Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-40481 State: PUBLISHED Published: 2021-10-13T00:27:29 Last Updated: 2024-08-04T02:44:10.437Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021 Problem Types: Remote Code Execution Description: Microsoft Office Visio Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40481 - https://www.zerodayinitiative.com/advisories/ZDI-21-1160/
CVE ID: CVE-2021-40482 State: PUBLISHED Published: 2021-10-13T00:27:31 Last Updated: 2024-08-04T02:44:10.846Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Server 2019 Problem Types: Information Disclosure Description: Microsoft SharePoint Server Information Disclosure Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40482
CVE ID: CVE-2021-40483 State: PUBLISHED Published: 2021-10-13T00:27:32 Last Updated: 2024-08-04T02:44:10.186Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Server 2019 Problem Types: Spoofing Description: Microsoft SharePoint Server Spoofing Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40483
CVE ID: CVE-2021-40484 State: PUBLISHED Published: 2021-10-13T00:27:34 Last Updated: 2024-08-04T02:44:10.358Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Foundation 2013 Service Pack 1 Problem Types: Spoofing Description: Microsoft SharePoint Server Spoofing Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40484
CVE ID: CVE-2021-40485 State: PUBLISHED Published: 2021-10-13T00:27:35.000Z Last Updated: 2025-02-28T20:54:45.297Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Microsoft Office 2019, Microsoft Office 2019 for Mac, Microsoft Office Online Server, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Excel 2016, Microsoft Excel 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40485
CVE ID: CVE-2021-40486 State: PUBLISHED Published: 2021-10-13T00:27:37 Last Updated: 2024-08-04T02:44:10.473Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Microsoft SharePoint Server 2019, Microsoft Office 2019, Microsoft Office Online Server, Microsoft Word 2016, Microsoft Office Web Apps Server 2013 Service Pack 1, Microsoft Word 2013 Service Pack 1, Microsoft Word 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Word Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Pro
emote Code Execution Description: Microsoft Word Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40486 - https://www.zerodayinitiative.com/advisories/ZDI-21-1158/
CVE ID: CVE-2021-40487 State: PUBLISHED Published: 2021-10-13T00:27:39.000Z Last Updated: 2025-02-28T20:54:18.671Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Foundation 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft SharePoint Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40487 - https://www.zerodayinitiative.com/advisories/ZDI-21-
src.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40487 - https://www.zerodayinitiative.com/advisories/ZDI-21-1225/
CVE ID: CVE-2021-40488 State: PUBLISHED Published: 2021-10-13T00:27:40 Last Updated: 2024-08-04T02:44:10.806Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Serv
Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Storage Spaces Controller Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40488 - https://www.zerodayinitiative.com/advisories/ZDI-21-1153/
CVE ID: CVE-2021-40489 State: PUBLISHED Published: 2021-10-13T00:27:42 Last Updated: 2024-08-04T02:44:10.815Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows S
Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Storage Spaces Controller Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microso
of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40489 - https://www.zerodayinitiative.com/advisories/ZDI-21-1156/
CVE ID: CVE-2021-40490 State: PUBLISHED Published: 2021-09-03T00:50:53 Last Updated: 2024-08-04T02:44:10.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/tytso/ext4.git/commit/?id=9e445093e523f3277081314c864f708fd4bd34aa - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XJGX3DMJT6MRBW2XEF3TWVHYWZW3DG3N/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedo
/message/XJGX3DMJT6MRBW2XEF3TWVHYWZW3DG3N/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M6VS2DLGT7TK7URKAS2KWJL3S533SGVA/ - https://www.debian.org/security/2021/dsa-4978 - https://security.netapp.com/advisory/ntap-20211004-0001/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html - https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html
CVE ID: CVE-2021-40491 State: PUBLISHED Published: 2021-09-03T00:00:00 Last Updated: 2024-08-04T02:44:10.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server address. This is similar to CVE-2020-8284 for curl. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=993476 - https://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=58cb043b190fd04effdaea7c9403416b436e50dd - https://lists.gnu.org/archive/html/bug-inetutils/2021-06/msg00002.html - https://lists.debian.org/debian-lts-announ
dd - https://lists.gnu.org/archive/html/bug-inetutils/2021-06/msg00002.html - https://lists.debian.org/debian-lts-announce/2022/11/msg00033.html
CVE ID: CVE-2021-40492 State: PUBLISHED Published: 2021-09-03T16:47:33 Last Updated: 2024-08-04T02:44:10.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary execution of JavaScript (gibbonCourseClassID, gibbonPersonID, subpage, currentDate, or allStudents to index.php). Additional Analyst Notes: - CVE Program Container: References: - https://gibbonedu.org/ - https://github.com/5qu1n7/CVE-2021-40492
