Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Remote Desktop Client Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43233
CVE ID: CVE-2021-43234 State: PUBLISHED Published: 2021-12-15T14:15:18 Last Updated: 2024-08-04T03:55:27.247Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack
10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Fax Service Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://po
Service Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43234
CVE ID: CVE-2021-43235 State: PUBLISHED Published: 2021-12-15T14:15:19 Last Updated: 2024-08-04T03:55:27.235Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: Information Disclo
s 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: Information Disclosure Description: Storage Spaces Controller Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43235
CVE ID: CVE-2021-43236 State: PUBLISHED Published: 2021-12-15T14:15:19 Last Updated: 2024-08-04T03:55:27.388Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack
Message Queuing Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43236
CVE ID: CVE-2021-43237 State: PUBLISHED Published: 2021-12-15T14:15:20 Last Updated: 2024-08-04T03:55:27.408Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2 Problem Types: Elevation of Privilege Description: Windows Setup Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidanc
- CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43237 - https://www.zerodayinitiative.com/advisories/ZDI-22-018/
CVE ID: CVE-2021-43238 State: PUBLISHED Published: 2021-12-15T14:15:21 Last Updated: 2024-08-04T03:55:27.418Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack
10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Remote Access Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https:
mote Access Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43238 - https://www.zerodayinitiative.com/advisories/ZDI-22-019/
CVE ID: CVE-2021-43239 State: PUBLISHED Published: 2021-12-15T14:15:22 Last Updated: 2024-08-04T03:55:27.427Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2 Problem Types: Elevation of Privilege Description: Windows Recovery Environment Agent Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43239
CVE ID: CVE-2021-43240 State: PUBLISHED Published: 2021-12-15T14:15:22 Last Updated: 2024-08-04T03:55:27.419Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2 Problem Types: Elevation of Privilege Description: NTFS Set Short Name Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-g
otes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43240
CVE ID: CVE-2021-43242 State: PUBLISHED Published: 2021-12-15T14:15:23 Last Updated: 2024-08-04T03:55:27.377Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Foundation 2013 Service Pack 1 Problem Types: Spoofing Description: Microsoft SharePoint Server Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43242
CVE ID: CVE-2021-43243 State: PUBLISHED Published: 2021-12-15T14:15:24 Last Updated: 2024-08-04T03:55:28.471Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: VP9 Video Extensions Problem Types: Information Disclosure Description: VP9 Video Extensions Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43243
CVE ID: CVE-2021-43244 State: PUBLISHED Published: 2021-12-15T14:15:25 Last Updated: 2024-08-04T03:55:27.984Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 21H2 Problem Types: Information Disclosure Description: Windows Kernel Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://p
s Kernel Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43244
CVE ID: CVE-2021-43245 State: PUBLISHED Published: 2021-12-15T14:15:25 Last Updated: 2024-08-04T03:55:27.398Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Digital TV Tuner Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: -
Digital TV Tuner Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43245
CVE ID: CVE-2021-43246 State: PUBLISHED Published: 2021-12-15T14:15:26 Last Updated: 2024-08-04T03:55:28.311Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2 Problem Types: Denial of Service Description: Windows Hyper-V Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msr
er-V Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43246
CVE ID: CVE-2021-43247 State: PUBLISHED Published: 2021-12-15T14:15:27 Last Updated: 2024-08-04T03:55:28.333Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2 Problem Types: Elevation of Privilege Description: Windows TCP/IP Driver Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Cont
ege Description: Windows TCP/IP Driver Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43247 - https://www.zerodayinitiative.com/advisories/ZDI-21-1554/
CVE ID: CVE-2021-43248 State: PUBLISHED Published: 2021-12-15T14:15:28 Last Updated: 2024-08-04T03:55:27.940Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows Server 2022, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012,
10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Digital Media Receiver Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43248
CVE ID: CVE-2021-43255 State: PUBLISHED Published: 2021-12-15T14:15:28 Last Updated: 2024-08-04T03:55:28.195Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office LTSC 2021, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office 2016, Microsoft Office 2013 Service Pack 1 Problem Types: Spoofing Description: Microsoft Office Trust Center Spoofing Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43255
CVE ID: CVE-2021-43256 State: PUBLISHED Published: 2021-12-15T14:15:29 Last Updated: 2024-08-04T03:55:28.380Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Office Online Server, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Excel 2016, Microsoft Excel 2013 Service Pack 1, Microsoft Office Web Apps Server 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-43256
CVE ID: CVE-2021-43257 State: PUBLISHED Published: 2022-04-14T19:25:45 Last Updated: 2024-08-04T03:55:28.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lack of Neutralization of Formula Elements in the CSV API of MantisBT before 2.25.3 allows an unprivileged attacker to execute code or gain access to information when a user opens the csv_export.php generated CSV file in Excel. Additional Analyst Notes: - CVE Program Container: References: - https://www.mantisbt.org/bugs/view.php?id=29130 - https://github.com/mantisbt/mantisbt/commit/7f4534c723e3162b8784aebda4836324041dbc3e
