Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-42537 State: PUBLISHED Published: 2022-07-27T20:20:22.000Z Last Updated: 2025-04-17T15:50:48.868Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: VISAM Products: VBASE Pro-RT/ Server-RT (Web Remote) Problem Types: CVE-611 Description: VISAM VBASE version 11.6.0.6 processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-308-01
CVE ID: CVE-2021-42538 State: PUBLISHED Published: 2021-10-22T13:23:02.452388Z Last Updated: 2024-09-17T00:11:59.293Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Emerson Products: WirelessHART Gateway Problem Types: CWE-78 Description: The affected product is vulnerable to a parameter injection via passphrase, which enables the attacker to supply uncontrolled input. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-278-02
CVE ID: CVE-2021-42539 State: PUBLISHED Published: 2021-10-22T13:23:08.904247Z Last Updated: 2024-09-16T18:03:13.053Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Emerson Products: WirelessHART Gateway Problem Types: CWE-306 Description: The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-278-02
CVE ID: CVE-2021-42540 State: PUBLISHED Published: 2021-10-22T13:23:22.604576Z Last Updated: 2024-09-16T21:04:12.096Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Emerson Products: WirelessHART Gateway Problem Types: CWE-123 Description: The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-278-02
CVE ID: CVE-2021-42542 State: PUBLISHED Published: 2021-10-22T13:23:29.883541Z Last Updated: 2024-09-16T17:52:49.145Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Emerson Products: WirelessHART Gateway Problem Types: CWE-22 Description: The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-278-02
CVE ID: CVE-2021-42543 State: PUBLISHED Published: 2021-11-05T15:39:21 Last Updated: 2024-08-04T03:38:49.662Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: AzeoTech Products: DAQFactory Problem Types: CWE-242 Description: The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-308-02
CVE ID: CVE-2021-42544 State: PUBLISHED Published: 2021-11-30T11:28:14 Last Updated: 2024-08-04T03:38:49.221Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Business-DNA Solutions GmbH Products: TopEase Problem Types: CWE-307 Description: Missing Rate Limiting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27 on the Login Form allows an unauthenticated remote attacker to perform multiple login attempts, which facilitates gaining privileges. Additional Analyst Notes: - CVE Program Container: References: - https://confluence.topease.ch/confluence/display/DOC/Release+Notes
CVE ID: CVE-2021-42545 State: PUBLISHED Published: 2021-11-30T11:28:15 Last Updated: 2024-08-04T03:38:49.303Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Business-DNA Solutions GmbH Products: TopEase Problem Types: CWE-613 Description: An insufficient session expiration vulnerability exists in Business-DNA Solutions GmbH’s TopEase® Platform Version <= 7.1.27, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions. Additional Analyst Notes: - CVE Program Container: References: - https://confluence.topease.ch/confluence/display/DOC/Release+Notes
CVE ID: CVE-2021-42546 State: PUBLISHED Published: 2021-12-13T10:54:32 Last Updated: 2024-08-04T03:38:49.264Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: WP Cloud Plugins Products: Use-Your-Drive Problem Types: CWE-79 Description: Insufficient Input Validation in the search functionality of Wordpress plugin Use-Your-Drive prior to 1.18.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.wpcloudplugins.com/wp-content/plugins/use-your-drive/_documentation/index.html#releasenotes
CVE ID: CVE-2021-42547 State: PUBLISHED Published: 2021-12-13T10:54:33 Last Updated: 2024-08-04T03:38:48.826Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: WP Cloud Plugins Products: Out-of-the-Box Problem Types: CWE-79 Description: Insufficient Input Validation in the search functionality of Wordpress plugin Out-of-the-Box prior to 1.20.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.wpcloudplugins.com/wp-content/plugins/out-of-the-box/_documentation/index.html#releasenotes
CVE ID: CVE-2021-42548 State: PUBLISHED Published: 2021-12-13T10:54:34 Last Updated: 2024-08-04T03:38:48.790Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: WP Cloud Plugins Products: Share-one-Drive Problem Types: CWE-79 Description: Insufficient Input Validation in the search functionality of Wordpress plugin Share-one-Drive prior to 1.15.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.wpcloudplugins.com/wp-content/plugins/share-one-drive/_documentation/index.html#releasenotes