CVE ID: CVE-2021-40493 State: PUBLISHED Published: 2021-10-13T22:07:34 Last Updated: 2024-08-04T02:44:10.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/network-monitoring/security-updates/cve-2021-40493.html
CVE ID: CVE-2021-40494 State: PUBLISHED Published: 2021-09-03T01:35:26 Last Updated: 2024-08-04T02:44:10.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AdaptiveScale/lxdui/pull/353
CVE ID: CVE-2021-40495 State: PUBLISHED Published: 2021-10-12T14:03:19 Last Updated: 2024-08-04T02:44:10.857Z Vendors: SAP SE Products: SAP NetWeaver AS ABAP and ABAP Platform Problem Types: Denial of Service Description: There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application Server ABAP and ABAP Platform. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 - https://launchpad
rogram Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 - https://launchpad.support.sap.com/#/notes/3099011
CVE ID: CVE-2021-40496 State: PUBLISHED Published: 2021-10-12T14:03:51 Last Updated: 2024-08-04T02:44:10.795Z Vendors: SAP SE Products: SAP NetWeaver AS ABAP and ABAP Platform Problem Types: CWE-668 Description: SAP Internet Communication framework (ICM) - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 785, allows an attacker with logon functionality, to exploit the authentication function by using POST and form field to repeat executions of the initial command by a GET request and exposing sensitive data. This vulnerability is normally exposed over the network and successful exploitation can lead to exposure of data like system details. Additional Analyst Notes: -
er the network and successful exploitation can lead to exposure of data like system details. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 - https://launchpad.support.sap.com/#/notes/3087254
CVE ID: CVE-2021-40497 State: PUBLISHED Published: 2021-10-12T14:03:26 Last Updated: 2024-08-04T02:44:10.782Z Vendors: SAP SE Products: SAP BusinessObjects Analysis, (edition for OLAP) Problem Types: Information Disclosure Description: SAP BusinessObjects Analysis (edition for OLAP) - versions 420, 430, allows an attacker to exploit certain application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation could lead to exposure of some system specific data like its version. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 - https://launchpad.suppo
Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 - https://launchpad.support.sap.com/#/notes/3098917
CVE ID: CVE-2021-40498 State: PUBLISHED Published: 2021-10-12T14:04:14 Last Updated: 2024-08-04T02:44:10.780Z Vendors: SAP SE Products: SAP SuccessFactors Mobile Application (for Android devices) Problem Types: Denial of Service Description: A vulnerability has been identified in SAP SuccessFactors Mobile Application for Android - versions older than 2108, which allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service, which can lead to denial of service. The vulnerability is related to Android implementation methods that are widely used across Android mobile applications, and such methods are embedded into the SAP SuccessFactors mob
s that are widely used across Android mobile applications, and such methods are embedded into the SAP SuccessFactors mobile application. These Android methods begin executing once the user accesses their profile on the mobile application. While executing, it can also pick up the activities from other Android applications that are running in the background of the users device and are using the same types of methods in the application. Such vulnerability can also lead to phishing attacks that can be used for staging other types of attacks. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 - https://launchpad.su
ram Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 - https://launchpad.support.sap.com/#/notes/3077635
CVE ID: CVE-2021-40499 State: PUBLISHED Published: 2021-10-12T14:04:00 Last Updated: 2024-08-04T02:44:10.842Z Vendors: SAP SE Products: SAP NetWeaver Application Server for ABAP (SAP Cloud Print Manager and SAPSprint) Problem Types: Code Injection Description: Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 - https://laun
CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 - https://launchpad.support.sap.com/#/notes/3100882
CVE ID: CVE-2021-40500 State: PUBLISHED Published: 2021-10-12T14:04:23 Last Updated: 2024-08-04T02:44:10.833Z Vendors: SAP SE Products: SAP BusinessObjects Business Intelligence Platform (Crystal Reports) Problem Types: CWE-611 Description: SAP BusinessObjects Business Intelligence Platform (Crystal Reports) - versions 420, 430, allows an unauthenticated attacker to exploit missing XML validations at endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can enable the attacker to retrieve arbitrary files from the server. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.a
server. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983 - https://launchpad.support.sap.com/#/notes/3074693
