Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-46039 State: PUBLISHED Published: 2022-01-06T00:00:00 Last Updated: 2024-08-04T04:54:31.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shift_chunk_offsets.part function, which causes a Denial of Service (context-dependent). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1999 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-46040 State: PUBLISHED Published: 2022-01-06T00:00:00 Last Updated: 2024-08-04T04:54:31.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the finplace_shift_moov_meta_offsets function, which causes a Denial of Servie (context-dependent). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2003 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-46041 State: PUBLISHED Published: 2022-01-06T00:00:00 Last Updated: 2024-08-04T04:54:31.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Segmentation Fault Vulnerability exists in GPAC 1.0.1 via the co64_box_new function, which causes a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2004 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-46042 State: PUBLISHED Published: 2022-01-06T00:00:00 Last Updated: 2024-08-04T04:54:31.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the _fseeko function, which causes a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2002 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-46043 State: PUBLISHED Published: 2022-01-06T00:00:00 Last Updated: 2024-08-04T04:54:31.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Pointer Dereference Vulnerability exits in GPAC 1.0.1 in the gf_list_count function, which causes a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2001 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-46044 State: PUBLISHED Published: 2022-01-06T00:00:00 Last Updated: 2024-08-04T04:54:31.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1via ShiftMetaOffset.isra, which causes a Denial of Service (context-dependent). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2006 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-46045 State: PUBLISHED Published: 2022-01-07T00:00:00 Last Updated: 2024-08-04T04:54:31.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service (context-dependent). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2007 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-46046 State: PUBLISHED Published: 2022-01-07T00:00:00 Last Updated: 2024-08-04T04:54:31.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gf_isom_box_size function, which could cause a Denial of Service (context-dependent). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2005 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-46047 State: PUBLISHED Published: 2022-01-07T00:00:00 Last Updated: 2024-08-04T04:54:31.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_hinter_finalize function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2008 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-46048 State: PUBLISHED Published: 2022-01-07T22:04:17 Last Updated: 2024-08-04T04:54:31.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunctions. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WebAssembly/binaryen/issues/4412
CVE ID: CVE-2021-46049 State: PUBLISHED Published: 2022-01-07T00:00:00 Last Updated: 2024-08-04T04:54:31.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf_fileio_check function, which could cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2013 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-46050 State: PUBLISHED Published: 2022-01-07T22:10:09 Last Updated: 2024-08-04T04:54:31.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stack Overflow vulnerability exists in Binaryen 103 via the printf_common function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WebAssembly/binaryen/issues/4391
CVE ID: CVE-2021-46051 State: PUBLISHED Published: 2022-01-07T00:00:00 Last Updated: 2024-08-04T04:54:31.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media_IsSelfContained function, which could cause a Denial of Service. . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2011 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-46052 State: PUBLISHED Published: 2022-01-07T22:15:38 Last Updated: 2024-08-04T04:54:31.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WebAssembly/binaryen/issues/4411
CVE ID: CVE-2021-46053 State: PUBLISHED Published: 2022-01-07T22:18:39 Last Updated: 2024-08-04T04:54:31.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Denial of Service vulnerability exists in Binaryen 103. The program terminates with signal SIGKILL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WebAssembly/binaryen/issues/4392
CVE ID: CVE-2021-46054 State: PUBLISHED Published: 2022-01-07T22:22:31 Last Updated: 2024-08-04T04:54:31.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow*). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WebAssembly/binaryen/issues/4410
CVE ID: CVE-2021-46055 State: PUBLISHED Published: 2022-01-07T22:25:13 Last Updated: 2024-08-04T04:54:31.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow*). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WebAssembly/binaryen/issues/4413
CVE ID: CVE-2021-46058 State: REJECTED Published: 2022-01-07T22:35:08 Last Updated: 2022-01-15T14:47:54 Description: No description available.
CVE ID: CVE-2021-46059 State: REJECTED Published: 2022-01-07T22:39:33 Last Updated: 2022-01-15T15:04:32 Description: No description available.
CVE ID: CVE-2021-46060 State: REJECTED Published: 2022-01-07T22:43:18 Last Updated: 2022-01-15T14:46:21 Description: No description available.
