Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-27490 State: PUBLISHED Published: 2021-05-27T16:08:18 Last Updated: 2024-08-03T21:26:08.971Z Vendors: n/a Products: Datakit Software libraries embedded in Luxion KeyShot software Problem Types: CWE-125 Description: Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-21-566/ - https://cert-portal.siemens.com/productcert/pdf/ssa-119468.pdf - https://us-cert.cisa.gov/ics/advisories/ics
I-21-566/ - https://cert-portal.siemens.com/productcert/pdf/ssa-119468.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-145-01
CVE ID: CVE-2021-27491 State: PUBLISHED Published: 2021-07-30T21:08:19 Last Updated: 2024-08-03T21:26:09.214Z Vendors: n/a Products: Ypsomed mylife Cloud, mylife Mobile Application Problem Types: CWE-522 Description: Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1.7.5,The Ypsomed mylife Cloud discloses password hashes during the registration process. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-196-01
CVE ID: CVE-2021-27492 State: PUBLISHED Published: 2021-05-27T15:41:49 Last Updated: 2024-08-03T21:26:08.955Z Vendors: n/a Products: Datakit Software libraries embedded in Luxion KeyShot software Problem Types: CWE-611 Description: When opening a specially crafted 3DXML file, the application containing Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior could disclose arbitrary files to remote attackers. This is because of the passing of specially crafted content to the underlying XML parser without taking proper restrictions such as prohibiting an external DTD. Additional Analyst Notes: - CVE Program Con
rser without taking proper restrictions such as prohibiting an external DTD. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-21-567/ - https://cert-portal.siemens.com/productcert/pdf/ssa-119468.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-145-01
CVE ID: CVE-2021-27493 State: PUBLISHED Published: 2022-04-01T22:17:15.000Z Last Updated: 2025-04-17T15:51:19.901Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Philips Products: Vue PACS, Vue MyVue, Vue Speech, Vue Motion Problem Types: CVE-707 - Improper Neutralization Description: Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advi
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01 - http://www.philips.com/productsecurity
CVE ID: CVE-2021-27494 State: PUBLISHED Published: 2021-05-27T15:26:36 Last Updated: 2024-08-03T21:26:08.929Z Vendors: n/a Products: Datakit Software libraries embedded in Luxion KeyShot software Problem Types: CWE-121 Description: Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied data when parsing STP files. This could result in a stack-based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisor
rent process. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-21-564/ - https://cert-portal.siemens.com/productcert/pdf/ssa-119468.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-145-01
CVE ID: CVE-2021-27495 State: PUBLISHED Published: 2021-07-30T21:08:26 Last Updated: 2024-08-03T21:26:08.942Z Vendors: n/a Products: Ypsomed mylife Cloud, mylife Mobile Application Problem Types: CWE-522 Description: Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1.7.5,he Ypsomed mylife Cloud reflects the user password during the login process after redirecting the user from a HTTPS endpoint to a HTTP endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-196-01
CVE ID: CVE-2021-27496 State: PUBLISHED Published: 2021-05-27T15:27:05 Last Updated: 2024-08-03T21:26:08.972Z Vendors: n/a Products: Datakit Software libraries embedded in Luxion KeyShot software Problem Types: CWE-822 Description: Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied data when parsing PRT files. This could lead to pointer dereferences of a value obtained from an untrusted source. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https:/
ute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-21-565/ - https://cert-portal.siemens.com/productcert/pdf/ssa-119468.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-145-01
CVE ID: CVE-2021-27497 State: PUBLISHED Published: 2022-04-01T22:17:19.000Z Last Updated: 2025-04-17T15:51:10.222Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Philips Products: Vue PACS, Vue MyVue, Vue Speech, Vue Motion Problem Types: CVE-693 Protection Mechanism Failure Description: Philips Vue PACS versions 12.2.x.x and prior does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01 - http://www.philips.com/productsecurity
CVE ID: CVE-2021-27498 State: PUBLISHED Published: 2022-05-12T19:18:38.000Z Last Updated: 2025-04-16T16:22:17.867Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: EIPStackGroup Products: OpENer EtherNet/IP Problem Types: CWE-617 Description: A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-105-02 - https://github.com/EIPStackGroup/OpENer
CVE ID: CVE-2021-27499 State: PUBLISHED Published: 2021-08-02T20:42:09 Last Updated: 2024-08-03T21:26:09.263Z Vendors: n/a Products: Ypsomed mylife Cloud, mylife Mobile Application Problem Types: CWE-329 Description: Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The application layer encryption of the communication protocol between the Ypsomed mylife App and mylife Cloud uses non-random IVs, which allows man-in-the-middle attackers to tamper with messages. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-196-01
