Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
forge.net/projects/radiusmanager/ - https://github.com/1d8/publications/tree/main/cve-2021-29012 - http://packetstormsecurity.com/files/164154/DMA-Softlab-Radius-Manager-4.4.0-Session-Management-Cross-Site-Scripting.html
CVE ID: CVE-2021-29022 State: PUBLISHED Published: 2021-05-10T18:21:56 Last Updated: 2024-08-03T21:55:12.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory. Additional Analyst Notes: - CVE Program Container: References: - https://notnnor.github.io/research/2021/03/17/full-path-discloure-in-invoiceplane.html
CVE ID: CVE-2021-29023 State: PUBLISHED Published: 2021-05-17T00:00:00 Last Updated: 2024-08-03T21:55:12.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable. Additional Analyst Notes: - CVE Program Container: References: - https://notnnor.github.io/research/2021/03/16/weak-password-recovery-mechanism-in-invoiceplane.html - https://github.com/InvoicePlane/InvoicePlane/pull/767
CVE ID: CVE-2021-29024 State: PUBLISHED Published: 2021-05-17T00:00:00 Last Updated: 2024-08-03T21:55:12.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download. Allowing an attacker to directory traversal and download files suppose to be private without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://notnnor.github.io/research/2021/03/17/files-or-directories-accessible-to-external-parties-in-invoiceplane.html - https://github.com/InvoicePlane/InvoicePlane/pull/754
CVE ID: CVE-2021-29025 State: PUBLISHED Published: 2021-03-24T12:02:53 Last Updated: 2024-08-03T21:55:12.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/my_images.php URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md
CVE ID: CVE-2021-29026 State: PUBLISHED Published: 2021-03-24T12:03:06 Last Updated: 2024-08-03T21:55:12.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/permissions.php URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md
CVE ID: CVE-2021-29027 State: PUBLISHED Published: 2021-03-24T12:03:14 Last Updated: 2024-08-03T21:55:12.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md
CVE ID: CVE-2021-29028 State: PUBLISHED Published: 2021-03-24T12:03:21 Last Updated: 2024-08-03T21:55:12.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/user_activity.php URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md
CVE ID: CVE-2021-29029 State: PUBLISHED Published: 2021-03-24T12:03:26 Last Updated: 2024-08-03T21:55:12.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/edit_personal_page.php URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md
CVE ID: CVE-2021-29030 State: PUBLISHED Published: 2021-03-24T12:03:34 Last Updated: 2024-08-03T21:55:12.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/index.php URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md
CVE ID: CVE-2021-29031 State: PUBLISHED Published: 2021-03-24T12:03:40 Last Updated: 2024-08-03T21:55:12.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/users_import.php URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md
CVE ID: CVE-2021-29032 State: PUBLISHED Published: 2021-03-24T12:03:46 Last Updated: 2024-08-03T21:55:12.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/preferences.php URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md
CVE ID: CVE-2021-29033 State: PUBLISHED Published: 2021-03-24T12:03:52 Last Updated: 2024-08-03T21:55:12.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/edit_group.php URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md
CVE ID: CVE-2021-29038 State: PUBLISHED Published: 2024-02-20T00:00:00 Last Updated: 2024-11-15T18:05:06.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Liferay Portal 7.2.0 through 7.3.5, and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-the-middle or shoulder surfing attacks to steal user's password reminder answers. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2021-2903
er: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2021-29038
CVE ID: CVE-2021-29039 State: PUBLISHED Published: 2021-05-16T14:58:31 Last Updated: 2024-08-03T21:55:12.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Asset module's categories administration page in Liferay Portal 7.3.4 allows remote attackers to inject arbitrary web script or HTML via the site name. Additional Analyst Notes: - CVE Program Container: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120777766
CVE ID: CVE-2021-29040 State: PUBLISHED Published: 2021-05-16T15:03:16 Last Updated: 2024-08-03T21:55:12.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JSON web services in Liferay Portal 7.3.4 and earlier, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 20 and 7.2 before fix pack 10 may provide overly verbose error messages, which allows remote attackers to use the contents of error messages to help launch another, more focused attacks via crafted inputs. Additional Analyst Notes: - CVE Program Container: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120743429
CVE ID: CVE-2021-29041 State: PUBLISHED Published: 2021-05-16T15:14:22 Last Updated: 2024-08-03T21:55:12.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Denial-of-service (DoS) vulnerability in the Multi-Factor Authentication module in Liferay DXP 7.3 before fix pack 1 allows remote authenticated attackers to prevent any user from authenticating by (1) enabling Time-based One-time password (TOTP) on behalf of the other user or (2) modifying the other user's TOTP shared secret. Additional Analyst Notes: - CVE Program Container: References: - http://liferay.com - https://issues.liferay.com/browse/LPE-17131
