Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
sage/NZWGE2RJONBEHSPCBUAW72NTRTIFKZAX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6RFMU5YXXNYYVA7G2DAHRXXHO6JKVFUT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SLPVEPBH37EBR4R54RMC6GD33J37HJXD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXAKO6N6NKTR6Z6KVAPEXSZQMRU52SGA/ - https://lists.debian.org/debian-lts-announce/2021/06/msg00010.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00012.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00011.html - https://lists.fedoraproject.org/archives/list/package
tps://lists.debian.org/debian-lts-announce/2021/06/msg00011.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AO52OLNOOKOCZSJCN3R7Q25XA32BWNWP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DUV4LDVZVW7KCGPAMFZD4ZJ4FVLPOX4C/ - https://security.gentoo.org/glsa/202209-07
CVE ID: CVE-2021-33478 State: PUBLISHED Published: 2021-07-22T16:53:32 Last Updated: 2024-08-03T23:50:42.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TrustZone implementation in certain Broadcom MediaxChange firmware could allow an unauthenticated, physically proximate attacker to achieve arbitrary code execution in the TrustZone Trusted Execution Environment (TEE) of an affected device. This, for example, affects certain Cisco IP Phone and Wireless IP Phone products before 2021-07-07. Exploitation is possible only when the attacker can disassemble the device in order to control the voltage/current for chip pins. Additional Analyst Notes: - CVE Program Container: Refer
e device in order to control the voltage/current for chip pins. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-brcm-mxc-jul2021-26LqUZUh
CVE ID: CVE-2021-33479 State: PUBLISHED Published: 2021-11-17T00:00:00 Last Updated: 2024-11-18T20:22:08.942Z Vendors: n/a Products: gocr Problem Types: CWE-119 Description: A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in measure_pitch() in pgm2asc.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1962861 - https://sourceforge.net/p/jocr/bugs/39/ - https://security.gentoo.org/glsa/202401-28
CVE ID: CVE-2021-33480 State: PUBLISHED Published: 2021-11-17T00:00:00 Last Updated: 2024-08-03T23:50:42.964Z Vendors: n/a Products: gocr Problem Types: CWE-416 Description: An use-after-free vulnerability was discovered in gocr through 0.53-20200802 in context_correction() in pgm2asc.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1962854 - https://sourceforge.net/p/jocr/bugs/40/ - https://sourceforge.net/p/jocr/bugs/41/ - https://security.gentoo.org/glsa/202401-28
CVE ID: CVE-2021-33481 State: PUBLISHED Published: 2021-11-17T00:00:00 Last Updated: 2024-08-03T23:50:42.849Z Vendors: n/a Products: gocr Problem Types: CWE-119 Description: A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1962865 - https://sourceforge.net/p/jocr/bugs/42/ - https://security.gentoo.org/glsa/202401-28
CVE ID: CVE-2021-33483 State: PUBLISHED Published: 2021-09-07T04:56:27 Last Updated: 2024-08-03T23:50:42.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. The comment posting functionality allows an attacker to add an XSS payload to the JSON request that will execute when users visit the page with the comment. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/onyaktech - https://burninatorsec.blogspot.com/2021/07/onyaktech-comments-pro-broken.html
CVE ID: CVE-2021-33484 State: PUBLISHED Published: 2021-09-07T04:59:00 Last Updated: 2024-08-03T23:50:42.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CommentsService.ashx in OnyakTech Comments Pro 3.8. An attacker can download a copy of the installer, decompile it, and discover a hardcoded IV used to encrypt the username and userid in the comment POST request. Additionally, the attacker can decrypt the encrypted encryption key (sent as a parameter in the comment form request) by setting this encrypted value as the username, which will appear on the comment page in its decrypted form. Using these two values (combined with the encryption functional
h will appear on the comment page in its decrypted form. Using these two values (combined with the encryption functionality discovered in the decompiled installer), the attacker can encrypt another user's ID and username. These values can be used as part of the comment posting request in order to spoof the user. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/onyaktech - https://burninatorsec.blogspot.com/2021/07/onyaktech-comments-pro-broken.html
CVE ID: CVE-2021-33485 State: PUBLISHED Published: 2021-08-03T15:44:56 Last Updated: 2024-08-03T23:50:42.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14805&token=f0b86f99bb302ddd4aadec483aed5f5d3fddbf1a&download=
