Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-32287 State: PUBLISHED Published: 2021-09-20T15:26:44 Last Updated: 2024-08-03T23:17:29.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in heif through v3.6.2. A global-buffer-overflow exists in the function HevcDecoderConfigurationRecord::getPicWidth() located in hevcdecoderconfigrecord.cpp. It allows an attacker to cause code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nokiatech/heif/issues/86
CVE ID: CVE-2021-32288 State: PUBLISHED Published: 2021-09-20T15:26:43 Last Updated: 2024-08-03T23:17:29.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in heif through v3.6.2. A global-buffer-overflow exists in the function HevcDecoderConfigurationRecord::getPicHeight() located in hevcdecoderconfigrecord.cpp. It allows an attacker to cause code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nokiatech/heif/issues/87
CVE ID: CVE-2021-32289 State: PUBLISHED Published: 2021-09-20T15:26:43 Last Updated: 2024-08-03T23:17:29.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in heif through through v3.6.2. A NULL pointer dereference exists in the function convertByteStreamToRBSP() located in nalutil.cpp. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nokiatech/heif/issues/85
CVE ID: CVE-2021-32292 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T17:58:39.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/json-c/json-c/issues/654 - https://www.debian.org/security/2023/dsa-5486 - https://security.netapp.com/advisory/ntap-20230929-0010/
CVE ID: CVE-2021-32294 State: PUBLISHED Published: 2021-09-20T15:26:45 Last Updated: 2024-08-03T23:17:29.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libgig through 20200507. A heap-buffer-overflow exists in the function RIFF::List::GetSubList located in RIFF.cpp. It allows an attacker to cause code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/drbye78/libgig/issues/1
CVE ID: CVE-2021-32297 State: PUBLISHED Published: 2021-09-20T15:26:51 Last Updated: 2024-08-03T23:17:29.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LIEF through 0.11.4. A heap-buffer-overflow exists in the function main located in pe_reader.c. It allows an attacker to cause code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lief-project/LIEF/issues/449
CVE ID: CVE-2021-32298 State: PUBLISHED Published: 2021-09-20T15:27:20 Last Updated: 2024-08-03T23:17:29.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libiff through 20190123. A global-buffer-overflow exists in the function IFF_errorId located in error.c. It allows an attacker to cause code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/svanderburg/libiff/issues/10
CVE ID: CVE-2021-32299 State: PUBLISHED Published: 2021-09-20T15:26:55 Last Updated: 2024-08-03T23:17:29.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in pbrt through 20200627. A stack-buffer-overflow exists in the function pbrt::ParamSet::ParamSet() located in paramset.h. It allows an attacker to cause code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mmp/pbrt-v3/issues/296
CVE ID: CVE-2021-32302 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T17:35:05.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in IRZ Electronics RUH2 GSM router allows attacker to obtain sensitive information via the Upload File parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://irz.com - http://ruh2.com - https://s4nsec.github.io/2023/02/20/RUH2-GSM-Router-XSS-vulnerabilities.html
CVE ID: CVE-2021-32305 State: PUBLISHED Published: 2021-05-18T16:11:10 Last Updated: 2024-08-03T23:17:29.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/websvnphp/websvn/pull/142 - http://packetstormsecurity.com/files/163225/Websvn-2.6.0-Remote-Code-Execution.html
CVE ID: CVE-2021-32399 State: PUBLISHED Published: 2021-05-10T21:19:16 Last Updated: 2024-08-03T23:17:29.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/e2cb6b891ad2b8caa9131e3be70f45243df82a80 - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e2cb6b891ad2b8caa9131e3be70f45243df82a80 - http://www.openwall.com/lists/oss-security/2021/05/11/2 - https://security.netapp.com/advisory/ntap-20210622-0006/ - https://lists.debian.org/deb
ists/oss-security/2021/05/11/2 - https://security.netapp.com/advisory/ntap-20210622-0006/ - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
CVE ID: CVE-2021-32402 State: PUBLISHED Published: 2021-05-17T12:46:20 Last Updated: 2024-08-03T23:17:29.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of validation and insecure configurations in inputs and modules. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=X2cU9MBN2Ys
