Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-20650 State: PUBLISHED Published: 2021-02-12T06:15:51 Last Updated: 2024-08-03T17:45:45.277Z Vendors: ELECOM CO.,LTD. Products: NCC-EWF100RMWH2 Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in ELECOM NCC-EWF100RMWH2 allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be started. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN47580234/index.html
CVE ID: CVE-2021-20651 State: PUBLISHED Published: 2021-02-12T06:15:52 Last Updated: 2024-08-03T17:45:45.326Z Vendors: ELECOM CO.,LTD. Products: ELECOM File Manager Problem Types: Directory traversal Description: Directory traversal vulnerability in ELECOM File Manager all versions allows remote attackers to create an arbitrary file or overwrite an existing file in a directory which can be accessed with the application privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210126-01/ - https://jvn.jp/en/jp/JVN98115035/index.html
CVE ID: CVE-2021-20652 State: PUBLISHED Published: 2021-02-05T09:35:23 Last Updated: 2024-08-03T17:45:45.342Z Vendors: J. Peters Products: Name Directory Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Name Directory 1.17.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/name-directory/ - https://jvn.jp/en/jp/JVN50470170/index.html
CVE ID: CVE-2021-20653 State: PUBLISHED Published: 2021-02-17T02:05:29 Last Updated: 2024-08-03T17:45:45.463Z Vendors: NEC Platforms, Ltd. Products: Calsos CSDJ Problem Types: Fails to restrict access Description: Calsos CSDJ (CSDJ-B 01.08.00 and earlier, CSDJ-H 01.08.00 and earlier, CSDJ-D 01.08.00 and earlier, and CSDJ-A 03.08.00 and earlier) allows remote attackers to bypass access restriction and to obtain unauthorized historical data without access privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-006.html - https://jvn.jp/en/jp/JVN87164507/index.html
CVE ID: CVE-2021-20654 State: PUBLISHED Published: 2021-02-10T08:50:14 Last Updated: 2024-08-03T17:45:45.121Z Vendors: Wekan Team Products: Wekan Problem Types: CWE-79 Description: Wekan, open source kanban board system, between version 3.12 and 4.11, is vulnerable to multiple stored cross-site scripting. This is named 'Fieldbleed' in the vendor's site. Additional Analyst Notes: - CVE Program Container: References: - https://wekan.github.io/hall-of-fame/fieldbleed/ - https://jvn.jp/en/jp/JVN80785288/
CVE ID: CVE-2021-20655 State: PUBLISHED Published: 2021-02-17T02:05:30 Last Updated: 2024-08-03T17:45:45.247Z Vendors: Soliton Systems K.K. Products: FileZen Problem Types: OS Command Injection Description: FileZen (V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2) allows a remote attacker with administrator rights to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.soliton.co.jp/support/2021/004334.html - https://jvn.jp/en/jp/JVN58774946/index.html
CVE ID: CVE-2021-20656 State: PUBLISHED Published: 2021-02-24T03:51:44 Last Updated: 2024-08-03T17:45:45.117Z Vendors: Contec Co., Ltd. Products: SolarView Compact Problem Types: Exposure of information through directory listing Description: Exposure of information through directory listing in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain the information inside the system, such as directories and/or file configurations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarv
/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf - https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf - https://jvn.jp/en/jp/JVN37417423/index.html
CVE ID: CVE-2021-20657 State: PUBLISHED Published: 2021-02-24T03:51:44 Last Updated: 2024-08-03T17:45:45.172Z Vendors: Contec Co., Ltd. Products: SolarView Compact Problem Types: Improper Access Control Description: Improper access control vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain and/or alter the setting information without the access privilege via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf - https://www.contec.com/jp/download/co
/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf - https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf - https://jvn.jp/en/jp/JVN37417423/index.html