CVE ID: CVE-2021-46061 State: PUBLISHED Published: 2022-01-20T19:18:31 Last Updated: 2024-08-04T04:54:31.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL Injection vulnerability exists in Sourcecodester Computer and Mobile Repair Shop Management system (RSMS) 1.0 via the code parameter in /rsms/ node app. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/RSMS-1.0
CVE ID: CVE-2021-46062 State: PUBLISHED Published: 2022-02-18T19:36:41 Last Updated: 2024-08-04T04:54:31.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: MCMS v5.2.5 was discovered to contain an arbitrary file deletion vulnerability via the component oldFileName. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ming-soft/MCMS/issues/59
CVE ID: CVE-2021-46063 State: PUBLISHED Published: 2022-02-18T19:36:42 Last Updated: 2024-08-04T04:54:31.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ming-soft/MCMS/issues/59
CVE ID: CVE-2021-46064 State: PUBLISHED Published: 2022-03-23T17:05:38 Last Updated: 2024-08-04T04:54:31.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 (in 32bit version of the binary). The vulnerability triggers when the user opens malicious .tiff image. Additional Analyst Notes: - CVE Program Container: References: - http://irfanview.com - http://irfan.com - https://www.irfanview.info/main_history.htm
CVE ID: CVE-2021-46065 State: PUBLISHED Published: 2022-01-27T15:29:46 Last Updated: 2024-08-04T05:02:10.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine ServiceDesk Plus 11.3 Build 11306 allows an attackers to inject arbitrary JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/service-desk/on-premises/readme.html - https://github.com/corrupted-brain/Findings/blob/main/ManageEngine%20XSS.md
CVE ID: CVE-2021-46067 State: PUBLISHED Published: 2022-01-06T15:46:18 Last Updated: 2024-08-04T05:02:10.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover. Additional Analyst Notes: - CVE Program Container: References: - https://www.plsanu.com/vehicle-service-management-system-multiple-cookie-stealing-leads-to-full-account-takeover - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover
CVE ID: CVE-2021-46068 State: PUBLISHED Published: 2022-01-06T15:46:53 Last Updated: 2024-08-04T05:02:10.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss - https://github.com/plsanu/Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS
CVE ID: CVE-2021-46069 State: PUBLISHED Published: 2022-01-06T15:30:49 Last Updated: 2024-08-04T05:02:10.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss - https://github.com/plsanu/Vehicle-Service-Management-System-Mechanic-List-Stored-Cross-Site-Scripting-XSS
CVE ID: CVE-2021-46070 State: PUBLISHED Published: 2022-01-06T15:29:47 Last Updated: 2024-08-04T05:02:10.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service Requests Section in login panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.plsanu.com/vehicle-service-management-system-service-requests-stored-cross-site-scripting-xss - https://github.com/plsanu/Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS
CVE ID: CVE-2021-46071 State: PUBLISHED Published: 2022-01-06T15:27:36 Last Updated: 2024-08-04T05:02:10.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss - https://github.com/plsanu/Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS
CVE ID: CVE-2021-46072 State: PUBLISHED Published: 2022-01-06T15:26:29 Last Updated: 2024-08-04T05:02:10.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss - https://github.com/plsanu/Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS
CVE ID: CVE-2021-46073 State: PUBLISHED Published: 2022-01-06T15:25:03 Last Updated: 2024-08-04T05:02:10.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss - https://github.com/plsanu/Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS
CVE ID: CVE-2021-46074 State: PUBLISHED Published: 2022-01-06T15:23:10 Last Updated: 2024-08-04T05:02:10.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss - https://github.com/plsanu/Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS
CVE ID: CVE-2021-46075 State: PUBLISHED Published: 2022-01-06T15:02:19 Last Updated: 2024-08-04T05:02:10.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.plsanu.com/vehicle-service-management-system-multiple-privilege-escalation-leads-to-crud-operations - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Privilege-Escalation-Leads-to-CRUD-Operations
CVE ID: CVE-2021-46076 State: PUBLISHED Published: 2022-01-06T14:53:16 Last Updated: 2024-08-04T05:02:10.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution
CVE ID: CVE-2021-46078 State: PUBLISHED Published: 2022-01-06T15:57:10 Last Updated: 2024-08-04T05:02:10.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-stored-cross-site-scripting - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting
CVE ID: CVE-2021-46079 State: PUBLISHED Published: 2022-01-06T15:59:57 Last Updated: 2024-08-04T05:02:10.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection
CVE ID: CVE-2021-46080 State: PUBLISHED Published: 2022-01-06T14:47:43 Last Updated: 2024-08-04T05:02:10.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.plsanu.com/vehicle-service-management-system-multiple-cross-site-request-forgery-csrf-leads-to-stored-cross-site-scripting-xss - https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS
