Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-25681 State: PUBLISHED Published: 2021-04-20T11:17:40 Last Updated: 2024-08-03T20:11:27.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched Additional Analyst Notes: - CVE Program Container: References: - http://adtran.com - https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vu
: - CVE Program Container: References: - http://adtran.com - https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25681.md - http://packetstormsecurity.com/files/162280/Adtran-Personal-Phone-Manager-10.8.1-DNS-Exfiltration.html
CVE ID: CVE-2021-25682 State: PUBLISHED Published: 2021-06-11T02:20:19.233443Z Last Updated: 2024-09-17T00:46:19.717Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Canonical Products: apport Problem Types: CWE-20 Description: It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1912326
CVE ID: CVE-2021-25683 State: PUBLISHED Published: 2021-06-11T02:20:19.881201Z Last Updated: 2024-09-16T22:03:30.982Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Canonical Products: apport Problem Types: CWE-20 Description: It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from the kernel. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1912326
CVE ID: CVE-2021-25684 State: PUBLISHED Published: 2021-06-11T02:20:20.510Z Last Updated: 2025-11-03T19:25:41.029Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Canonical Products: apport Problem Types: CWE-20 Description: It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1912326
CVE ID: CVE-2021-25688 State: PUBLISHED Published: 2021-02-11T15:24:19 Last Updated: 2024-08-03T20:11:28.203Z Vendors: n/a Products: - PCoIP Standard Agent for Windows - PCoIP Standard Agent for Linux - PCoIP Graphics Agent for Windows - PCoIP Graphics Agent for Linux Problem Types: Information Disclosure Description: Under certain conditions, Teradici PCoIP Agents for Windows prior to version 20.10.0 and Teradici PCoIP Agents for Linux prior to version 21.01.0 may log parts of a user's password in the application logs. Additional Analyst Notes: - CVE Program Container: References: - https://advisory.teradici.com/security-advisories/73/
CVE ID: CVE-2021-25689 State: PUBLISHED Published: 2021-02-11T15:22:29 Last Updated: 2024-08-03T20:11:28.175Z Vendors: n/a Products: - PCoIP Soft Client for Windows - PCoIP Soft Client for Linux - PCoIP Soft Client for OSX Problem Types: Out-Of-Bounds Write Description: An out of bounds write in Teradici PCoIP soft client versions prior to version 20.10.1 could allow an attacker to remotely execute code. Additional Analyst Notes: - CVE Program Container: References: - https://advisory.teradici.com/security-advisories/75/
CVE ID: CVE-2021-25690 State: PUBLISHED Published: 2021-02-11T15:19:57 Last Updated: 2024-08-03T20:11:28.171Z Vendors: n/a Products: - PCoIP Soft Client for Windows - PCoIP Soft Client for Linux - PCoIP Soft Client for OSX Problem Types: Null Pointer Dereference Description: A null pointer dereference in Teradici PCoIP Soft Client versions prior to 20.07.3 could allow an attacker to crash the software. Additional Analyst Notes: - CVE Program Container: References: - https://advisory.teradici.com/security-advisories/74/
CVE ID: CVE-2021-25692 State: PUBLISHED Published: 2021-04-06T19:21:50 Last Updated: 2024-08-03T20:11:27.990Z Vendors: n/a Products: Teradici PCoIP Connection Manager and Security Gateway Problem Types: Information Disclosure Description: Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3. Additional Analyst Notes: - CVE Program Container: References: - https://advisory.teradici.com/security-advisories/77/
CVE ID: CVE-2021-25693 State: PUBLISHED Published: 2021-05-13T13:20:52 Last Updated: 2024-08-03T20:11:27.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: An attacker may cause a Denial of Service (DoS) in multiple versions of Teradici PCoIP Agent via a null pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://advisory.teradici.com/security-advisories/79/
CVE ID: CVE-2021-25694 State: PUBLISHED Published: 2021-05-13T12:49:17 Last Updated: 2024-08-03T20:11:27.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teradici PCoIP Graphics Agent for Windows prior to 21.03 does not validate NVENC.dll. An attacker could replace the .dll and redirect pixels elsewhere. Additional Analyst Notes: - CVE Program Container: References: - https://advisory.teradici.com/security-advisories/80/
CVE ID: CVE-2021-25695 State: PUBLISHED Published: 2021-07-21T12:33:10 Last Updated: 2024-08-03T20:11:27.911Z Vendors: n/a Products: - PCoIP Agent for Windows Problem Types: CWE-782 Description: The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attacker to elevate privileges by changing the flow of program execution within the vHub driver. Additional Analyst Notes: - CVE Program Container: References: - https://advisory.teradici.com/security-advisories/100/
CVE ID: CVE-2021-25698 State: PUBLISHED Published: 2021-07-21T12:26:55 Last Updated: 2024-08-03T20:11:28.054Z Vendors: n/a Products: - PCoIP Standard Agent - PCoIP Graphics Agent - PCoIP Software Client Problem Types: CWE-426 Description: The OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0 was compiled without the no-autoload-config option, which allowed an attacker to elevate to the privileges of the running process via placing a specially crafted dll in a build configuration directory. Additional Analyst Notes: - CVE Program Container: References: - https://advisory.teradici.com/security-advisories/102/
