Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
n, deletion or modification access to critical data or all Java VM accessible data. Description: Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Java VM. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data. CVSS 3.1 Base Score 4.8 (Integrity impacts). CVSS Vector: (CVSS:
access to critical data or all Java VM accessible data. CVSS 3.1 Base Score 4.8 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujan2021.html
CVE ID: CVE-2021-1994 State: PUBLISHED Published: 2021-01-20T14:49:59 Last Updated: 2024-09-26T18:46:22.785Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Oracle Corporation Products: WebLogic Server Problem Types: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. Description: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability all
Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujan2021.html
CVE ID: CVE-2021-1995 State: PUBLISHED Published: 2021-01-20T14:49:59 Last Updated: 2024-09-26T18:46:12.219Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Oracle Corporation Products: WebLogic Server Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data. Description: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that
ty in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-ale
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujan2021.html
CVE ID: CVE-2021-1996 State: PUBLISHED Published: 2021-01-20T14:49:59 Last Updated: 2024-09-26T18:46:00.855Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: Oracle Corporation Products: WebLogic Server Problem Types: Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. Description: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (compone
r accessible data. Description: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 2.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N). Additional Analyst Notes: - CV
4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujan2021.html
CVE ID: CVE-2021-1997 State: PUBLISHED Published: 2021-01-20T14:49:59 Last Updated: 2024-09-26T18:45:45.496Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Oracle Corporation Products: Hospitality Reporting and Analytics Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized access to critical data or complete access to all Oracle Hospit
ng and Analytics accessible data as well as unauthorized access to critical data or complete access to all Oracle Hospitality Reporting and Analytics accessible data. Description: Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Report). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality Reporting and Analytics accessibl
d creation, deletion or modification access to critical data or all Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized access to critical data or complete access to all Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujan2021.html
CVE ID: CVE-2021-1998 State: PUBLISHED Published: 2021-01-20T14:49:59 Last Updated: 2024-09-26T18:45:34.556Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L) Vendors: Oracle Corporation Products: MySQL Server Problem Types: Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. Description: Vulnerability in the MySQL Server product of Oracle MySQL (component: Ser
ce (partial DOS) of MySQL Server. Description: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 3.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L). Additional A
core 3.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujan2021.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/ - https://security.netapp.com/advisory/ntap-20210219-0003/ - https://security.gentoo.org/glsa/202105-27
CVE ID: CVE-2021-1999 State: PUBLISHED Published: 2021-01-20T14:50:00 Last Updated: 2024-09-26T18:45:23.580Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N) Vendors: Oracle Corporation Products: Sun ZFS Storage Appliance Kit (AK) Software Problem Types: Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle ZFS Storage Appliance Kit, attacks may significantly impact additional products. Successful attacks of
ity is in Oracle ZFS Storage Appliance Kit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle ZFS Storage Appliance Kit accessible data. Description: Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS subsystems). The supported version that is affected is 8.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks require human interaction from a p
iance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle ZFS Storage Appliance Kit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle ZFS Storage Appliance Kit accessible data. CVSS 3.1 Base Score 5.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujan202
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpujan2021.html
CVE ID: CVE-2021-20001 State: PUBLISHED Published: 2022-02-11T19:50:09.720584Z Last Updated: 2024-09-16T23:41:36.975Z Vendors: Debian Products: debian-edu-config Problem Types: insecure permissions Description: It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/public_html), which could result in privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/4d39a5888d193567704238f8c035f8d17cfe34e5 - https://lists.debian.org/debian-lts-announce/2022/02/msg00012.html - https://lists.
888d193567704238f8c035f8d17cfe34e5 - https://lists.debian.org/debian-lts-announce/2022/02/msg00012.html - https://lists.debian.org/debian-security-announce/2022/msg00039.html - https://www.debian.org/security/2022/dsa-5072
CVE ID: CVE-2021-20002 State: REJECTED Published: 2022-02-09T15:25:15 Last Updated: 2022-02-09T15:25:15 Description: No description available.
