Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-41971 State: PUBLISHED Published: 2021-10-18T14:30:14 Last Updated: 2024-08-04T03:22:25.815Z Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-89 Description: Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL injection when a malicious authenticated user sends an http request with a custom URL. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/rf7292731268c6c6e2196ae1583e32ac7189385364268f8d9215e8e6d%40%3Cdev.superset.apache.org%3E
CVE ID: CVE-2021-41972 State: PUBLISHED Published: 2021-11-12T18:55:13 Last Updated: 2024-08-04T03:22:25.770Z Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-522 Description: Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This information could be accessed in a non-trivial way. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/xpdl2r538o695o7r9gd9qrwqb17bdd3v - https://seclists.org/oss-sec/2021/q4/106
CVE ID: CVE-2021-41973 State: PUBLISHED Published: 2021-11-01T08:35:09 Last Updated: 2024-08-04T03:22:25.568Z Vendors: Apache Software Foundation Products: Apache MINA Problem Types: CWE-835 Description: In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r0b907da9340d5ff4e6c1a4798ef4e79700a668657f27cca8a39e9250%40%3Cdev.mina.apache.org%3E - http://www.openwall.c
hread.html/r0b907da9340d5ff4e6c1a4798ef4e79700a668657f27cca8a39e9250%40%3Cdev.mina.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/11/01/2 - http://www.openwall.com/lists/oss-security/2021/11/01/8 - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2021-41974 State: PUBLISHED Published: 2021-10-08T15:15:41.083582Z Last Updated: 2024-09-17T01:00:56.249Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Tad Products: Tad Book3 Problem Types: CWE-285 Description: Tad Book3 editing book page does not perform identity verification. Remote attackers can use the vulnerability to view and modify arbitrary content of books without permission. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5173-e21ba-1.html
CVE ID: CVE-2021-41975 State: PUBLISHED Published: 2021-10-08T15:15:42.544583Z Last Updated: 2024-09-16T20:46:46.234Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Tad Products: TadTools Problem Types: CWE-285 Description: TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5174-6f1d5-1.html
CVE ID: CVE-2021-41976 State: PUBLISHED Published: 2021-10-08T15:15:44.085596Z Last Updated: 2024-09-17T01:21:37.194Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Tad Products: Uploader Problem Types: CWE-285 Description: Tad Uploader edit book list function is vulnerable to authorization bypass, thus remote attackers can use the function to amend the folder names in the book list without logging in. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5175-a2f8d-1.html
CVE ID: CVE-2021-41977 State: REJECTED Published: N/A Last Updated: 2023-01-04T00:00:00 Description: No description available.
CVE ID: CVE-2021-41978 State: REJECTED Published: N/A Last Updated: 2023-01-04T00:00:00 Description: No description available.
CVE ID: CVE-2021-41979 State: REJECTED Published: N/A Last Updated: 2023-01-04T00:00:00 Description: No description available.
CVE ID: CVE-2021-41980 State: REJECTED Published: N/A Last Updated: 2023-01-04T00:00:00 Description: No description available.
CVE ID: CVE-2021-41981 State: REJECTED Published: N/A Last Updated: 2023-01-04T00:00:00 Description: No description available.
CVE ID: CVE-2021-41982 State: REJECTED Published: N/A Last Updated: 2023-01-04T00:00:00 Description: No description available.
CVE ID: CVE-2021-41983 State: REJECTED Published: N/A Last Updated: 2023-01-04T00:00:00 Description: No description available.
CVE ID: CVE-2021-41984 State: REJECTED Published: N/A Last Updated: 2023-01-04T00:00:00 Description: No description available.
CVE ID: CVE-2021-41985 State: REJECTED Published: N/A Last Updated: 2023-01-04T00:00:00 Description: No description available.
CVE ID: CVE-2021-41986 State: REJECTED Published: N/A Last Updated: 2023-01-04T00:00:00 Description: No description available.
