Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-26626 State: PUBLISHED Published: 2022-04-19T20:26:30 Last Updated: 2024-08-03T20:26:25.556Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: tobesoft Co.,Ltd Products: XPLATFORM Problem Types: CWE-20 Description: Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands. IF the second parameter value of the execBrowser function is ‘default’, the first parameter value could be passed to the ShellExecuteW API. The passed parameter is an arbitrary code to be executed. Remote attackers can use this vulnerability to execute arbitrary remote code. Additional Analyst Notes: - CVE Program Container:
ttackers can use this vulnerability to execute arbitrary remote code. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66662
CVE ID: CVE-2021-26627 State: PUBLISHED Published: 2022-04-19T20:26:29 Last Updated: 2024-08-03T20:26:25.482Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: EDrhyme Co.,Ltd Products: QCP 200W Problem Types: CWE-284 Description: Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66663
CVE ID: CVE-2021-26628 State: PUBLISHED Published: 2022-04-26T18:21:05 Last Updated: 2024-08-03T20:26:25.490Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: No Vendor Information Products: MaxBoard Problem Types: CWE-79, CWE-434 Description: Insufficient script validation of the admin page enables XSS, which causes unauthorized users to steal admin privileges. When uploading file in a specific menu, the verification of the files is insufficient. It allows remote attackers to upload arbitrary files disguising them as image files. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_s
nalyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66673
CVE ID: CVE-2021-26629 State: PUBLISHED Published: 2022-04-26T18:17:48 Last Updated: 2024-08-03T20:26:25.560Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: tobesoft Co.,Ltd Products: XPLATFORM Problem Types: CWE-22 Description: A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is decompressed, an arbitrary file can be d in the parent path by using the path traversal pattern ‘..\’. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66674
CVE ID: CVE-2021-26630 State: PUBLISHED Published: 2022-05-19T14:52:27 Last Updated: 2024-08-03T20:26:25.656Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Handysoft Co.,Ltd Products: HANDY Groupware Problem Types: CWE-20 Description: Improper input validation vulnerability in HANDY Groupware’s ActiveX moudle allows attackers to download or execute arbitrary files. This vulnerability can be exploited by using the file download or execution path as the parameter value of the vulnerable function. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66723
CVE ID: CVE-2021-26631 State: PUBLISHED Published: 2022-05-19T14:53:55 Last Updated: 2024-08-03T20:26:25.522Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Hometory Co.,Ltd Products: Mangboard commerce package Problem Types: CWE-20 Description: Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote attacker can exploit this vulnerability to manipulate the total order amount into a negative number and then pay for the order. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66724
CVE ID: CVE-2021-26633 State: PUBLISHED Published: 2022-06-01T14:54:25 Last Updated: 2024-08-03T20:26:25.639Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Max Yi Products: MaxBoard Problem Types: CWE-89 Description: SQL injection and Local File Inclusion (LFI) vulnerabilities in MaxBoard can cause information leakage and privilege escalation. This vulnerabilities can be exploited by manipulating a variable with a desired value and inserting and arbitrary file. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66745
CVE ID: CVE-2021-26634 State: PUBLISHED Published: 2022-06-01T14:59:25 Last Updated: 2024-08-03T20:26:25.727Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Max Yi Products: Maxboard Problem Types: CWE-89, CWE-288, CWE-434 Description: SQL injection and file upload attacks are possible due to insufficient validation of input values in some parameters and variables of files compromising Maxboard, which may lead to arbitrary code execution or privilege escalation. Attackers can use these vulnerabilities to perform attacks such as stealing server management rights using a web shell. Additional Analyst Notes: - CVE Program Container: References: - https://www
server management rights using a web shell. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66746
CVE ID: CVE-2021-26635 State: PUBLISHED Published: 2022-06-01T15:04:52 Last Updated: 2024-08-03T20:26:25.566Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bandisoft International Inc. Products: ark library Problem Types: CWE-121 Description: In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type. An attacker could use this vulnerability to cause a stack buffer overflow and as a result, perform an attack such as remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bull
. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66747