CVE ID: CVE-2021-25699 State: PUBLISHED Published: 2021-07-21T12:26:47 Last Updated: 2024-08-03T20:11:27.997Z Vendors: n/a Products: - PCoIP Standard Agent - PCoIP Graphics Agent - PCoIP Software Client Problem Types: CWE-426 Description: The OpenSSL component of the Teradici PCoIP Software Client prior to version 21.07.0 was compiled without the no-autoload-config option, which allowed an attacker to elevate to the privileges of the running process via placing a specially crafted dll in a build configuration directory. Additional Analyst Notes: - CVE Program Container: References: - https://advisory.teradici.com/security-advisories/102/
CVE ID: CVE-2021-25701 State: PUBLISHED Published: 2021-07-21T12:37:39 Last Updated: 2024-08-03T20:11:27.862Z Vendors: n/a Products: - PCoIP Software Client Problem Types: CWE-400 Description: The fUSBHub driver in the PCoIP Software Client prior to version 21.07.0 had an error in object management during the handling of a variety of IOCTLs, which allowed an attacker to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://advisory.teradici.com/security-advisories/103/
CVE ID: CVE-2021-25735 State: PUBLISHED Published: 2021-09-06T11:32:00.853331Z Last Updated: 2024-09-16T23:40:25.902Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-372 Description: A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields. Additional Analyst Notes: - CVE Program Container: Refer
dating Admission Webhook does not observe some previous fields. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/g/kubernetes-security-announce/c/FKAGqT4jx9Y - https://github.com/kubernetes/kubernetes/issues/100096
CVE ID: CVE-2021-25736 State: PUBLISHED Published: 2023-10-30T02:19:48.916Z Last Updated: 2025-06-12T14:42:12.231Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Kubernetes Products: Kubernetes Description: Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress[].ip” field. Clusters where the LoadBalancer controller sets the “status.loadBalancer.ingress[].ip” field are unaffected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github
are unaffected. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/kubernetes/kubernetes/pull/99958 - https://groups.google.com/g/kubernetes-security-announce/c/lIoOPObO51Q/m/O15LOazPAgAJ - https://security.netapp.com/advisory/ntap-20231221-0003/
CVE ID: CVE-2021-25737 State: PUBLISHED Published: 2021-09-06T11:32:01.989085Z Last Updated: 2024-09-16T21:04:34.209Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-184 Description: A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/g/kubernetes-security-announce/c/xAiN3924thY - https://github.c
ogram Container: References: - https://groups.google.com/g/kubernetes-security-announce/c/xAiN3924thY - https://github.com/kubernetes/kubernetes/issues/102106 - https://security.netapp.com/advisory/ntap-20211004-0004/
CVE ID: CVE-2021-25738 State: PUBLISHED Published: 2021-10-11T18:55:10.100025Z Last Updated: 2024-09-16T19:52:29.851Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Kubernetes Products: Kubernetes Java Client Problem Types: CWE-20 Description: Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/g/kubernetes-security-announce/c/K_pOK2WbAJk - https://github.com/kubernetes-client/java/issues/1698 - http://www.openwall.com/lists/oss-security/2022/08/23/2
CVE ID: CVE-2021-25740 State: PUBLISHED Published: 2021-09-20T17:05:18.065542Z Last Updated: 2024-09-16T19:30:45.241Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-441 Description: A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/g/kubernetes-security-announce/c/WYE9ptrhSLE - https://github.com/kubernetes/kubernetes/issues/103675 - https://security.netapp.com/advisory/ntap-20211014-0001/
CVE ID: CVE-2021-25741 State: PUBLISHED Published: 2021-09-20T17:05:21.097904Z Last Updated: 2024-09-16T23:26:06.351Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-20 Description: A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://groups.google.com/g/kubernetes-security-announce/c/nyfdhK24H7s - https://github.com/kubernetes/kubernetes/issues/104980 - https://
gle.com/g/kubernetes-security-announce/c/nyfdhK24H7s - https://github.com/kubernetes/kubernetes/issues/104980 - https://security.netapp.com/advisory/ntap-20211008-0006/
CVE ID: CVE-2021-25742 State: PUBLISHED Published: 2021-10-29T04:05:10.713250Z Last Updated: 2024-09-16T23:06:12.392Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Kubernetes Products: Kubernetes ingress-nginx Problem Types: CWE-20 Description: A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/g/kubernetes-security-announce/c/mT4JJxi9tQY - https://github.com/kubernetes/ingress-nginx/issues/7837 - https://security.netapp.com/advisory/ntap-20211
/mT4JJxi9tQY - https://github.com/kubernetes/ingress-nginx/issues/7837 - https://security.netapp.com/advisory/ntap-20211203-0001/
CVE ID: CVE-2021-25743 State: PUBLISHED Published: 2022-01-07T00:00:12.399751Z Last Updated: 2024-09-16T23:51:24.348Z Severity: LOW (CVSS 3 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-150 Description: kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/101695 - https://security.netapp.com/advisory/ntap-20220217-0003/