CVE ID: CVE-2021-33486 State: PUBLISHED Published: 2021-08-03T15:58:06 Last Updated: 2024-08-03T23:50:42.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: All versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before version V3.5.17.10 have Improper Handling of Exceptional Conditions. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14806&token=637e12e86301b83beac1653bd88da3aa5aa3f51b&download=
CVE ID: CVE-2021-33488 State: PUBLISHED Published: 2021-11-22T07:32:10 Last Updated: 2024-08-03T23:50:42.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: chat in OX App Suite 7.10.5 has Improper Input Validation. A user can be redirected to a rogue OX Chat server via a development-related hook. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - http://seclists.org/fulldisclosure/2021/Nov/42 - http://packetstormsecurity.com/files/165028/OX-App-Suite-Ox-Documents-7.10.x-XSS-Code-Injection-Traversal.html
CVE ID: CVE-2021-33489 State: PUBLISHED Published: 2021-11-22T07:36:44 Last Updated: 2024-08-03T23:50:42.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.5 allows XSS via JavaScript code in a shared XCF file. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - http://seclists.org/fulldisclosure/2021/Nov/42 - http://packetstormsecurity.com/files/165028/OX-App-Suite-Ox-Documents-7.10.x-XSS-Code-Injection-Traversal.html
CVE ID: CVE-2021-33490 State: PUBLISHED Published: 2021-11-22T07:39:39 Last Updated: 2024-08-03T23:50:42.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.5 allows XSS via a crafted snippet in a shared mail signature. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2021/Nov/42 - http://packetstormsecurity.com/files/165028/OX-App-Suite-Ox-Documents-7.10.x-XSS-Code-Injection-Traversal.html
CVE ID: CVE-2021-33491 State: PUBLISHED Published: 2021-11-22T08:12:58 Last Updated: 2024-08-03T23:50:42.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.5 allows Directory Traversal via ../ in an OOXML or ODF ZIP archive, because of the mishandling of relative paths in mail addresses in conjunction with auto-configuration DNS records. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2021/Nov/42 - http://packetstormsecurity.com/files/165028/OX-App-Suite-Ox-Documents-7.10.x-XSS-Code-Injection-Traversal.html
CVE ID: CVE-2021-33492 State: PUBLISHED Published: 2021-11-22T08:16:25 Last Updated: 2024-08-03T23:50:42.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.10.5 allows XSS via an OX Chat room name. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2021/Nov/42 - http://packetstormsecurity.com/files/165028/OX-App-Suite-Ox-Documents-7.10.x-XSS-Code-Injection-Traversal.html
CVE ID: CVE-2021-33493 State: PUBLISHED Published: 2021-11-22T08:24:42 Last Updated: 2024-08-03T23:50:42.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: The middleware component in OX App Suite through 7.10.5 allows Code Injection via Java classes in a YAML format. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2021/Nov/42 - http://packetstormsecurity.com/files/165028/OX-App-Suite-Ox-Documents-7.10.x-XSS-Code-Injection-Traversal.html
CVE ID: CVE-2021-33494 State: PUBLISHED Published: 2021-11-22T08:27:26 Last Updated: 2024-08-03T23:50:42.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.10.5 allows XSS via an OX Chat room title during typing rendering. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2021/Nov/42 - http://packetstormsecurity.com/files/165028/OX-App-Suite-Ox-Documents-7.10.x-XSS-Code-Injection-Traversal.html
CVE ID: CVE-2021-33495 State: PUBLISHED Published: 2021-11-22T08:30:10 Last Updated: 2024-08-03T23:50:42.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.10.5 allows XSS via an OX Chat system message. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - https://seclists.org/fulldisclosure/2021/Nov/42 - http://packetstormsecurity.com/files/165028/OX-App-Suite-Ox-Documents-7.10.x-XSS-Code-Injection-Traversal.html
CVE ID: CVE-2021-33496 State: PUBLISHED Published: 2021-05-24T04:02:58 Last Updated: 2024-08-03T23:50:42.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dutchcoders/transfer.sh/releases/tag/v1.2.4 - https://github.com/dutchcoders/transfer.sh/commit/9df18fdc69de2e71f30d8c1e6bfab2fda2e52eb4 - https://vuln.ryotak.me/advisories/43 - https://github.com/dutchcoders/transfer.sh/pull/373 - https://github.com/dutchcoders/transfer.sh/releases/tag/v1.2.4
CVE ID: CVE-2021-33497 State: PUBLISHED Published: 2021-05-24T04:06:36 Last Updated: 2024-08-03T23:50:43.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dutchcoders transfer.sh before 1.2.4 allows Directory Traversal for deleting files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dutchcoders/transfer.sh/releases/tag/v1.2.4 - https://github.com/dutchcoders/transfer.sh/pull/373 - https://github.com/dutchcoders/transfer.sh/releases/tag/v1.2.4 - https://vuln.ryotak.me/advisories/44