CVE ID: CVE-2021-20658 State: PUBLISHED Published: 2021-02-24T03:51:45 Last Updated: 2024-08-03T17:45:45.391Z Vendors: Contec Co., Ltd. Products: SolarView Compact Problem Types: OS Command Injection Description: SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf - https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloadi
10216.pdf - https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf - https://jvn.jp/en/jp/JVN37417423/index.html
CVE ID: CVE-2021-20659 State: PUBLISHED Published: 2021-02-24T03:51:46 Last Updated: 2024-08-03T17:45:45.371Z Vendors: Contec Co., Ltd. Products: SolarView Compact Problem Types: Unrestricted upload of file with dangerous type Description: SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script, an attacker may execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf - https://www.contec.com/jp/download/co
CVE ID: CVE-2021-20660 State: PUBLISHED Published: 2021-02-24T03:51:46 Last Updated: 2024-08-03T17:45:45.358Z Vendors: Contec Co., Ltd. Products: SolarView Compact Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf - https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&down
iew_210216.pdf - https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf - https://jvn.jp/en/jp/JVN37417423/index.html
CVE ID: CVE-2021-20661 State: PUBLISHED Published: 2021-02-24T03:51:47 Last Updated: 2024-08-03T17:45:45.234Z Vendors: Contec Co., Ltd. Products: SolarView Compact Problem Types: Directory traversal Description: Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to delete arbitrary files and/or directories on the server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf - https://www.contec.com/jp/download/contract/contract2/?itemid=b2
rt/security-info/contec_security_solarview_210216.pdf - https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf - https://jvn.jp/en/jp/JVN37417423/index.html
CVE ID: CVE-2021-20662 State: PUBLISHED Published: 2021-02-24T03:51:48 Last Updated: 2024-08-03T17:45:45.501Z Vendors: Contec Co., Ltd. Products: SolarView Compact Problem Types: Missing authentication for critical function Description: Missing authentication for critical function in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to alter the setting information without the access privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf - https://www.contec.com/jp/download/c
m/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf - https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf - https://jvn.jp/en/jp/JVN37417423/index.html
CVE ID: CVE-2021-20663 State: PUBLISHED Published: 2021-03-05T09:20:20 Last Updated: 2024-08-03T17:45:45.341Z Vendors: Six Apart Ltd. Products: Movable Type Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in in Role authority setting screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type 6.7.5 and earlier (Movable Type 6.7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: Refere
tackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN66542874/index.html - https://movabletype.org/news/2021/02/mt-760-676-released.html
CVE ID: CVE-2021-20664 State: PUBLISHED Published: 2021-03-05T09:20:20 Last Updated: 2024-08-03T17:45:45.233Z Vendors: Six Apart Ltd. Products: Movable Type Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type 6.7.5 and earlier (Movable Type 6.7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References
ers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN66542874/index.html - https://movabletype.org/news/2021/02/mt-760-676-released.html
CVE ID: CVE-2021-20665 State: PUBLISHED Published: 2021-03-05T09:20:21 Last Updated: 2024-08-03T17:45:45.209Z Vendors: Six Apart Ltd. Products: Movable Type Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN66542874/index.html -
vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN66542874/index.html - https://movabletype.org/news/2021/02/mt-760-676-released.html
CVE ID: CVE-2021-20667 State: PUBLISHED Published: 2021-03-10T09:20:31 Last Updated: 2024-08-03T17:45:45.356Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Cross-site scripting Description: Stored cross-site scripting vulnerability due to inadequate CSP (Content Security Policy) configuration in GROWI versions v4.2.2 and earlier allows remote authenticated attackers to inject an arbitrary script via a specially crafted content. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/ - https://jvn.jp/en/vu/JVNVU94889258/index.html