CVE ID: CVE-2021-32403 State: PUBLISHED Published: 2021-05-17T12:46:28 Last Updated: 2024-08-03T23:17:29.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of security mechanisms for token protection and unsafe inputs and modules. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=1Ed-2xBFG3M - http://packetstormsecurity.com/files/163023/Intelbras-Router-RF-301K-Cross-Site-Request-Forgery.html
CVE ID: CVE-2021-32415 State: PUBLISHED Published: 2022-12-13T00:00:00.000Z Last Updated: 2025-04-22T20:00:43.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: EXEMSI MSI Wrapper Versions prior to 10.0.50 and at least since version 6.0.91 will introduce a local privilege escalation vulnerability in installers it creates. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://msi.com - http://exemsi.com - https://improsec.com/tech-blog/privilege-escalation-vulnerability-in-ninjarmm
CVE ID: CVE-2021-32419 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-18T19:10:30.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Schism Tracker v20200412 fixed in v.20200412 allows attacker to obtain sensitive information via the fmt_mtm_load_song function in fmt/mtm.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/schismtracker/schismtracker/issues/249 - https://github.com/schismtracker/schismtracker/commit/1e2cc389a2a058fd13d99460c11115a6f7f7a6a4
CVE ID: CVE-2021-32420 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-04T16:06:33.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: dpic 2021.01.01 has a Heap-based Buffer Overflow in thestorestring function in dpic.y. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/aplevich/dpic/-/issues/5 - https://gitlab.com/aplevich/dpic/-/commit/d317e4066c17f9ceb359b3af13264c32f6fb43cf
CVE ID: CVE-2021-32421 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T20:19:16.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: dpic 2021.01.01 has a Heap Use-After-Free in thedeletestringbox() function in dpic.y. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/aplevich/dpic/-/commit/d317e4066c17f9ceb359b3af13264c32f6fb43cf - https://gitlab.com/aplevich/dpic/-/issues/7
CVE ID: CVE-2021-32422 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T18:21:46.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: dpic 2021.01.01 has a Global buffer overflow in theyylex() function in main.c and reads out of the bound array. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.com/aplevich/dpic/-/commit/d317e4066c17f9ceb359b3af13264c32f6fb43cf - https://gitlab.com/aplevich/dpic/-/issues/6
CVE ID: CVE-2021-32424 State: PUBLISHED Published: 2021-06-17T21:49:12 Last Updated: 2024-08-03T23:17:29.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized changes to an affected router via a specially crafted web page. If an authenticated user were to interact with a malicious web page it could allow for a complete takeover of the router. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Galapag0s/Trendnet_TW100-S4W1CA/blob/main/writeup_CSRF.txt
CVE ID: CVE-2021-32426 State: PUBLISHED Published: 2021-06-17T21:49:26 Last Updated: 2024-08-03T23:17:29.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the "echo" command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Galapag0s/Trendnet_TW100-S4W1CA/blob/main/writeup_XSS.txt
CVE ID: CVE-2021-32428 State: PUBLISHED Published: 2022-06-30T23:20:33 Last Updated: 2024-08-03T23:17:29.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in viaviwebtech Android EBook App (Books App, PDF, ePub, Online Book Reading, Download Books) 10 via the author_id parameter to api.php. Additional Analyst Notes: - CVE Program Container: References: - https://owasp.org/www-community/attacks/Blind_SQL_Injection - https://codecanyon.net/user/viaviwebtech - https://codecanyon.net/item/android-ebook-app-with-material-design/21680614 - https://veysel-xan.com/CVE-2021-32428.txt
CVE ID: CVE-2021-32434 State: PUBLISHED Published: 2022-03-10T14:50:25 Last Updated: 2024-08-03T23:17:29.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: abcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculate_beam at draw.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/leesavide/abcm2ps/issues/83 - https://github.com/leesavide/abcm2ps/commit/2f56e1179cab6affeb8afa9d6c324008fe40d8e3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTF4FXCW22FFB5HNQO3GK3F4FFBLTZKE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/m