CVE ID: CVE-2021-42549 State: PUBLISHED Published: 2021-12-13T10:54:34 Last Updated: 2024-08-04T03:38:49.191Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: WP Cloud Plugins Products: Lets-Box Problem Types: CWE-79 Description: Insufficient Input Validation in the search functionality of Wordpress plugin Lets-Box prior to 1.15.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.wpcloudplugins.com/wp-content/plugins/lets-box/_documentation/index.html#releasenotes
CVE ID: CVE-2021-42550 State: PUBLISHED Published: 2021-12-16T00:00:00 Last Updated: 2024-08-04T03:38:49.194Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: QOS.ch Products: logback Problem Types: CWE-502 Description: In logback version 1.2.7 and prior versions, an attacker with the required privileges to edit configurations files could craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers. Additional Analyst Notes: - CVE Program Container: References: - http://logback.qos.ch/news.html - https://github.com/cn-panda/logbackRceDemo - https://jira.qos.ch/browse/LOGBACK-1591 - https://security.netapp.com/advisory/ntap-20211
.com/cn-panda/logbackRceDemo - https://jira.qos.ch/browse/LOGBACK-1591 - https://security.netapp.com/advisory/ntap-20211229-0001/ - http://seclists.org/fulldisclosure/2022/Jul/11 - http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html - https://cert-portal.siemens.com/productcert/pdf/ssa-371761.pdf
CVE ID: CVE-2021-42551 State: PUBLISHED Published: 2022-01-14T09:52:25 Last Updated: 2024-08-04T03:38:49.264Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: AlCoda Products: NetBiblio WebOPAC Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in the search functionality of AlCoda NetBiblio WebOPAC allows an unauthenticated user to craft a reflected Cross-Site Scripting attack. This issue affects: AlCoda NetBiblio WebOPAC versions prior to 4.0.0.320; versions later than 4.0.0.328. This issue does not affect: AlCoda NetBiblio WebOPAC version 4.0.0.335 and later versions. Additional Analyst Notes: - CVE Program Container: References: -
NetBiblio WebOPAC version 4.0.0.335 and later versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.redguard.ch/advisories/netbiblio_webopac.txt
CVE ID: CVE-2021-42552 State: PUBLISHED Published: 2022-03-16T12:55:09 Last Updated: 2024-08-04T03:38:49.337Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Archivista GmbH Products: ArchivistaBox webclient Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in ArchivistaBox webclient allows an attacker to craft a malicious link, executing JavaScript in the context of a victim's browser. This issue affects all ArchivistaBox versions prior to 2022/I. Additional Analyst Notes: - CVE Program Container: References: - https://it-sec.de/schwachstelle-in-archivista-dms/
CVE ID: CVE-2021-42553 State: PUBLISHED Published: 2022-10-21T00:00:00.000Z Last Updated: 2025-05-07T20:10:49.445Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: STMicroelectronics STM32Cube Products: STM32 USB Host Library Problem Types: buffer overflow Description: A buffer overflow vulnerability in stm32_mw_usb_host of STMicroelectronics in versions before 3.5.1 allows an attacker to execute arbitrary code when the descriptor contains more endpoints than USBH_MAX_NUM_ENDPOINTS. The library is typically integrated when using a RTOS such as FreeRTOS on STM32 MCUs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
as FreeRTOS on STM32 MCUs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/STMicroelectronics/stm32_mw_usb_host/pull/4 - https://github.com/STMicroelectronics/stm32_mw_usb_host
CVE ID: CVE-2021-42554 State: PUBLISHED Published: 2022-02-03T01:40:56.000Z Last Updated: 2025-11-04T19:12:43.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM. Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge
ivileges to SMM. Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022012 - https://security.netapp.com/advisory/ntap-20220216-0007/ - https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
CVE ID: CVE-2021-42555 State: PUBLISHED Published: 2022-01-15T16:28:01 Last Updated: 2024-08-04T03:38:49.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity before 26.2 allows temporary remote Denial of Service (abort) because of missing call-setup input validation. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm
CVE ID: CVE-2021-42556 State: PUBLISHED Published: 2021-10-22T18:36:14 Last Updated: 2024-08-04T03:38:49.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to load a trained model archive, an attacker has arbitrary write capability within specific directories via a crafted archive file. Additional Analyst Notes: - CVE Program Container: References: - https://rasa.com - https://github.com/RasaHQ/rasa-x-security-advisories/security/advisories/GHSA-vp2h-j6px-56rc
