Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-28876 State: PUBLISHED Published: 2021-04-11T00:00:00 Last Updated: 2024-08-03T21:55:11.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get_unchecked() more than once for the same index when the underlying iterator panics (in certain conditions). This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rust-lang/rust/issues/81740 - https://github.com/rust-lang/rust/pull/81741 - https://lists.fedoraproj
https://github.com/rust-lang/rust/issues/81740 - https://github.com/rust-lang/rust/pull/81741 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/ - https://security.gentoo.org/glsa/202210-09
CVE ID: CVE-2021-28877 State: PUBLISHED Published: 2021-04-11T00:00:00 Last Updated: 2024-08-03T21:55:12.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for the same index more than once when nested. This bug can lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rust-lang/rust/pull/80670 - https://security.gentoo.org/glsa/202210-09
CVE ID: CVE-2021-28878 State: PUBLISHED Published: 2021-04-11T00:00:00 Last Updated: 2024-08-03T21:55:12.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditions) when next_back() and next() are used together. This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rust-lang/rust/issues/82291 - https://github.com/rust-lang/rust/pull/82292 - https://lists.fedoraproject.org/archives
om/rust-lang/rust/issues/82291 - https://github.com/rust-lang/rust/pull/82292 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/ - https://security.gentoo.org/glsa/202210-09
CVE ID: CVE-2021-28879 State: PUBLISHED Published: 2021-04-11T00:00:00 Last Updated: 2024-08-03T21:55:12.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rust-lang/rust/issues/82282 - https://github.com/rust-lang/rust/pull/82289 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/ - https://lists.fedoraproject
/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/ - https://security.gentoo.org/glsa/202210-09
CVE ID: CVE-2021-28890 State: PUBLISHED Published: 2021-08-12T21:57:07 Last Updated: 2024-08-03T21:55:11.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: J2eeFAST 2.2.1 allows remote attackers to perform SQL injection via the (1) compId parameter to fast/sys/user/list, (2) deptId parameter to fast/sys/role/list, or (3) roleId parameter to fast/sys/role/authUser/list, related to the use of ${} to join SQL statements. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/zhouhuanOGP/J2EEFAST/issues/I3BOFQ
CVE ID: CVE-2021-28899 State: PUBLISHED Published: 2021-04-29T14:08:31 Last Updated: 2024-08-03T21:55:11.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses in Networks LIVE555 Streaming Media before 2021.3.16. Additional Analyst Notes: - CVE Program Container: References: - http://lists.live555.com/pipermail/live-devel/2021-March/021891.html
CVE ID: CVE-2021-28901 State: PUBLISHED Published: 2021-09-15T17:50:05 Last Updated: 2024-08-03T21:55:11.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities exist in SITA Software Azur CMS 1.2.3.1 and earlier, which allows remote attackers to inject arbitrary web script or HTML via the (1) NOM_CLI , (2) ADRESSE , (3) ADRESSE2, (4) LOCALITE parameters to /eshop/products/json/aouCustomerAdresse; and the (5) nom_liste parameter to /eshop/products/json/addCustomerFavorite. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE_2021_28901.pdf
CVE ID: CVE-2021-28902 State: PUBLISHED Published: 2021-05-20T18:36:06 Last Updated: 2024-08-03T21:55:11.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: In function read_yin_container() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In some cases, it can be NULL, which leads to the operation of retval->ext[r]->flags that results in a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CESNET/libyang/issues/1454 - https://security.gentoo.org/glsa/202107-54
CVE ID: CVE-2021-28903 State: PUBLISHED Published: 2021-05-20T18:36:15 Last Updated: 2024-08-03T21:55:11.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow in libyang <= v1.0.225 can cause a denial of service through function lyxml_parse_mem(). lyxml_parse_elem() function will be called recursively, which will consume stack space and lead to crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CESNET/libyang/issues/1453 - https://security.gentoo.org/glsa/202107-54
