Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-26725 State: PUBLISHED Published: 2021-02-22T20:31:06.852922Z Last Updated: 2024-09-17T14:24:48.138Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Nozomi Networks Products: Guardian, CMC Problem Types: CWE-24 Description: Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected system files. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec
nd prior versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.nozominetworks.com/NN-2021:2-01
CVE ID: CVE-2021-26726 State: PUBLISHED Published: 2022-02-16T15:15:12.708698Z Last Updated: 2024-09-17T00:36:09.622Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Valmet DNA Products: Valmet DNA Problem Types: CWE-305, CWE-209, CWE-272, CWE-78 Description: A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012 until Collection 2021. Additional Analyst Notes: - CVE Program Container: References: - https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26726/ - https://www.valmet.co
iner: References: - https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26726/ - https://www.valmet.com/about-us/research-and-development/vulnerabilityadvisories/
CVE ID: CVE-2021-26727 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T14:59:30.504Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Lanner Inc Products: IAC-AST2500A Problem Types: CWE-94, CWE-121 Description: Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.c
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26727/ - https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/
CVE ID: CVE-2021-26728 State: PUBLISHED Published: 2022-10-24T00:00:00 Last Updated: 2024-08-03T20:33:40.697Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Lanner Inc Products: IAC-AST2500A Problem Types: CWE-94, CWE-121 Description: Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affec
Notes: - CVE Program Container: References: - https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ - https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26728/
CVE ID: CVE-2021-26729 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T15:36:34.921Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Lanner Inc Products: IAC-AST2500A Problem Types: CWE-94, CWE-121 Description: Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ - https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26729/
CVE ID: CVE-2021-26730 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T15:40:12.898Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Lanner Inc Products: IAC-AST2500A Problem Types: CWE-121 Description: A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/blog/vulnerabilities-
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ - https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26730/
CVE ID: CVE-2021-26731 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T15:42:28.469Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Lanner Inc Products: IAC-AST2500A Problem Types: CWE-94, CWE-121 Description: Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function of spx_restservice allow an authenticated attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozom
sion 1.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ - https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26731/
CVE ID: CVE-2021-26732 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T15:44:17.256Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Lanner Inc Products: IAC-AST2500A Problem Types: CWE-284 Description: A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker to arbitrarily change the network configuration of the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-secur
lnrichment: References: - https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ - https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26732/
CVE ID: CVE-2021-26733 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T15:46:21.094Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Lanner Inc Products: IAC-AST2500A Problem Types: CWE-284 Description: A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an attacker to arbitrarily send reboot commands to the BMC, causing a Denial-of-Service (DoS) condition. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/blog/vulnerabilities-in-b
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ - https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-26733/
CVE ID: CVE-2021-26734 State: PUBLISHED Published: 2023-10-23T13:18:36.569Z Last Updated: 2024-09-17T13:46:22.720Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: Zscaler Products: Client Connector Problem Types: CWE-269 Description: Zscaler Client Connector Installer on Windows before version 3.4.0.124 improperly handled directory junctions during uninstallation. A local adversary may be able to delete folders in an elevated context. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021
CVE ID: CVE-2021-26735 State: PUBLISHED Published: 2023-10-23T13:19:35.867Z Last Updated: 2025-02-27T20:40:16.229Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Zscaler Products: Client Connector Problem Types: CWE-346 Description: The Zscaler Client Connector Installer and Unsintallers for Windows prior to 3.6 had an unquoted search path vulnerability. A local adversary may be able to execute code with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021