CVE ID: CVE-2021-43258 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-28T20:20:38.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: CartView.php in ChurchInfo 1.3.0 allows attackers to achieve remote code execution through insecure uploads. This requires authenticated access tot he ChurchInfo application. Once authenticated, a user can add names to their cart, and compose an email. Uploading an attachment for the email stores the attachment on the site in the /tmp_attach/ folder where it can be accessed with a GET request. There are no limitations on files that can be attached, allowing for malicious PHP code to be uploaded and interpreted by the ser
no limitations on files that can be attached, allowing for malicious PHP code to be uploaded and interpreted by the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.churchdb.org/ - https://sourceforge.net/projects/churchinfo/files/ - https://github.com/rapid7/metasploit-framework/pull/17257
CVE ID: CVE-2021-43264 State: PUBLISHED Published: 2021-11-02T21:55:22 Last Updated: 2024-08-04T03:55:28.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adjusting the path component for the page help file allows attackers to bypass the intended access control for HTML files via directory traversal. It replaces the - character with the / character. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mahara/+bug/1944979 - https://mahara.org/interaction/forum/topic.php?id=8954
CVE ID: CVE-2021-43265 State: PUBLISHED Published: 2021-11-02T21:55:08 Last Updated: 2024-08-04T03:55:28.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, certain tag syntax could be used for XSS, such as via a SCRIPT element. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mahara/+bug/1944633 - https://mahara.org/interaction/forum/topic.php?id=8953
CVE ID: CVE-2021-43266 State: PUBLISHED Published: 2021-11-02T21:54:45 Last Updated: 2024-08-04T03:55:27.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exporting collections via PDF export could lead to code execution via shell metacharacters in a collection name. Additional, in Mahara before 20.10.4, 21.04.3, and 21.10.1, exporting collections via PDF export could cause code execution Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mahara/+bug/1942903 - https://mahara.org/interaction/forum/topic.php?id=8952 - https://mahara.org/interaction/forum/topic.php?id=8995 - https://b
ps://mahara.org/interaction/forum/topic.php?id=8952 - https://mahara.org/interaction/forum/topic.php?id=8995 - https://bugs.launchpad.net/mahara/+bug/1949527
CVE ID: CVE-2021-43267 State: PUBLISHED Published: 2021-11-02T22:13:53 Last Updated: 2024-08-04T03:55:27.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploit insufficient validation of user-supplied sizes for the MSG_CRYPTO message type. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/fa40d9734a57bcbfa79a280189799f76c88f7bb0 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.16 - https://lists.fedoraproject.org/archives/list/package-an
ttps://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.16 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDEW4APTYKJK365HC2JZIVXYUV7ZRN7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVWL7HZV5T5OEKJPO2D67RMFMKBBXGGB/ - https://security.netapp.com/advisory/ntap-20211125-0002/ - http://www.openwall.com/lists/oss-security/2022/02/10/1
CVE ID: CVE-2021-43268 State: PUBLISHED Published: 2021-11-24T16:15:17 Last Updated: 2024-08-04T03:55:28.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free. Additional Analyst Notes: - CVE Program Container: References: - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2021-43268
CVE ID: CVE-2021-43269 State: PUBLISHED Published: 2022-01-20T01:44:17 Last Updated: 2024-08-04T03:55:28.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Code42 app before 8.8.0, eval injection allows an attacker to change a device’s proxy configuration to use a malicious proxy auto-config (PAC) file, leading to arbitrary code execution. This affects Incydr Basic, Advanced, and Gov F1; CrashPlan Cloud; and CrashPlan for Small Business. (Incydr Professional and Enterprise are unaffected.) Additional Analyst Notes: - CVE Program Container: References: - https://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories/Arbitrary_code_
s://support.code42.com/Terms_and_conditions/Code42_customer_support_resources/Code42_security_advisories/Arbitrary_code_execution_via_malicious_Code42_app_proxy_configuration - https://www.code42.com/r/support/CVE-2021-43269
CVE ID: CVE-2021-43270 State: PUBLISHED Published: 2021-11-02T22:40:58 Last Updated: 2024-08-04T03:55:28.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Datalust Seq.App.EmailPlus (aka seq-app-htmlemail) 3.1.0-dev-00148, 3.1.0-dev-00170, and 3.1.0-dev-00176 can use cleartext SMTP on port 25 in some cases where encryption on port 465 was intended. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/datalust/seq-app-htmlemail/pull/93
CVE ID: CVE-2021-43271 State: PUBLISHED Published: 2022-06-03T19:55:52 Last Updated: 2024-08-04T03:55:28.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Riverbed AppResponse 11.8.0, 11.8.5, 11.8.5a, 11.9.0, 11.9.0a, 11.10.0, 11.11.0, 11.11.0a, 11.11.1, 11.11.1a, 11.11.5, and 11.11.5a (when configured to use local, RADIUS, or TACACS authentication) logs usernames and passwords if either is entered incorrectly. If a user enters an incorrect username and/or password when logging into the WebUI, these attempted credentials are included in an error message that is logged in the WebUI log file. A log entry does not appear if the username and password provided correctly match a vali
s logged in the WebUI log file. A log entry does not appear if the username and password provided correctly match a valid set of credentials. This also does not happen if AppResponse is configured to use SAML authentication. The WebUI log file is included in subsequent diagnostic system dumps that are generated. (Only users with Full Control access to the System Configuration permission can generate system dumps. By default, only System Administrators have Full Control access to the System Configuration permission.) Additional Analyst Notes: - CVE Program Container: References: - https://supportkb.riverbed.com/support/index?page=content&id=S35806
CVE ID: CVE-2021-43272 State: PUBLISHED Published: 2021-11-14T20:59:16 Last Updated: 2024-08-04T03:55:28.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11. ODA Viewer continues to process invalid or malicious DWF files instead of stopping upon an exception. An attacker can leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.opendesign.com/security-advisories - https://www.zerodayinitiative.com/advisories/ZDI-21-1363/ - https://www.zerodayinitiative.