Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-46162 State: PUBLISHED Published: 2022-02-22T17:52:41 Last Updated: 2024-08-04T05:02:11.372Z Vendors: Siemens Products: Simcenter Femap Problem Types: CWE-787 Description: A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.1). Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15048) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-949188.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-511/
CVE ID: CVE-2021-46163 State: PUBLISHED Published: 2022-01-09T16:31:21 Last Updated: 2024-08-04T05:02:10.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kentico Xperience 13.0.44 allows XSS via an XML document to the Media Libraries subsystem. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/boatpavaris/649e731b2398597634fbe423dcfd8485
CVE ID: CVE-2021-46164 State: PUBLISHED Published: 2022-01-09T00:26:26 Last Updated: 2024-08-04T05:02:11.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete access to the Reports module. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/desktop-central/vulnerabilities-in-reports-module.html
CVE ID: CVE-2021-46165 State: PUBLISHED Published: 2022-01-09T00:26:13 Last Updated: 2024-08-04T05:02:11.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but this file's path might not be properly defined. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/desktop-central/vulnerabilities-in-reports-module.html
CVE ID: CVE-2021-46166 State: PUBLISHED Published: 2022-01-09T00:25:23 Last Updated: 2024-08-04T05:02:10.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting the Reports page. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/desktop-central/vulnerabilities-in-reports-module.html
CVE ID: CVE-2021-46167 State: PUBLISHED Published: 2022-04-13T14:29:14 Last Updated: 2024-08-04T05:02:11.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: An access control issue in the authentication module of wizplat PD065 v1.19 allows attackers to access sensitive data and cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - http://wizplat.com/PRODUCT1_3/?idx=217 - https://www.amazon.in/High-Speed-Recognition-Fingerprint-Encrypted-Security/dp/B07BRH1GF5/ref=cm_cr_arp_d_product_top?ie=UTF8 - https://www.ebay.com/itm/DM-32GB-Fingerprint-Encrypted-Pen-Drive-Secure-Memory-USB-Stick-AES256/202929723426?hash=item2f3f8dd822:g:mugAAOSwz8N
tm/DM-32GB-Fingerprint-Encrypted-Pen-Drive-Secure-Memory-USB-Stick-AES256/202929723426?hash=item2f3f8dd822:g:mugAAOSwz8NbgQKf - https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-w8x7-9p5m-2vx4
CVE ID: CVE-2021-46168 State: PUBLISHED Published: 2022-01-14T20:02:45 Last Updated: 2024-08-04T05:02:10.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spin v6.5.1 was discovered to contain an out-of-bounds write in lex() at spinlex.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nimble-code/Spin/issues/56
CVE ID: CVE-2021-46169 State: PUBLISHED Published: 2022-01-14T20:02:46 Last Updated: 2024-08-04T05:02:10.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Modex v2.11 was discovered to contain an Use-After-Free vulnerability via the component tcache. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nimble-code/Modex/issues/10
CVE ID: CVE-2021-46170 State: PUBLISHED Published: 2022-01-14T20:05:13 Last Updated: 2024-08-04T05:02:11.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string in js-lexer.c file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/4917
CVE ID: CVE-2021-46171 State: PUBLISHED Published: 2022-01-14T20:05:14 Last Updated: 2024-08-04T05:02:11.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Modex v2.11 was discovered to contain a NULL pointer dereference in set_create_id() at xtract.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nimble-code/Modex/issues/8
CVE ID: CVE-2021-46174 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T17:56:12.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=28753
CVE ID: CVE-2021-46179 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T17:51:24.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/upx/upx/issues/545
CVE ID: CVE-2021-46195 State: PUBLISHED Published: 2022-01-14T19:16:12 Last Updated: 2024-08-04T05:02:11.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources. Additional Analyst Notes: - CVE Program Container: References: - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103841
CVE ID: CVE-2021-46198 State: PUBLISHED Published: 2022-01-21T15:20:29 Last Updated: 2024-08-04T05:02:11.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app. Additional Analyst Notes: - CVE Program Container: References: - https://www.nu11secur1ty.com/2022/01/courier-management-system-10-sql.html - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Courier-Management-System
CVE ID: CVE-2021-46200 State: PUBLISHED Published: 2022-01-21T15:34:10 Last Updated: 2024-08-04T05:02:11.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL Injection vulnerability exists in Sourcecodester Simple Music Clour Community System 1.0 via the email parameter in /music/ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Simple-Music-Cloud-Community-System
