Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-25154 State: PUBLISHED Published: 2021-04-28T18:32:38 Last Updated: 2024-08-03T19:56:10.608Z Vendors: n/a Products: Aruba AirWave Management Platform Problem Types: remote escalation of privilege Description: A remote escalation of privilege vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt
CVE ID: CVE-2021-25155 State: PUBLISHED Published: 2021-03-30T00:13:23 Last Updated: 2024-08-03T19:56:10.571Z Vendors: n/a Products: Aruba Instant Access Points Problem Types: remote arbitrary file modification Description: A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.6 and below; Aruba Instant 8.7.x: 8.7.1.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Additi
8.7.x: 8.7.1.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf - http://packetstormsecurity.com/files/163524/Aruba-Instant-8.7.1.0-Arbitrary-File-Modification.html - http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html
CVE ID: CVE-2021-25156 State: PUBLISHED Published: 2021-03-30T01:30:54 Last Updated: 2024-08-03T19:56:10.584Z Vendors: n/a Products: Aruba Instant Access Points Problem Types: remote arbitrary directory create Description: A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.6 and below; Aruba Instant 8.7.x: 8.7.1.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Addition
.7.x: 8.7.1.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf - http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html
CVE ID: CVE-2021-25157 State: PUBLISHED Published: 2021-03-30T01:33:38 Last Updated: 2024-08-03T19:56:10.567Z Vendors: n/a Products: Aruba Instant Access Points Problem Types: remote arbitrary file read Description: A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.6 and below; Aruba Instant 8.7.x: 8.7.1.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Additional Analyst Not
and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf - http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html
CVE ID: CVE-2021-25158 State: PUBLISHED Published: 2021-03-30T01:32:28 Last Updated: 2024-08-03T19:56:11.062Z Vendors: n/a Products: Aruba Instant Access Points Problem Types: remote arbitrary file read Description: A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https:
nstant that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf - http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html
CVE ID: CVE-2021-25159 State: PUBLISHED Published: 2021-03-30T01:35:38 Last Updated: 2024-08-03T19:56:10.581Z Vendors: n/a Products: Aruba Instant Access Points Problem Types: remote arbitrary file modification Description: A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Additi
8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf - http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html
CVE ID: CVE-2021-25160 State: PUBLISHED Published: 2021-03-30T01:42:05 Last Updated: 2024-08-03T19:56:10.627Z Vendors: n/a Products: Aruba Instant Access Points Problem Types: remote arbitrary file modification Description: A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Additi
CVE ID: CVE-2021-25161 State: PUBLISHED Published: 2021-03-30T01:44:43 Last Updated: 2024-08-03T19:56:10.576Z Vendors: n/a Products: Aruba Instant Access Points Problem Types: remote cross-site scripting (xss) Description: A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Addition
.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf - http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html
CVE ID: CVE-2021-25162 State: PUBLISHED Published: 2021-03-30T01:43:16 Last Updated: 2024-08-03T19:56:10.534Z Vendors: n/a Products: Aruba Instant Access Points Problem Types: remote execution of arbitrary commands Description: A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability
Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf - http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html
CVE ID: CVE-2021-25163 State: PUBLISHED Published: 2021-04-29T10:45:38 Last Updated: 2024-08-03T19:56:10.553Z Vendors: n/a Products: Aruba AirWave Management Platform Problem Types: remote xml external entity Description: A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt
CVE ID: CVE-2021-25164 State: PUBLISHED Published: 2021-04-28T19:37:22 Last Updated: 2024-08-03T19:56:10.650Z Vendors: n/a Products: Aruba AirWave Management Platform Problem Types: remote xml external entity Description: A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt
CVE ID: CVE-2021-25165 State: PUBLISHED Published: 2021-04-28T19:56:26 Last Updated: 2024-08-03T19:56:10.474Z Vendors: n/a Products: Aruba AirWave Management Platform Problem Types: remote xml external entity Description: A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt
CVE ID: CVE-2021-25166 State: PUBLISHED Published: 2021-04-29T10:52:15 Last Updated: 2024-08-03T19:56:10.643Z Vendors: n/a Products: Aruba AirWave Management Platform Problem Types: remote unauthorized access Description: A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt
CVE ID: CVE-2021-25167 State: PUBLISHED Published: 2021-04-29T11:00:28 Last Updated: 2024-08-03T19:56:10.638Z Vendors: n/a Products: Aruba AirWave Management Platform Problem Types: remote unauthorized access Description: A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt
CVE ID: CVE-2021-25168 State: PUBLISHED Published: 2021-02-08T18:01:50 Last Updated: 2024-08-03T19:56:10.580Z Vendors: n/a Products: HPE Apollo 70 System Problem Types: HPE Apollo 70 system bmc firmware libifc.so webupdatecomponent function has a buffer overflow vulnerability. Description: The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webupdatecomponent function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us
CVE ID: CVE-2021-25169 State: PUBLISHED Published: 2021-02-08T18:06:29 Last Updated: 2024-08-03T19:56:10.584Z Vendors: n/a Products: HPE Apollo 70 System Problem Types: HPE Apollo 70 system bmc firmware libifc.so websetservicecfg function has a buffer overflow vulnerability. Description: The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetservicecfg function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us
CVE ID: CVE-2021-25170 State: PUBLISHED Published: 2021-02-08T18:04:15 Last Updated: 2024-08-03T19:56:10.948Z Vendors: n/a Products: HPE Apollo 70 System Problem Types: HPE Apollo 70 system bmc firmware libifc.so websetremoteimageinfo function has a buffer overflow vulnerability. Description: The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetremoteimageinfo function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us