CVE ID: CVE-2021-20003 State: REJECTED Published: 2022-02-09T15:25:14 Last Updated: 2022-02-09T15:25:14 Description: No description available.
CVE ID: CVE-2021-20004 State: REJECTED Published: 2022-02-09T15:25:14 Last Updated: 2022-02-09T15:25:14 Description: No description available.
CVE ID: CVE-2021-20005 State: REJECTED Published: 2022-02-09T15:25:13 Last Updated: 2022-02-09T15:25:13 Description: No description available.
CVE ID: CVE-2021-20006 State: REJECTED Published: 2022-02-09T15:25:12 Last Updated: 2022-02-09T15:25:12 Description: No description available.
CVE ID: CVE-2021-20007 State: REJECTED Published: 2022-02-09T15:25:12 Last Updated: 2022-02-09T15:25:12 Description: No description available.
CVE ID: CVE-2021-20008 State: REJECTED Published: 2022-02-09T15:25:11 Last Updated: 2022-02-09T15:25:11 Description: No description available.
CVE ID: CVE-2021-20009 State: REJECTED Published: 2022-02-09T15:25:10 Last Updated: 2022-02-09T15:25:10 Description: No description available.
CVE ID: CVE-2021-20010 State: REJECTED Published: 2022-02-09T15:25:09 Last Updated: 2022-02-09T15:25:09 Description: No description available.
CVE ID: CVE-2021-20011 State: REJECTED Published: 2022-02-09T15:25:09 Last Updated: 2022-02-09T15:25:09 Description: No description available.
CVE ID: CVE-2021-20012 State: REJECTED Published: 2022-02-09T15:25:08 Last Updated: 2022-02-09T15:25:08 Description: No description available.
CVE ID: CVE-2021-20013 State: REJECTED Published: 2022-02-09T15:25:07 Last Updated: 2022-02-09T15:25:07 Description: No description available.
CVE ID: CVE-2021-20014 State: REJECTED Published: 2022-02-09T15:25:06 Last Updated: 2022-02-09T15:25:06 Description: No description available.
CVE ID: CVE-2021-20015 State: REJECTED Published: 2022-02-09T15:23:55 Last Updated: 2022-02-09T15:23:55 Description: No description available.
CVE ID: CVE-2021-20016 State: PUBLISHED Published: 2021-02-03T20:35:14.000Z Last Updated: 2025-10-21T23:35:28.966Z Vendors: SonicWall Products: SonicWall SMA100 Problem Types: CWE-89 Description: A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0001
CVE ID: CVE-2021-20017 State: PUBLISHED Published: 2021-03-13T02:10:14 Last Updated: 2024-08-03T17:30:07.198Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-78 Description: A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0004
CVE ID: CVE-2021-20018 State: PUBLISHED Published: 2021-03-13T02:10:15 Last Updated: 2024-08-03T17:30:07.475Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-200 Description: A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0005
CVE ID: CVE-2021-20019 State: PUBLISHED Published: 2021-06-23T21:45:11 Last Updated: 2024-08-03T17:30:07.323Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-200 Description: A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this can potentially lead to an internal sensitive data disclosure vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0006
CVE ID: CVE-2021-20020 State: PUBLISHED Published: 2021-04-10T06:50:12 Last Updated: 2024-08-03T17:30:07.420Z Vendors: SonicWall Products: Global Management System (GMS) Problem Types: CWE-287 Description: A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0009
CVE ID: CVE-2021-20021 State: PUBLISHED Published: 2021-04-09T17:50:14.000Z Last Updated: 2025-10-21T23:25:49.537Z Vendors: SonicWall Products: Email Security Problem Types: CWE-269 Description: A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0007
CVE ID: CVE-2021-20022 State: PUBLISHED Published: 2021-04-09T17:50:15.000Z Last Updated: 2025-10-21T23:25:49.388Z Vendors: SonicWall Products: Email Security Problem Types: CWE-434 Description: SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0008