CVE ID: CVE-2021-41987 State: PUBLISHED Published: 2022-03-16T14:44:58 Last Updated: 2024-08-04T03:22:25.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution. The attacker must know the scep_server_name value. This affects RouterOS 6.46.8, 6.47.9, and 6.47.10. Additional Analyst Notes: - CVE Program Container: References: - https://mikrotik.com/download/archive - https://teamt5.org/en/posts/vulnerability-mikrotik-cve-2021-41987/
CVE ID: CVE-2021-41988 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-04-01T14:02:03.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0002.md
CVE ID: CVE-2021-41989 State: PUBLISHED Published: 2023-01-26T00:00:00.000Z Last Updated: 2025-04-01T13:59:27.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0001.md
CVE ID: CVE-2021-41990 State: PUBLISHED Published: 2021-10-18T13:44:50 Last Updated: 2024-08-04T03:22:25.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strongswan/strongswan/releases/tag/5.9.4 - https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-%28cve-2021-41990%29.html - https://www.debian.org/security/2021/dsa-498
an.org/blog/2021/10/18/strongswan-vulnerability-%28cve-2021-41990%29.html - https://www.debian.org/security/2021/dsa-4989 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/ - https://cert-portal.siemens.com/productcert/pdf/ssa-539476.pdf
CVE ID: CVE-2021-41991 State: PUBLISHED Published: 2021-10-18T13:44:25 Last Updated: 2024-08-04T03:22:25.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strongswan/strongswan/releases/tag/5.9.4 - https:
alyst Notes: - CVE Program Container: References: - https://github.com/strongswan/strongswan/releases/tag/5.9.4 - https://www.strongswan.org/blog/2021/10/18/strongswan-vulnerability-%28cve-2021-41991%29.html - https://www.debian.org/security/2021/dsa-4989 - https://lists.debian.org/debian-lts-announce/2021/10/msg00014.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5FJSATD2R2XHTG4P63GCMQ2N7EWKMME5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WQSQ3BEC22NF4NCDZVCT4P3Q2ZIAJXGJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3TQ32JLJO
Q2ZIAJXGJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y3TQ32JLJOBJDB2EJKSX2PBPB5NFG2D4/ - https://cert-portal.siemens.com/productcert/pdf/ssa-539476.pdf
CVE ID: CVE-2021-41992 State: PUBLISHED Published: 2022-04-30T21:15:19 Last Updated: 2024-08-04T03:22:25.674Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: Ping Identity Products: PingID Windows Login Problem Types: CWE-310, CWE-288 Description: A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass. Additional Analyst Notes: - CVE Program Container: References: - https://www.pingidentity.com/en/resources/downloads/pingid.html - https://docs.pingidentity.com/bundle/pingid/page/klc1641469599716.html
CVE ID: CVE-2021-41993 State: PUBLISHED Published: 2022-04-30T21:15:21 Last Updated: 2024-08-04T03:22:25.789Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: Ping Identity Products: PingID Mobile Application Problem Types: CWE-310 Description: A misconfiguration of RSA in PingID Android app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login. Additional Analyst Notes: - CVE Program Container: References: - https://www.pingidentity.com/en/resources/downloads/pingid.html - https://docs.pingidentity.com/bundle/pingid/page/zvy1641459415679.html
CVE ID: CVE-2021-41994 State: PUBLISHED Published: 2022-04-30T21:15:22 Last Updated: 2024-08-04T03:22:25.662Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: Ping Identity Products: PingID Mobile Application Problem Types: CWE-310 Description: A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login. Additional Analyst Notes: - CVE Program Container: References: - https://www.pingidentity.com/en/resources/downloads/pingid.html - https://docs.pingidentity.com/bundle/pingid/page/ejd1642076304199.html
CVE ID: CVE-2021-41995 State: PUBLISHED Published: 2022-06-30T19:25:23 Last Updated: 2024-08-04T03:22:25.641Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: Ping Identity Products: PingID Mac Login Problem Types: CWE-310, CWE-288 Description: A misconfiguration of RSA in PingID Mac Login prior to 1.1 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass. Additional Analyst Notes: - CVE Program Container: References: - https://www.pingidentity.com/en/resources/downloads/pingid.html - https://docs.pingidentity.com/bundle/pingid/page/hnh1653583508549.html
CVE ID: CVE-2021-42000 State: PUBLISHED Published: 2022-02-10T22:30:11 Last Updated: 2024-08-04T03:22:25.779Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Ping Identity Products: PingFederate Problem Types: CWE-285 Description: When a password reset or password change flow with an authentication policy is configured and the adapter in the reset or change policy supports multiple parallel reset flows, an existing user can reset another existing users password. Additional Analyst Notes: - CVE Program Container: References: - https://www.pingidentity.com/en/resources/downloads/pingfederate.html - https://docs.pingidentity.com/bundle/pingfederate-103/page/hhm
ngidentity.com/en/resources/downloads/pingfederate.html - https://docs.pingidentity.com/bundle/pingfederate-103/page/hhm1634833631515.html
CVE ID: CVE-2021-42001 State: PUBLISHED Published: 2022-04-30T21:15:24 Last Updated: 2024-08-04T03:22:25.903Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Ping Identity Products: PingID Desktop Problem Types: CWE-310 Description: PingID Desktop prior to 1.7.3 has a misconfiguration in the encryption libraries which can lead to sensitive data exposure. An attacker capable of exploiting this vulnerability may be able to successfully complete an MFA challenge via OTP. Additional Analyst Notes: - CVE Program Container: References: - https://www.pingidentity.com/en/resources/downloads/pingid.html - https://docs.pingidentity.com/bundle/pingid/page/dyt1645545885978.
