Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-41361 State: PUBLISHED Published: 2021-10-13T00:28:22 Last Updated: 2024-08-04T03:08:32.211Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server version 2004, Windows Server version 20H2, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: Spoofing Description: Active Directory Federation Server Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41361
CVE ID: CVE-2021-41363 State: PUBLISHED Published: 2021-10-13T00:28:24 Last Updated: 2024-08-04T03:08:32.238Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Intune management extension Problem Types: Security Feature Bypass Description: Intune Management Extension Security Feature Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41363
CVE ID: CVE-2021-41365 State: PUBLISHED Published: 2021-12-15T14:14:53 Last Updated: 2024-08-04T03:08:32.176Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Defender for IoT Problem Types: Remote Code Execution Description: Microsoft Defender for IoT Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41365 - https://www.zerodayinitiative.com/advisories/ZDI-21-1595/
CVE ID: CVE-2021-41366 State: PUBLISHED Published: 2021-11-10T00:46:37 Last Updated: 2024-08-04T03:08:32.436Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Serv
Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41366
CVE ID: CVE-2021-41367 State: PUBLISHED Published: 2021-11-10T00:46:38 Last Updated: 2024-08-04T03:08:32.431Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows S
Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: NTFS Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security
bility Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41367
CVE ID: CVE-2021-41368 State: PUBLISHED Published: 2021-11-10T00:46:40 Last Updated: 2024-11-18T20:43:28.945Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office LTSC 2021, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office 2016, Microsoft Office 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Access Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41368 - https://www.zerodayinitiative.com/advisories/ZDI-21
msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41368 - https://www.zerodayinitiative.com/advisories/ZDI-21-1309/
CVE ID: CVE-2021-41370 State: PUBLISHED Published: 2021-11-10T00:46:42 Last Updated: 2024-08-04T03:08:32.354Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows S
bility Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41370
CVE ID: CVE-2021-41371 State: PUBLISHED Published: 2021-11-10T00:46:43 Last Updated: 2024-08-04T03:08:32.214Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows
RDP) Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41371
CVE ID: CVE-2021-41372 State: PUBLISHED Published: 2021-11-10T00:46:45 Last Updated: 2024-08-04T03:08:32.244Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Power BI Report Server version 1.11.8091.10468, Power BI Report Server version 1.12.7977.29537 Problem Types: Spoofing Description: A Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exists when Power BI Report Server Template file (pbix) containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vulnerabilities together, an attacker is able to upload malicious Power BI templates file
the victim. Combining these 2 vulnerabilities together, an attacker is able to upload malicious Power BI templates files to the server using the victim's session and run scripts in the security context of the user and perform privilege escalation in case the victim has admin privileges when the victim access one of the HTML files present in the malicious Power BI template uploaded. The security update addresses the vulnerability by helping to ensure that Power BI Report Server properly sanitize file uploads. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41372
CVE ID: CVE-2021-41373 State: PUBLISHED Published: 2021-11-10T00:46:46 Last Updated: 2024-08-04T03:08:32.395Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: FSLogix Problem Types: Information Disclosure Description: FSLogix Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41373
CVE ID: CVE-2021-41374 State: PUBLISHED Published: 2021-11-10T00:46:48 Last Updated: 2024-10-01T15:52:38.229Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Sphere Problem Types: Information Disclosure Description: Azure Sphere Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41374
CVE ID: CVE-2021-41375 State: PUBLISHED Published: 2021-11-10T00:46:49 Last Updated: 2024-08-04T03:08:32.210Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Sphere Problem Types: Information Disclosure Description: Azure Sphere Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41375
CVE ID: CVE-2021-41376 State: PUBLISHED Published: 2021-11-10T00:46:51 Last Updated: 2024-08-04T03:08:32.438Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Azure Sphere Problem Types: Information Disclosure Description: Azure Sphere Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41376
CVE ID: CVE-2021-41377 State: PUBLISHED Published: 2021-11-10T00:46:52 Last Updated: 2024-08-04T03:08:32.230Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows S
Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Fast FAT File System Driver Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.ms
Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41377
CVE ID: CVE-2021-41378 State: PUBLISHED Published: 2021-11-10T00:46:54 Last Updated: 2024-08-04T03:08:32.437Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2 Problem Types: Remote Code Execution Description: Windows NTFS Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.