CVE ID: CVE-2021-20023 State: PUBLISHED Published: 2021-04-20T11:55:13.000Z Last Updated: 2025-10-21T23:25:48.746Z Vendors: SonicWall Products: Email Security Problem Types: CWE-22 Description: SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0010
CVE ID: CVE-2021-20024 State: PUBLISHED Published: 2021-07-09T21:25:09 Last Updated: 2024-08-03T17:30:07.421Z Vendors: SonicWall Products: SonicWall Switch Problem Types: CWE-125 Description: Multiple Out-of-Bound read vulnerability in SonicWall Switch when handling LLDP Protocol allows an attacker to cause a system instability or potentially read sensitive information from the memory locations. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0011
CVE ID: CVE-2021-20025 State: PUBLISHED Published: 2021-05-13T14:45:12 Last Updated: 2024-08-03T17:30:07.435Z Vendors: SonicWall Products: Email Security Virtual Appliance Problem Types: CWE-798 Description: SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup. An attacker could exploit this transitional/temporary user account from the trusted domain to access the Virtual Appliance remotely only when the device is freshly installed and not connected to Mysonicwall. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0012
CVE ID: CVE-2021-20026 State: PUBLISHED Published: 2021-05-27T19:10:10 Last Updated: 2024-08-03T17:30:07.526Z Vendors: SonicWall Products: SonicWall NSM On-Prem Problem Types: CWE-78 Description: A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP request. This vulnerability affects NSM On-Prem 2.2.0-R10 and earlier versions. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0014
CVE ID: CVE-2021-20027 State: PUBLISHED Published: 2021-06-14T22:30:11 Last Updated: 2024-08-03T17:30:07.579Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-120 Description: A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted request. This vulnerability affects SonicOS Gen5, Gen6, Gen7 platforms, and SonicOSv virtual firewalls. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0016
CVE ID: CVE-2021-20028 State: PUBLISHED Published: 2021-08-04T19:10:09.000Z Last Updated: 2025-10-21T23:25:38.930Z Vendors: SonicWall Products: SonicWall SRA/SMA100 Problem Types: CWE-89 Description: Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlier Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0017
CVE ID: CVE-2021-20030 State: PUBLISHED Published: 2022-10-13T00:00:00.000Z Last Updated: 2025-05-16T13:44:21.429Z Vendors: SonicWall Products: SonicWall GMS Problem Types: CWE-22 Description: SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing application's binaries and configuration files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0021
CVE ID: CVE-2021-20031 State: PUBLISHED Published: 2021-10-12T22:55:09 Last Updated: 2024-08-03T17:30:07.419Z Vendors: SonicWall Products: SonicOS Problem Types: CWE-601 Description: A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0019 - http://packetstormsecurity.com/files/164502/Sonicwall-SonicOS-7.0-Host-Header-Injection.html
CVE ID: CVE-2021-20032 State: PUBLISHED Published: 2021-08-10T23:05:11 Last Updated: 2024-08-03T17:30:06.859Z Vendors: SonicWall Products: SonicWall Analytics On-Prem Problem Types: CWE-16 Description: SonicWall Analytics 2.5 On-Prem is vulnerable to Java Debug Wire Protocol (JDWP) interface security misconfiguration vulnerability which potentially leads to Remote Code Execution. This vulnerability impacts Analytics On-Prem 2.5.2518 and earlier. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0018
CVE ID: CVE-2021-20034 State: PUBLISHED Published: 2021-09-27T17:20:10 Last Updated: 2024-08-03T17:30:07.243Z Vendors: SonicWall Products: SMA100 Problem Types: CWE-284 Description: An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0021 - http://packetstormsecurity.com/files/164564/SonicWall-SMA-10.2.1.0-17sv-Password-Reset.html