CVE ID: CVE-2021-33498 State: PUBLISHED Published: 2022-01-15T16:21:45 Last Updated: 2024-08-03T23:50:43.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm
CVE ID: CVE-2021-33499 State: PUBLISHED Published: 2022-01-15T16:23:09 Last Updated: 2024-08-03T23:50:42.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm
CVE ID: CVE-2021-33500 State: PUBLISHED Published: 2021-05-21T19:42:26 Last Updated: 2024-08-03T23:50:42.977Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: PuTTY before 0.75 on Windows allows remote servers to cause a denial of service (Windows GUI hang) by telling the PuTTY window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. NOTE: the same attack methodology may affect some OS-level GUIs on Linux or other platforms for similar reasons. Additional Analyst Notes: - CVE Program Container: References: - https://www.chiark.greenend.org.uk/~sgtatham/pu
easons. Additional Analyst Notes: - CVE Program Container: References: - https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html - https://docs.ssh-mitm.at/puttydos.html - https://github.com/ssh-mitm/ssh-mitm-plugins/blob/main/ssh_mitm_plugins/ssh/putty_dos.py
CVE ID: CVE-2021-33501 State: PUBLISHED Published: 2021-07-19T11:37:24 Last Updated: 2024-08-03T23:50:42.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Overwolf Client 0.169.0.22 allows XSS, with resultant Remote Code Execution, via an overwolfstore:// URL. Additional Analyst Notes: - CVE Program Container: References: - https://www.overwolf.com - https://swordbytes.com/blog/security-advisory-overwolf-1-click-remote-code-execution-cve-2021-33501/ - https://github.com/swordbytes/Advisories/blob/master/2021/Advisory_CVE-2021-33501.pdf
CVE ID: CVE-2021-33502 State: PUBLISHED Published: 2021-05-24T15:42:34 Last Updated: 2024-08-03T23:50:43.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 for Node.js has a ReDoS (regular expression denial of service) issue because it has exponential performance for data: URLs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sindresorhus/normalize-url/releases/tag/v6.0.1 - https://security.netapp.com/advisory/ntap-20210706-0001/
CVE ID: CVE-2021-33503 State: PUBLISHED Published: 2021-06-29T10:55:35 Last Updated: 2024-08-03T23:50:42.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FMUGWEAUYGGHTPPXT6YBD53WYXQGVV73/ - https://lists.fedoraproject.o
ist/package-announce%40lists.fedoraproject.org/message/FMUGWEAUYGGHTPPXT6YBD53WYXQGVV73/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6SCV7ZNAHS3E6PBFLJGENCDRDRWRZZ6W/ - https://security.gentoo.org/glsa/202107-36 - https://www.oracle.com/security-alerts/cpuoct2021.html - https://github.com/advisories/GHSA-q2q7-5pp4-w6pg - https://github.com/urllib3/urllib3/commit/2d4a3fee6de2fa45eb82169361918f759269b4ec
CVE ID: CVE-2021-33504 State: PUBLISHED Published: 2022-05-31T20:29:03 Last Updated: 2024-08-03T23:50:42.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Couchbase Server before 7.1.0 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts
CVE ID: CVE-2021-33505 State: PUBLISHED Published: 2021-07-15T10:26:06 Last Updated: 2024-08-03T23:50:43.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: A local malicious user can circumvent the Falco detection engine through 0.28.1 by running a program that alters arguments of system calls being executed. Issue is fixed in Falco versions >= 0.29.1. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/falcosecurity/falco/releases - https://github.com/falcosecurity/falco/pull/1675
CVE ID: CVE-2021-33506 State: PUBLISHED Published: 2021-05-26T14:46:30 Last Updated: 2024-08-03T23:50:42.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: jitsi-meet-prosody in Jitsi Meet before 2.0.5963-1 does not ensure that restrict_room_creation is set by default. This can allow an attacker to circumvent conference moderation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jitsi/jitsi-meet/pull/9252/files - https://github.com/jitsi/jitsi-meet/compare/5025...5026 - https://github.com/jitsi/security-advisories/blob/master/advisories/JSA-2021-0001.md
CVE ID: CVE-2021-33507 State: PUBLISHED Published: 2021-05-21T21:33:31 Last Updated: 2024-08-03T23:50:42.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://plone.org/security/hotfix/20210518/reflected-xss-in-various-spots - http://www.openwall.com/lists/oss-security/2021/05/22/1
CVE ID: CVE-2021-33508 State: PUBLISHED Published: 2021-05-21T21:33:12 Last Updated: 2024-08-03T23:50:42.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plone through 5.2.4 allows XSS via a full name that is mishandled during rendering of the ownership tab of a content item. Additional Analyst Notes: - CVE Program Container: References: - https://plone.org/security/hotfix/20210518/stored-xss-from-user-fullname - http://www.openwall.com/lists/oss-security/2021/05/22/1