CVE ID: CVE-2021-20668 State: PUBLISHED Published: 2021-03-10T09:20:31 Last Updated: 2024-08-03T17:45:45.504Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Path Traversal Description: Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read an arbitrary path via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/ - https://jvn.jp/en/vu/JVNVU94889258/index.html
CVE ID: CVE-2021-20669 State: PUBLISHED Published: 2021-03-10T09:20:32 Last Updated: 2024-08-03T17:45:45.355Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Path Traversal Description: Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read and/or delete an arbitrary path via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/ - https://jvn.jp/en/vu/JVNVU94889258/index.html
CVE ID: CVE-2021-20670 State: PUBLISHED Published: 2021-03-10T09:20:33 Last Updated: 2024-08-03T17:45:45.348Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Improper Access Control Description: Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to read the user's personal information and/or server's internal information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/ - https://jvn.jp/en/vu/JVNVU94889258/index.html
CVE ID: CVE-2021-20671 State: PUBLISHED Published: 2021-03-10T09:20:34 Last Updated: 2024-08-03T17:45:45.225Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Improper Input Validation Description: Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files on the server, which may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/ - https://jvn.jp/en/vu/JVNVU94889258/index.html
CVE ID: CVE-2021-20672 State: PUBLISHED Published: 2021-03-10T09:20:34 Last Updated: 2024-08-03T17:45:45.518Z Vendors: WESEEK, Inc. Products: GROWI (v4.2 Series) Problem Types: Cross-site scripting Description: Reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters in GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/security/2021/03/09/vulnerability/growi-prevent-xss5/ - https://jvn.jp/en/jp/JVN86438134/index.html
CVE ID: CVE-2021-20673 State: PUBLISHED Published: 2021-03-10T09:20:35 Last Updated: 2024-08-03T17:45:45.477Z Vendors: WESEEK, Inc. Products: GROWI (v4.2 Series) Problem Types: Cross-site scripting Description: Stored cross-site scripting vulnerability in Admin Page of GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/security/2021/03/09/vulnerability/growi-prevent-xss5/ - https://jvn.jp/en/jp/JVN86438134/index.html
CVE ID: CVE-2021-20674 State: PUBLISHED Published: 2021-03-12T01:00:19 Last Updated: 2024-08-03T17:45:45.131Z Vendors: NTT TechnoCross Corporation Products: Installer of MagicConnect Client program Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of MagicConnect Client program distributed before 2021 March 1 allows an attacker to gain privileges and via a Trojan horse DLL in an unspecified directory and to execute arbitrary code with the privilege of the user invoking the installer when a terminal is connected remotely using Remote desktop. Additional Analyst Notes: - CVE Program Container: References: - https://www.magicconnect
remotely using Remote desktop. Additional Analyst Notes: - CVE Program Container: References: - https://www.magicconnect.net/information/202103110900-2 - https://jvn.jp/en/jp/JVN18056666/index.html
CVE ID: CVE-2021-20675 State: PUBLISHED Published: 2021-03-18T00:56:04 Last Updated: 2024-08-03T17:45:45.506Z Vendors: M-System Co., Ltd. Products: M-System DL8 series Problem Types: Denial-of-service (DoS) Description: M-System DL8 series (type A (DL8-A) versions prior to Ver3.0, type B (DL8-B) versions prior to Ver3.0, type C (DL8-C) versions prior to Ver3.0, type D (DL8-D) versions prior to Ver3.0, and type E (DL8-E) versions prior to Ver3.0) allows remote authenticated attackers to cause a denial of service (DoS) condition via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.m-system.co.jp/download_w/dl_dl8updaterE.html - https://jvn.jp/en
es: - CVE Program Container: References: - https://www.m-system.co.jp/download_w/dl_dl8updaterE.html - https://jvn.jp/en/jp/JVN47497535/index.html