CVE ID: CVE-2021-28904 State: PUBLISHED Published: 2021-05-20T18:36:27 Last Updated: 2024-08-03T21:55:12.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: In function ext_get_plugin() in libyang <= v1.0.225, it doesn't check whether the value of revision is NULL. If revision is NULL, the operation of strcmp(revision, ext_plugins[u].revision) will lead to a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CESNET/libyang/issues/1451 - https://security.gentoo.org/glsa/202107-54
CVE ID: CVE-2021-28905 State: PUBLISHED Published: 2021-05-20T18:36:35 Last Updated: 2024-08-03T21:55:12.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: In function lys_node_free() in libyang <= v1.0.225, it asserts that the value of node->module can't be NULL. But in some cases, node->module can be null, which triggers a reachable assertion (CWE-617). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CESNET/libyang/issues/1452 - https://security.gentoo.org/glsa/202107-54
CVE ID: CVE-2021-28906 State: PUBLISHED Published: 2021-05-20T18:36:44 Last Updated: 2024-08-03T21:55:12.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: In function read_yin_leaf() in libyang <= v1.0.225, it doesn't check whether the value of retval->ext[r] is NULL. In some cases, it can be NULL, which leads to the operation of retval->ext[r]->flags that results in a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CESNET/libyang/issues/1455 - https://security.gentoo.org/glsa/202107-54
CVE ID: CVE-2021-28909 State: PUBLISHED Published: 2021-09-09T17:35:00 Last Updated: 2024-08-03T21:55:12.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers to access uncontrolled the login service at /webif/SecurityModule in a brute force attack. The password could be weak and default username is known as 'admin'. This is usable and part of an attack chain to gain SSH root access. Additional Analyst Notes: - CVE Program Container: References: - https://psytester.github.io/CVE-2021-28909
CVE ID: CVE-2021-28910 State: PUBLISHED Published: 2021-09-09T17:37:34 Last Updated: 2024-08-03T21:55:12.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 contains basic SSRF vulnerability. It allow unauthenticated attackers to request to any internal and external server. Additional Analyst Notes: - CVE Program Container: References: - https://psytester.github.io/CVE-2021-28910
CVE ID: CVE-2021-28911 State: PUBLISHED Published: 2021-09-09T17:45:39 Last Updated: 2024-08-03T21:55:12.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /tmp path which contains some sensitive data (e.g. device serial number). Having those info, a possible loginId can be self-calculated in a brute force attack against BMX interface. This is usable and part of an attack chain to gain SSH root access. Additional Analyst Notes: - CVE Program Container: References: - https://psytester.github.io/CVE-2021-28911
CVE ID: CVE-2021-28912 State: PUBLISHED Published: 2021-09-09T17:57:34 Last Updated: 2024-08-03T21:55:11.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: BAB TECHNOLOGIE GmbH eibPort V3. Each device has its own unique hard coded and weak root SSH key passphrase known as 'eibPort string'. This is usable and the final part of an attack chain to gain SSH root access. Additional Analyst Notes: - CVE Program Container: References: - https://psytester.github.io/CVE-2021-28912
CVE ID: CVE-2021-28913 State: PUBLISHED Published: 2021-09-09T18:00:27 Last Updated: 2024-08-03T21:55:12.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to validate the so called and hard coded unique 'eibPort String' which acts as the root SSH key passphrase. This is usable and part of an attack chain to gain SSH root access. Additional Analyst Notes: - CVE Program Container: References: - https://psytester.github.io/CVE-2021-28913
CVE ID: CVE-2021-28914 State: PUBLISHED Published: 2021-09-09T18:03:32 Last Updated: 2024-08-03T21:55:12.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because the strength is shown in configuration tool, but finally not enforced. This is usable and part of an attack chain to gain SSH root access. Additional Analyst Notes: - CVE Program Container: References: - https://psytester.github.io/CVE-2021-28914
CVE ID: CVE-2021-28918 State: PUBLISHED Published: 2021-04-01T12:33:50 Last Updated: 2024-08-03T21:55:11.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs and reach critical VPN or LAN hosts. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/netmask - https://github.com/rs/node-netmask - https://www.bleepingcomputer.com/news/security/critical