CVE ID: CVE-2021-27500 State: PUBLISHED Published: 2022-05-12T19:20:00.000Z Last Updated: 2025-04-16T16:22:11.255Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: EIPStackGroup Products: OpENer EtherNet/IP Problem Types: CWE-617 Description: A specifically crafted packet sent by an attacker to EIPStackGroup OpENer EtherNet/IP commits and versions prior to Feb 10, 2021 may result in a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-105-02 - https://github.com/EIPStackGroup/OpENer
CVE ID: CVE-2021-27501 State: PUBLISHED Published: 2022-04-01T22:17:16.000Z Last Updated: 2025-04-16T17:58:18.257Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Philips Products: Vue PACS, Vue MyVue, Vue Speech, Vue Motion Problem Types: CWE-710 Description: Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01 - http://www.philips.com/productsecurity
CVE ID: CVE-2021-27502 State: PUBLISHED Published: 2023-11-21T17:41:08.040Z Last Updated: 2024-08-03T21:26:09.047Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Texas Instruments Products: CC32XX, SimpleLink MSP432E4XX, SimpleLink-CC13XX, SimpleLink-CC26XX, SimpleLink-CC32XX Problem Types: CWE-190 Description: Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-ev
CVE ID: CVE-2021-27503 State: PUBLISHED Published: 2021-08-02T20:42:13 Last Updated: 2024-08-03T21:26:09.636Z Vendors: n/a Products: Ypsomed mylife Cloud, mylife Mobile Application Problem Types: CWE-798 Description: Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The application encrypts on the application layer of the communication protocol between the Ypsomed mylife App and mylife Cloud credentials based on hard-coded secrets, which allows man-in-the-middle attackers to tamper with messages. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/adviso
mper with messages. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-196-01
CVE ID: CVE-2021-27504 State: PUBLISHED Published: 2023-11-21T17:43:12.120Z Last Updated: 2024-08-03T21:26:09.768Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Texas Instruments Products: CC32XX, SimpleLink MSP432E4XX, SimpleLink-CC13XX, SimpleLink-CC26XX, SimpleLink-CC32XX Problem Types: CWE-190 Description: Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'malloc' for FreeRTOS, resulting in code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-21-119-04
nal Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-21-119-04 - https://www.ti.com/tool/TI-RTOS-MCU
CVE ID: CVE-2021-27505 State: PUBLISHED Published: 2022-05-13T15:17:59.788Z Last Updated: 2025-04-16T16:22:03.550Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: mySCADA Products: myPRO Problem Types: CWE-548 Description: mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive directory listing information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-217-03 - https://www.myscada.org/version-8-20-0-released-security-update
CVE ID: CVE-2021-27506 State: PUBLISHED Published: 2021-03-19T14:28:20 Last Updated: 2024-08-03T21:26:09.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) is subject to DoS in case of parsing of malformed png files. This affect Netasq versions 9.1.0 to 9.1.11 and SNS versions 1.0.0 to 4.2.0. This issue is fixed in SNS 3.7.19, 3.11.7 and 4.2.1. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu/2021-003/ - https://blog.clamav.net/2021/02/clamav-01031-patch-release.html
CVE ID: CVE-2021-27509 State: PUBLISHED Published: 2021-02-19T22:16:31 Last Updated: 2024-08-03T21:26:09.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code. Additional Analyst Notes: - CVE Program Container: References: - https://myconnectionserver.visualware.com/support/newrelease.html
CVE ID: CVE-2021-27513 State: PUBLISHED Published: 2021-02-21T23:05:43 Last Updated: 2024-08-03T21:26:08.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le filtre userside." Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ArianeBlow/exploit-eyesofnetwork5.3.10/blob/main/PoC-BruteForceID-arbitraty-file-upload-RCE-PrivEsc.py - https://github.com/EyesOfNetworkCommunity/eonweb/issues/87
CVE ID: CVE-2021-27514 State: PUBLISHED Published: 2021-02-21T23:05:32 Last Updated: 2024-08-03T21:26:09.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass (such as in CVE-2021-27513 exploitation). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ArianeBlow/exploit-eyesofnetwork5.3.10/blob/main/PoC-BruteForceID-arbitraty-file-upload-RCE-PrivEsc.py - https://github.com/EyesOfNetworkCommunity/eonweb/issues/87
CVE ID: CVE-2021-27515 State: PUBLISHED Published: 2021-02-21T00:00:00 Last Updated: 2024-08-03T21:26:09.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: url-parse before 1.5.0 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/unshiftio/url-parse/commit/d1e7e8822f26e8a49794b757123b51386325b2b0 - https://github.com/unshiftio/url-parse/pull/197 - https://github.com/unshiftio/url-parse/compare/1.4.7...1.5.0 - https://advisory.checkmarx.net/advisory/CX-2021-4306 - https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html
CVE ID: CVE-2021-27516 State: PUBLISHED Published: 2021-02-21T23:29:56 Last Updated: 2024-08-03T21:26:09.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\/ and interprets the URI as a relative path. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/medialize/URI.js/commit/a1ad8bcbc39a4d136d7e252e76e957f3ece70839 - https://github.com/medialize/URI.js/releases/tag/v1.19.6 - https://advisory.checkmarx.net/advisory/CX-2021-4305