CVE ID: CVE-2021-26636 State: PUBLISHED Published: 2022-06-22T13:55:57 Last Updated: 2024-08-03T20:26:25.597Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: MaxBoard Products: MaxBoard Problem Types: CWE-79, CWE-89 Description: Stored XSS and SQL injection vulnerability in MaxBoard could lead to occur Remote Code Execution, which could lead to information exposure and privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66781
CVE ID: CVE-2021-26637 State: PUBLISHED Published: 2022-06-22T13:55:58 Last Updated: 2024-08-03T20:26:25.557Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Shina System Co.,Ltd Products: SiHAS firmware, SiHAS old app Problem Types: CWE-287 Description: There is no account authentication and permission check logic in the firmware and existing apps of SiHAS's SGW-300, ACM-300, GCM-300, so unauthorized users can remotely control the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66782
CVE ID: CVE-2021-26638 State: PUBLISHED Published: 2022-06-22T13:55:59 Last Updated: 2024-08-03T20:26:25.500Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Xi S&D Inc. Products: S&D smarthome (smartcare) Problem Types: CWE-287 Description: Improper Authentication vulnerability in S&D smarthome(smartcare) application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66783
CVE ID: CVE-2021-26639 State: PUBLISHED Published: 2022-08-17T20:21:29 Last Updated: 2024-08-03T20:26:25.568Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: WISA corp. Products: Smart Wing CMS Problem Types: CWE-494, CWE-20 Description: This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system. Additional Analyst Notes: - CVE Program Container: References: - https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66875
CVE ID: CVE-2021-26642 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T16:59:58.376Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: XEHub Products: XE3 XpresesEngine Problem Types: CWE-434 Description: When uploading an image file to a bulletin board developed with XpressEngine, a vulnerability in which an arbitrary file can be uploaded due to insufficient verification of the file. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin board is running. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://boho.or.kr/krcert/secNoticeView.
Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=67125
CVE ID: CVE-2021-26644 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T16:59:33.499Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Hometory Products: Mangboard WP BASIC Problem Types: CWE-89 Description: SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin board is running. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=67127
CVE ID: CVE-2021-26673 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2021-26674 State: REJECTED Published: N/A Last Updated: 2023-05-12T00:00:00 Description: No description available.
CVE ID: CVE-2021-26675 State: PUBLISHED Published: 2021-02-09T15:47:25 Last Updated: 2024-08-03T20:26:25.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1181751 - https://git.kernel.org/pub/scm/network/connman/connman.git/tree/ChangeLog - https://www.openwall.com/lists/oss-security/2021/02/08/2 - https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=e4079a20f617a4b076af503f6e4e8b0304c9f2cb - https://lists.debian.org/debian-lts-anno
twork/connman/connman.git/commit/?id=e4079a20f617a4b076af503f6e4e8b0304c9f2cb - https://lists.debian.org/debian-lts-announce/2021/02/msg00013.html - https://www.debian.org/security/2021/dsa-4847 - https://kunnamon.io/tbone/ - https://security.gentoo.org/glsa/202107-29
CVE ID: CVE-2021-26676 State: PUBLISHED Published: 2021-02-09T15:47:29 Last Updated: 2024-08-03T20:26:25.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: gdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack information, allowing further exploitation of bugs in gdhcp. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1181751 - https://git.kernel.org/pub/scm/network/connman/connman.git/tree/ChangeLog - https://www.openwall.com/lists/oss-security/2021/02/08/2 - https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=a74524b3e3fad81b0fd1084ffdf9f2ea469cd9b1 - https://
ttps://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=a74524b3e3fad81b0fd1084ffdf9f2ea469cd9b1 - https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=58d397ba74873384aee449690a9070bacd5676fa - https://lists.debian.org/debian-lts-announce/2021/02/msg00013.html - https://www.debian.org/security/2021/dsa-4847 - https://kunnamon.io/tbone/ - https://security.gentoo.org/glsa/202107-29
CVE ID: CVE-2021-26677 State: PUBLISHED Published: 2021-02-23T18:06:48 Last Updated: 2024-08-03T20:26:25.541Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Local Authenticated Escalation of Privilege via ClearPass OnGuard Description: A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in ClearPass OnGuard could allow local authenticated users on a Windows platform to elevate their privileges. A successful exploit could allow an attacker to execute arbitrary code with SYSTEM level privileges. Additional Analyst Notes: - CVE Program Container: Refe
