Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-42655 State: PUBLISHED Published: 2022-05-24T12:55:13 Last Updated: 2024-08-04T03:38:49.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/siteserver/cms - https://github.com/siteserver/cms/issues/3237 - https://github.com/siteserver/cms/releases/download/siteserver-v6.15.51/siteserver_install.zip
CVE ID: CVE-2021-42656 State: PUBLISHED Published: 2022-05-24T13:00:39 Last Updated: 2024-08-04T03:38:50.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/siteserver/cms - https://github.com/siteserver/cms/releases/download/siteserver-v6.15.51/siteserver_install.zip - https://github.com/siteserver/cms/issues/3238
CVE ID: CVE-2021-42659 State: PUBLISHED Published: 2022-05-24T11:41:53 Last Updated: 2024-08-04T03:38:50.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.19(6318) and Tenda AC9 V3.0 V15.03.06.42_multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Lyc-heng/routers/blob/main/routers/stack4.md - https://www.cnvd.org.cn/flaw/show/CNVD-2021-24948
CVE ID: CVE-2021-42662 State: PUBLISHED Published: 2021-11-05T10:21:22 Last Updated: 2024-08-04T03:38:49.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html - http://packetstormsecurity.com/files/1646
ster.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html - http://packetstormsecurity.com/files/164615/Online-Event-Booking-And-Reservation-System-1.0-Cross-Site-Scripting.html - https://github.com/TheHackingRabbi/CVE-2021-42662 - https://www.exploit-db.com/exploits/50450
CVE ID: CVE-2021-42663 State: PUBLISHED Published: 2021-11-05T12:17:30 Last Updated: 2024-08-04T03:38:49.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a given link he will display the content of the HTML code of the attacker's choice. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpm
ogram Container: References: - https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html - https://github.com/TheHackingRabbi/CVE-2021-42663
CVE ID: CVE-2021-42664 State: PUBLISHED Published: 2021-11-05T12:19:00 Last Updated: 2024-08-04T03:38:50.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in Sourcecodester Engineers Online Portal in PHP via the (1) Quiz title and (2) quiz description parameters to add_quiz.php. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html - http://packetstormsecurity.com/files/164618/Engin
://www.sourcecodester.com/php/13115/engineers-online-portal-php.html - http://packetstormsecurity.com/files/164618/Engineers-Online-Portal-1.0-SQL-Injection.html - https://github.com/TheHackingRabbi/CVE-2021-42664 - https://www.exploit-db.com/exploits/50451
CVE ID: CVE-2021-42665 State: PUBLISHED Published: 2021-11-05T12:21:35 Last Updated: 2024-08-04T03:38:49.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html - https://github.com/TheHackingRabbi/CVE-2021-42665 - https://www.exploit-db.com/exploits/50452 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42665
CVE ID: CVE-2021-42666 State: PUBLISHED Published: 2021-11-05T12:24:09 Last Updated: 2024-08-04T03:38:49.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to quiz_question.php, which could let a malicious user extract sensitive data from the web server and in some cases use this vulnerability in order to get a remote code execution on the remote web server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/CVE-nu11-101321 - https://www.sourcecodester.com/php/13115/engineers-online-port
E-nu11secur1ty/tree/main/vendors/janobe/CVE-nu11-101321 - https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html - https://github.com/TheHackingRabbi/CVE-2021-42666 - https://www.exploit-db.com/exploits/50453
CVE ID: CVE-2021-42667 State: PUBLISHED Published: 2021-11-05T12:26:06 Last Updated: 2024-08-04T03:38:49.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-management/views. An attacker can leverage this vulnerability in order to manipulate the sql query performed. As a result he can extract sensitive data from the web server and in some cases he can use this vulnerability in order to get a remote code execution on the remote web server. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14241/online-event-booking-and
Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html - https://github.com/TheHackingRabbi/CVE-2021-42667 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42667
CVE ID: CVE-2021-42668 State: PUBLISHED Published: 2021-11-05T12:34:23 Last Updated: 2024-08-04T03:38:50.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter in the my_classmates.php web page.. As a result, an attacker can extract sensitive data from the web server and in some cases can use this vulnerability in order to get a remote code execution on the remote web server. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html - https://github.com/TheHackingRabbi/CVE-2021-42668 - https://www.