CVE ID: CVE-2021-26736 State: PUBLISHED Published: 2023-10-23T13:21:12.518Z Last Updated: 2025-02-27T20:40:09.700Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Zscaler Products: Client Connector Problem Types: CWE-20 Description: Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries from a low privileged path. A local adversary may be able to execute code with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021
CVE ID: CVE-2021-26737 State: PUBLISHED Published: 2023-10-23T13:22:51.537Z Last Updated: 2024-09-11T14:32:14.147Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Zscaler Products: Client Connector Problem Types: CWE-346 Description: The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without sufficient privileges may be able to shutdown the Zscaler tunnel by exploiting a race condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=macOS&applicable_ver
s://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=macOS&applicable_version=3.6&deployment_date=2022-01-07&id=1388686
CVE ID: CVE-2021-26738 State: PUBLISHED Published: 2023-10-23T13:24:49.584Z Last Updated: 2025-02-27T20:40:03.972Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Zscaler Products: Client Connector Problem Types: CWE-426 Description: Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local adversary may be able to execute code with root privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=macOS&applicable_version=3.7&deployment_date=2022-08-19&id=
lient-connector-app-release-summary-2022?applicable_category=macOS&applicable_version=3.7&deployment_date=2022-08-19&id=1414851
CVE ID: CVE-2021-26739 State: PUBLISHED Published: 2021-11-01T15:31:58 Last Updated: 2024-08-03T20:33:41.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/millken/doyocms/issues/5
CVE ID: CVE-2021-26740 State: PUBLISHED Published: 2021-11-01T15:32:01 Last Updated: 2024-08-03T20:33:40.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/millken/doyocms/issues/4
CVE ID: CVE-2021-26746 State: PUBLISHED Published: 2021-02-19T04:38:27 Last Updated: 2024-08-03T20:33:40.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo 1.11.14 allows XSS via a main/calendar/agenda_list.php?type= URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.netsparker.com/web-applications-advisories/ns-21-001-cross-site-scripting-in-chamilo-lms/ - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-45-2021-01-21-Moderate-impact-moderate-risk-XSS-vulnerability-in-agenda - https://github.com/chamilo/chamilo-lms/commit/d939402d83bf68af5377b629883d8e5437d843ec
CVE ID: CVE-2021-26747 State: PUBLISHED Published: 2021-02-18T20:55:01 Last Updated: 2024-08-03T20:33:41.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yhstar00/netis-route - http://www.netis-systems.com.tw/
CVE ID: CVE-2021-26750 State: PUBLISHED Published: 2021-09-23T14:11:59 Last Updated: 2024-08-03T20:33:41.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: DLL hijacking in Panda Agent <=1.16.11 in Panda Security, S.L.U. Panda Adaptive Defense 360 <= 8.0.17 allows attacker to escalate privileges via maliciously crafted DLL file. Additional Analyst Notes: - CVE Program Container: References: - https://hansesecure.de/2021/02/vulnerability-in-panda-security-product/?lang=en
CVE ID: CVE-2021-26751 State: PUBLISHED Published: 2021-02-12T20:35:48 Last Updated: 2024-08-03T20:33:40.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php via the det HTTP GET parameter. This allows an attacker to access all the data in the database and obtain access to the NeDi application. Additional Analyst Notes: - CVE Program Container: References: - https://n4nj0.github.io/advisories/nedi-multiple-vulnerabilities-i/
CVE ID: CVE-2021-26752 State: PUBLISHED Published: 2021-02-12T20:35:40 Last Updated: 2024-08-03T20:33:40.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: NeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic function on the endpoint /Nodes-Traffic.php via the md or ag HTTP GET parameter. This allows an attacker to obtain access to the operating system where NeDi is installed and to all application data. Additional Analyst Notes: - CVE Program Container: References: - https://n4nj0.github.io/advisories/nedi-multiple-vulnerabilities-i/
CVE ID: CVE-2021-26753 State: PUBLISHED Published: 2021-02-12T20:35:20 Last Updated: 2024-08-03T20:33:40.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: NeDi 1.9C allows an authenticated user to inject PHP code in the System Files function on the endpoint /System-Files.php via the txt HTTP POST parameter. This allows an attacker to obtain access to the operating system where NeDi is installed and to all application data. Additional Analyst Notes: - CVE Program Container: References: - https://n4nj0.github.io/advisories/nedi-multiple-vulnerabilities-i/
CVE ID: CVE-2021-26754 State: PUBLISHED Published: 2021-02-07T23:31:38 Last Updated: 2024-08-03T20:33:40.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php?action=get_wdtable order[0][dir] SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wpdatatables.com/help/whats-new-changelog/ - https://n4nj0.github.io/advisories/wordpress-plugin-wpdatatables-i/ - https://wordpress.org/plugins/wpdatatables/#developers
