Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-39574 State: PUBLISHED Published: 2021-09-20T15:27:10 Last Updated: 2024-08-04T02:13:37.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function pool_read() located in pool.c. It allows an attacker to cause code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/124
CVE ID: CVE-2021-39575 State: PUBLISHED Published: 2021-09-20T15:27:02 Last Updated: 2024-08-04T02:13:37.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function dump_method() located in abc.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/128
CVE ID: CVE-2021-39577 State: PUBLISHED Published: 2021-09-20T15:27:07 Last Updated: 2024-08-04T02:13:37.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function main() located in swfdump.c. It allows an attacker to cause code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/121
CVE ID: CVE-2021-39579 State: PUBLISHED Published: 2021-09-20T15:27:11 Last Updated: 2024-08-04T02:13:37.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function string_hash() located in q.c. It allows an attacker to cause code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/125
CVE ID: CVE-2021-39582 State: PUBLISHED Published: 2021-09-20T15:27:15 Last Updated: 2024-08-04T02:13:37.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swf_GetPlaceObject() located in swfobject.c. It allows an attacker to cause code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/122
CVE ID: CVE-2021-39583 State: PUBLISHED Published: 2021-09-20T15:27:09 Last Updated: 2024-08-04T02:13:37.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function pool_lookup_string2() located in pool.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/136
CVE ID: CVE-2021-39584 State: PUBLISHED Published: 2021-09-20T15:27:06 Last Updated: 2024-08-04T02:13:37.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function namespace_set_hash() located in pool.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/130
CVE ID: CVE-2021-39585 State: PUBLISHED Published: 2021-09-20T15:27:16 Last Updated: 2024-08-04T02:13:37.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function traits_dump() located in abc.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/133
CVE ID: CVE-2021-39587 State: PUBLISHED Published: 2021-09-20T15:27:11 Last Updated: 2024-08-04T02:13:37.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_DumpABC() located in abc.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/129
CVE ID: CVE-2021-39588 State: PUBLISHED Published: 2021-09-20T15:27:16 Last Updated: 2024-08-04T02:13:37.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_ReadABC() located in abc.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/131
CVE ID: CVE-2021-39589 State: PUBLISHED Published: 2021-09-20T15:27:10 Last Updated: 2024-08-04T02:13:37.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function parse_metadata() located in abc.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/132
CVE ID: CVE-2021-39590 State: PUBLISHED Published: 2021-09-20T15:27:07 Last Updated: 2024-08-04T02:13:37.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function params_dump() located in abc.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/137
CVE ID: CVE-2021-39591 State: PUBLISHED Published: 2021-09-20T15:27:16 Last Updated: 2024-08-04T02:13:37.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_GetShapeBoundingBox() located in swfshape.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/135
CVE ID: CVE-2021-39592 State: PUBLISHED Published: 2021-09-20T15:27:10 Last Updated: 2024-08-04T02:13:37.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function pool_lookup_uint() located in pool.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/138
CVE ID: CVE-2021-39593 State: PUBLISHED Published: 2021-09-20T15:27:15 Last Updated: 2024-08-04T02:13:37.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_FontExtract_DefineFontInfo() located in swftext.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/139
CVE ID: CVE-2021-39594 State: PUBLISHED Published: 2021-09-20T15:27:12 Last Updated: 2024-08-04T02:13:37.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Other An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function updateusage() located in swftext.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/142
CVE ID: CVE-2021-39595 State: PUBLISHED Published: 2021-09-20T15:27:10 Last Updated: 2024-08-04T02:13:37.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function rfx_alloc() located in mem.c. It allows an attacker to cause code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/141
CVE ID: CVE-2021-39596 State: PUBLISHED Published: 2021-09-20T15:27:02 Last Updated: 2024-08-04T02:13:37.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function code_parse() located in code.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/146
CVE ID: CVE-2021-39597 State: PUBLISHED Published: 2021-09-20T15:27:03 Last Updated: 2024-08-04T02:13:37.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function code_dump2() located in code.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/143
CVE ID: CVE-2021-39598 State: PUBLISHED Published: 2021-09-20T15:27:00 Last Updated: 2024-08-04T02:13:37.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function callcode() located in code.c. It allows an attacker to cause Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matthiaskramm/swftools/issues/145
CVE ID: CVE-2021-39599 State: PUBLISHED Published: 2021-08-23T22:01:15 Last Updated: 2024-08-04T02:13:37.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Cross Site Scripting (XSS) vulnerabilities exists in CXUUCMS 3.1 in the search and c parameters in (1) public/search.php and in the (2) c parameter in admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cbkhwx/cxuucmsv3/issues/7
CVE ID: CVE-2021-39602 State: PUBLISHED Published: 2021-08-23T22:01:18 Last Updated: 2024-08-04T02:13:37.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer Overflow vulnerabilty exists in Miniftpd 1.0 in the do_mkd function in the ftpproto.c file, which could let a remote malicious user cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Gabe-commiter/Miniftpd/issues/1
CVE ID: CVE-2021-39608 State: PUBLISHED Published: 2021-08-23T20:28:34 Last Updated: 2024-08-04T02:13:37.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Code Execution (RCE) vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin, which could let a remote malicious user exeuct arbitrary php code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCore-CMS/issues/52 - http://packetstormsecurity.com/files/164047/FlatCore-CMS-2.0.7-Remote-Code-Execution.html