dester.com/php/13115/engineers-online-portal-php.html - https://github.com/TheHackingRabbi/CVE-2021-42668 - https://www.nu11secur1ty.com/2021/12/cve-2021-42668.html - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42668
CVE ID: CVE-2021-42669 State: PUBLISHED Published: 2021-11-05T12:36:43 Last Updated: 2024-08-04T03:38:49.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file upload vulnerability exists in Sourcecodester Engineers Online Portal in PHP via dashboard_teacher.php, which allows changing the avatar through teacher_avatar.php. Once an avatar gets uploaded it is getting uploaded to the /admin/uploads/ directory, and is accessible by all users. By uploading a php webshell containing "<?php system($_GET["cmd"]); ?>" the attacker can execute commands on the web server with - /admin/uploads/php-webshell?cmd=id. Additional Analyst Notes: - CVE Program Container: References: - https://w
er with - /admin/uploads/php-webshell?cmd=id. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html - https://github.com/TheHackingRabbi/CVE-2021-42669 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42671
CVE ID: CVE-2021-42670 State: PUBLISHED Published: 2021-11-05T12:39:03 Last Updated: 2024-08-04T03:38:50.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to the announcements_student.php web page. As a result a malicious user can extract sensitive data from the web server and in some cases use this vulnerability in order to get a remote code execution on the remote web server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/CVE-nu11-101321 - https://www.sourcecodester.com/php/13115/
b.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/CVE-nu11-101321 - https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html - https://github.com/TheHackingRabbi/CVE-2021-42670
CVE ID: CVE-2021-42671 State: PUBLISHED Published: 2021-11-05T12:41:11 Last Updated: 2024-08-04T03:38:50.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulnerability in order to bypass access controls and access all the files uploaded to the web server without the need of authentication or authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/13115/engineers-online-portal-php.html - https://github.com/TheHackingRabbi/CVE-2021-42671 - https://gi
codester.com/php/13115/engineers-online-portal-php.html - https://github.com/TheHackingRabbi/CVE-2021-42671 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-42671
CVE ID: CVE-2021-42675 State: PUBLISHED Published: 2022-06-14T16:29:42 Last Updated: 2024-08-04T03:38:50.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kreado Kreasfero 1.5 does not properly sanitize uploaded files to the media directory. One can upload a malicious PHP file and obtain remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://kreado.com - http://kreasfero.com - https://twitter.com/1ofThegutHakrs/status/1536246485188128768
CVE ID: CVE-2021-42681 State: PUBLISHED Published: 2021-12-07T20:03:33 Last Updated: 2024-08-04T03:38:49.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42682 State: PUBLISHED Published: 2021-12-07T20:04:36 Last Updated: 2024-08-04T03:38:50.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 .The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42683 State: PUBLISHED Published: 2021-12-07T20:05:42 Last Updated: 2024-08-04T03:38:50.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42685 State: PUBLISHED Published: 2021-12-07T20:07:06 Last Updated: 2024-08-04T03:38:50.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 . The IOCTL Handler 0x22005B in the Accops HyWorks DVM Tools prior to v3.3.1.105 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-ser
ww.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42686 State: PUBLISHED Published: 2021-12-07T20:08:29 Last Updated: 2024-08-04T03:38:49.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Integer Overflow exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B in the Accops HyWorks Windows Client prior to v 3.2.8.200 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-servic
sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42687 State: PUBLISHED Published: 2021-12-07T20:09:53 Last Updated: 2024-08-04T03:38:49.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42688 State: PUBLISHED Published: 2021-12-07T20:11:00 Last Updated: 2024-08-04T03:38:49.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Integer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B in the Accops HyWorks Windows Client prior to v 3.2.8.200 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet. Additional Analyst Notes: - CVE Program Container: References: - https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-majo
- https://www.sentinelone.com/labs/usb-over-ethernet-multiple-privilege-escalation-vulnerabilities-in-aws-and-other-major-cloud-services/
CVE ID: CVE-2021-42692 State: PUBLISHED Published: 2022-05-26T10:53:55 Last Updated: 2024-08-04T03:38:49.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack-overflow vulnerability in tinytoml v0.4 that can cause a crash or DoS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mayah/tinytoml/issues/49
CVE ID: CVE-2021-42694 State: PUBLISHED Published: 2021-11-01T00:00:00 Last Updated: 2024-10-29T13:41:17.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the character definitions of the Unicode Specification through 14.0. The specification allows an adversary to produce source code identifiers such as function names using homoglyphs that render visually identical to a target identifier. Adversaries can leverage this to inject code via adversarial identifier definitions in upstream software dependencies invoked deceptively in downstream software. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An iss
