Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-2484 State: PUBLISHED Published: 2021-10-20T10:49:48 Last Updated: 2024-09-25T19:38:34.815Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Oracle Corporation Products: Operations Intelligence Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Operations Intelligence. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Operations Intelligence accessible data as well as unauthorized access to critical data or complete access to all Oracle Operations Intelligence accessible data. D
well as unauthorized access to critical data or complete access to all Oracle Operations Intelligence accessible data. Description: Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite (component: BIS Operations Intelligence). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Operations Intelligence. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Operations Intelligence accessible data as well as unauthorized access to critical data or complete acc
ta or all Oracle Operations Intelligence accessible data as well as unauthorized access to critical data or complete access to all Oracle Operations Intelligence accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpuoct2021.html
CVE ID: CVE-2021-2485 State: PUBLISHED Published: 2021-10-20T10:49:49 Last Updated: 2024-09-25T19:38:28.010Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Oracle Corporation Products: Trade Management Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Trade Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Trade Management accessible data. Description: Vulnerability in
access to critical data or complete access to all Oracle Trade Management accessible data. Description: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Trade Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Trade Management accessible data. CVSS 3.1 Base Scor
authorized access to critical data or complete access to all Oracle Trade Management accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpuoct2021.html
CVE ID: CVE-2021-30000 State: PUBLISHED Published: 2021-04-02T08:19:29 Last Updated: 2024-08-03T22:24:58.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in LATRIX 0.6.0. SQL injection in the txtaccesscode parameter of inandout.php leads to information disclosure and code execution. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/latrix/ - https://github.com/cptsticky/A-0day-Per-Day-Keeps-The-Cope-Away/blob/main/CVE-2021-30000
CVE ID: CVE-2021-30002 State: PUBLISHED Published: 2021-04-02T04:18:01 Last Updated: 2024-08-03T22:24:59.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. video_usercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, aka CID-fb18802a338b. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fb18802a338b36f675a388fc03d2aa504a0d0899 - https://bugzilla.suse.com/show_bug.cgi?id=1184120 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.3 - https://lists.debian.org/d
com/show_bug.cgi?id=1184120 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.3 - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
CVE ID: CVE-2021-30003 State: PUBLISHED Published: 2021-04-02T04:29:07 Last Updated: 2024-08-03T22:24:59.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add url_address. Additional Analyst Notes: - CVE Program Container: References: - https://research.0xdutra.com/posts/router-g120w-f/
CVE ID: CVE-2021-30004 State: PUBLISHED Published: 2021-04-02T00:00:00 Last Updated: 2024-08-03T22:24:59.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c. Additional Analyst Notes: - CVE Program Container: References: - https://w1.fi/cgit/hostap/commit/?id=a0541334a6394f8237a4393b7372693cd7e96f15 - https://security.gentoo.org/glsa/202309-16
CVE ID: CVE-2021-30005 State: PUBLISHED Published: 2021-05-11T11:42:55 Last Updated: 2024-08-03T22:24:59.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the project from VCS. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/ - https://security.gentoo.org/glsa/202107-45
CVE ID: CVE-2021-30006 State: PUBLISHED Published: 2021-05-11T11:24:23 Last Updated: 2024-08-03T22:24:59.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: In IntelliJ IDEA before 2020.3.3, XXE was possible, leading to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-30014 State: PUBLISHED Published: 2021-04-19T19:34:08.000Z Last Updated: 2025-03-05T22:56:56.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a integer overflow in media_tools/av_parsers.c in the hevc_parse_slice_segment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1721 - https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788 - https://github.com/gpac/gpac/blob/v0.9.0-preview/src/media_tools/av_parsers.c#L6731
CVE ID: CVE-2021-30015 State: PUBLISHED Published: 2021-04-19T19:34:08 Last Updated: 2024-08-03T22:24:59.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Null Pointer Dereference in function filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal in GPAC 1.0.1. The pid comes from function av1dmx_parse_flush_sample, the ctx.opid maybe NULL. The result is a crash in gf_filter_pck_new_alloc_internal. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1719 - https://github.com/gpac/gpac/commit/13dad7d5ef74ca2e6fe4010f5b03eb12e9bbe0ec
CVE ID: CVE-2021-30019 State: PUBLISHED Published: 2021-04-19T19:34:08 Last Updated: 2024-08-03T22:24:59.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the adts_dmx_process function in filters/reframe_adts.c in GPAC 1.0.1, a crafted file may cause ctx->hdr.frame_size to be smaller than ctx->hdr.hdr_size, resulting in size to be a negative number and a heap overflow in the memcpy. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1723 - https://github.com/gpac/gpac/commit/22774aa9e62f586319c8f107f5bae950fed900bc