CVE ID: CVE-2021-33509 State: PUBLISHED Published: 2021-05-21T21:33:00 Last Updated: 2024-08-03T23:50:43.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plone through 5.2.4 allows remote authenticated managers to perform disk I/O via crafted keyword arguments to the ReStructuredText transform in a Python script. Additional Analyst Notes: - CVE Program Container: References: - https://plone.org/security/hotfix/20210518/writing-arbitrary-files-via-docutils-and-python-script - http://www.openwall.com/lists/oss-security/2021/05/22/1
CVE ID: CVE-2021-33510 State: PUBLISHED Published: 2021-05-21T21:32:39 Last Updated: 2024-08-03T23:50:42.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file. Additional Analyst Notes: - CVE Program Container: References: - https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-event-ical-url - http://www.openwall.com/lists/oss-security/2021/05/22/1
CVE ID: CVE-2021-33511 State: PUBLISHED Published: 2021-05-21T21:32:24 Last Updated: 2024-08-03T23:50:42.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterity, and plone.supermodel. Additional Analyst Notes: - CVE Program Container: References: - https://plone.org/security/hotfix/20210518/server-side-request-forgery-via-lxml-parser - http://www.openwall.com/lists/oss-security/2021/05/22/1
CVE ID: CVE-2021-33512 State: PUBLISHED Published: 2021-05-21T21:32:10 Last Updated: 2024-08-03T23:50:43.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plone through 5.2.4 allows stored XSS attacks (by a Contributor) by uploading an SVG or HTML document. Additional Analyst Notes: - CVE Program Container: References: - https://plone.org/security/hotfix/20210518/stored-xss-from-file-upload-svg-html - http://www.openwall.com/lists/oss-security/2021/05/22/1
CVE ID: CVE-2021-33513 State: PUBLISHED Published: 2021-05-21T21:31:55 Last Updated: 2024-08-03T23:50:42.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool. Additional Analyst Notes: - CVE Program Container: References: - https://plone.org/security/hotfix/20210518/xss-vulnerability-in-cmfdifftool - http://www.openwall.com/lists/oss-security/2021/05/22/1
CVE ID: CVE-2021-33514 State: PUBLISHED Published: 2021-05-21T22:10:04 Last Updated: 2024-08-03T23:50:42.981Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/libsal.so.0.0 library used by a CGI application, as demonstrated by setup.cgi?token=';$HTTP_USER_AGENT;' with an OS command in the User-Agent field. This affects GC108P before 1.0.7.3, GC108PP before 1.0.7.3, GS108Tv3 before 7.0.6.3, GS110TPPv1 before 7.0.6.3, GS110TPv3 before 7.0.6.3, GS110TUPv1 before 1.0.4.3, GS710TUPv1 before 1.0.4.3, G
re 7.0.6.3, GS110TPPv1 before 7.0.6.3, GS110TPv3 before 7.0.6.3, GS110TUPv1 before 1.0.4.3, GS710TUPv1 before 1.0.4.3, GS716TP before 1.0.2.3, GS716TPP before 1.0.2.3, GS724TPPv1 before 2.0.4.3, GS724TPv2 before 2.0.4.3, GS728TPPv2 before 6.0.6.3, GS728TPv2 before 6.0.6.3, GS752TPPv1 before 6.0.6.3, GS752TPv2 before 6.0.6.3, MS510TXM before 1.0.2.3, and MS510TXUP before 1.0.2.3. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000063641/Security-Advisory-for-Pre-Authentication-Command-Injection-Vulnerability-on-Some-Smart-Switches-PSV-2021-0071 - https://gynvael.coldwind.pl/?lang=en&id=733
CVE ID: CVE-2021-33515 State: PUBLISHED Published: 2021-06-28T12:04:59 Last Updated: 2024-08-03T23:50:42.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address. Additional Analyst Notes: - CVE Program Container: References: - https://dovecot.org/security - https://www.openwall.com/lists/oss-security/2021/06/28/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JB2VTJ3G2ILYWH5Y2FTY2PUHT2MD6VMI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fe
rg/message/JB2VTJ3G2ILYWH5Y2FTY2PUHT2MD6VMI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TK424DWFO2TKJYXZ2H3XL633TYJL4GQN/ - https://security.gentoo.org/glsa/202107-41 - https://lists.debian.org/debian-lts-announce/2022/09/msg00032.html
CVE ID: CVE-2021-33516 State: PUBLISHED Published: 2021-05-24T14:53:02 Last Updated: 2024-08-03T23:50:43.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to trick a victim's browser into triggering actions against local UPnP services implemented using this library. Depending on the affected service, this could be used for data exfiltration, data tempering, etc. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/gupnp/-/issues/24 - https://discourse.gnome.org/t/security-relevant-r
iner: References: - https://gitlab.gnome.org/GNOME/gupnp/-/issues/24 - https://discourse.gnome.org/t/security-relevant-releases-for-gupnp-issue-cve-2021-33516/6536