CVE ID: CVE-2021-27517 State: PUBLISHED Published: 2021-07-20T11:38:37 Last Updated: 2024-08-03T21:26:09.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit PDF SDK For Web through 7.5.0 allows XSS. There is arbitrary JavaScript code execution in the browser if a victim uploads a malicious PDF document containing embedded JavaScript code that abuses app.alert (in the Acrobat JavaScript API). Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.html
CVE ID: CVE-2021-27519 State: PUBLISHED Published: 2021-03-19T18:54:16 Last Updated: 2024-08-03T21:26:10.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fudforum/FUDforum/issues/2 - http://packetstormsecurity.com/files/162942/FUDForum-3.1.0-Cross-Site-Scripting.html
CVE ID: CVE-2021-27520 State: PUBLISHED Published: 2021-03-19T18:53:54 Last Updated: 2024-08-03T21:26:09.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fudforum/FUDforum/issues/2 - http://packetstormsecurity.com/files/162942/FUDForum-3.1.0-Cross-Site-Scripting.html
CVE ID: CVE-2021-27522 State: PUBLISHED Published: 2021-04-08T15:13:02 Last Updated: 2024-08-03T21:26:09.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Learnsite 1.2.5.0 contains a remote privilege escalation vulnerability in /Manager/index.aspx through the JudgIsAdmin() function. By modifying the initial letter of the key of a user cookie, the key of the administrator cookie can be obtained. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WaterCountry/Learnsite/issues/1
CVE ID: CVE-2021-27523 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-09T17:44:25.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sensitive information via crafted POST request to register interface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/open-falcon/dashboard/issues/153
CVE ID: CVE-2021-27524 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-09T17:38:27.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in margox braft-editor version 2.3.8, allows remote attackers to execute arbitrary code via the embed media feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/margox/braft-editor/issues/880
CVE ID: CVE-2021-27526 State: PUBLISHED Published: 2021-03-23T13:21:55 Last Updated: 2024-08-03T21:26:09.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "page" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20page%20parameter
CVE ID: CVE-2021-27527 State: PUBLISHED Published: 2021-03-23T13:20:45 Last Updated: 2024-08-03T21:26:10.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "valueID" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20valueID%20parameter
CVE ID: CVE-2021-27528 State: PUBLISHED Published: 2021-03-23T13:18:20 Last Updated: 2024-08-03T21:26:09.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "refID" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20refID%20parameter
CVE ID: CVE-2021-27529 State: PUBLISHED Published: 2021-03-23T13:15:46 Last Updated: 2024-08-03T21:26:09.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "limit" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20limit%20parameter
CVE ID: CVE-2021-27530 State: PUBLISHED Published: 2021-03-23T13:19:50 Last Updated: 2024-08-03T21:26:09.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allow remote attacker to inject javascript via URI in /index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20index.php%20URI
CVE ID: CVE-2021-27531 State: PUBLISHED Published: 2021-03-23T13:16:55 Last Updated: 2024-08-03T21:26:10.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "query" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20query%20parameter
CVE ID: CVE-2021-27544 State: PUBLISHED Published: 2021-04-15T11:53:36 Last Updated: 2024-08-03T21:26:09.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the "sername" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/161468/Beauty-Parlour-Management-System-1.0-Cross-Site-Scripting.html - https://github.com/BigTiger2020/Beauty-Parlour-Management-System
CVE ID: CVE-2021-27545 State: PUBLISHED Published: 2021-04-15T11:54:21 Last Updated: 2024-08-03T21:26:10.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to obtain sensitive database information by injecting SQL commands into the "sername" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/161468/Beauty-Parlour-Management-System-1.0-Cross-Site-Scripting.html - https://github.com/BigTiger2020/Beauty-Parlour-Management-System - https://www.exploit-db.com/exploits/49580
CVE ID: CVE-2021-27548 State: PUBLISHED Published: 2022-05-18T14:37:01 Last Updated: 2024-08-03T21:26:09.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc in xpdf 4.03. Additional Analyst Notes: - CVE Program Container: References: - https://forum.xpdfreader.com/viewtopic.php?f=3&t=42115
CVE ID: CVE-2021-27549 State: PUBLISHED Published: 2021-02-22T16:37:19 Last Updated: 2024-08-03T21:26:09.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android application by default. NOTE: the vendor's position is that this is intended behavior that can be changed through the Settings > Device screen Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eybisi/misc/tree/main/clipwatch - https://www.genymotion.com/download/ - https://twitter.com/0xabc0/status/1363856804602671104 - https://twitter.com/0xabc0/status/1363855602477387783 - https://twitter.com/0xabc0/status/13637
us/1363856804602671104 - https://twitter.com/0xabc0/status/1363855602477387783 - https://twitter.com/0xabc0/status/1363788023956185090 - https://www.youtube.com/watch?v=Tod8Q6sf0P8 - https://docs.genymotion.com/desktop/latest/02_Application.html