pingidentity.com/en/resources/downloads/pingid.html - https://docs.pingidentity.com/bundle/pingid/page/dyt1645545885978.html
CVE ID: CVE-2021-42002 State: PUBLISHED Published: 2021-11-11T04:33:38 Last Updated: 2024-08-04T03:22:25.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/ad-manager/release-notes.html#7115
CVE ID: CVE-2021-42006 State: PUBLISHED Published: 2021-10-04T22:55:43 Last Updated: 2024-08-04T03:22:25.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted GFF file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpertea/gclib/issues/11
CVE ID: CVE-2021-42008 State: PUBLISHED Published: 2021-10-04T23:17:08 Last Updated: 2024-08-04T03:22:25.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19d1532a187669ce86d5a2696eb7275310070793 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.13 - https://www.youtube.com/watch?v=d5f9xLK8Vhw - https://security.netapp.co
l.org/pub/linux/kernel/v5.x/ChangeLog-5.13.13 - https://www.youtube.com/watch?v=d5f9xLK8Vhw - https://security.netapp.com/advisory/ntap-20211104-0002/ - https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html
CVE ID: CVE-2021-42009 State: PUBLISHED Published: 2021-10-12T07:40:11 Last Updated: 2024-08-04T03:22:25.843Z Vendors: Apache Software Foundation Products: Apache Traffic Control Problem Types: CWE-20, Email Injection Vulnerability Description: An authenticated Apache Traffic Control Traffic Ops user with Portal-level privileges can send a request with a specially-crafted email subject to the /deliveryservices/request Traffic Ops endpoint to send an email, from the Traffic Ops server, with an arbitrary body to an arbitrary email address. Apache Traffic Control 5.1.x users should upgrade to 5.1.3 or 6.0.0. 4.1.x users should upgrade to 5.1.3. Additional Analyst Notes: - CVE Program Container:
hould upgrade to 5.1.3 or 6.0.0. 4.1.x users should upgrade to 5.1.3. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/re384fd0f44c6d230f31376153c6e8b59e4a669f927c1533d06d702af%40%3Cdev.trafficcontrol.apache.org%3E - https://lists.apache.org/thread.html/rf0481b9e38ece1ece458d3ce7b2d671df819e3555597f31fc34f084e%40%3Ccommits.trafficcontrol.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/10/12/1 - https://lists.apache.org/thread.html/r78d471d8a4fd268a4c5ae6c47327c09d9d4b4467c31da2c97422febb%40%3Cdev.trafficcontrol.apache.org%3E - https://lists.apache.org/thread.html/r7dfa9a89b39d06caeeeb7b5cdc41b3493a9b86cc6cfa059d3f349d87%40%
ntrol.apache.org%3E - https://lists.apache.org/thread.html/r7dfa9a89b39d06caeeeb7b5cdc41b3493a9b86cc6cfa059d3f349d87%40%3Cannounce.apache.org%3E
CVE ID: CVE-2021-42010 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T15:53:35.603Z Vendors: Apache Software Foundation Products: Apache Heron (Incubating) Problem Types: CRLF Injection Description: Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/j65nwr8n7jchngwqptzh100drcr4ry2q - http://www.openwall.com/lists/oss-security/2022/10/23/2
CVE ID: CVE-2021-42011 State: PUBLISHED Published: 2021-10-21T07:46:03 Last Updated: 2024-08-04T03:22:25.709Z Vendors: Trend Micro Products: Trend Micro Apex One Problem Types: Incorrect Permission Assignment Privilege Escalation Description: An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000289229
ity. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000289229 - https://www.zerodayinitiative.com/advisories/ZDI-21-1220/
CVE ID: CVE-2021-42012 State: PUBLISHED Published: 2021-10-21T07:46:03 Last Updated: 2024-08-04T03:22:25.638Z Vendors: Trend Micro Products: Trend Micro Apex One, Trend Micro Worry-Free Business Security Problem Types: Stack-based Buffer Overflow Privilege Escalation Description: A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: Reference
n the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000289229 - https://success.trendmicro.com/solution/000289230 - https://www.zerodayinitiative.com/advisories/ZDI-21-1221/
