Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-22568 State: PUBLISHED Published: 2021-12-09T17:05:12 Last Updated: 2024-08-03T18:44:14.137Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L) Vendors: Google LLC Products: Dart SDK Problem Types: CWE-255 Description: When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token that is valid for publishing on pub.dev. Using these obtained credentials, an attacker can impersonate the user on pub.dev. We recommend upgrading past https://github.com/dart-lang/sdk/commit/d787e78d21e12ec1ef712d229940b1172aafcdf8 or beyond version 2.15.0 Additional Analyst Notes: - C
com/dart-lang/sdk/commit/d787e78d21e12ec1ef712d229940b1172aafcdf8 or beyond version 2.15.0 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dart-lang/sdk/commit/d787e78d21e12ec1ef712d229940b1172aafcdf8 - https://github.com/dart-lang/sdk/blob/main/CHANGELOG.md - https://github.com/dart-lang/sdk/security/advisories/GHSA-r32f-vhjp-qhj7
CVE ID: CVE-2021-22569 State: PUBLISHED Published: 2022-01-07T00:00:00.000Z Last Updated: 2025-04-21T13:57:08.444Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Google LLC Products: protobuf-java, protobuf-kotlin, google-protobuf [JRuby Gem] Problem Types: CWE-696 Description: An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause frequent, repeated pauses. We recommend upgrading libraries beyond the vulnerable versions. Additional Analyst
at cause frequent, repeated pauses. We recommend upgrading libraries beyond the vulnerable versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39330 - https://cloud.google.com/support/bulletins#gcp-2022-001 - http://www.openwall.com/lists/oss-security/2022/01/12/4 - http://www.openwall.com/lists/oss-security/2022/01/12/7 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://lists.debian.org/debian-lts-announce/2023/04/msg00019.html
CVE ID: CVE-2021-22570 State: PUBLISHED Published: 2022-01-26T00:00:00.000Z Last Updated: 2025-04-21T13:56:58.459Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Google LLC Products: Protobuf Problem Types: CWE-476 Description: Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/protoco
er. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/protocolbuffers/protobuf/releases/tag/v3.15.0 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFX6KPNOFHYD6L4XES5PCM3QNSKZBOTQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3DVUZPALAQ34TQP6KFNLM4IZS6B32XSA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NVTWVQRB5OCCTMKEQFY5MYED3DXDVSLP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BTRGBRC5KGCA4SK5MUNLPYJRAGXMBIYY/ - https:/
project.org/archives/list/package-announce%40lists.fedoraproject.org/message/BTRGBRC5KGCA4SK5MUNLPYJRAGXMBIYY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20220429-0005/ - https://lists.debian.org/debian-lts-announce/2023/04/msg00019.html
CVE ID: CVE-2021-22571 State: PUBLISHED Published: 2022-03-18T11:05:11.000Z Last Updated: 2025-04-21T13:55:18.219Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Google LLC Products: google/sa360-webquery-bigquery Problem Types: CWE-275 Description: A local attacker could read files from some other users' SA360 reports stored in the /tmp folder during staging process before the files are loaded in BigQuery. We recommend upgrading to version 1.0.3 or above. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/google/sa360-webquery-bigquery/pull/15 - https://github.com/google/sa360-webquery-bigquery/rele
es: - https://github.com/google/sa360-webquery-bigquery/pull/15 - https://github.com/google/sa360-webquery-bigquery/releases/tag/v1.0.3 - https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-7fjx-657r-9r5h
CVE ID: CVE-2021-22572 State: PUBLISHED Published: 2022-03-29T15:05:19.000Z Last Updated: 2025-04-21T13:54:59.936Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Google LLC Products: Data-Transfer-Project Problem Types: CWE-377 Description: On unix-like systems, the system temporary directory is shared between all users on that system. The root cause is File.createTempFile creates files in the the system temporary directory with world readable permissions. Any sensitive information written to theses files is visible to all other local users on unix-like systems. We recommend upgrading past commit https://github.com/google/data-transfer-project/pull/969 Addi
s on unix-like systems. We recommend upgrading past commit https://github.com/google/data-transfer-project/pull/969 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/google/data-transfer-project/pull/969 - https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-22c6-wcjm-qfjg
CVE ID: CVE-2021-22573 State: PUBLISHED Published: 2022-05-03T15:45:12.000Z Last Updated: 2025-04-21T13:54:18.220Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Google LLC Products: Google-oauth-java-client Problem Types: CWE-347 Description: The vulnerability is that IDToken verifier does not verify if token is properly signed. Signature verification makes sure that the token's payload comes from valid provider, not from someone else. An attacker can provide a compromised token with custom payload. The token will pass the validation on the client side. We recommend upgrading to version 1.33.3 or above Additional Analyst Notes: - CVE Program Container: - CIS
