: CVE-2021-20854 State: PUBLISHED Published: 2021-12-01T02:15:44 Last Updated: 2024-08-03T17:53:22.817Z Vendors: ELECOM CO.,LTD. Products: ELECOM LAN routers Problem Types: OS Command Injection Description: ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20211130-01/ - https://jvn.jp/en/jp/JVN88993473/index.html
CVE ID: CVE-2021-20855 State: PUBLISHED Published: 2021-12-01T02:15:46 Last Updated: 2024-08-03T17:53:22.696Z Vendors: ELECOM CO.,LTD. Products: ELECOM LAN routers Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20211130-01/ - https://jvn.jp/en/jp/JVN88993473/index.html
CVE ID: CVE-2021-20856 State: PUBLISHED Published: 2021-12-01T02:15:47 Last Updated: 2024-08-03T17:53:22.658Z Vendors: ELECOM CO.,LTD. Products: ELECOM LAN routers Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20211130-01/ - https://jvn.jp/en/jp/JVN88993473/index.html
CVE ID: CVE-2021-20857 State: PUBLISHED Published: 2021-12-01T02:15:49 Last Updated: 2024-08-03T17:53:22.695Z Vendors: ELECOM CO.,LTD. Products: ELECOM LAN router Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20211130-01/ - https://jvn.jp/en/jp/JVN88993473/index.html
CVE ID: CVE-2021-20858 State: PUBLISHED Published: 2021-12-01T02:15:51 Last Updated: 2024-08-03T17:53:22.852Z Vendors: ELECOM CO.,LTD. Products: ELECOM LAN router Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20211130-01/ - https://jvn.jp/en/jp/JVN88993473/index.html
CVE ID: CVE-2021-20859 State: PUBLISHED Published: 2021-12-01T02:15:52 Last Updated: 2024-08-03T17:53:22.694Z Vendors: ELECOM CO.,LTD. Products: ELECOM LAN routers Problem Types: OS Command Injection Description: ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior
r, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attacker to execute an arbitrary OS command via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20211130-01/ - https://jvn.jp/en/jp/JVN88993473/index.html
CVE ID: CVE-2021-20860 State: PUBLISHED Published: 2021-12-01T02:15:54 Last Updated: 2024-08-03T17:53:22.693Z Vendors: ELECOM CO.,LTD. Products: ELECOM LAN routers Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware
ware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a remote authenticated attacker to hijack the authentication of an administrator via a specially crafted page. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20211130-01/ - https://jvn.jp/en/jp/JVN88993473/index.html
CVE ID: CVE-2021-20861 State: PUBLISHED Published: 2021-12-01T02:15:55 Last Updated: 2024-08-03T17:53:23.040Z Vendors: ELECOM CO.,LTD. Products: ELECOM LAN routers Problem Types: Improper Access Control Description: Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and pr
d prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attacker to bypass access restriction and to access the management screen of the product via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20211130-01/ - https://jvn.jp/en/jp/JVN88993473/index.html
CVE ID: CVE-2021-20862 State: PUBLISHED Published: 2021-12-01T02:15:57 Last Updated: 2024-08-03T17:53:22.711Z Vendors: ELECOM CO.,LTD. Products: ELECOM routers Problem Types: Improper Access Control Description: Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC
WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent unauthenticated attacker to bypass access restriction, and to obtain anti-CSRF tokens and change the product's settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20211130-01/ - https://jvn.jp/en/vu/JVNVU94527926/index.html
CVE ID: CVE-2021-20863 State: PUBLISHED Published: 2021-12-01T02:15:58 Last Updated: 2024-08-03T17:53:23.031Z Vendors: ELECOM CO.,LTD. Products: ELECOM routers Problem Types: OS Command Injection Description: OS command injection vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533G
533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attackers to execute an arbitrary OS command with the root privilege via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20211130-01/ - https://jvn.jp/en/vu/JVNVU94527926/index.html
CVE ID: CVE-2021-20864 State: PUBLISHED Published: 2021-12-01T02:15:59 Last Updated: 2024-08-03T17:53:22.628Z Vendors: ELECOM CO.,LTD. Products: ELECOM routers Problem Types: Improper Access Control Description: Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC
WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent unauthenticated attacker to bypass access restriction, and to start the telnet service and execute an arbitrary OS command via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20211130-01/ - https://jvn.jp/en/vu/JVNVU94527926/index.html
CVE ID: CVE-2021-20865 State: PUBLISHED Published: 2021-12-13T06:40:13 Last Updated: 2024-08-03T17:53:22.754Z Vendors: Delicious Brains Products: Advanced Custom Fields and Advanced Custom Fields Pro Problem Types: Missing authorization Description: Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in browsing database which may allow a user to browse unauthorized data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.advancedcustomfields.com/ - https://wordpress.org/plugins/advanced-custom-fields/ - https://jvn.jp/en/jp/JVN09136401/index.html