CVE ID: CVE-2021-46082 State: PUBLISHED Published: 2022-02-18T19:54:13 Last Updated: 2024-08-04T05:02:10.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol gateways were discovered to contain a memory leak which allows attackers to cause a Denial of Service (DoS) via crafted packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.moxa.com/en/support/product-support/security-advisory/mgate-5109-5101-protocol-gateways-vulnerability - https://www.moxa.com/en/support/product-support/security-advisory/tn-5900-secure-routers-vulnerability
CVE ID: CVE-2021-46083 State: PUBLISHED Published: 2022-01-25T15:48:41 Last Updated: 2024-08-04T05:02:10.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting (XSS) via the input box of the statistical code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chenniqing/uscat/issues/1
CVE ID: CVE-2021-46084 State: PUBLISHED Published: 2022-01-25T15:46:02 Last Updated: 2024-08-04T05:02:11.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: uscat, as of 2021-12-28, is vulnerable to Cross Site Scripting (XSS) via "close registration information" input box. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chenniqing/uscat/issues/2
CVE ID: CVE-2021-46085 State: PUBLISHED Published: 2022-01-25T15:52:24 Last Updated: 2024-08-04T05:02:10.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: OneBlog <= 2.2.8 is vulnerable to Insecure Permissions. Low level administrators can delete high-level administrators beyond their authority. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhangyd-c/OneBlog/issues/29
CVE ID: CVE-2021-46086 State: PUBLISHED Published: 2022-01-25T15:42:23 Last Updated: 2024-08-04T05:02:10.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: xzs-mysql >= t3.4.0 is vulnerable to Insecure Permissions. The front end of this open source system is an online examination system. There is an unsafe vulnerability in the functional method of submitting examination papers. An attacker can use burpuite to modify parameters in the packet to destroy real data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mindskip/xzs-mysql/issues/327
CVE ID: CVE-2021-46087 State: PUBLISHED Published: 2022-01-25T15:56:49 Last Updated: 2024-08-04T05:02:10.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: In jfinal_cms >= 5.1 0, there is a storage XSS vulnerability in the background system of CMS. Because developers do not filter the parameters submitted by the user input form, any user with background permission can affect the system security by entering malicious code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jflyfox/jfinal_cms/issues/19
CVE ID: CVE-2021-46088 State: PUBLISHED Published: 2022-01-27T15:43:42 Last Updated: 2024-08-04T05:02:10.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with the "Zabbix Admin" role is able to run custom shell script on the application server in the context of the application user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/paalbra/zabbix-zbxsec-7
CVE ID: CVE-2021-46089 State: PUBLISHED Published: 2022-01-25T14:14:17 Last Updated: 2024-08-04T05:02:10.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jeecgboot/jeecg-boot/issues/3331
CVE ID: CVE-2021-46093 State: PUBLISHED Published: 2022-02-01T18:36:51 Last Updated: 2024-08-04T05:02:10.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: eliteCMS v1.0 is vulnerable to Insecure Permissions via manage_uploads.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jsjbcyber/bug_report/blob/main/bug_a
CVE ID: CVE-2021-46097 State: PUBLISHED Published: 2022-01-27T17:21:43 Last Updated: 2024-08-04T05:02:10.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolphinphp v1.5.0 contains a remote code execution vulnerability in /application/common.php#action_log Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/w4nd3r-hya/784a86dda91bdcb3071892e56aacdee2
CVE ID: CVE-2021-46101 State: PUBLISHED Published: 2022-01-31T12:35:37 Last Updated: 2024-08-04T05:02:10.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Git for windows through 2.34.1 when using git pull to update the local warehouse, git.cmd can be run directly. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0xADY/git_rce
CVE ID: CVE-2021-46102 State: PUBLISHED Published: 2022-01-27T17:44:59 Last Updated: 2024-08-04T05:02:10.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.st_value is read directly from ELF file without checking. If the sym.st_value is rather large, an integer overflow is triggered while calculating the variable "addr" via "addr = (sym.st_value + refd_pa) as u64"; Additional Analyst Notes: - CVE Program Container: References: - https://blocksecteam.medium.com/new-integer-overflow-bug-discovered-in-solana-rbpf-7729717159ee - https://github.com/sol
https://blocksecteam.medium.com/new-integer-overflow-bug-discovered-in-solana-rbpf-7729717159ee - https://github.com/solana-labs/rbpf/blob/c14764850f0b83b58aa013248eaf6d65836c1218/src/elf.rs#L609-L630 - https://github.com/solana-labs/rbpf/pull/200 - https://github.com/solana-labs/rbpf/pull/236