CW22FFB5HNQO3GK3F4FFBLTZKE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6333SXWMES3K22DBAOAW34G6EU6WIJEY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EVGJH4HMXI3TWMHQJQCG3M7KSXJWJM7R/ - https://lists.debian.org/debian-lts-announce/2022/04/msg00015.html
CVE ID: CVE-2021-32435 State: PUBLISHED Published: 2022-03-10T14:50:26 Last Updated: 2024-08-03T23:17:29.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/leesavide/abcm2ps/issues/84 - https://github.com/leesavide/abcm2ps/commit/3169ace6d63f6f517a64e8df0298f44a490c4a15 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTF4FXCW22FFB5HNQO3GK3F4FFBLTZKE/ - https://lists.fedoraproject.or
st/package-announce%40lists.fedoraproject.org/message/YTF4FXCW22FFB5HNQO3GK3F4FFBLTZKE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6333SXWMES3K22DBAOAW34G6EU6WIJEY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EVGJH4HMXI3TWMHQJQCG3M7KSXJWJM7R/ - https://lists.debian.org/debian-lts-announce/2022/04/msg00015.html
CVE ID: CVE-2021-32436 State: PUBLISHED Published: 2022-03-10T14:50:28 Last Updated: 2024-08-03T23:17:29.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read in the function write_title() in subs.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/leesavide/abcm2ps/commit/2f56e1179cab6affeb8afa9d6c324008fe40d8e3 - https://github.com/leesavide/abcm2ps/issues/85 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTF4FXCW22FFB5HNQO3GK3F4FFBLTZKE/ - https://lists.fedoraproject.org
t/package-announce%40lists.fedoraproject.org/message/YTF4FXCW22FFB5HNQO3GK3F4FFBLTZKE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6333SXWMES3K22DBAOAW34G6EU6WIJEY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EVGJH4HMXI3TWMHQJQCG3M7KSXJWJM7R/ - https://lists.debian.org/debian-lts-announce/2022/04/msg00015.html
CVE ID: CVE-2021-32437 State: PUBLISHED Published: 2021-08-11T19:48:36 Last Updated: 2024-08-03T23:17:29.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gf_hinter_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1770 - https://github.com/gpac/gpac/commit/1653f31cf874eb6df964bea88d58d8e9b98b485e
CVE ID: CVE-2021-32438 State: PUBLISHED Published: 2021-08-11T19:50:14 Last Updated: 2024-08-03T23:17:29.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1769 - https://github.com/gpac/gpac/commit/00194f5fe462123f70b0bae7987317b52898b868
CVE ID: CVE-2021-32439 State: PUBLISHED Published: 2021-08-11T19:53:26 Last Updated: 2024-08-03T23:17:29.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the stbl_AppendSize function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1774 - https://github.com/gpac/gpac/commit/77ed81c069e10b3861d88f72e1c6be1277ee7eae
CVE ID: CVE-2021-32440 State: PUBLISHED Published: 2021-08-11T19:57:39 Last Updated: 2024-08-03T23:17:29.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Media_RewriteODFrame function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1772 - https://github.com/gpac/gpac/commit/f0ba83717b6e4d7a15a1676d1fe06152e199b011
CVE ID: CVE-2021-32441 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-19T15:11:04.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Exponent-CMS v.2.6.0 fixed in 2.7.0 allows attackers to gain access to sensitive information via the selectValue function in the expConfig class. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/exponentcms/exponent-cms/issues/1542 - https://github.com/pang0lin/CVEproject/blob/main/ExponentCMS_v2.6.0_sqli.md
CVE ID: CVE-2021-32453 State: PUBLISHED Published: 2021-05-17T16:43:20.931715Z Last Updated: 2024-09-16T17:03:17.777Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: SITEL Products: CAP/PRX Problem Types: CWE-306 Description: SITEL CAP/PRX firmware version 5.2.01 allows an attacker with access to the local network, to access via HTTP to the internal configuration database of the device without any authentication. An attacker could exploit this vulnerability in order to obtain information about the device´s configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/sitel-capprx-inform
Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/sitel-capprx-information-exposure
CVE ID: CVE-2021-32454 State: PUBLISHED Published: 2021-05-17T17:36:30.615006Z Last Updated: 2024-09-16T20:26:17.258Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SITEL Products: CAP/PRX Problem Types: CWE-798 Description: SITEL CAP/PRX firmware version 5.2.01 makes use of a hardcoded password. An attacker with access to the device could modify these credentials, leaving the administrators of the device without access. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe-cert.es/en/early-warning/ics-advisories/sitel-capprx-hardcoded-credentials