CVE ID: CVE-2021-30020 State: PUBLISHED Published: 2021-04-19T19:34:08 Last Updated: 2024-08-03T22:24:59.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the function gf_hevc_read_pps_bs_internal function in media_tools/av_parsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps->num_tile_columns may be larger than sizeof(pps->column_width), which results in a heap overflow in the loop. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1722 - https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788
CVE ID: CVE-2021-30022 State: PUBLISHED Published: 2021-04-19T19:34:08.000Z Last Updated: 2025-03-05T22:59:04.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a integer overflow in media_tools/av_parsers.c in the gf_avc_read_pps_bs_internal in GPAC from 0.5.2 to 1.0.1. pps_id may be a negative number, so it will not return. However, avc->pps only has 255 unit, so there is an overflow, which results a crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1720 - https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788 - https://github.com/gpac/gpac/blob/v0.5.2/src/media_tools/av_parsers.c#L2344
CVE ID: CVE-2021-30027 State: PUBLISHED Published: 2021-04-29T14:29:19 Last Updated: 2024-08-03T22:24:59.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: md_analyze_line in md4c.c in md4c 0.4.7 allows attackers to trigger use of uninitialized memory, and cause a denial of service via a malformed Markdown document. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mity/md4c/issues/155 - https://github.com/mity/md4c/commit/4fc808d8fe8d8904f8525bb4231d854f45e23a19
CVE ID: CVE-2021-30028 State: PUBLISHED Published: 2022-05-20T14:54:11 Last Updated: 2024-08-03T22:24:59.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: SOOTEWAY Wi-Fi Range Extender v1.5 was discovered to use default credentials (the admin password for the admin account) to access the TELNET service, allowing attackers to erase/read/write the firmware remotely. Additional Analyst Notes: - CVE Program Container: References: - https://blog-ssh3ll.medium.com/acexy-wireless-n-wifi-repeater-vulnerabilities-8bd5d14a2990 - https://www.amazon.it/SOOTEWAY-Ripetitore-Extender-Wireless-Wmplificatore/dp/B08G55T46P
CVE ID: CVE-2021-30030 State: PUBLISHED Published: 2021-04-12T23:06:34 Last Updated: 2024-08-03T22:24:59.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Full Name field on register-patient.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/remoteclinic/RemoteClinic/issues/1 - http://packetstormsecurity.com/files/162291/RemoteClinic-2.0-Cross-Site-Scripting.html
CVE ID: CVE-2021-30031 State: REJECTED Published: 2021-04-21T15:31:05 Last Updated: 2021-04-21T16:28:47 Description: No description available.
CVE ID: CVE-2021-30034 State: PUBLISHED Published: 2021-04-12T23:06:32 Last Updated: 2024-08-03T22:24:59.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Symptons field on patients/register-report.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/remoteclinic/RemoteClinic/issues/5 - http://packetstormsecurity.com/files/162291/RemoteClinic-2.0-Cross-Site-Scripting.html
CVE ID: CVE-2021-30039 State: PUBLISHED Published: 2021-04-12T23:06:23 Last Updated: 2024-08-03T22:24:59.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Fever" or "Blood Pressure" field on the patients/register-report.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/remoteclinic/RemoteClinic/issues/8 - http://packetstormsecurity.com/files/162291/RemoteClinic-2.0-Cross-Site-Scripting.html
CVE ID: CVE-2021-30042 State: PUBLISHED Published: 2021-04-12T23:06:26 Last Updated: 2024-08-03T22:24:59.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/remoteclinic/RemoteClinic/issues/11 - http://packetstormsecurity.com/files/162291/RemoteClinic-2.0-Cross-Site-Scripting.html
CVE ID: CVE-2021-30044 State: PUBLISHED Published: 2021-04-12T23:06:29 Last Updated: 2024-08-03T22:24:59.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/remoteclinic/RemoteClinic/issues/13 - http://packetstormsecurity.com/files/162262/RemoteClinic-2-Cross-Site-Scripting.html
CVE ID: CVE-2021-30045 State: PUBLISHED Published: 2021-04-06T12:09:17 Last Updated: 2024-08-03T22:24:59.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: SerenityOS 2021-03-27 contains a buffer overflow vulnerability in the EndOfCentralDirectory::read() function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SerenityOS/serenity/issues/5975 - https://github.com/SerenityOS/serenity/pull/5977 - https://github.com/SerenityOS/serenity/commit/4317db7498eaa5a37068052bb0310fbc6a5f78e4
CVE ID: CVE-2021-30046 State: PUBLISHED Published: 2021-04-06T12:09:38 Last Updated: 2024-08-03T22:24:59.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: VIGRA Computer Vision Library Version-1-11-1 contains a segmentation fault vulnerability in the impex.hxx read_image_band() function, in which a crafted file can cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ukoethe/vigra/issues/494
CVE ID: CVE-2021-30047 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T17:59:53.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/49719
CVE ID: CVE-2021-30048 State: PUBLISHED Published: 2021-04-29T16:21:09 Last Updated: 2024-08-03T22:24:59.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus (小说精品屋-plus) 3.5.1 allows attackers to read arbitrary files via the filePath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49724 - https://github.com/201206030/novel-plus/issues/39
CVE ID: CVE-2021-30049 State: PUBLISHED Published: 2021-07-22T11:54:48 Last Updated: 2024-08-03T22:24:59.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: SysAid 20.3.64 b14 is affected by Cross Site Scripting (XSS) via a /KeepAlive.jsp?stamp= URI. Additional Analyst Notes: - CVE Program Container: References: - https://eh337.net/2021/03/30/sysaid/