npmjs.com/package/netmask - https://github.com/rs/node-netmask - https://www.bleepingcomputer.com/news/security/critical-netmask-networking-bug-impacts-thousands-of-applications/ - https://github.com/advisories/GHSA-pch5-whg9-qr2r - https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-011.md - https://security.netapp.com/advisory/ntap-20210528-0010/ - https://rootdaemon.com/2021/03/29/vulnerability-in-netmask-npm-package-affects-280000-projects/
CVE ID: CVE-2021-28924 State: PUBLISHED Published: 2021-04-08T12:57:39 Last Updated: 2024-08-03T21:55:11.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/issues-found-on-nagios-network-analyzer-2-4-2-50ec4ffb5e25 - https://www.nagios.com/downloads/nagios-network-analyzer/change-log/
CVE ID: CVE-2021-28925 State: PUBLISHED Published: 2021-04-08T12:57:36 Last Updated: 2024-08-03T21:55:11.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the o[col] parameter to api/checks/read/. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/stolabs/issues-found-on-nagios-network-analyzer-2-4-2-50ec4ffb5e25 - https://www.nagios.com/downloads/nagios-network-analyzer/change-log/
CVE ID: CVE-2021-28927 State: PUBLISHED Published: 2021-04-07T14:09:35 Last Updated: 2024-08-03T21:55:12.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The text-to-speech engine in libretro RetroArch for Windows 1.9.0 passes unsanitized input to PowerShell through platform_win32.c via the accessibility_speak_windows function, which allows attackers who have write access on filesystems that are used by RetroArch to execute code via command injection using specially a crafted file and directory names. Additional Analyst Notes: - CVE Program Container: References: - http://libretro.com - http://retroarch.com - https://github.com/libretro/RetroArch/blob/d3dc3ee989ec6a4903c689907
ces: - http://libretro.com - http://retroarch.com - https://github.com/libretro/RetroArch/blob/d3dc3ee989ec6a4903c689907ffc47027f71f776/frontend/drivers/platform_win32.c - https://labs.bishopfox.com/advisories/retroarch-for-windows-version-1.9.0
CVE ID: CVE-2021-28931 State: PUBLISHED Published: 2021-07-07T14:01:19 Last Updated: 2024-08-03T21:55:12.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary file upload vulnerability in Fork CMS 5.9.2 allows attackers to create or replace arbitrary files in the /themes directory via a crafted zip file uploaded to the Themes panel. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/forkcms/forkcms/releases/tag/5.9.2 - https://github.com/bousalman/ForkCMS-arbitrary-upload/blob/main/README.md
CVE ID: CVE-2021-28935 State: PUBLISHED Published: 2021-03-30T12:00:23 Last Updated: 2024-08-03T21:55:11.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple (CMSMS) 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin > My Preferences > Title field. Additional Analyst Notes: - CVE Program Container: References: - http://dev.cmsmadesimple.org/bug/view/12432 - http://packetstormsecurity.com/files/162287/CMS-Made-Simple-2.2.15-Cross-Site-Scripting.html
CVE ID: CVE-2021-28936 State: PUBLISHED Published: 2021-03-29T12:04:35 Last Updated: 2024-08-03T21:55:12.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) Web management administrator password can be changed by sending a specially crafted HTTP GET request. The administrator username has to be known (default:admin) whereas no previous authentication is required. Additional Analyst Notes: - CVE Program Container: References: - https://blog-ssh3ll.medium.com/acexy-wireless-n-wifi-repeater-vulnerabilities-8bd5d14a2990 - http://acexy.com - http://wireless-n.com
CVE ID: CVE-2021-28937 State: PUBLISHED Published: 2021-03-29T12:04:30 Last Updated: 2024-08-03T21:55:11.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) contains the administrator account password in plaintext. The page can be intercepted on HTTP. Additional Analyst Notes: - CVE Program Container: References: - https://blog-ssh3ll.medium.com/acexy-wireless-n-wifi-repeater-vulnerabilities-8bd5d14a2990 - http://acexy.com
CVE ID: CVE-2021-28938 State: PUBLISHED Published: 2021-04-13T05:52:46 Last Updated: 2024-08-03T21:55:12.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siren Federate before 6.8.14-10.3.9, 6.9.x through 7.6.x before 7.6.2-20.2, 7.7.x through 7.9.x before 7.9.3-21.6, 7.10.x before 7.10.2-22.2, and 7.11.x before 7.11.2-23.0 can leak user information across thread contexts. This occurs in opportunistic circumstances when there is concurrent query execution by a low-privilege user and a high-privilege user. The former query might run with the latter query's privileges. Additional Analyst Notes: - CVE Program Container: References: - https://docs.siren.io/siren-federate-user-guid
