Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-39244 State: PUBLISHED Published: 2021-08-23T04:26:25 Last Updated: 2024-08-04T02:06:41.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authenticated Semi-Blind Command Injection (via Parameter Injection) exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via the getlogs.cgi tcpdump feature. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0, Nexto NX3010 1.8.3.0, Nexto NX3020 1.8.3.0, Nexto NX3030 1.8.3.0, Nexto NX5100 1.8.11.0, Nexto NX5101 1.8.11.0, Nexto NX5110 1.1.2.8, Nexto NX5210 1.1.2.8, Nexto Xpress XP300 1.8.11.0, Nexto Xpress XP315 1.8.11.0, Nexto Xpress XP325 1.8.11.0, Nexto Xpress XP340 1.8.11.0, and Hadro
Xpress XP300 1.8.11.0, Nexto Xpress XP315 1.8.11.0, Nexto Xpress XP325 1.8.11.0, Nexto Xpress XP340 1.8.11.0, and Hadron Xtorm HX3040 1.7.58.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.altus.com.br/ - https://seclists.org/fulldisclosure/2021/Aug/21
CVE ID: CVE-2021-39245 State: PUBLISHED Published: 2021-08-23T04:27:30 Last Updated: 2024-08-04T02:06:42.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hardcoded .htaccess Credentials for getlogs.cgi exist on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0, Nexto NX3010 1.8.3.0, Nexto NX3020 1.8.3.0, Nexto NX3030 1.8.3.0, Nexto NX5100 1.8.11.0, Nexto NX5101 1.8.11.0, Nexto NX5110 1.1.2.8, Nexto NX5210 1.1.2.8, Nexto Xpress XP300 1.8.11.0, Nexto Xpress XP315 1.8.11.0, Nexto Xpress XP325 1.8.11.0, Nexto Xpress XP340 1.8.11.0, and Hadron Xtorm HX3040 1.7.58.0. Additional Analyst Notes: - CVE P
Xpress XP325 1.8.11.0, Nexto Xpress XP340 1.8.11.0, and Hadron Xtorm HX3040 1.7.58.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.altus.com.br/ - https://seclists.org/fulldisclosure/2021/Aug/21
CVE ID: CVE-2021-39246 State: PUBLISHED Published: 2021-09-24T18:08:05 Last Updated: 2024-08-04T02:06:42.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can compromise the privacy of visits to v2 onion addresses. Exact timestamps of these onion-service visits are logged locally, and an attacker might be able to compare them to timestamp data collected by the destination server (or collected by a rogue site within the Tor network). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-111.md - https://sick.codes/s
iner: References: - https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-111.md - https://sick.codes/sick-2021-111 - https://www.privacyaffairs.com/cve-2021-39246-tor-vulnerability - https://gitlab.torproject.org/tpo/core/tor/-/commit/80c404c4b79f3bcba3fc4585d4c62a62a04f3ed9 - https://gitlab.torproject.org/tpo/core/tor/-/merge_requests/434
CVE ID: CVE-2021-39247 State: PUBLISHED Published: 2021-08-17T20:17:55 Last Updated: 2024-08-04T02:06:40.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zint Barcode Generator before 2.10.0 has a one-byte buffer over-read, related to is_last_single_ascii in code1.c, and rs_encode_uint in reedsol.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/zint/tickets/232/ - https://sourceforge.net/p/zint/code/ci/9b02cd52214e80f945bff41fc94bc1e17e15810c/
CVE ID: CVE-2021-39248 State: PUBLISHED Published: 2021-08-17T20:33:55 Last Updated: 2024-08-04T02:06:41.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open edX through Lilac.1 allows XSS in common/static/common/js/discussion/utils.js via crafted LaTeX content within a discussion. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/edx/edx-platform/pull/28379
CVE ID: CVE-2021-39249 State: PUBLISHED Published: 2021-08-17T22:02:27 Last Updated: 2024-08-04T02:06:40.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows reflected XSS because the filenames of uploaded files become predictable through a brute-force attack against the PHP mt_rand function. Additional Analyst Notes: - CVE Program Container: References: - https://ssd-disclosure.com/ssd-advisory-ip-board-stored-xss-to-rce-chain/ - https://invisioncommunity.com/release-notes/4651-r102/
CVE ID: CVE-2021-39250 State: PUBLISHED Published: 2021-08-17T22:02:12 Last Updated: 2024-08-04T02:06:40.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows stored XSS, with resultant code execution, because an uploaded file can be placed in an IFRAME element within user-generated content. For code execution, the attacker can rely on the ability of an admin to install widgets, disclosure of the admin session ID in a Referer header, and the ability of an admin to use the templating engine (e.g., Edit HTML). Additional Analyst Notes: - CVE Program Container: References: - https://ssd-disclosure.com/ssd-a
ine (e.g., Edit HTML). Additional Analyst Notes: - CVE Program Container: References: - https://ssd-disclosure.com/ssd-advisory-ip-board-stored-xss-to-rce-chain/ - https://invisioncommunity.com/release-notes/4651-r102/