CVE ID: CVE-2021-42013 State: PUBLISHED Published: 2021-10-07T15:50:14.000Z Last Updated: 2025-10-21T23:25:30.222Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-22 Description: It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affect
GI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://httpd.apache.org/security/vulnerabilities_24.html - https://lists.apache.org/thread.html/r7c795cd45a3384d4d27e57618a215b0ed19cb6ca8eb070061ad5d837%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/rb5b0e46f179f60b0c70204656bc52fcb558e961cb4d06a971e9e3efb%40%3Cusers.httpd.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/10/07/6 - https://tools.cisco.com/security/center/content/CiscoSecuri
- http://www.openwall.com/lists/oss-security/2021/10/07/6 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-pathtrv-LAzg68cZ - http://jvn.jp/en/jp/JVN51106450/index.html - http://www.openwall.com/lists/oss-security/2021/10/08/1 - https://lists.apache.org/thread.html/r17a4c6ce9aff662efd9459e9d1850ab4a611cb23392fc68264c72cb3%40%3Ccvs.httpd.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/10/08/2 - http://www.openwall.com/lists/oss-security/2021/10/08/3 - http://www.openwall.com/lists/oss-security/2021/10/08/4 - http://www.openwall.com/lists/oss-security/2021/10/08/6 - http://www.openwall.com/lists/oss-security/2021/10/08/5 - http://ww
//www.openwall.com/lists/oss-security/2021/10/08/6 - http://www.openwall.com/lists/oss-security/2021/10/08/5 - http://www.openwall.com/lists/oss-security/2021/10/09/1 - http://www.openwall.com/lists/oss-security/2021/10/11/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RMIIEFINL6FUIOPD2A3M5XC6DH45Y3CC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WS5RVHOIIRECG65ZBTZY7IEJVWQSQPG3/ - http://www.openwall.com/lists/oss-security/2021/10/15/3 - http://www.openwall.com/lists/oss-security/2021/10/16/1 - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.netapp.com/adviso
/oss-security/2021/10/16/1 - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.netapp.com/advisory/ntap-20211029-0009/ - http://packetstormsecurity.com/files/164629/Apache-2.4.49-2.4.50-Traversal-Remote-Code-Execution.html - http://packetstormsecurity.com/files/164941/Apache-HTTP-Server-2.4.50-Remote-Code-Execution.html - http://packetstormsecurity.com/files/164501/Apache-HTTP-Server-2.4.50-Path-Traversal-Code-Execution.html - http://packetstormsecurity.com/files/164609/Apache-HTTP-Server-2.4.50-Remote-Code-Execution.html - http://packetstormsecurity.com/files/165089/Apache-HTTP-Server-2.4.50-CVE-2021-42013-Exploitation.html - https://www.oracle.com/security-alerts/cp
.com/files/165089/Apache-HTTP-Server-2.4.50-CVE-2021-42013-Exploitation.html - https://www.oracle.com/security-alerts/cpuapr2022.html - http://packetstormsecurity.com/files/167397/Apache-2.4.50-Remote-Code-Execution.html - https://www.povilaika.com/apache-2-4-50-exploit/ - https://security.gentoo.org/glsa/202208-20
CVE ID: CVE-2021-42015 State: PUBLISHED Published: 2021-11-09T11:32:14 Last Updated: 2024-08-04T03:22:25.646Z Vendors: Siemens Products: Mendix Applications using Mendix 7, Mendix Applications using Mendix 8, Mendix Applications using Mendix 9 Problem Types: CWE-525 Description: A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All versions < V8.18.12), Mendix Applications using Mendix 9 (All versions < V9.6.1). Applications built with affected versions of Mendix Studio Pro do not prevent file documents from being cached when files are opened or downloaded using a browser. This could allow a local attacker
file documents from being cached when files are opened or downloaded using a browser. This could allow a local attacker to read those documents by exploring the browser cache. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-338732.pdf