CVE ID: CVE-2021-29043 State: PUBLISHED Published: 2021-05-17T10:48:12 Last Updated: 2024-08-03T21:55:12.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Portal Store module in Liferay Portal 7.0.0 through 7.3.5, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 1 does not obfuscate the S3 store's proxy password, which allows attackers to steal the proxy password via man-in-the-middle attacks or shoulder surfing. Additional Analyst Notes: - CVE Program Container: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120743515
CVE ID: CVE-2021-29044 State: PUBLISHED Published: 2021-05-17T10:55:02 Last Updated: 2024-08-03T21:55:12.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Site module's membership request administration pages in Liferay Portal 7.0.0 through 7.3.5, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_site_my_sites_web_portlet_MySitesPortlet_comments parameter. Additional Analyst Notes: - CVE Program Container: References: - http://liferay.com - https://portal.liferay.dev/learn/security/know
nalyst Notes: - CVE Program Container: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120743548
CVE ID: CVE-2021-29045 State: PUBLISHED Published: 2021-05-17T10:22:30 Last Updated: 2024-08-03T21:55:12.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Redirect module's redirection administration page in Liferay Portal 7.3.2 through 7.3.5, and Liferay DXP 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_redirect_web_internal_portlet_RedirectPortlet_destinationURL parameter. Additional Analyst Notes: - CVE Program Container: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/12074348
com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120743484
CVE ID: CVE-2021-29046 State: PUBLISHED Published: 2021-05-17T10:27:37 Last Updated: 2024-08-03T21:55:12.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Asset module's category selector input field in Liferay Portal 7.3.5 and Liferay DXP 7.3 before fix pack 1, allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_asset_categories_admin_web_portlet_AssetCategoriesAdminPortlet_title parameter. Additional Analyst Notes: - CVE Program Container: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120743501
CVE ID: CVE-2021-29047 State: PUBLISHED Published: 2021-05-16T15:29:52 Last Updated: 2024-08-03T21:55:12.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SimpleCaptcha implementation in Liferay Portal 7.3.4, 7.3.5 and Liferay DXP 7.3 before fix pack 1 does not invalidate CAPTCHA answers after it is used, which allows remote attackers to repeatedly perform actions protected by a CAPTCHA challenge by reusing the same CAPTCHA answer. Additional Analyst Notes: - CVE Program Container: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120743467
CVE ID: CVE-2021-29048 State: PUBLISHED Published: 2021-05-17T11:08:23 Last Updated: 2024-08-03T21:55:12.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Layout module's page administration page in Liferay Portal 7.3.4, 7.3.5 and Liferay DXP 7.2 before fix pack 11 and 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120743601
CVE ID: CVE-2021-29049 State: PUBLISHED Published: 2021-06-09T18:46:16 Last Updated: 2024-08-03T21:55:12.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Portal Workflow module's edit process page in Liferay DXP 7.0 before fix pack 99, 7.1 before fix pack 23, 7.2 before fix pack 12 and 7.3 before fix pack 1, allows remote attackers to inject arbitrary web script or HTML via the currentURL parameter. Additional Analyst Notes: - CVE Program Container: References: - http://liferay.com - https://issues.liferay.com/browse/LPE-17211
CVE ID: CVE-2021-29050 State: PUBLISHED Published: 2024-02-20T00:00:00.000Z Last Updated: 2025-04-24T15:06:41.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Request Forgery (CSRF) vulnerability in the terms of use page in Liferay Portal before 7.3.6, and Liferay DXP 7.3 before service pack 1, 7.2 before fix pack 11 allows remote attackers to accept the site's terms of use via social engineering and enticing the user to visit a malicious page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2021-29050
CVE ID: CVE-2021-29051 State: PUBLISHED Published: 2021-05-17T11:01:49 Last Updated: 2024-08-03T21:55:12.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Asset module's Asset Publisher app in Liferay Portal 7.2.1 through 7.3.5, and Liferay DXP 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_XXXXXXXXXXXX_assetEntryId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulner
otes: - CVE Program Container: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120743580
CVE ID: CVE-2021-29052 State: PUBLISHED Published: 2021-05-17T11:16:27 Last Updated: 2024-08-03T21:55:12.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data Engine module in Liferay Portal 7.3.0 through 7.3.5, and Liferay DXP 7.3 before fix pack 1 does not check permissions in DataDefinitionResourceImpl.getSiteDataDefinitionByContentTypeByDataDefinitionKey, which allows remote authenticated users to view DDMStructures via GET API calls. Additional Analyst Notes: - CVE Program Container: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120743159
