Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-26969 State: PUBLISHED Published: 2021-03-05T16:41:32 Last Updated: 2024-08-03T20:40:45.779Z Vendors: n/a Products: Aruba AirWave Management Platform Problem Types: remote authenticated authenticated xml external entity (xxe) Description: A remote authenticated authenticated xml external entity (xxe) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Due to improper restrictions on XML entities a vulnerability exists in the web-based management interface of AirWave. A successful exploit could allow an authenticated attacker to retrieve files from the local system or cause the application to consume system resources, resulting in
ted attacker to retrieve files from the local system or cause the application to consume system resources, resulting in a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt
CVE ID: CVE-2021-26970 State: PUBLISHED Published: 2021-03-05T16:37:10 Last Updated: 2024-08-03T20:40:47.228Z Vendors: n/a Products: Aruba AirWave Management Platform Problem Types: remote authenticated arbitrary command execution Description: A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management interface could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system leading to partial sy
tacker to execute arbitrary commands as a lower privileged user on the underlying operating system leading to partial system compromise. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt
CVE ID: CVE-2021-26971 State: PUBLISHED Published: 2021-03-05T16:43:48 Last Updated: 2024-08-03T20:40:46.913Z Vendors: n/a Products: Aruba AirWave Management Platform Problem Types: remote authenticated arbitrary command execution Description: A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management interface could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system leading to partial sy
CVE ID: CVE-2021-26987 State: PUBLISHED Published: 2021-03-15T21:28:13 Last Updated: 2024-08-03T20:40:45.778Z Vendors: n/a Products: Element Plug-in for vCenter Server, Management Services for Element Software and NetApp HCI, NetApp SolidFire & HCI Management Node Problem Types: Remote Code Execution Description: Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Management Services versions prior to 2.17.56 and Management Node versions through 12.2 contain vulnerable versi
Server, Management Services versions prior to 2.17.56 and Management Node versions through 12.2 contain vulnerable versions of SpringBoot Framework. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20210315-0001/
CVE ID: CVE-2021-26988 State: PUBLISHED Published: 2021-03-04T20:44:47 Last Updated: 2024-08-03T20:40:47.057Z Vendors: n/a Products: Clustered Data ONTAP Problem Types: Information Disclosure Description: Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorized tenant users to discover information related to converting a 7-Mode directory to Cluster-mode such as Storage Virtual Machine (SVM) names, volume names, directory paths and Job IDs. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20210303-0001
CVE ID: CVE-2021-26989 State: PUBLISHED Published: 2021-03-04T20:47:53 Last Updated: 2024-08-03T20:40:46.951Z Vendors: n/a Products: Clustered Data ONTAP Problem Types: Denial of Service Description: Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerability which could allow a remote authenticated attacker to cause a Denial of Service (DoS) on clustered Data ONTAP configured for SMB access. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20210303-0002
CVE ID: CVE-2021-26990 State: PUBLISHED Published: 2021-03-19T18:42:06 Last Updated: 2024-08-03T20:40:47.472Z Vendors: n/a Products: Cloud Manager Problem Types: Arbitrary File Overwrite Description: Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability that could allow a remote attacker to overwrite arbitrary system files. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20210318-0001