TFS Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41378
CVE ID: CVE-2021-41379 State: PUBLISHED Published: 2021-11-10T00:46:55.000Z Last Updated: 2025-10-21T23:25:26.741Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Wi
indows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Installer Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41379 - https://www.zerodayinitiative.com/advisories/ZDI-21-1308/
CVE ID: CVE-2021-41380 State: PUBLISHED Published: 2021-09-17T19:14:44 Last Updated: 2024-08-04T03:08:32.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealVNC Viewer 6.21.406 allows remote VNC servers to cause a denial of service (application crash) via crafted RFB protocol data. NOTE: It is asserted that this issue requires social engineering a user into connecting to a fake VNC Server. The VNC Viewer application they are using will then hang, until terminated, but no memory leak occurs - the resources are freed once the hung process is terminated and the resource usage is constant during the hang. Only the process that is connected to the fake Server is affected. This is
resource usage is constant during the hang. Only the process that is connected to the fake Server is affected. This is an application bug, not a security issue Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/totaam/a90f2bb40f5b693ccec0ae903d021b03
CVE ID: CVE-2021-41381 State: PUBLISHED Published: 2021-09-23T00:00:00 Last Updated: 2024-08-04T03:08:32.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Payara Micro Community 5.2021.6 and below allows Directory Traversal. Additional Analyst Notes: - CVE Program Container: References: - https://www.payara.fish - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-054.txt - http://packetstormsecurity.com/files/164365/Payara-Micro-Community-5.2021.6-Directory-Traversal.html - https://github.com/Net-hunter121/CVE-2021-41381/blob/main/CVE:%202021-41381-POC - https://www.exploit-db.com/exploits/50371 - http://seclists.org/fulldisclosure/2022/Nov/11 - http://
%202021-41381-POC - https://www.exploit-db.com/exploits/50371 - http://seclists.org/fulldisclosure/2022/Nov/11 - http://packetstormsecurity.com/files/169864/Payara-Platform-Path-Traversal.html
CVE ID: CVE-2021-41382 State: PUBLISHED Published: 2021-09-21T23:11:25 Last Updated: 2024-08-04T03:08:32.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.plasticscm.com/download/releasenotes/10.0.16.5622 - http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Insecure-Direct-Object-Reference.html - http://packetstormsecurity.com/files/164531/Plastic-SCM-10.0.16.5622-Improper-Access-Control.html
CVE ID: CVE-2021-41383 State: PUBLISHED Published: 2021-09-17T19:53:03 Last Updated: 2024-08-04T03:08:32.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: setup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin to execute arbitrary shell commands via shell metacharacters in the ntp_server field. Additional Analyst Notes: - CVE Program Container: References: - https://j-o-e-l-s.github.io/2021/09/15/Hacking-The-Netgear-R6020.html
CVE ID: CVE-2021-41385 State: PUBLISHED Published: 2021-09-27T05:49:56 Last Updated: 2024-08-04T03:08:32.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: The third party intelligence connector in Securonix SNYPR 6.3.1 Build 184295_0302 allows an authenticated user to obtain access to server configuration details via SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://documentation.securonix.com/onlinedoc/Content/Product%20Security/Content/Product%20Security/Authenticated%20SSRF%20in%20TPI.htm
CVE ID: CVE-2021-41387 State: PUBLISHED Published: 2021-09-17T20:36:29 Last Updated: 2024-08-04T03:08:32.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root. Additional Analyst Notes: - CVE Program Container: References: - https://lists.sr.ht/~kennylevinsen/seatd-announce/%3CGJ2IZQ.HCKS1J0LSI803%40kl.wtf%3E
CVE ID: CVE-2021-41388 State: PUBLISHED Published: 2022-01-04T21:34:44 Last Updated: 2024-08-04T03:08:32.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementation of nsAuxiliarySvc process does not perform validation on new connections before accepting the connection. Thus any low privileged user can connect and call external methods defined in XPC service as root, elevating their privilege to the highest level. Additional Analyst Notes: - CVE Program Container: References: - https://www.netskope.com/company/security-compliance-and-assurance/netskope-security-advisor
am Container: References: - https://www.netskope.com/company/security-compliance-and-assurance/netskope-security-advisory-nskpsa-2021-002
CVE ID: CVE-2021-41390 State: PUBLISHED Published: 2021-09-17T20:55:54 Last Updated: 2024-08-04T03:08:32.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection. Additional Analyst Notes: - CVE Program Container: References: - https://the-it-wonders.blogspot.com/2021/09/ericsson-ecm-enterprise-content_17.html
CVE ID: CVE-2021-41391 State: PUBLISHED Published: 2021-09-17T20:56:21 Last Updated: 2024-08-04T03:08:32.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover. Additional Analyst Notes: - CVE Program Container: References: - https://the-it-wonders.blogspot.com/2021/09/ericsson-ecm-enterprise-content.html
CVE ID: CVE-2021-41392 State: PUBLISHED Published: 2021-09-17T21:24:02 Last Updated: 2024-08-04T03:08:32.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal Electron API. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BoostIO/BoostNote-App/issues/856
CVE ID: CVE-2021-41393 State: PUBLISHED Published: 2021-09-18T15:15:14 Last Updated: 2024-08-04T03:08:32.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows forgery of SSH host certificates in some situations. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gravitational/teleport/releases/tag/v4.4.11 - https://github.com/gravitational/teleport/releases/tag/v5.2.4 - https://github.com/gravitational/teleport/releases/tag/v6.2.12 - https://github.com/gravitational/teleport/releases/tag/v7.1.1
CVE ID: CVE-2021-41394 State: PUBLISHED Published: 2021-09-18T15:14:43 Last Updated: 2024-08-04T03:08:32.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows alteration of build artifacts in some situations. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gravitational/teleport/releases/tag/v4.4.11 - https://github.com/gravitational/teleport/releases/tag/v5.2.4 - https://github.com/gravitational/teleport/releases/tag/v6.2.12 - https://github.com/gravitational/teleport/releases/tag/v7.1.1
CVE ID: CVE-2021-41395 State: PUBLISHED Published: 2021-09-18T15:15:01 Last Updated: 2024-08-04T03:08:32.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or username. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gravitational/teleport/releases/tag/v6.2.12 - https://github.com/gravitational/teleport/releases/tag/v7.1.1
CVE ID: CVE-2021-41396 State: PUBLISHED Published: 2022-07-11T11:38:05 Last Updated: 2024-08-04T03:08:32.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-handling module, in which a heap-based buffer overflow happens. An attacker can leverage this to launch a DoS attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.live555.com/liveMedia/public/changelog.txt - http://lists.live555.com/pipermail/live-devel/2021-September/021994.html
CVE ID: CVE-2021-41402 State: PUBLISHED Published: 2022-06-16T09:35:27 Last Updated: 2024-08-04T03:08:32.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: flatCore-CMS v2.0.8 has a code execution vulnerability, which could let a remote malicious user execute arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCore-CMS/issues/59
CVE ID: CVE-2021-41403 State: PUBLISHED Published: 2022-06-15T21:11:33 Last Updated: 2024-08-04T03:08:32.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCore-CMS/issues/60