CVE ID: CVE-2021-39251 State: PUBLISHED Published: 2021-09-07T00:00:00 Last Updated: 2024-08-04T02:06:40.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G < 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-q759-8j5v-q5jp - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=988386 - http://www.openwall.com/lists/oss-security/2021/08/30/1 - https://bugzilla.redhat.com/show_bug.cgi?id=2001649 - https://www.debian.org/security/2021/dsa-4971 - https://lists.fedo
https://bugzilla.redhat.com/show_bug.cgi?id=2001649 - https://www.debian.org/security/2021/dsa-4971 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/766ISTT3KCARKFUIQT7N6WV6T63XOKG3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSEKTKHO5HFZHWZNJNBJZA56472KRUZI/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00013.html - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2021-39252 State: PUBLISHED Published: 2021-09-07T00:00:00 Last Updated: 2024-08-04T02:06:40.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can cause an out-of-bounds read in ntfs_ie_lookup in NTFS-3G < 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-q759-8j5v-q5jp - https://www.debian.org/security/2021/dsa-4971 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/766ISTT3KCARKFUIQT7N6WV6T63XOKG3/ - https://lists.fedoraproject.org/archives/list/package-announce%40list
ct.org/message/766ISTT3KCARKFUIQT7N6WV6T63XOKG3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSEKTKHO5HFZHWZNJNBJZA56472KRUZI/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00013.html - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2021-39253 State: PUBLISHED Published: 2021-09-07T00:00:00 Last Updated: 2024-08-04T02:06:40.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can cause an out-of-bounds read in ntfs_runlists_merge_i in NTFS-3G < 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-q759-8j5v-q5jp - https://www.debian.org/security/2021/dsa-4971 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/766ISTT3KCARKFUIQT7N6WV6T63XOKG3/ - https://lists.fedoraproject.org/archives/list/package-announce
raproject.org/message/766ISTT3KCARKFUIQT7N6WV6T63XOKG3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSEKTKHO5HFZHWZNJNBJZA56472KRUZI/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00013.html - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2021-39254 State: PUBLISHED Published: 2021-09-07T00:00:00 Last Updated: 2024-08-04T02:06:40.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can cause an integer overflow in memmove, leading to a heap-based buffer overflow in the function ntfs_attr_record_resize, in NTFS-3G < 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-q759-8j5v-q5jp - https://www.debian.org/security/2021/dsa-4971 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/766ISTT3KCARKFUIQT7N6WV6T63XOKG3
ists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/766ISTT3KCARKFUIQT7N6WV6T63XOKG3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSEKTKHO5HFZHWZNJNBJZA56472KRUZI/ - https://lists.debian.org/debian-lts-announce/2021/11/msg00013.html - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2021-39255 State: PUBLISHED Published: 2021-09-07T00:00:00 Last Updated: 2024-08-04T02:06:40.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can trigger an out-of-bounds read, caused by an invalid attribute in ntfs_attr_find_in_attrdef, in NTFS-3G < 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-q759-8j5v-q5jp - https://www.debian.org/security/2021/dsa-4971 - https://lists.debian.org/debian-lts-announce/2021/11/msg00013.html - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2021-39256 State: PUBLISHED Published: 2021-09-07T00:00:00 Last Updated: 2024-08-04T02:06:40.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can cause a heap-based buffer overflow in ntfs_inode_lookup_by_name in NTFS-3G < 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-q759-8j5v-q5jp - https://www.debian.org/security/2021/dsa-4971 - https://lists.debian.org/debian-lts-announce/2021/11/msg00013.html - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2021-39257 State: PUBLISHED Published: 2021-09-07T00:00:00 Last Updated: 2024-08-04T02:06:42.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain (starting from ntfs_attr_pwrite), causing stack consumption in NTFS-3G < 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-q759-8j5v-q5jp - https://www.debian.org/security/2021/dsa-4971 - https://lists.debian.org/debian-lts-announce/2021/11/msg00013.html - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2021-39258 State: PUBLISHED Published: 2021-09-07T00:00:00 Last Updated: 2024-08-04T02:06:42.