CVE ID: CVE-2021-25745 State: PUBLISHED Published: 2022-05-06T00:50:14.042796Z Last Updated: 2024-09-16T18:24:11.711Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Kubernetes Products: Kubernetes ingress-nginx Problem Types: CWE-20 Description: A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the spec.rules[].http.paths[].path field of an Ingress object (in the networking.k8s.io or extensions API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster. Additional Analyst Notes: - CVE Program Container
nfiguration, that credential has access to all secrets in the cluster. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/g/kubernetes-security-announce/c/7vQrpDZeBlc - https://github.com/kubernetes/ingress-nginx/issues/8502 - https://security.netapp.com/advisory/ntap-20220609-0006/
CVE ID: CVE-2021-25746 State: PUBLISHED Published: 2022-05-06T00:50:15.541972Z Last Updated: 2024-09-17T03:48:11.881Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Kubernetes Products: Kubernetes ingress-nginx Problem Types: CWE-20 Description: A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use .metadata.annotations in an Ingress object (in the networking.k8s.io or extensions API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster. Additional Analyst Notes: - CVE Program Container: References: - htt
redential has access to all secrets in the cluster. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/g/kubernetes-security-announce/c/hv2-SfdqcfQ - https://github.com/kubernetes/ingress-nginx/issues/8503 - https://security.netapp.com/advisory/ntap-20220609-0006/
CVE ID: CVE-2021-25748 State: PUBLISHED Published: 2023-05-24T00:00:00 Last Updated: 2025-01-16T21:23:39.341Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Kubernetes Products: Kubernetes ingress-nginx Problem Types: CWE-20 Description: A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the `spec.rules[].http.paths[].path` field of an Ingress object (in the `networking.k8s.io` or `extensions` API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster. A
the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://groups.google.com/g/kubernetes-security-announce/c/avaRYa9c7I8 - https://github.com/kubernetes/ingress-nginx/issues/8686
CVE ID: CVE-2021-25749 State: PUBLISHED Published: 2023-05-24T00:00:00 Last Updated: 2025-01-16T21:21:12.621Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Kubernetes Products: Kubernetes Problem Types: CWE-284 Description: Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://groups.google.com/g/kubernetes-security-announce/c/qqTZgulISzA
CVE ID: CVE-2021-25755 State: PUBLISHED Published: 2021-02-03T15:13:49 Last Updated: 2024-08-03T20:11:27.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/ - https://jay-from-future.github.io/cve/2021/04/02/code-with-me-cve.html
CVE ID: CVE-2021-25756 State: PUBLISHED Published: 2021-02-03T15:14:55 Last Updated: 2024-08-03T20:11:28.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
CVE ID: CVE-2021-25757 State: PUBLISHED Published: 2021-02-03T15:17:03 Last Updated: 2024-08-03T20:11:27.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Hub before 2020.1.12629, an open redirect was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
CVE ID: CVE-2021-25758 State: PUBLISHED Published: 2021-02-03T15:16:13 Last Updated: 2024-08-03T20:11:27.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
CVE ID: CVE-2021-25759 State: PUBLISHED Published: 2021-02-03T15:17:43 Last Updated: 2024-08-03T20:11:28.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
CVE ID: CVE-2021-25760 State: PUBLISHED Published: 2021-02-03T15:18:26 Last Updated: 2024-08-03T20:11:28.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
CVE ID: CVE-2021-25761 State: PUBLISHED Published: 2021-02-03T15:21:13 Last Updated: 2024-08-03T20:11:28.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
CVE ID: CVE-2021-25762 State: PUBLISHED Published: 2021-02-03T15:24:26 Last Updated: 2024-08-03T20:11:28.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
CVE ID: CVE-2021-25763 State: PUBLISHED Published: 2021-02-03T15:22:06 Last Updated: 2024-08-03T20:11:27.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
CVE ID: CVE-2021-25764 State: PUBLISHED Published: 2021-03-18T19:20:02 Last Updated: 2024-08-03T20:11:27.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains PhpStorm before 2020.3, source code could be added to debug logs. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
CVE ID: CVE-2021-25765 State: PUBLISHED Published: 2021-02-03T15:26:18 Last Updated: 2024-08-03T20:11:28.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
CVE ID: CVE-2021-25766 State: PUBLISHED Published: 2021-02-03T15:28:37 Last Updated: 2024-08-03T20:11:27.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
CVE ID: CVE-2021-25767 State: PUBLISHED Published: 2021-02-03T15:29:04 Last Updated: 2024-08-03T20:11:27.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/
CVE ID: CVE-2021-25768 State: PUBLISHED Published: 2021-02-03T15:29:50 Last Updated: 2024-08-03T20:11:28.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/