CVE ID: CVE-2021-46201 State: PUBLISHED Published: 2022-01-21T15:52:09 Last Updated: 2024-08-04T05:02:11.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL Injection vulnerability exists in Sourcecodester Online Resort Management System 1.0 via the id parameterv in /orms/ node. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Online-Resort-Management-System-1.0
CVE ID: CVE-2021-46203 State: PUBLISHED Published: 2022-01-19T17:44:30 Last Updated: 2024-08-04T05:02:11.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/taogogo/taocms/issues/13
CVE ID: CVE-2021-46204 State: PUBLISHED Published: 2022-01-19T17:44:31 Last Updated: 2024-08-04T05:02:11.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. SQL injection vulnerability via taocms\include\Model\Article.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/taogogo/taocms/issues/14
CVE ID: CVE-2021-46225 State: PUBLISHED Published: 2022-01-12T19:54:35 Last Updated: 2024-08-04T05:02:10.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in the GmfOpenMesh() function of libMeshb v7.61 allows attackers to cause a Denial of Service (DoS) via a crafted MESH file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/LoicMarechal/libMeshb/issues/21 - https://github.com/LoicMarechal/libMeshb/commit/8cd68c54e0647c0030ae4506a225ad4a2655c316
CVE ID: CVE-2021-46226 State: PUBLISHED Published: 2022-02-04T01:33:36 Last Updated: 2024-08-04T05:02:11.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function wget_test.asp. This vulnerability allows attackers to execute arbitrary commands via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_9/9.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284
CVE ID: CVE-2021-46227 State: PUBLISHED Published: 2022-02-04T01:33:35 Last Updated: 2024-08-04T05:02:11.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function proxy_client.asp. This vulnerability allows attackers to execute arbitrary commands via the proxy_srv, proxy_srvport, proxy_lanip, proxy_lanport parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_10/10.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP
my_vuln/blob/main/D-link/vuln_10/10.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284
CVE ID: CVE-2021-46228 State: PUBLISHED Published: 2022-02-04T01:33:35 Last Updated: 2024-08-04T05:02:11.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpd_debug.asp. This vulnerability allows attackers to execute arbitrary commands via the time parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_6/6.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284
CVE ID: CVE-2021-46229 State: PUBLISHED Published: 2022-02-04T01:33:34 Last Updated: 2024-08-04T05:02:11.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function usb_paswd.asp. This vulnerability allows attackers to execute arbitrary commands via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_11/11.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284
CVE ID: CVE-2021-46230 State: PUBLISHED Published: 2022-02-04T01:33:32 Last Updated: 2024-08-04T05:02:11.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgrade_filter. This vulnerability allows attackers to execute arbitrary commands via the path and time parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_7/7.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284
CVE ID: CVE-2021-46231 State: PUBLISHED Published: 2022-02-04T01:33:32 Last Updated: 2024-08-04T05:02:10.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function urlrd_opt.asp. This vulnerability allows attackers to execute arbitrary commands via the url_en parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_5/5.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284
CVE ID: CVE-2021-46232 State: PUBLISHED Published: 2022-02-04T01:33:31 Last Updated: 2024-08-04T05:02:11.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function version_upgrade.asp. This vulnerability allows attackers to execute arbitrary commands via the path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_8/8.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284
CVE ID: CVE-2021-46233 State: PUBLISHED Published: 2022-02-04T01:33:31 Last Updated: 2024-08-04T05:02:11.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function msp_info.htm. This vulnerability allows attackers to execute arbitrary commands via the cmd parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_12/12.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10284
CVE ID: CVE-2021-46234 State: PUBLISHED Published: 2022-01-21T20:32:49 Last Updated: 2024-08-04T05:02:11.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2023
CVE ID: CVE-2021-46236 State: PUBLISHED Published: 2022-01-21T20:32:50 Last Updated: 2024-08-04T05:02:11.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_vrml_field_pointer_del () at scenegraph/vrml_tools.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2024
CVE ID: CVE-2021-46237 State: PUBLISHED Published: 2022-01-21T20:32:51 Last Updated: 2024-08-04T05:02:11.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2033
CVE ID: CVE-2021-46238 State: PUBLISHED Published: 2022-01-21T20:32:52 Last Updated: 2024-08-04T05:02:10.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC v1.1.0 was discovered to contain a stack overflow via the function gf_node_get_name () at scenegraph/base_scenegraph.c. This vulnerability can lead to a program crash, causing a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2027