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can cause out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find in NTFS-3G < 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-q759-8j5v-q5jp - https://www.debian.org/security/2021/dsa-4971 - https://lists.debian.org/debian-lts-announce/2021/11/msg00013.html - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2021-39259 State: PUBLISHED Published: 2021-09-07T00:00:00 Last Updated: 2024-08-04T02:06:40.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can trigger an out-of-bounds access, caused by an unsanitized attribute length in ntfs_inode_lookup_by_name, in NTFS-3G < 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-q759-8j5v-q5jp - https://www.debian.org/security/2021/dsa-4971 - https://lists.debian.org/debian-lts-announce/2021/11/msg00013.html - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2021-39260 State: PUBLISHED Published: 2021-09-07T00:00:00 Last Updated: 2024-08-04T02:06:41.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can cause an out-of-bounds access in ntfs_inode_sync_standard_information in NTFS-3G < 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-q759-8j5v-q5jp - https://www.debian.org/security/2021/dsa-4971 - https://lists.debian.org/debian-lts-announce/2021/11/msg00013.html - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2021-39261 State: PUBLISHED Published: 2021-09-07T00:00:00 Last Updated: 2024-08-04T02:06:41.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can cause a heap-based buffer overflow in ntfs_compressed_pwrite in NTFS-3G < 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-q759-8j5v-q5jp - https://www.debian.org/security/2021/dsa-4971 - https://lists.debian.org/debian-lts-announce/2021/11/msg00013.html - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2021-39262 State: PUBLISHED Published: 2021-09-07T00:00:00 Last Updated: 2024-08-04T02:06:40.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can cause an out-of-bounds access in ntfs_decompress in NTFS-3G < 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-q759-8j5v-q5jp - https://www.debian.org/security/2021/dsa-4971 - https://lists.debian.org/debian-lts-announce/2021/11/msg00013.html - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2021-39263 State: PUBLISHED Published: 2021-09-07T00:00:00 Last Updated: 2024-08-04T02:06:41.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: A crafted NTFS image can trigger a heap-based buffer overflow, caused by an unsanitized attribute in ntfs_get_attribute_value, in NTFS-3G < 2021.8.22. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tuxera/ntfs-3g/releases - https://github.com/tuxera/ntfs-3g/security/advisories/GHSA-q759-8j5v-q5jp - https://www.debian.org/security/2021/dsa-4971 - https://lists.debian.org/debian-lts-announce/2021/11/msg00013.html - https://security.gentoo.org/glsa/202301-01
CVE ID: CVE-2021-39267 State: PUBLISHED Published: 2021-08-18T00:30:16 Last Updated: 2024-08-04T02:06:41.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent cross-site scripting (XSS) in the web interface of SuiteCRM before 7.11.19 allows a remote attacker to introduce arbitrary JavaScript via a Content-Type Filter bypass to upload malicious files. This occurs because text/html is blocked, but other types that allow JavaScript execution (such as text/xml) are not blocked. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/salesagility/SuiteCRM - https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_19 - https://thanhlocpanda.wordpress.
com/salesagility/SuiteCRM - https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_19 - https://thanhlocpanda.wordpress.com/2021/07/31/file-upload-bypass-suitecrm-7-11-18/
CVE ID: CVE-2021-39268 State: PUBLISHED Published: 2021-08-18T00:29:21 Last Updated: 2024-08-04T02:06:41.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent cross-site scripting (XSS) in the web interface of SuiteCRM before 7.11.19 allows a remote attacker to introduce arbitrary JavaScript via malicious SVG files. This occurs because the clean_file_output protection mechanism can be bypassed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/salesagility/SuiteCRM - https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_19 - https://thanhlocpanda.wordpress.com/2021/07/31/stored-xss-via-svg-on-suitecrm/
CVE ID: CVE-2021-39270 State: PUBLISHED Published: 2021-08-18T18:49:35 Last Updated: 2024-08-04T02:06:41.341Z Vendors: Ping Identity Products: RSA SecurID Integration Kit Problem Types: Incorrect Access Control Description: In Ping Identity RSA SecurID Integration Kit before 3.2, user impersonation can occur. Additional Analyst Notes: - CVE Program Container: References: - https://www.pingidentity.com/en/resources/downloads/pingfederate.html - https://docs.pingidentity.com/bundle/integrations/page/yqq1563995045546.html