CVE ID: CVE-2021-26991 State: PUBLISHED Published: 2021-03-19T18:34:24 Last Updated: 2024-08-03T20:40:45.781Z Vendors: n/a Products: Cloud Manager Problem Types: Cross-Origin Resource Sharing (CORS) Description: Cloud Manager versions prior to 3.9.4 contain an insecure Cross-Origin Resource Sharing (CORS) policy which could allow a remote attacker to interact with Cloud Manager. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20210318-0002
CVE ID: CVE-2021-26992 State: PUBLISHED Published: 2021-03-19T18:39:02 Last Updated: 2024-08-03T20:40:47.054Z Vendors: n/a Products: Cloud Manager Problem Types: Denial of Service Description: Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability which could allow a remote attacker to cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20210318-0003
CVE ID: CVE-2021-26993 State: PUBLISHED Published: 2021-06-11T13:14:04 Last Updated: 2024-08-03T20:40:45.760Z Vendors: n/a Products: E-Series SANtricity OS Controller Software 11.x Problem Types: Denial of Service Description: E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to cause a partial Denial of Service (DoS) to the web server. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20210610-0001
CVE ID: CVE-2021-26994 State: PUBLISHED Published: 2021-06-04T10:56:36 Last Updated: 2024-08-03T20:40:47.249Z Vendors: n/a Products: Clustered Data ONTAP Problem Types: Denial of Service (DoS) Description: Clustered Data ONTAP versions prior to 9.7P13 and 9.8P3 are susceptible to a vulnerability which could allow single workloads to cause a Denial of Service (DoS) on a cluster node. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20210601-0001/
CVE ID: CVE-2021-26995 State: PUBLISHED Published: 2021-06-11T13:12:58 Last Updated: 2024-08-03T20:40:46.961Z Vendors: n/a Products: E-Series SANtricity OS Controller Software 11.x Problem Types: Remote Code Execution Description: E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow privileged attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20210610-0002
CVE ID: CVE-2021-26996 State: PUBLISHED Published: 2021-06-11T13:11:46 Last Updated: 2024-08-03T20:40:47.067Z Vendors: n/a Products: E-Series SANtricity OS Controller Software 11.x Problem Types: Information Disclosure Description: E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover system configuration and application information which may aid in crafting more complex attacks. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20210610-0003
CVE ID: CVE-2021-26997 State: PUBLISHED Published: 2021-06-11T12:44:58 Last Updated: 2024-08-03T20:40:46.962Z Vendors: n/a Products: E-Series SANtricity OS Controller Software 11.x Problem Types: Information Disclosure Description: E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover information via error messaging which may aid in crafting more complex attacks. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20210610-0004
CVE ID: CVE-2021-26998 State: PUBLISHED Published: 2021-08-06T14:19:41 Last Updated: 2024-08-03T20:40:47.088Z Vendors: n/a Products: NetApp Cloud Manager Problem Types: Information Disclosure Description: NetApp Cloud Manager versions prior to 3.9.9 log sensitive information that is available only to authenticated users. Customers with auto-upgrade enabled should already be on a fixed version while customers using on-prem connectors with auto-upgrade disabled are advised to upgrade to a fixed version. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20210805-0011
CVE ID: CVE-2021-26999 State: PUBLISHED Published: 2021-08-06T14:20:49 Last Updated: 2024-08-03T20:40:47.074Z Vendors: n/a Products: NetApp Cloud Manager Problem Types: Information Disclosure Description: NetApp Cloud Manager versions prior to 3.9.9 log sensitive information when an Active Directory connection fails. The logged information is available only to authenticated users. Customers with auto-upgrade enabled should already be on a fixed version while customers using on-prem connectors with auto-upgrade disabled are advised to upgrade to a fixed version. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20210805-0012
CVE ID: CVE-2021-27000 State: REJECTED Published: 2022-02-28T22:02:15 Last Updated: 2022-02-28T22:02:15 Description: No description available.