attacker to execute arbitrary code with SYSTEM level privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE ID: CVE-2021-26678 State: PUBLISHED Published: 2021-02-23T17:52:49 Last Updated: 2024-08-03T20:26:25.560Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Remote Unauthenticated Stored Cross-Site Scripting (XSS) in ClearPass Web Administration Interface Description: A remote unauthenticated stored cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface of ClearPass could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploi
conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the affected interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE ID: CVE-2021-26679 State: PUBLISHED Published: 2021-02-23T18:03:51 Last Updated: 2024-08-03T20:26:25.656Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Remote Authenticated Command Injection in ClearPass WebUI Description: A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system co
allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE ID: CVE-2021-26680 State: PUBLISHED Published: 2021-02-23T18:02:33 Last Updated: 2024-08-03T20:26:25.556Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Remote Authenticated Command Injection in ClearPass WebUI Description: A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system co
CVE ID: CVE-2021-26681 State: PUBLISHED Published: 2021-02-23T17:13:04 Last Updated: 2024-08-03T20:33:39.555Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Remote Authenticated Command Injection in ClearPass CLI Description: A remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Ana
cute arbitrary commands as root on the underlying operating system leading to complete system compromise. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE ID: CVE-2021-26682 State: PUBLISHED Published: 2021-02-23T17:18:00 Last Updated: 2024-08-03T20:33:39.553Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Remote Reflected Cross-Site Scripting Vulnerability (XSS) in ClearPass Guest Web Interface Description: A remote reflected cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the guest portal interface of ClearPass could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the portal. A successful exploit could allow an attacker to execute arbitrary script code in
) attack against a user of the portal. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the guest portal interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE ID: CVE-2021-26683 State: PUBLISHED Published: 2021-02-23T17:10:57 Last Updated: 2024-08-03T20:33:39.565Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Remote Authenticated Command Injection in ClearPass WebUI Description: A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system co
CVE ID: CVE-2021-26684 State: PUBLISHED Published: 2021-02-23T17:39:47 Last Updated: 2024-08-03T20:33:40.252Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Remote Authenticated Command Injection in ClearPass WebUI Description: A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system co
CVE ID: CVE-2021-26685 State: PUBLISHED Published: 2021-02-23T17:00:37 Last Updated: 2024-08-03T20:33:39.566Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Remote Authenticated SQL Injection in Clearpass Web-based Management Interface Description: A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the u
the ClearPass instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE ID: CVE-2021-26686 State: PUBLISHED Published: 2021-02-23T17:06:45 Last Updated: 2024-08-03T20:33:39.555Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: Remote Authenticated SQL Injection in Clearpass Web-based Management Interface Description: A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the u
CVE ID: CVE-2021-26687 State: PUBLISHED Published: 2021-02-04T05:16:01 Last Updated: 2024-08-03T20:33:39.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. In preloaded applications, the HostnameVerified default is mishandled. The LG ID is LVE-SMP-200029 (February 2021). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2021-26688 State: PUBLISHED Published: 2021-02-04T05:15:45 Last Updated: 2024-08-03T20:33:40.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 (February 2021). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2021-26689 State: PUBLISHED Published: 2021-02-04T05:15:30 Last Updated: 2024-08-03T20:33:40.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. The USB laf gadget has a use-after-free. The LG ID is LVE-SMP-200031 (February 2021). Additional Analyst Notes: - CVE Program Container: References: - https://lgsecurity.lge.com/
CVE ID: CVE-2021-26690 State: PUBLISHED Published: 2021-06-10T07:10:22 Last Updated: 2024-08-03T20:33:40.192Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: mod_session NULL pointer dereference Description: Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service Additional Analyst Notes: - CVE Program Container: References: - http://httpd.apache.org/security/vulnerabilities_24.html - https://lists.apache.org/thread.html/re026d3da9d7824bd93b9f871c0fdda978d960c7e62d8c43cba8d0bf3%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.