CVE ID: CVE-2021-26758 State: PUBLISHED Published: 2021-04-07T20:50:20 Last Updated: 2024-08-03T20:33:41.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root terminal access and execute commands on the host system. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/litespeedtech/openlitespeed/issues/217 - https://www.exploit-db.com/exploits/49556 - https://docs.unsafe-inline.com/0day/openlitespeed-web-server-1.7.8-command-injection-to-privilege-escalation-cve-2021-26758
CVE ID: CVE-2021-26762 State: PUBLISHED Published: 2021-07-22T15:43:51 Last Updated: 2024-08-03T20:33:40.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/ - https://www.exploit-db.com/exploits/49513 - https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip
CVE ID: CVE-2021-26764 State: PUBLISHED Published: 2021-07-22T15:56:33 Last Updated: 2024-08-03T20:33:40.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit-std.php. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/ - https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip - https://packetstormsecurity.com/files/161237/Student-Record-System-4.0-SQL-Injection.html - https://github.com/BigTiger2020/Student-Record-System-/blob/main/README.md
CVE ID: CVE-2021-26765 State: PUBLISHED Published: 2021-07-22T15:33:26 Last Updated: 2024-08-03T20:33:40.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/ - https://phpgurukul.com/wp-content/uploads/2019/05/schoolmanagement.zip - https://packetstormsecurity.com/files/161237/Student-Record-System-4.0-SQL-Injection.html - https://github.com/BigTiger2020/Student-Record-System-/blob/main/README.md
CVE ID: CVE-2021-26776 State: PUBLISHED Published: 2021-03-11T16:22:51 Last Updated: 2024-08-03T20:33:41.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: CSZ CMS 1.2.9 is affected by a cross-site scripting (XSS) vulnerability in multiple pages through the field name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cskaza/cszcms/issues/29
CVE ID: CVE-2021-26777 State: PUBLISHED Published: 2021-12-02T03:26:41 Last Updated: 2024-08-03T20:33:41.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC smart metering concentrator Firwmare version CIR_CDC_v1.2.17, allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ell0/plc_concentrator_vulns/
CVE ID: CVE-2021-26786 State: PUBLISHED Published: 2021-11-03T16:07:12 Last Updated: 2024-08-03T20:33:40.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discoverered in in customercentric-selling-poland PlayTube, allows authenticated attackers to execute arbitrary code via the purchace code to the config.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/customercentric-selling-poland/playtuber/issues/1
CVE ID: CVE-2021-26787 State: PUBLISHED Published: 2021-12-15T06:59:31 Last Updated: 2024-08-03T20:33:40.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross site scripting (XSS) vulnerability in Genesys Workforce Management 8.5.214.20 can occur (during record deletion) via the Time-off parameter. Additional Analyst Notes: - CVE Program Container: References: - http://genesys.com - https://medium.com/%40reliable_lait_mouse_975/cross-site-scripting-vulnerability-within-genesys-workforce-management-version-8-5-214-20-a68500cf5e18
CVE ID: CVE-2021-26788 State: PUBLISHED Published: 2021-03-08T12:53:12 Last Updated: 2024-08-03T20:33:41.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oryx Embedded CycloneTCP 1.7.6 to 2.0.0, fixed in 2.0.2, is affected by incorrect input validation, which may cause a denial of service (DoS). To exploit the vulnerability, an attacker needs to have TCP connectivity to the target system. Receiving a maliciously crafted TCP packet from an unauthenticated endpoint is sufficient to trigger the bug. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Oryx-Embedded/CycloneTCP/commit/de5336016edbe1e90327d0ed1cba5c4e49114366?branch=de5336016edbe1e9032
- https://github.com/Oryx-Embedded/CycloneTCP/commit/de5336016edbe1e90327d0ed1cba5c4e49114366?branch=de5336016edbe1e90327d0ed1cba5c4e49114366&diff=split
CVE ID: CVE-2021-26794 State: PUBLISHED Published: 2021-09-23T15:15:40 Last Updated: 2024-08-03T20:33:40.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/philippe/FrogCMS/issues/11
CVE ID: CVE-2021-26795 State: PUBLISHED Published: 2021-11-14T20:16:04 Last Updated: 2024-08-03T20:33:41.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability in /appliance/shiftmgn.php in TalariaX sendQuick Alert Plus Server Admin 4.3 before 8HF11 allows attackers to obtain sensitive information via a Roster Time to Roster Management. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2021/Nov/37 - http://packetstormsecurity.com/files/164961/Talariax-sendQuick-Alertplus-Server-Admin-4.3-SQL-Injection.html
CVE ID: CVE-2021-26797 State: PUBLISHED Published: 2021-04-26T11:20:53 Last Updated: 2024-08-03T20:33:40.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control vulnerability in Hame SD1 Wi-Fi firmware <=V.20140224154640 allows an attacker to get system administrator through an open Telnet service. Additional Analyst Notes: - CVE Program Container: References: - https://le0nc.blogspot.com/2021/04/cve-2021-26797-access-control.html
CVE ID: CVE-2021-26799 State: PUBLISHED Published: 2021-07-23T10:39:50 Last Updated: 2024-08-03T20:33:41.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in admin/files/edit in Omeka Classic <=2.7 allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/omeka/Omeka/issues/935 - https://github.com/omeka/Omeka/commit/08bfdf470e234edb68e5307a2fef8c899d89256c