CVE ID: CVE-2021-42557 State: PUBLISHED Published: 2021-11-01T11:14:56 Last Updated: 2024-08-04T03:38:49.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Jeedom through 4.1.19, a bug allows a remote attacker to bypass API access and retrieve users credentials. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jeedom/core/releases - https://www.synacktiv.com/sites/default/files/2021-10/advisory_Jeedom_Auth_Bypass_CVE-2021-42557.pdf
CVE ID: CVE-2021-42558 State: PUBLISHED Published: 2022-01-12T19:06:45 Last Updated: 2024-08-04T03:38:49.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CALDERA 2.8.1. It contains multiple reflected, stored, and self XSS vulnerabilities that may be exploited by authenticated and unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mitre/caldera/releases - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42558-Multiple%20XSS-MITRE%20Caldera
CVE ID: CVE-2021-42559 State: PUBLISHED Published: 2022-01-12T19:11:03 Last Updated: 2024-08-04T03:38:49.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CALDERA 2.8.1. It contains multiple startup "requirements" that execute commands when starting the server. Because these commands can be changed via the REST API, an authenticated user can insert arbitrary commands that will execute when the server is restarted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mitre/caldera/releases - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42559-Command%20Injection%20Via%20Configurations-MITRE%20Caldera
CVE ID: CVE-2021-42560 State: PUBLISHED Published: 2022-01-12T18:58:06 Last Updated: 2024-08-04T03:38:49.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CALDERA 2.9.0. The Debrief plugin receives base64 encoded "SVG" parameters when generating a PDF document. These SVG documents are parsed in an unsafe manner and can be leveraged for XXE attacks (e.g., File Exfiltration, Server Side Request Forgery, Out of Band Exfiltration, etc.). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mitre/caldera/releases - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42560-Unsafe%20XML%20Parsing-MITRE%20Caldera
CVE ID: CVE-2021-42561 State: PUBLISHED Published: 2022-01-12T18:52:40 Last Updated: 2024-08-04T03:38:49.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CALDERA 2.8.1. When activated, the Human plugin passes the unsanitized name parameter to a python "os.system" function. This allows attackers to use shell metacharacters (e.g., backticks "``" or dollar parenthesis "$()" ) in order to escape the current command and execute arbitrary shell commands. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mitre/caldera/releases - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42561-Command%20Injection%20Vi
itre/caldera/releases - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42561-Command%20Injection%20Via%20the%20Human%20Plugin-MITRE%20Caldera
CVE ID: CVE-2021-42562 State: PUBLISHED Published: 2022-01-12T18:46:00 Last Updated: 2024-08-04T03:38:49.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CALDERA 2.8.1. It does not properly segregate user privileges, resulting in non-admin users having access to read and modify configuration or other components that should only be accessible by admin users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mitre/caldera/releases - https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42562-Improper%20Access%20Control-MITRE%20Caldera
CVE ID: CVE-2021-42563 State: PUBLISHED Published: 2021-11-12T20:48:49 Last Updated: 2024-08-04T03:38:49.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an Unquoted Service Path in NI Service Locator (nisvcloc.exe) in versions prior to 18.0 on Windows. This may allow an authorized local user to insert arbitrary code into the unquoted service path and escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.ni.com/en-us/support/documentation/supplemental/21/unquoted-service-path-in-ni-service-locator.html
CVE ID: CVE-2021-42564 State: PUBLISHED Published: 2021-11-30T19:15:16 Last Updated: 2024-08-04T03:38:49.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: An open redirect through HTML injection in confidential messages in Cryptshare before 5.1.0 allows remote attackers (with permission to provide confidential messages via Cryptshare) to redirect targeted victims to any URL via the '<meta http-equiv="refresh"' substring in the editor parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-057.txt
CVE ID: CVE-2021-42565 State: PUBLISHED Published: 2021-10-18T07:24:10 Last Updated: 2024-08-04T03:38:49.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: myfactory.FMS before 7.1-912 allows XSS via the UID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.redteam-pentesting.de/advisories/rt-sa-2021-001