CVE ID: CVE-2021-32455 State: PUBLISHED Published: 2021-05-17T16:30:34.125127Z Last Updated: 2024-09-16T19:14:45.136Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: SITEL Products: CAP/PRX Problem Types: CWE-400 Description: SITEL CAP/PRX firmware version 5.2.01, allows an attacker with access to the device´s network to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending HTTP requests massively. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe-cert.es/en/early-warning/ics-advisories/sitel-capprx-vulnerable-denial-service-attack
CVE ID: CVE-2021-32456 State: PUBLISHED Published: 2021-05-17T17:58:34.959193Z Last Updated: 2024-09-17T04:14:29.511Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: SITEL Products: CAP/PRX Problem Types: CWE-319 Description: SITEL CAP/PRX firmware version 5.2.01 allows an attacker with access to the local network of the device to obtain the authentication passwords by analysing the network traffic. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso-sci/sitel-capprx-cleartext-transmission-sensitive-information
CVE ID: CVE-2021-32457 State: PUBLISHED Published: 2021-05-26T13:45:17 Last Updated: 2024-08-03T23:17:29.504Z Vendors: Trend Micro Products: Trend Micro Home Network Security Problem Types: iotcl Stack-Based Buffer Overflow Description: Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow an attacker to issue a specially crafted iotcl to escalate privileges on affected devices. An attacker must first obtain the ability to execute low-privileged code on the target device in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendm
o exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10337 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1230
CVE ID: CVE-2021-32458 State: PUBLISHED Published: 2021-05-27T10:34:17 Last Updated: 2024-08-03T23:17:29.560Z Vendors: Trend Micro Products: Trend Micro Home Network Security Problem Types: iotcl Stack-Based Buffer Overflow Description: Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow an attacker to issue a specially crafted iotcl which could lead to code execution on affected devices. An attacker must first obtain the ability to execute low-privileged code on the target device in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpc
e in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10337 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1231
CVE ID: CVE-2021-32459 State: PUBLISHED Published: 2021-05-27T10:42:55 Last Updated: 2024-08-03T23:17:29.470Z Vendors: Trend Micro Products: Trend Micro Home Network Security Problem Types: Hard Coded Password Description: Trend Micro Home Network Security version 6.6.604 and earlier contains a hard-coded password vulnerability in the log collection server which could allow an attacker to use a specially crafted network request to lead to arbitrary authentication. An attacker must first obtain the ability to execute high-privileged code on the target device in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.c
oit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10337 - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1241
CVE ID: CVE-2021-32460 State: PUBLISHED Published: 2021-06-03T10:32:27 Last Updated: 2024-08-03T23:17:29.541Z Vendors: Trend Micro Products: Trend Micro Maxmium Security (Consumer) Problem Types: Improper Access Control Description: The Trend Micro Maximum Security 2021 (v17) consumer product is vulnerable to an improper access control vulnerability in the installer which could allow a local attacker to escalate privileges on a target machine. Please note than an attacker must already have local user privileges and access on the machine to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10336 -
onal Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10336 - https://www.zerodayinitiative.com/advisories/ZDI-21-603/
CVE ID: CVE-2021-32461 State: PUBLISHED Published: 2021-07-08T10:54:25 Last Updated: 2024-08-03T23:17:29.514Z Vendors: Trend Micro Products: Trend Micro Password Manager Problem Types: Integer Truncation Priv Escalation Description: Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Integer Truncation Privilege Escalation vulnerability which could allow a local attacker to trigger a buffer overflow and escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://he
stem in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10388 - https://www.zerodayinitiative.com/advisories/ZDI-21-773/