ream software. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard (all versions). Unless mitigated, an adversary could produce source code identifiers using homoglyph characters that render visually identical to but are distinct from a target identifier. In this way, an adversary could inject adversarial identifier definitions in upstream software that are not detected by human reviewers and are invoked deceptively in downstream software. The Unicode Consortium has documented this class of security vulnerability in
voked deceptively in downstream software. The Unicode Consortium has documented this class of security vulnerability in its document, Unicode Technical Report #36, Unicode Security Considerations. The Unicode Consortium also provides guidance on mitigations for this class of issues in Unicode Technical Standard #39, Unicode Security Mechanisms. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://www.unicode.org/versions/Unicode14.0.0/ - https://trojansource.codes - http://www.openwall.com/lists/oss-security/2021/11/01/1 - http://www.openwall.com/lists/oss-security/2021/11/01/6 - https://www.kb.cert.org/vuls/id/999008 - https://www.scyon.nl/post/tr
www.openwall.com/lists/oss-security/2021/11/01/6 - https://www.kb.cert.org/vuls/id/999008 - https://www.scyon.nl/post/trojans-in-your-source-code - https://www.unicode.org/reports/tr36/ - https://www.unicode.org/reports/tr39/ - https://cwe.mitre.org/data/definitions/1007.html - https://security.gentoo.org/glsa/202210-09
CVE ID: CVE-2021-42697 State: PUBLISHED Published: 2021-11-02T21:44:54 Last Updated: 2024-08-04T03:38:50.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Akka HTTP 10.1.x before 10.1.15 and 10.2.x before 10.2.7 can encounter stack exhaustion while parsing HTTP headers, which allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments. Additional Analyst Notes: - CVE Program Container: References: - https://akka.io/blog/ - https://doc.akka.io/docs/akka-http/current/security/2021-CVE-2021-42697-stack-overflow-parsing-user-agent.html - https://akka.io/blog/news/2021/11/02/akka-http-10.2.7-released - https://akka.io/blo
-overflow-parsing-user-agent.html - https://akka.io/blog/news/2021/11/02/akka-http-10.2.7-released - https://akka.io/blog/news/2021/11/22/akka-http-10.1.15-released - http://packetstormsecurity.com/files/167018/Akka-HTTP-10.1.14-Denial-Of-Service.html
CVE ID: CVE-2021-42698 State: PUBLISHED Published: 2021-11-05T15:39:34 Last Updated: 2024-08-04T03:38:50.112Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: AzeoTech Products: DAQFactory Problem Types: CWE-502 Description: Project files are stored memory objects in the form of binary serialized data that can later be read and deserialized again to instantiate the original objects in memory. Malicious manipulation of these files may allow an attacker to corrupt memory. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-308-02
CVE ID: CVE-2021-42699 State: PUBLISHED Published: 2021-11-05T15:39:16 Last Updated: 2024-08-04T03:38:50.112Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N) Vendors: AzeoTech Products: DAQFactory Problem Types: CWE-319 Description: The affected product is vulnerable to cookie information being transmitted as cleartext over HTTP. An attacker can capture network traffic, obtain the user’s cookie and take over the account. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-308-02
CVE ID: CVE-2021-42700 State: PUBLISHED Published: 2022-05-18T16:21:40.584Z Last Updated: 2025-04-16T16:20:04.931Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Inkscape Products: Inkscape Problem Types: CWE-125 Description: Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-03 - https://www.integraxor.com/scada-animation-graphic-editor-extension-inkscape/
CVE ID: CVE-2021-42701 State: PUBLISHED Published: 2021-11-05T15:39:27 Last Updated: 2024-08-04T03:38:50.117Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N) Vendors: AzeoTech Products: DAQFactory Problem Types: CWE-471 Description: An attacker could prepare a specially crafted project file that, if opened, would attempt to connect to the cloud and trigger a man in the middle (MiTM) attack. This could allow an attacker to obtain credentials and take over the user’s cloud account. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-308-02
CVE ID: CVE-2021-42702 State: PUBLISHED Published: 2022-05-18T16:24:13.808Z Last Updated: 2025-04-16T16:19:56.515Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Inkscape Products: Inkscape Problem Types: CWE-824 Description: Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-03 - https://www.integraxor.com/scada-animation-graphic-editor-extension-inkscape/
CVE ID: CVE-2021-42703 State: PUBLISHED Published: 2021-11-15T14:03:50.578603Z Last Updated: 2024-09-17T00:22:02.697Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Advantech Products: HMI Designer Problem Types: CWE-79 Description: This vulnerability could allow an attacker to send malicious Javascript code resulting in hijacking of the user’s cookie/session tokens, redirecting the user to a malicious webpage, and performing unintended browser action. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-173-01
CVE ID: CVE-2021-42704 State: PUBLISHED Published: 2022-05-18T16:24:51.499Z Last Updated: 2025-04-16T16:19:49.455Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Inkscape Products: Inkscape Problem Types: CWE-787 Description: Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-03 - https://www.integraxor.com/scada-animation-graphic-editor-extension-inkscape/