CVE ID: CVE-2021-39609 State: PUBLISHED Published: 2021-08-23T20:28:38 Last Updated: 2024-08-04T02:13:37.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatCore/flatCore-CMS/issues/53 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-39609 - https://www.nu11secur1ty.com/2021/08/cve-2021-39609.html
CVE ID: CVE-2021-39613 State: PUBLISHED Published: 2021-08-23T21:20:50 Last Updated: 2024-08-04T02:13:37.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DVG-3104MS version 1.0.2.0.3, 1.0.2.0.4, and 1.0.2.0.4E contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file. As weak passwords have been used, the plaintext passwords can be recovered from the hash values. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/announceme
ntainer: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10237 - https://www.nussko.com/advisories/advisory-2021-08-01.txt
CVE ID: CVE-2021-39614 State: PUBLISHED Published: 2021-08-23T21:21:18 Last Updated: 2024-08-04T02:13:37.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DVX-2000MS contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file. As weak passwords have been used, the plaintext passwords can be recovered from the hash values. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10236 - https://www.nussko.com/advisories/advisory-2021-08-01.txt
CVE ID: CVE-2021-39615 State: PUBLISHED Published: 2021-08-23T21:21:47 Last Updated: 2024-08-04T02:13:37.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSR-500N version 1.02 contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file.If an attacker succeeds in recovering the cleartext password of the identified hash value, he will be able to log in via SSH or Telnet and thus gain access to the underlying embedded Linux operating system on the device. Fixed in version 2.12/2. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://
that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10235 - https://www.nussko.com/advisories/advisory-2021-08-02.txt
CVE ID: CVE-2021-39616 State: PUBLISHED Published: 2022-02-11T17:40:44 Last Updated: 2024-08-04T02:13:37.439Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: Summary:Product: AndroidVersions: Android SoCAndroid ID: A-204686438 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-39617 State: REJECTED Published: 2022-12-13T15:56:05.673Z Last Updated: 2025-02-13T15:46:16.653Z Description: No description available.
CVE ID: CVE-2021-39618 State: PUBLISHED Published: 2022-01-14T19:10:51 Last Updated: 2024-08-04T02:13:37.417Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user consent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-196855999 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-39619 State: PUBLISHED Published: 2022-02-11T17:40:44 Last Updated: 2024-08-04T02:13:37.351Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass security and privacy settings of app usage due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-197399948 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01
CVE ID: CVE-2021-39620 State: PUBLISHED Published: 2022-01-14T19:10:52 Last Updated: 2024-08-04T02:13:37.368Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In ipcSetDataReference of Parcel.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-203847542 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-39621 State: PUBLISHED Published: 2022-01-14T19:10:53 Last Updated: 2024-08-04T02:13:37.381Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-185126319 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-39622 State: PUBLISHED Published: 2022-01-14T19:10:55 Last Updated: 2024-08-04T02:13:37.261Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-192663648 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-39623 State: PUBLISHED Published: 2022-01-14T19:10:56 Last Updated: 2024-08-04T02:13:37.343Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194105348 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-39624 State: PUBLISHED Published: 2022-03-16T14:04:05 Last Updated: 2024-08-04T02:13:37.347Z Vendors: n/a Products: Android Problem Types: Denial of service Description: In PackageManager, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-67862680 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-06-01
CVE ID: CVE-2021-39625 State: PUBLISHED Published: 2022-01-14T19:10:57 Last Updated: 2024-08-04T02:13:37.302Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In showCarrierAppInstallationNotification of EuiccNotificationManager.java, there is a possible way to gain an access to MediaProvider content due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194695347 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin
-194695347 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-39626 State: PUBLISHED Published: 2022-01-14T19:10:59 Last Updated: 2024-08-04T02:13:37.299Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-194695497 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-39627 State: PUBLISHED Published: 2022-01-14T19:11:00 Last Updated: 2024-08-04T02:13:37.762Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-185126549 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-39628 State: PUBLISHED Published: 2022-01-14T19:11:02 Last Updated: 2024-08-04T02:13:37.277Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In StatusBar.java, there is a possible disclosure of notification content on the lockscreen due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-189575031 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-39629 State: PUBLISHED Published: 2022-01-14T19:11:03 Last Updated: 2024-08-04T02:13:37.332Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-197353344 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-39630 State: PUBLISHED Published: 2022-01-14T19:11:05 Last Updated: 2024-08-04T02:13:37.627Z Vendors: n/a Products: Android Problem Types: Elevation of privilege Description: In executeRequest of OverlayManagerService.java, there is a possible way to control fabricated overlays from adb shell due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-202768292 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-01-01
CVE ID: CVE-2021-39631 State: PUBLISHED Published: 2022-02-11T17:40:45 Last Updated: 2024-08-04T02:13:37.350Z Vendors: n/a Products: Android Problem Types: Information disclosure Description: In clear_data_dlg_text of strings.xml, there is a possible situation when "Clear storage" functionality sets up the wrong security/privacy expectations due to a misleading message. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-193890833 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/
id ID: A-193890833 Additional Analyst Notes: - CVE Program Container: References: - https://source.android.com/security/bulletin/2022-02-01