CVE ID: CVE-2021-29053 State: PUBLISHED Published: 2021-05-17T10:41:13 Last Updated: 2024-08-03T21:55:12.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Liferay Portal 7.3.5 and Liferay DXP 7.3 before fix pack 1 allow remote authenticated users to execute arbitrary SQL commands via the classPKField parameter to (1) CommerceChannelRelFinder.countByC_C, or (2) CommerceChannelRelFinder.findByC_C. Additional Analyst Notes: - CVE Program Container: References: - http://liferay.com - https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120778225
CVE ID: CVE-2021-29054 State: PUBLISHED Published: 2021-04-13T05:31:56 Last Updated: 2024-08-03T21:55:12.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Papoo products are affected by: Cross Site Request Forgery (CSRF) in the admin interface. This affects Papoo CMS Light through 21.02 and Papoo CMS Pro through 6.0.1. The impact is: gain privileges (remote). Additional Analyst Notes: - CVE Program Container: References: - https://www.papoo.de/achtung---sicherheitsfeature-bitte-aktivieren.html - https://github.com/raginx/security/blob/main/rADV-2021-01.txt - https://packetstormsecurity.com/files/162077/Papoo-CMS-Cross-Site-Request-Forgery.html
CVE ID: CVE-2021-29055 State: PUBLISHED Published: 2022-06-23T14:36:51 Last Updated: 2024-08-03T21:55:12.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Firtstname parameter to the Update Account form in student_profile.php. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/161394/School-File-Management-System-1.0-Cross-Site-Scripting.html - https://www.sourcecodester.com/php/14155/school-file-management-system.html
CVE ID: CVE-2021-29056 State: PUBLISHED Published: 2021-08-17T17:23:41 Last Updated: 2024-08-03T21:55:12.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pixelimity/pixelimity/issues/21
CVE ID: CVE-2021-29057 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-09T18:37:53.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool version 1.4.3, allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/SUCHMOKUO/node-worker-threads-pool/issues/20
CVE ID: CVE-2021-29059 State: PUBLISHED Published: 2021-06-21T15:49:24 Last Updated: 2024-08-03T21:55:12.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service (ReDOS) occurs if the application is provided and checks a crafted invalid SVG string. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/is-svg - https://github.com/yetingli/SaveResults/blob/main/js/is-svg.js - https://github.com/sindresorhus/is-svg/releases/tag/v4.3.0 - https://github.com/yetingli/PoCs/blob/main/CVE-2021-29059/IS-SVG.md
CVE ID: CVE-2021-29060 State: PUBLISHED Published: 2021-06-21T15:45:53 Last Updated: 2024-08-03T21:55:12.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yetingli/SaveResults/blob/main/js/color-string.js - https://github.com/Qix-/color-string/commit/0789e21284c33d89ebc4ab4ca6f759b9375ac9d3 - https://www.npmjs.com/package/color-string - https://github.com/yetingli/PoCs/blob/main/CVE-2021-29060/Co
59b9375ac9d3 - https://www.npmjs.com/package/color-string - https://github.com/yetingli/PoCs/blob/main/CVE-2021-29060/Color-String.md
CVE ID: CVE-2021-29061 State: PUBLISHED Published: 2021-06-21T19:46:22 Last Updated: 2024-08-03T21:55:12.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Vfsjfilechooser2 version 0.2.9 and below which occurs when the application attempts to validate crafted URIs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yetingli/SaveResults/blob/main/md/vfsjfilechooser2.md - https://github.com/fracpete/vfsjfilechooser2/releases/tag/vfsjfilechooser2-0.2.9 - https://github.com/fracpete/vfsjfilechooser2/issues/7 - https://github.com/fracpete/vfsjfilechooser2/commit/9c9f2c317f3
https://github.com/fracpete/vfsjfilechooser2/issues/7 - https://github.com/fracpete/vfsjfilechooser2/commit/9c9f2c317f3de5ece60a3ae28c371e9796e3909b - https://github.com/yetingli/PoCs/blob/main/CVE-2021-29061/Vfsjfilechooser2.md
CVE ID: CVE-2021-29063 State: PUBLISHED Published: 2021-06-21T00:00:00 Last Updated: 2024-08-03T21:55:12.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.0.0 through v1.2.1 when the mpmathify function is called. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yetingli/SaveResults/blob/main/js/hosted-git-info.js - https://github.com/npm/hosted-git-info/pull/76 - https://www.npmjs.com/package/hosted-git-info - https://github.com/yetingli/PoCs/blob/main/CVE-2021-29063/Mpmath.md - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap
PoCs/blob/main/CVE-2021-29063/Mpmath.md - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3M5O55E7VUDMXCPQR6MQTOIFDKHP36AA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MS2U6GLXQSRZJE2HVUAUMVFR2DWQLCZG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EIUX3XWY2K3MSO7QXMZXQQYAURARSPC5/ - https://github.com/fredrik-johansson/mpmath/commit/46d44c3c8f3244017fe1eb102d564eb4ab8ef750 - https://github.com/mpmath/mpmath/releases/tag/1.3.0
CVE ID: CVE-2021-29065 State: PUBLISHED Published: 2021-03-23T07:00:43 Last Updated: 2024-08-03T21:55:12.614Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RBR850 devices before 3.2.10.11 are affected by authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000063006/Security-Advisory-for-Authentication-Bypass-on-RBR850-PSV-2020-0029
CVE ID: CVE-2021-29066 State: PUBLISHED Published: 2021-03-23T07:00:35 Last Updated: 2024-08-03T21:55:12.497Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000063014/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0484