client side. We recommend upgrading to version 1.33.3 or above Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/googleapis/google-oauth-java-client/pull/872
CVE ID: CVE-2021-22600 State: PUBLISHED Published: 2022-01-26T00:00:00.000Z Last Updated: 2025-10-21T23:15:48.681Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:H) Vendors: Linux Kernel Products: Kernel Problem Types: CWE-415 Description: A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/
am Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=ec6af094ea28f0f2dda1a6a33b14cd57e36a9755 - https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html - https://www.debian.org/security/2022/dsa-5096 - https://security.netapp.com/advisory/ntap-20230110-0002/
CVE ID: CVE-2021-22636 State: PUBLISHED Published: 2023-11-20T19:02:30.434Z Last Updated: 2024-08-03T18:44:13.779Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Texas Instruments Products: CC32XX, SimpleLink MSP432E4XX, SimpleLink-CC13XX, SimpleLink-CC26XX, SimpleLink-CC32XX Problem Types: CWE-190 Description: Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-ev
result in code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-21-119-04 - https://www.ti.com/tool/TI-RTOS-MCU
CVE ID: CVE-2021-22637 State: PUBLISHED Published: 2021-01-27T19:09:49 Last Updated: 2024-08-03T18:44:14.149Z Vendors: n/a Products: Tellus Lite V-Simulator and V-Server Lite Problem Types: CWE-121 Description: Multiple stack-based buffer overflow issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01 - https://www.zerodayinitiative.com/advisories/ZDI-21-097/
CVE ID: CVE-2021-22638 State: PUBLISHED Published: 2021-03-03T16:09:27 Last Updated: 2024-08-03T18:44:14.160Z Vendors: n/a Products: Fatek FvDesigner Problem Types: CWE-125 Description: Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds read while processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02
CVE ID: CVE-2021-22639 State: PUBLISHED Published: 2021-01-27T19:05:19 Last Updated: 2024-08-03T18:44:14.040Z Vendors: n/a Products: Tellus Lite V-Simulator and V-Server Lite Problem Types: CWE-824 Description: An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01 - https://www.zerodayinitiative.com/advisories/ZDI-21-098/
CVE ID: CVE-2021-22640 State: PUBLISHED Published: 2022-07-28T14:18:04.000Z Last Updated: 2025-04-17T15:49:20.437Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Ovarro Products: TBox Problem Types: CVE-522 Description: An attacker can decrypt the Ovarro TBox login password by communication capture and brute force attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-054-04
CVE ID: CVE-2021-22641 State: PUBLISHED Published: 2021-01-27T19:03:41 Last Updated: 2024-08-03T18:44:13.855Z Vendors: n/a Products: Tellus Lite V-Simulator and V-Server Lite Problem Types: CWE-122 Description: A heap-based buffer overflow issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01 - https://www.zerodayinitiative.com/advisories/ZDI-21-099/
CVE ID: CVE-2021-22642 State: PUBLISHED Published: 2022-07-28T14:17:44.000Z Last Updated: 2025-04-17T15:49:28.131Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Ovarro Products: TBox Problem Types: CVE-400 Description: An attacker could use specially crafted invalid Modbus frames to crash the Ovarro TBox system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-054-04
CVE ID: CVE-2021-22643 State: PUBLISHED Published: 2021-02-23T03:13:36 Last Updated: 2024-08-03T18:44:14.139Z Vendors: n/a Products: Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, Luxion KeyVR Problem Types: CWE-125 Description: Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01 - https://cert-p
st Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-319/ - https://www.zerodayinitiative.com/advisories/ZDI-21-316/
CVE ID: CVE-2021-22644 State: PUBLISHED Published: 2022-07-28T14:19:10.000Z Last Updated: 2025-04-17T15:48:47.601Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Ovarro Products: TBox Problem Types: CVE-321 Description: Ovarro TBox TWinSoft uses the custom hardcoded user “TWinSoft” with a hardcoded key. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-054-04
CVE ID: CVE-2021-22645 State: PUBLISHED Published: 2021-02-23T03:02:08 Last Updated: 2024-08-03T18:44:13.754Z Vendors: n/a Products: Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, Luxion KeyVR Problem Types: CWE-357 Description: Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an attack because the .bip documents display a “load” command, which can be pointed to a .dll from a remote network share. As a result, the .dll entry point can be executed without sufficient UI warning. Additional Analyst Notes: - CVE Program C
a result, the .dll entry point can be executed without sufficient UI warning. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-323/
CVE ID: CVE-2021-22646 State: PUBLISHED Published: 2022-07-28T14:19:30.000Z Last Updated: 2025-04-17T15:48:32.572Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Ovarro Products: TBox Problem Types: CVE-94 Description: The “ipk” package containing the configuration created by TWinSoft can be uploaded, extracted, and executed in Ovarro TBox, allowing malicious code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-054-04