CVE ID: CVE-2021-46239 State: PUBLISHED Published: 2022-01-21T20:32:53 Last Updated: 2024-08-04T05:02:11.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gf_free () at utils/alloc.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2026
CVE ID: CVE-2021-46240 State: PUBLISHED Published: 2022-01-21T20:32:54 Last Updated: 2024-08-04T05:02:11.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_dump_vrml_sffield () at scene_manager/scene_dump.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/2028
CVE ID: CVE-2021-46242 State: PUBLISHED Published: 2022-01-21T20:32:57 Last Updated: 2024-08-04T05:02:10.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HDFGroup/hdf5/issues/1329
CVE ID: CVE-2021-46243 State: PUBLISHED Published: 2022-01-21T20:32:57 Last Updated: 2024-08-04T05:02:11.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5O__dtype_decode_helper () at hdf5/src/H5Odtype.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HDFGroup/hdf5/issues/1326
CVE ID: CVE-2021-46244 State: PUBLISHED Published: 2022-01-21T20:32:58 Last Updated: 2024-08-04T05:02:11.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Divide By Zero vulnerability exists in HDF5 v1.13.1-1 vis the function H5T__complete_copy () at /hdf5/src/H5T.c. This vulnerability causes an aritmetic exception, leading to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HDFGroup/hdf5/issues/1327
CVE ID: CVE-2021-46247 State: PUBLISHED Published: 2022-02-17T18:15:41 Last Updated: 2024-08-04T05:02:10.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from ASUS CMAX6000 v1.02.00. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/drive/folders/1lSaxWKiNKRkeZxQanEMpt906aUgDGUk_?usp=sharing
CVE ID: CVE-2021-46249 State: PUBLISHED Published: 2022-02-15T22:13:29 Last Updated: 2024-08-04T05:02:10.866Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An authorization bypass exploited by a user-controlled key in SpecificApps REST API in ScratchOAuth2 before commit d856dc704b2504cd3b92cf089fdd366dd40775d6 allows app owners to set flags that indicate whether an app is verified on their own apps. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ScratchVerifier/ScratchOAuth2/commit/d856dc704b2504cd3b92cf089fdd366dd40775d6
CVE ID: CVE-2021-46250 State: PUBLISHED Published: 2022-02-15T22:13:30 Last Updated: 2024-08-04T05:02:10.993Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in SOA2Login::commented of ScratchOAuth2 before commit a91879bd58fa83b09283c0708a1864cdf067c64a allows attackers to authenticate as other users on downstream components that rely on ScratchOAuth2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ScratchVerifier/ScratchOAuth2/commit/a91879bd58fa83b09283c0708a1864cdf067c64a
CVE ID: CVE-2021-46251 State: PUBLISHED Published: 2022-02-15T22:13:31 Last Updated: 2024-08-04T05:02:11.258Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) in ScratchOAuth2 before commit 1603f04e44ef67dde6ccffe866d2dca16defb293 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ScratchVerifier/ScratchOAuth2/commit/1603f04e44ef67dde6ccffe866d2dca16defb293
CVE ID: CVE-2021-46252 State: PUBLISHED Published: 2022-02-15T22:13:32 Last Updated: 2024-08-04T05:02:10.942Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in RequirementsBypassPage.php of Scratch Wiki scratch-confirmaccount-v3 allows attackers to modify account request requirement bypasses. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/InternationalScratchWiki/scratch-confirmaccount-v3/commit/5ed5479de0a279377aa9f64362481efb4e75d8f9 - https://github.com/InternationalScratchWiki/scratch-confirmaccount-v3/pull/155
CVE ID: CVE-2021-46253 State: PUBLISHED Published: 2022-02-01T12:52:22 Last Updated: 2024-08-04T05:02:11.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the Create Post function of Anchor CMS v0.12.7 allows attackers to execute arbitrary web scripts or HTML. Additional Analyst Notes: - CVE Program Container: References: - https://anchorcms.com - https://github.com/Nguyen-Trung-Kien/CVE/blob/main/CVE-2021-46253/CVE-2021-46253.pdf
CVE ID: CVE-2021-46255 State: PUBLISHED Published: 2022-01-14T01:37:02 Last Updated: 2024-08-04T05:02:11.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: eyouCMS V1.5.5-UTF8-SP3_1 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eyoucms/eyoucms/issues/21
CVE ID: CVE-2021-46262 State: PUBLISHED Published: 2022-02-15T19:08:28 Last Updated: 2024-08-04T05:02:11.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the PPPoE module. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ainevsia/CVE-Request/tree/main/Tenda/7
CVE ID: CVE-2021-46263 State: PUBLISHED Published: 2022-02-15T19:08:29 Last Updated: 2024-08-04T05:02:11.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wifiTime module. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ainevsia/CVE-Request/tree/main/Tenda/11
CVE ID: CVE-2021-46264 State: PUBLISHED Published: 2022-02-15T19:08:29 Last Updated: 2024-08-04T05:02:11.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the onlineList module. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ainevsia/CVE-Request/tree/main/Tenda/9