CVE ID: CVE-2021-27001 State: PUBLISHED Published: 2021-10-19T14:11:58 Last Updated: 2024-08-03T20:40:46.933Z Vendors: n/a Products: Clustered Data ONTAP Problem Types: Arbitrary Data Modification Description: Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow an authenticated privileged local attacker to arbitrarily modify Compliance-mode WORM data prior to the end of the retention period. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20211018-0001
CVE ID: CVE-2021-27002 State: PUBLISHED Published: 2021-10-11T16:37:17 Last Updated: 2024-08-03T20:40:46.879Z Vendors: n/a Products: Cloud Manager Problem Types: Sensitive Information Disclosure Description: NetApp Cloud Manager versions prior to 3.9.10 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to retrieve sensitive data via the web proxy. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20211011-0001/
CVE ID: CVE-2021-27003 State: PUBLISHED Published: 2021-10-12T17:57:44 Last Updated: 2024-08-03T20:40:47.023Z Vendors: n/a Products: Clustered Data ONTAP Problem Types: Clickjacking attack Description: Clustered Data ONTAP versions prior to 9.5P18, 9.6P15, 9.7P14, 9.8P5 and 9.9.1 are missing an X-Frame-Options header which could allow a clickjacking attack. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20211012-0001/
CVE ID: CVE-2021-27004 State: PUBLISHED Published: 2021-11-01T12:30:38 Last Updated: 2024-08-03T20:40:47.024Z Vendors: n/a Products: System Manager 9.x Problem Types: Disclosure of sensitive information Description: System Manager 9.x versions 9.7 and higher prior to 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow a local attacker to discover plaintext iSCSI CHAP credentials. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20211029-0001/
CVE ID: CVE-2021-27005 State: PUBLISHED Published: 2021-11-01T13:16:06 Last Updated: 2024-08-03T20:40:46.948Z Vendors: n/a Products: Clustered Data ONTAP Problem Types: Denial of Service Description: Clustered Data ONTAP versions 9.6 and higher prior to 9.6P16, 9.7P16, 9.8P7 and 9.9.1P3 are susceptible to a vulnerability which could allow a remote attacker to cause a crash of the httpd server. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/NTAP-20211029-0002/
CVE ID: CVE-2021-27006 State: PUBLISHED Published: 2021-12-23T19:48:47 Last Updated: 2024-08-03T20:40:47.120Z Vendors: n/a Products: StorageGRID (formerly StorageGRID Webscale) Problem Types: Privilege Escalation Description: StorageGRID (formerly StorageGRID Webscale) versions 11.5 prior to 11.5.0.5 are susceptible to a vulnerability which may allow an administrative user to escalate their privileges and modify settings in SANtricity System Manager. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20211221-0001/
CVE ID: CVE-2021-27007 State: PUBLISHED Published: 2021-12-23T19:48:46 Last Updated: 2024-08-03T20:40:47.114Z Vendors: n/a Products: NetApp Virtual Desktop Service (VDS) Problem Types: Remote Code Execution Description: NetApp Virtual Desktop Service (VDS) when used with an HTML5 gateway is susceptible to a vulnerability which when successfully exploited could allow an unauthenticated attacker to takeover a Remote Desktop Session. Additional Analyst Notes: - CVE Program Container: References: - https://security.netapp.com/advisory/ntap-20211223-0008/
CVE ID: CVE-2021-27008 State: REJECTED Published: 2022-02-28T21:58:44 Last Updated: 2022-02-28T21:58:44 Description: No description available.
CVE ID: CVE-2021-27009 State: REJECTED Published: 2022-02-28T21:58:45 Last Updated: 2022-02-28T21:58:45 Description: No description available.
CVE ID: CVE-2021-27010 State: REJECTED Published: 2022-02-28T21:58:46 Last Updated: 2022-02-28T21:58:46 Description: No description available.
CVE ID: CVE-2021-27011 State: REJECTED Published: 2022-02-28T21:58:47 Last Updated: 2022-02-28T21:58:47 Description: No description available.
CVE ID: CVE-2021-27012 State: REJECTED Published: 2022-02-28T21:58:48 Last Updated: 2022-02-28T21:58:48 Description: No description available.
CVE ID: CVE-2021-27013 State: REJECTED Published: 2022-02-28T21:58:49 Last Updated: 2022-02-28T21:58:49 Description: No description available.
CVE ID: CVE-2021-27014 State: REJECTED Published: 2022-02-28T21:58:49 Last Updated: 2022-02-28T21:58:49 Description: No description available.
CVE ID: CVE-2021-27015 State: REJECTED Published: 2022-02-28T21:58:50 Last Updated: 2022-02-28T21:58:50 Description: No description available.
CVE ID: CVE-2021-27016 State: REJECTED Published: 2022-02-28T21:58:51 Last Updated: 2022-02-28T21:58:51 Description: No description available.