CVE ID: CVE-2021-30055 State: PUBLISHED Published: 2021-04-05T10:45:58 Last Updated: 2024-08-03T22:24:59.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the 'par_year' parameter when running a report. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/SQLi-KnowageSuite.md
CVE ID: CVE-2021-30056 State: PUBLISHED Published: 2021-04-05T10:45:52 Last Updated: 2024-08-03T22:24:59.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in /restful-services/publish via the 'EXEC_FROM' parameter that can lead to data leakage. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/XSS-KnowageSuite.md
CVE ID: CVE-2021-30057 State: PUBLISHED Published: 2021-04-05T10:45:45 Last Updated: 2024-08-03T22:24:59.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored HTML injection vulnerability exists in Knowage Suite version 7.1. An attacker can inject arbitrary HTML in "/restful-services/2.0/analyticalDrivers" via the 'LABEL' and 'NAME' parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/HTLM-Injection-KnowageSuite.md
CVE ID: CVE-2021-30058 State: PUBLISHED Published: 2021-04-05T10:45:40 Last Updated: 2024-08-03T22:24:59.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Knowage Suite before 7.4 is vulnerable to cross-site scripting (XSS). An attacker can inject arbitrary external script in '/knowagecockpitengine/api/1.0/pages/execute' via the 'SBI_HOST' parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/XSSI-KnowageSuite.md
CVE ID: CVE-2021-30061 State: PUBLISHED Published: 2022-04-03T21:46:05 Last Updated: 2024-08-03T22:24:59.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, physically proximate attackers can execute code via a crafted file on a USB stick. Additional Analyst Notes: - CVE Program Container: References: - https://www.belden.com/support/security-assurance - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
CVE ID: CVE-2021-30062 State: PUBLISHED Published: 2022-04-03T21:49:39 Last Updated: 2024-08-03T22:24:59.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can bypass the OPC enforcer. Additional Analyst Notes: - CVE Program Container: References: - https://www.belden.com/support/security-assurance - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
CVE ID: CVE-2021-30063 State: PUBLISHED Published: 2022-04-03T21:52:45 Last Updated: 2024-08-03T22:24:59.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can cause an OPC enforcer denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.belden.com/support/security-assurance - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
CVE ID: CVE-2021-30064 State: PUBLISHED Published: 2022-04-03T21:56:29 Last Updated: 2024-08-03T22:24:59.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an SSH login can succeed with hardcoded default credentials (if the device is in the uncommissioned state). Additional Analyst Notes: - CVE Program Container: References: - https://www.belden.com/support/security-assurance - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
CVE ID: CVE-2021-30065 State: PUBLISHED Published: 2022-04-03T21:59:18 Last Updated: 2024-08-03T22:24:59.526Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, crafted ModBus packets can bypass the ModBus enforcer. NOTE: this issue exists because of an incomplete fix of CVE-2017-11401. Additional Analyst Notes: - CVE Program Container: References: - https://www.belden.com/support/security-assurance - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
CVE ID: CVE-2021-30066 State: PUBLISHED Published: 2022-04-03T22:01:59 Last Updated: 2024-08-03T22:24:59.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an arbitrary firmware image can be loaded because firmware signature verification (for a USB stick) can be bypassed. NOTE: this issue exists because of an incomplete fix of CVE-2017-11400. Additional Analyst Notes: - CVE Program Container: References: - https://www.belden.com/support/security-assurance - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-011-05
CVE ID: CVE-2021-30070 State: PUBLISHED Published: 2022-08-18T04:16:34 Last Updated: 2024-08-03T22:24:59.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install packages due to values taken from the pgk [] parameter in the update request being transmitted to the operating system's package manager. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hestiacp/hestiacp/commit/9a1fccd37f2842fdf96ffb48895c4bfa9788c469 - https://github.com/hestiacp/hestiacp/commit/27556a9a43aeaf308b33be224c2e70f2011574e6
CVE ID: CVE-2021-30071 State: PUBLISHED Published: 2022-08-18T04:16:53 Last Updated: 2024-08-03T22:24:59.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /admin/list_key.html of HestiaCP before v1.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hestiacp/hestiacp/commit/706314c12872c7607e96a73dfc77dbbddad2875e
CVE ID: CVE-2021-30072 State: PUBLISHED Published: 2021-04-02T19:55:08 Last Updated: 2024-08-03T22:24:59.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based buffer overflow that does not require authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10217
CVE ID: CVE-2021-30074 State: PUBLISHED Published: 2021-04-02T20:40:10 Last Updated: 2024-08-03T22:24:59.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the " character. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/docsifyjs/docsify/issues/1549
CVE ID: CVE-2021-30080 State: PUBLISHED Published: 2022-04-05T15:37:04 Last Updated: 2024-08-03T22:24:59.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/beego/beego/commit/d5df5e470d0a8ed291930ae802fd7e6b95226519 - https://github.com/beego/beego/releases/tag/v1.12.11