CVE ID: CVE-2021-42566 State: PUBLISHED Published: 2021-10-18T07:24:01 Last Updated: 2024-08-04T03:38:49.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: myfactory.FMS before 7.1-912 allows XSS via the Error parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.redteam-pentesting.de/advisories/rt-sa-2021-001
CVE ID: CVE-2021-42567 State: PUBLISHED Published: 2021-12-07T21:10:49 Last Updated: 2024-08-04T03:38:49.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apereo/cas/releases - https://apereo.github.io/2021/10/18/restvuln/
CVE ID: CVE-2021-42568 State: PUBLISHED Published: 2021-11-02T12:42:39 Last Updated: 2024-08-04T03:38:49.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function via a low-privileged account. Additional Analyst Notes: - CVE Program Container: References: - https://support.sonatype.com - https://support.sonatype.com/hc/en-us/articles/4408801690515-CVE-2021-42568-Nexus-Repository-Manager-3-Incorrect-Access-Control-October-27-2021
CVE ID: CVE-2021-42574 State: PUBLISHED Published: 2021-11-01T00:00:00 Last Updated: 2024-08-04T03:38:49.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such that targeted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium offers the following alter
ted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard and the Unicode Bidirectional Algorithm (all versions). Due to text display behavior when text includes left-to-right and right-to-left characters, the visual order of tokens may be different from their logical order. Additionally, control characters needed to fully support the requirements of bidirectional text can further obfuscate the logical order of tokens. Unless mitigated, an adversary could cra
ements of bidirectional text can further obfuscate the logical order of tokens. Unless mitigated, an adversary could craft source code such that the ordering of tokens perceived by human reviewers does not match what will be processed by a compiler/interpreter/etc. The Unicode Consortium has documented this class of vulnerability in its document, Unicode Technical Report #36, Unicode Security Considerations. The Unicode Consortium also provides guidance on mitigations for this class of issues in Unicode Technical Standard #39, Unicode Security Mechanisms, and in Unicode Standard Annex #31, Unicode Identifier and Pattern Syntax. Also, the BIDI specification allows applications to tailor the i
ndard Annex #31, Unicode Identifier and Pattern Syntax. Also, the BIDI specification allows applications to tailor the implementation in ways that can mitigate misleading visual reordering in program text; see HL4 in Unicode Standard Annex #9, Unicode Bidirectional Algorithm. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.unicode.org/versions/Unicode14.0.0/ - https://trojansource.codes - http://www.openwall.com/lists/oss-security/2021/11/01/1 - http://www.openwall.com/lists/oss-security/2021/11/01/4 - http://www.openwall.com/lists/oss-security/2021/11/01/6 - http://www.openwall.com/lists/oss-security/2021/11/01/5 - http://www.openwall.com
.com/lists/oss-security/2021/11/01/6 - http://www.openwall.com/lists/oss-security/2021/11/01/5 - http://www.openwall.com/lists/oss-security/2021/11/02/10 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUPA37D57VPTDLSXOOGF4UXUEADOC4PQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LQNTFF24ROHLVPLUOEISBN3F7QM27L4U/ - https://www.kb.cert.org/vuls/id/999008 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IH2RG5YTR6ZZOLUV3EUPZEIJR7XHJLVD/ - https://www.scyon.nl/post/trojans-in-your-source-code - https://www.unicode.org/reports/tr36/ - https://
ZEIJR7XHJLVD/ - https://www.scyon.nl/post/trojans-in-your-source-code - https://www.unicode.org/reports/tr36/ - https://www.unicode.org/reports/tr39/ - https://www.unicode.org/reports/tr31/ - https://www.unicode.org/reports/tr9/tr9-44.html#HL4 - https://www.starwindsoftware.com/security/sw-20220804-0002/ - https://security.gentoo.org/glsa/202210-09
CVE ID: CVE-2021-42575 State: PUBLISHED Published: 2021-10-18T14:38:13 Last Updated: 2024-08-04T03:38:49.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements. Additional Analyst Notes: - CVE Program Container: References: - https://www.oracle.com/security-alerts/cpujan2022.html - https://docs.google.com/document/d/11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50/ - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-42576 State: PUBLISHED Published: 2021-10-18T14:36:43 Last Updated: 2024-08-04T03:38:49.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bluemonday sanitizer before 1.0.16 for Go, and before 0.0.8 for Python (in pybluemonday), does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/document/d/11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50/