CVE ID: CVE-2021-20676 State: PUBLISHED Published: 2021-03-18T00:56:05 Last Updated: 2024-08-03T17:45:45.013Z Vendors: M-System Co., Ltd. Products: M-System DL8 series Problem Types: Improper Access Control Description: M-System DL8 series (type A (DL8-A) versions prior to Ver3.0, type B (DL8-B) versions prior to Ver3.0, type C (DL8-C) versions prior to Ver3.0, type D (DL8-D) versions prior to Ver3.0, and type E (DL8-E) versions prior to Ver3.0) allows remote authenticated attackers to bypass access restriction and conduct prohibited operations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.m-system.co.jp/download_w/dl_dl8updaterE.html -
tional Analyst Notes: - CVE Program Container: References: - https://www.m-system.co.jp/download_w/dl_dl8updaterE.html - https://jvn.jp/en/jp/JVN47497535/index.html
CVE ID: CVE-2021-20677 State: PUBLISHED Published: 2021-03-26T08:50:26 Last Updated: 2024-08-03T17:45:45.461Z Vendors: NEC Platforms, Ltd. Products: UNIVERGE Aspire series PBX Problem Types: Denial-of-service (DoS) Description: UNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00) allows a remote authenticated attacker to cause system down and a denial of service (DoS) condition by sending a specially crafted command. Additional Analyst Notes: - CVE Program Container: References: - https://www.necplatforms.co.jp/en/press/security_adv.html - https://jvn.jp/en/jp/JVN12737530/inde
ntainer: References: - https://www.necplatforms.co.jp/en/press/security_adv.html - https://jvn.jp/en/jp/JVN12737530/index.html
CVE ID: CVE-2021-20678 State: PUBLISHED Published: 2021-03-18T00:56:05 Last Updated: 2024-08-03T17:45:45.035Z Vendors: Stranger Studios Products: Paid Memberships Pro Problem Types: SQL Injection Description: SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.paidmembershipspro.com/pmpro-update-2-5-6/ - https://wordpress.org/plugins/paid-memberships-pro/ - https://jvn.jp/en/jp/JVN08191557/index.html
CVE ID: CVE-2021-20679 State: PUBLISHED Published: 2021-03-25T05:30:18 Last Updated: 2024-08-03T17:45:45.529Z Vendors: Fuji Xerox Co.,Ltd. Products: Fuji Xerox multifunction devices and printers Problem Types: Denial-of-service (DoS) Description: Fuji Xerox multifunction devices and printers (DocuCentre-VII C7773/C6673/C5573/C4473/C3373/C3372/C2273, DocuCentre-VII C7788/C6688/C5588, ApeosPort-VII C7773/C6673/C5573/C4473/C3373/C3372 C2273, ApeosPort-VII C7788/C6688/C5588, ApeosPort C7070/C6570/C5570/C4570/C3570/C3070/C7070G/C6570G/C5570G/C4570G/C3570G/C3070G, ApeosPort-VII C4421/C3321, ApeosPort C3060/C2560/C2060/C3060G/C2560G/C2060G, ApeosPort-VII CP4421, ApeosPort Print C5570, ApeosPort 557
4421/C3321, ApeosPort C3060/C2560/C2060/C3060G/C2560G/C2060G, ApeosPort-VII CP4421, ApeosPort Print C5570, ApeosPort 5570/4570/5570G/4570G, ApeosPort 3560/3060/2560/3560G/3060G/2560G, ApeosPort-VII 5021/ 4021, ApeosPort-VII P5021, DocuPrint CP 555 d/505 d, DocuPrint P505 d, PrimeLink C9065/C9070, DocuPrint CP475AP, and DocuPrint P475AP) allow an attacker to cause a denial of service (DoS) condition and abnormal end (ABEND) of the affected products via sending a specially crafted command. Additional Analyst Notes: - CVE Program Container: References: - https://www.fujixerox.co.jp/company/news/notice/2021/0319_announce.html - https://www.fujixerox.com/eng/company/news/notice/2021/0319_announce
co.jp/company/news/notice/2021/0319_announce.html - https://www.fujixerox.com/eng/company/news/notice/2021/0319_announce.html - https://jvn.jp/en/jp/JVN37607293/index.html
CVE ID: CVE-2021-20680 State: PUBLISHED Published: 2021-04-26T00:20:39 Last Updated: 2024-08-03T17:45:45.497Z Vendors: NEC Corporation Products: NEC Aterm devices Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firmware Ver.1.5.1 and earlier, Aterm WG1200HS2 firmware Ver.2.5.0 and earlier, Aterm WG1200HP3 firmware Ver.1.3.1 and earlier, Aterm WG1200HP2 firmware Ver.2.5.0 and earlier, Aterm W1200EX firmware Ver.1.3.1 and earlier, Aterm W1200EX-MS firmware Ver.1.3.1 and earlier, A
Ver.2.5.0 and earlier, Aterm W1200EX firmware Ver.1.3.1 and earlier, Aterm W1200EX-MS firmware Ver.1.3.1 and earlier, Aterm WG1200HS firmware all versions Aterm WG1200HP firmware all versions Aterm WF800HP firmware all versions Aterm WF300HP2 firmware all versions Aterm WR8165N firmware all versions Aterm W500P firmware all versions, and Aterm W300P firmware all versions) allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-008.html - https://jvn.jp/en/jp/JVN67456944/index.html