CVE ID: CVE-2021-39271 State: PUBLISHED Published: 2021-08-30T04:58:25 Last Updated: 2024-08-04T02:06:42.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: OrbiTeam BSCW Classic before 7.4.3 allows authenticated remote code execution (RCE) during archive extraction via attacker-supplied Python code in the class attribute of a .bscw file. This is fixed in 5.0.12, 5.1.10, 5.2.4, 7.3.3, and 7.4.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.bscw.de/en/company/ - https://seclists.org/fulldisclosure/2021/Aug/24 - http://packetstormsecurity.com/files/163989/BSCW-Server-Remote-Code-Execution.html
CVE ID: CVE-2021-39272 State: PUBLISHED Published: 2021-08-30T05:05:26 Last Updated: 2024-08-04T02:06:41.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH. Additional Analyst Notes: - CVE Program Container: References: - https://www.fetchmail.info/security.html - https://nostarttls.secvuln.info/ - http://www.openwall.com/lists/oss-security/2021/08/27/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3XJ6XLEJCEZCAM5LGGD6XBCC522QLG4/ - https://lists.fedoraproject.org/archives/list/package-
sts.fedoraproject.org/message/L3XJ6XLEJCEZCAM5LGGD6XBCC522QLG4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZYCYLL73NP7ALJWSDICIVSA47ZIXWSSA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VXMKSEHAQSEDCWZMAOJEGX3P3JW6QY6H/ - https://security.gentoo.org/glsa/202209-14
CVE ID: CVE-2021-39273 State: PUBLISHED Published: 2021-08-19T11:59:39 Last Updated: 2024-08-04T02:06:41.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: In XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon application execution, allowing an unprivileged user to modify the application, modules, and configuration files. This leads to arbitrary code execution with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1N3/Sn1per/releases - https://github.com/nikip72/CVE-2021-39273-CVE-2021-39274 - https://github.com/1N3/Sn1per/issues/358
CVE ID: CVE-2021-39274 State: PUBLISHED Published: 2021-08-19T11:59:08 Last Updated: 2024-08-04T02:06:41.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: In XeroSecurity Sn1per 9.0 (free version), insecure directory permissions (0777) are set during installation, allowing an unprivileged user to modify the main application and the application configuration file. This results in arbitrary code execution with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/1N3/Sn1per/releases - https://github.com/nikip72/CVE-2021-39273-CVE-2021-39274 - https://github.com/1N3/Sn1per/issues/357
CVE ID: CVE-2021-39275 State: PUBLISHED Published: 2021-09-16T14:40:22 Last Updated: 2024-08-04T02:06:42.326Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: Buffer Overflow Description: ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://httpd.apache.org/security/vulnerabilities_24.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE6
tml - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPBR6WUYBJNACHKE65SPL7TJOHX7RHWD/ - https://lists.apache.org/thread.html/r82838efc5fa6fc4c73986399c9b71573589f78b31846aff5bd9b1697%40%3Cusers.httpd.apache.org%3E - https://lists.apache.org/thread.html/r82c077663f9759c7df5a6656f925b3ee4f55fcd33c889ba7cd687029%40%3Cusers.httpd.apache.org%3E - https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432%40%3Cusers.httpd.apache.org%3E - https://lists.apache.org/thread.html/r61fdbfc26ab170f4e6492ef3bd5197c20b862ce156e9d5a54d4b899c%40%3Cusers.httpd.apache.org%3E - https://lists.fedoraproject.org/archives/list/pac
92ef3bd5197c20b862ce156e9d5a54d4b899c%40%3Cusers.httpd.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNCYSR3BXT36FFF4XTCPL3HDQK4VP45R/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00001.html - https://www.debian.org/security/2021/dsa-4982 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-httpd-2.4.49-VWL69sWQ - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.netapp.com/advisory/ntap-20211008-0004/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf - https://security.gentoo.org/gls
lerts/cpuapr2022.html - https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf - https://security.gentoo.org/glsa/202208-20
CVE ID: CVE-2021-39278 State: PUBLISHED Published: 2021-09-07T05:39:13 Last Updated: 2024-08-04T02:06:40.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain MOXA devices allow reflected XSS via the Config Import menu. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WDR-3124A-EU-T 2.3, WDR-3124A-US 2.3, and WDR-3124A-US-T 2.3. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/164014
CVE ID: CVE-2021-39279 State: PUBLISHED Published: 2021-09-07T05:40:14 Last Updated: 2024-08-04T02:06:41.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WDR-3124A-EU-T 2.3, WDR-3124A-US 2.3, and WDR-3124A-US-T 2.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.moxa.com