CVE ID: CVE-2021-22647 State: PUBLISHED Published: 2021-02-23T03:13:39 Last Updated: 2024-08-03T18:44:14.057Z Vendors: n/a Products: Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, Luxion KeyVR Problem Types: CWE-787 Description: Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to multiple out-of-bounds write issues while processing project files, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01 -
ditional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-322/ - https://www.zerodayinitiative.com/advisories/ZDI-21-321/ - https://www.zerodayinitiative.com/advisories/ZDI-21-320/ - https://www.zerodayinitiative.com/advisories/ZDI-21-326/ - https://www.zerodayinitiative.com/advisories/ZDI-21-318/
CVE ID: CVE-2021-22648 State: PUBLISHED Published: 2022-07-28T14:18:45.000Z Last Updated: 2025-04-17T15:48:58.949Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Ovarro Products: TBox Problem Types: CVE-732 Description: Ovarro TBox proprietary Modbus file access functions allow attackers to read, alter, or delete the configuration file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-054-04
CVE ID: CVE-2021-22649 State: PUBLISHED Published: 2021-02-23T03:02:05 Last Updated: 2024-08-03T18:51:05.823Z Vendors: n/a Products: Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, Luxion KeyVR Problem Types: CWE-822 Description: Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 have multiple NULL pointer dereference issues while processing project files, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01 - https://
Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-317/ - https://www.zerodayinitiative.com/advisories/ZDI-21-325/
CVE ID: CVE-2021-22650 State: PUBLISHED Published: 2022-07-28T14:18:25.000Z Last Updated: 2025-04-17T15:49:09.268Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Ovarro Products: TBox Problem Types: CVE-23 Description: An attacker may use TWinSoft and a malicious source project file (TPG) to extract files on machine executing Ovarro TWinSoft, which could lead to code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-054-04
CVE ID: CVE-2021-22651 State: PUBLISHED Published: 2021-02-23T17:45:36 Last Updated: 2024-08-03T18:51:07.076Z Vendors: n/a Products: Luxion KeyShot versions, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, Luxion KeyVR Problem Types: CWE-22 Description: When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are, while processing the extraction of temporary files, suffering from a directory traversal vulnerability, which allows an attacker to store arbitrary scripts into automatic startup folders. Additional Analyst Note
lnerability, which allows an attacker to store arbitrary scripts into automatic startup folders. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01 - https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-324/
CVE ID: CVE-2021-22652 State: PUBLISHED Published: 2021-02-11T16:06:38 Last Updated: 2024-08-03T18:51:06.045Z Vendors: n/a Products: Advantech iView Problem Types: CWE-306 Description: Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02 - http://packetstormsecurity.com/files/161937/Advantech-iView-Unauthenticated-Remote-Code-Execution.html
CVE ID: CVE-2021-22653 State: PUBLISHED Published: 2021-01-27T19:01:55 Last Updated: 2024-08-03T18:51:05.842Z Vendors: n/a Products: Tellus Lite V-Simulator and V-Server Lite Problem Types: CWE-787 Description: Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01
CVE ID: CVE-2021-22654 State: PUBLISHED Published: 2021-02-11T16:06:18 Last Updated: 2024-08-03T18:51:05.854Z Vendors: n/a Products: Advantech iView Problem Types: CWE-89 Description: Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02 - https://www.zerodayinitiative.com/advisories/ZDI-21-190/ - https://www.zerodayinitiative.com/advisories/ZDI-21-188/
CVE ID: CVE-2021-22655 State: PUBLISHED Published: 2021-01-27T19:06:42 Last Updated: 2024-08-03T18:51:06.042Z Vendors: n/a Products: Tellus Lite V-Simulator and V-Server Lite Problem Types: CWE-125 Description: Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0). Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01
CVE ID: CVE-2021-22656 State: PUBLISHED Published: 2021-02-11T16:06:31 Last Updated: 2024-08-03T18:51:05.814Z Vendors: n/a Products: Advantech iView Problem Types: CWE-22 Description: Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02 - https://www.zerodayinitiative.com/advisories/ZDI-21-189/
CVE ID: CVE-2021-22657 State: PUBLISHED Published: 2021-12-23T19:48:36.843123Z Last Updated: 2024-09-17T00:21:11.417Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: mySCADA Products: myPRO Problem Types: CWE-78 Description: mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-355-01
CVE ID: CVE-2021-22658 State: PUBLISHED Published: 2021-02-11T16:06:25 Last Updated: 2024-08-03T18:51:06.001Z Vendors: n/a Products: Advantech iView Problem Types: CWE-89 Description: Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Administrator'. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02 - https://www.zerodayinitiative.com/advisories/ZDI-21-191/