vileges. Additional Analyst Notes: - CVE Program Container: References: - https://docs.siren.io/siren-federate-user-guide/22/siren-federate/release-notes.html
CVE ID: CVE-2021-28940 State: PUBLISHED Published: 2021-04-02T19:06:19 Last Updated: 2024-08-03T21:55:12.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary. This creates an issue on the /scripts/magpie_debug.php and /scripts/magpie_simple.php page that if you send a specific https url in the RSS URL field, you are able to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/kpzHKKJu - https://github.com/kellan/magpierss/blob/04d2a88b97fdba5813d01dc0d56c772d97360
rences: - https://pastebin.com/kpzHKKJu - https://github.com/kellan/magpierss/blob/04d2a88b97fdba5813d01dc0d56c772d97360bb5/extlib/Snoopy.class.inc#L660 - https://www.exploit-db.com/exploits/49643
CVE ID: CVE-2021-28941 State: PUBLISHED Published: 2021-04-02T19:08:37 Last Updated: 2024-08-03T21:55:12.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Because of no validation on a curl command in MagpieRSS 0.72 in the /extlib/Snoopy.class.inc file, when you send a request to the /scripts/magpie_debug.php or /scripts/magpie_simple.php page, it's possible to request any internal page if you use a https request. Additional Analyst Notes: - CVE Program Container: References: - https://pastebin.com/kpzHKKJu - https://github.com/kellan/magpierss/blob/04d2a88b97fdba5813d01dc0d56c772d97360bb5/extlib/Snoopy.class.inc#L660
CVE ID: CVE-2021-28950 State: PUBLISHED Published: 2021-03-20T19:55:16 Last Updated: 2024-08-03T21:55:12.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=775c5033a0d164622d9d10dd0f0a5531639ed3ed - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.8 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messa
l/v5.x/ChangeLog-5.11.8 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRTPQE73ANG7D6M4L4PK5ZQDPO4Y2FVD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FB6LUXPEIRLZH32YXWZVEZAD4ZL6SDK2/ - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html - https://www.debian.org/security/2022/dsa-5096
CVE ID: CVE-2021-28951 State: PUBLISHED Published: 2021-03-20T19:53:46 Last Updated: 2024-08-03T21:55:12.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (deadlock) because exit may be waiting to park a SQPOLL thread, but concurrently that SQPOLL thread is waiting for a signal to start, aka CID-3ebba796fa25. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3ebba796fa251d042be42b929a2d916ee5c34a49 - https://lists.fedoraproject.org/archives/list/package-announce%40
/commit/?id=3ebba796fa251d042be42b929a2d916ee5c34a49 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/ - https://security.netapp.com/advisory/ntap-20210430-0003/
CVE ID: CVE-2021-28952 State: PUBLISHED Published: 2021-03-20T20:05:30 Last Updated: 2024-08-03T21:55:12.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID number is encountered, aka CID-1c668e1c0a0f. (This has been fixed in 5.12-rc4.) Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/alsa-devel/20210309142129.14182-2-srinivas.kandagatla%40linaro.org/ - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1c668e1c0a0f74472469cd514f40c9012b324c31 - https://list
.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1c668e1c0a0f74472469cd514f40c9012b324c31 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/ - https://security.netapp.com/advisory/ntap-20210430-0003/
CVE ID: CVE-2021-28953 State: PUBLISHED Published: 2021-03-21T04:16:41 Last Updated: 2024-08-03T21:55:12.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted repository. Additional Analyst Notes: - CVE Program Container: References: - https://marketplace.visualstudio.com/items?itemName=jbenden.c-cpp-flylint - https://github.com/jbenden/vscode-c-cpp-flylint/compare/v1.8.2...v1.9.0 - https://vuln.ryotak.me/advisories/16
CVE ID: CVE-2021-28954 State: PUBLISHED Published: 2021-03-21T04:16:26 Last Updated: 2024-08-03T21:55:12.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Chris Walz bit before 1.0.5 on Windows, attackers can run arbitrary code via a .exe file in a crafted repository. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chriswalz/bit/releases/tag/v1.0.5 - https://vuln.ryotak.me/advisories/17