CVE ID: CVE-2021-25171 State: PUBLISHED Published: 2021-02-08T18:39:26 Last Updated: 2024-08-03T19:56:10.573Z Vendors: n/a Products: HPE Apollo 70 System Problem Types: HPE Apollo 70 system bmc firmware libifc.so websetlicensecfg function has a buffer overflow vulnerability. Description: The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetlicensecfg function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us
CVE ID: CVE-2021-25172 State: PUBLISHED Published: 2021-02-08T19:01:06 Last Updated: 2024-08-03T19:56:10.573Z Vendors: n/a Products: HPE Apollo 70 System Problem Types: HPE Apollo 70 system bmc firmware libifc.so websetdefaultlangcfg function has a command injection vulnerability. Description: The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so websetdefaultlangcfg function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us
CVE ID: CVE-2021-25173 State: PUBLISHED Published: 2021-01-18T07:14:10 Last Updated: 2024-08-03T19:56:10.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vulnerability exists when reading malformed DGN files, which allows attackers to cause a crash, potentially enabling denial of service (crash, exit, or restart). Additional Analyst Notes: - CVE Program Container: References: - https://www.opendesign.com/security-advisories - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-225/ - https://cert-p
l.siemens.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-225/ - https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf
CVE ID: CVE-2021-25174 State: PUBLISHED Published: 2021-01-18T07:14:00 Last Updated: 2024-08-03T19:56:11.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists when reading malformed DGN files. It can allow attackers to cause a crash, potentially enabling denial of service (Crash, Exit, or Restart). Additional Analyst Notes: - CVE Program Container: References: - https://www.opendesign.com/security-advisories - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-226/ - https://cert-portal.siemens.com/pr
tcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-226/ - https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf
CVE ID: CVE-2021-25175 State: PUBLISHED Published: 2021-01-18T07:13:53 Last Updated: 2024-08-03T19:56:10.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart). Additional Analyst Notes: - CVE Program Container: References: - https://www.opendesign.com/security-advisories - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-245/ - https://www.zerodayin
ns.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-245/ - https://www.zerodayinitiative.com/advisories/ZDI-21-246/ - https://www.zerodayinitiative.com/advisories/ZDI-21-244/ - https://www.zerodayinitiative.com/advisories/ZDI-21-223/ - https://www.zerodayinitiative.com/advisories/ZDI-21-224/ - https://www.zerodayinitiative.com/advisories/ZDI-21-218/ - https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf
CVE ID: CVE-2021-25176 State: PUBLISHED Published: 2021-01-18T07:13:46 Last Updated: 2024-08-03T19:56:10.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart). Additional Analyst Notes: - CVE Program Container: References: - https://www.opendesign.com/security-advisories - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-221/ - https://www.zeroda
emens.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-221/ - https://www.zerodayinitiative.com/advisories/ZDI-21-222/ - https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf
CVE ID: CVE-2021-25177 State: PUBLISHED Published: 2021-01-18T07:13:37 Last Updated: 2024-08-03T19:56:10.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart). Additional Analyst Notes: - CVE Program Container: References: - https://www.opendesign.com/security-advisories - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-219/ - https://cert-portal.si
s.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-219/ - https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf
CVE ID: CVE-2021-25178 State: PUBLISHED Published: 2021-01-18T07:12:43 Last Updated: 2024-08-03T19:56:10.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DXF and .DWG files. This can allow attackers to cause a crash potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.opendesign.com/security-advisories - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://ww
s://www.opendesign.com/security-advisories - https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf - https://www.zerodayinitiative.com/advisories/ZDI-21-243/ - https://www.zerodayinitiative.com/advisories/ZDI-21-240/ - https://www.zerodayinitiative.com/advisories/ZDI-21-220/ - https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf
CVE ID: CVE-2021-25179 State: PUBLISHED Published: 2021-05-05T02:40:13 Last Updated: 2024-08-03T19:56:10.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting (XSS) via the HTTP Host header. Additional Analyst Notes: - CVE Program Container: References: - https://www.linkedin.com/in/gabrielegristina - https://twitter.com/gm4tr1x - https://github.com/matrix - https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2_release_notes.htm
CVE ID: CVE-2021-25195 State: PUBLISHED Published: 2021-02-25T23:01:59 Last Updated: 2024-08-03T19:56:10.703Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1803, Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1
7, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows PKU2U Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-25195
CVE ID: CVE-2021-25197 State: PUBLISHED Published: 2021-07-22T17:20:46 Last Updated: 2024-08-03T19:56:10.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SourceCodester Content Management System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter to content_management_system\admin\new_content.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TCSWT/Content-Management-System/blob/main/README.md
CVE ID: CVE-2021-25200 State: PUBLISHED Published: 2021-07-28T16:01:18 Last Updated: 2024-08-03T19:56:10.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to \lms\student_avatar.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TCSWT/Learning-Management-System/blob/main/README.md
CVE ID: CVE-2021-25201 State: PUBLISHED Published: 2021-07-23T13:31:48 Last Updated: 2024-08-03T19:56:10.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to execute arbitrary SQL statements through the id parameter to obtain sensitive database information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TCSWT/Learning-Management-System/blob/main/README.md