CVE ID: CVE-2021-40501 State: PUBLISHED Published: 2021-11-10T15:22:15 Last Updated: 2024-08-04T02:44:10.848Z Vendors: SAP SE Products: SAP ABAP Platform Kernel Problem Types: CWE-862 Description: SAP ABAP Platform Kernel - versions 7.77, 7.81, 7.85, 7.86, does not perform necessary authorization checks for an authenticated business user, resulting in escalation of privileges. That means this business user is able to read and modify data beyond the vulnerable system. However, the attacker can neither significantly reduce the performance of the system nor stop the system. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3099776 - https
ditional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3099776 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=589496864
CVE ID: CVE-2021-40502 State: PUBLISHED Published: 2021-11-10T15:24:42 Last Updated: 2024-08-04T02:44:10.860Z Vendors: SAP SE Products: SAP Commerce Problem Types: CWE-862 Description: SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. Authenticated attackers will be able to access and edit data from b2b units they do not belong to. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=589496864 - https://launchpad.support.sap.com/#/notes/3110328
CVE ID: CVE-2021-40503 State: PUBLISHED Published: 2021-11-10T15:27:28 Last Updated: 2024-08-04T02:44:10.837Z Vendors: SAP SE Products: SAP GUI for Windows Problem Types: CWE-522 Description: An information disclosure vulnerability exists in SAP GUI for Windows - versions < 7.60 PL13, 7.70 PL4, which allows an attacker with sufficient privileges on the local client-side PC to obtain an equivalent of the user’s password. With this highly sensitive data leaked, the attacker would be able to logon to the backend system the SAP GUI for Windows was connected to and launch further attacks depending on the authorizations of the user. Additional Analyst Notes: - CVE Program Container: References: -
r attacks depending on the authorizations of the user. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=589496864 - https://launchpad.support.sap.com/#/notes/3080106
CVE ID: CVE-2021-40504 State: PUBLISHED Published: 2021-11-10T15:29:16 Last Updated: 2024-08-04T02:44:10.769Z Vendors: SAP SE Products: SAP NetWeaver AS for ABAP and ABAP Platform Problem Types: CWE-863 Description: A certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, contains transport authorizations, which exceed expected display only permissions. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=589496864 - https://launchpad.support.sap.com/#/notes/3105728
CVE ID: CVE-2021-40506 State: PUBLISHED Published: 2023-04-18T00:00:00.000Z Last Updated: 2025-02-06T15:12:39.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ALU unit of the OR1200 (aka OpenRISC 1200) processor 2011-09-10 through 2015-11-11. The overflow flag is not being updated for the msb and mac instructions, which results in an incorrect value in the overflow flag. Any software that relies on this flag may experience corruption in execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openrisc/or1200/commit/2c0765d7ba12813df273cd693a99c4e744f0fbd5 - https://seth.engr.tamu.edu/
nces: - https://github.com/openrisc/or1200/commit/2c0765d7ba12813df273cd693a99c4e744f0fbd5 - https://seth.engr.tamu.edu/software-releases/thehuzz/
CVE ID: CVE-2021-40507 State: PUBLISHED Published: 2023-04-18T00:00:00.000Z Last Updated: 2025-02-06T15:11:50.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ALU unit of the OR1200 (aka OpenRISC 1200) processor 2011-09-10 through 2015-11-11. The overflow flag is not being updated correctly for the subtract instruction, which results in an incorrect value in the overflow flag. Any software that relies on this flag may experience corruption in execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/openrisc/or1200/commit/2c0765d7ba12813df273cd693a99c4e744f0fbd5 - https://seth.engr.tam
References: - https://github.com/openrisc/or1200/commit/2c0765d7ba12813df273cd693a99c4e744f0fbd5 - https://seth.engr.tamu.edu/software-releases/thehuzz/
CVE ID: CVE-2021-40509 State: PUBLISHED Published: 2021-09-04T19:20:00 Last Updated: 2024-08-04T02:44:10.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/164045/jforum-2.7.0-Cross-Site-Scripting.html - https://lists.openwall.net/full-disclosure/2021/09/03/7 - https://sourceforge.net/p/jforum2/code/934/ - http://seclists.org/fulldisclosure/2021/Sep/13
CVE ID: CVE-2021-40510 State: PUBLISHED Published: 2022-06-21T16:10:33 Last Updated: 2024-08-04T02:44:10.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: XML eXternal Entity (XXE) in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs. Additional Analyst Notes: - CVE Program Container: References: - https://www.obdasystems.com/mastro - https://www.cyberiskvision.com/advisory/
CVE ID: CVE-2021-40511 State: PUBLISHED Published: 2022-06-21T16:09:35 Last Updated: 2024-08-04T02:44:10.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion (aka “billion laughs”) attack allowing denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.obdasystems.com/mastro - https://www.cyberiskvision.com/advisory/
CVE ID: CVE-2021-40516 State: PUBLISHED Published: 2021-09-05T17:14:24 Last Updated: 2024-08-04T02:44:10.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin. Additional Analyst Notes: - CVE Program Container: References: - https://weechat.org/doc/security/ - https://github.com/weechat/weechat/commit/8b1331f98de1714bae15a9ca2e2b393ba49d735b - https://lists.debian.org/debian-lts-announce/2021/09/msg00018.html