CVE ID: CVE-2021-27017 State: PUBLISHED Published: 2025-02-07T19:28:45.531Z Last Updated: 2025-02-07T19:46:31.091Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: PuppetPu Products: Puppet Agent Description: Utilization of a module presented a security risk by allowing the deserialization of untrusted/user supplied data. This is resolved in the Puppet Agent 7.4.0 release. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.puppet.com/security/cve/cve-2021-27017-deserialization-untrusted-data
CVE ID: CVE-2021-27018 State: PUBLISHED Published: 2021-08-30T17:56:05 Last Updated: 2024-08-03T20:40:47.040Z Vendors: n/a Products: Puppet Remediate Problem Types: Improper Verification of Cryptographic Signature Description: The mechanism which performs certificate validation was discovered to have a flaw that resulted in certificates signed by an internal certificate authority to not be properly validated. This issue only affects clients that are configured to utilize Tenable.sc as the vulnerability data source. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2021-27018
CVE ID: CVE-2021-27019 State: PUBLISHED Published: 2021-08-30T17:56:04 Last Updated: 2024-08-03T20:40:47.286Z Vendors: n/a Products: PuppetDB, Puppet Enterprise Problem Types: Insertion of Sensitive Information into Log File Description: PuppetDB logging included potentially sensitive system information. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2021-27019
CVE ID: CVE-2021-27020 State: PUBLISHED Published: 2021-08-30T17:56:03 Last Updated: 2024-08-03T20:40:46.930Z Vendors: n/a Products: Puppet Enterprise Problem Types: Formula Injection Description: Puppet Enterprise presented a security risk by not sanitizing user input when doing a CSV export. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2021-27020
CVE ID: CVE-2021-27021 State: PUBLISHED Published: 2021-07-20T10:44:49 Last Updated: 2024-08-03T20:40:47.020Z Vendors: n/a Products: Puppet DB Problem Types: CWE-1027 Description: A flaw was discovered in Puppet DB, this flaw results in an escalation of privileges which allows the user to delete tables via an SQL query. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/cve-2021-27021/
CVE ID: CVE-2021-27022 State: PUBLISHED Published: 2021-09-07T13:03:48 Last Updated: 2024-08-03T20:40:47.006Z Vendors: n/a Products: Puppet Enterprise Problem Types: CWE-532 Description: A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes (inventory service nodes). Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/cve-2021-27022/%5D - https://puppet.com/security/cve/cve-2021-27022/
CVE ID: CVE-2021-27023 State: PUBLISHED Published: 2021-11-18T14:33:18 Last Updated: 2024-08-03T20:40:47.068Z Vendors: n/a Products: Puppet Enterprise, Puppet Server, Puppet Agent Problem Types: Unsafe HTTP Redirect Description: A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018-1000007 Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/CVE-2021-27023 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62SELE7EKVKZL4GABFMVYMIIUZ7FPEF7/
CVE ID: CVE-2021-27024 State: PUBLISHED Published: 2021-11-18T14:23:56 Last Updated: 2024-08-03T20:40:47.096Z Vendors: n/a Products: Puppet Continuous Delivery for Puppet Enterprise (CD4PE) Problem Types: Invalid Permissions Check Description: A flaw was discovered in Continuous Delivery for Puppet Enterprise (CD4PE) that results in a user with lower privileges being able to access a Puppet Enterprise API token. This issue is resolved in CD4PE 4.10.0 Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/cve-2021-27024
CVE ID: CVE-2021-27025 State: PUBLISHED Published: 2021-11-18T14:30:36 Last Updated: 2024-08-03T20:40:47.252Z Vendors: n/a Products: Puppet Enterprise, Puppet Agent Problem Types: Silent Configuration Failure Description: A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'. Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/cve-2021-27025 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/62SELE7EKVKZL4GABFMVYMIIUZ7FPEF7/
CVE ID: CVE-2021-27026 State: PUBLISHED Published: 2021-11-18T14:27:21 Last Updated: 2024-08-03T20:40:46.893Z Vendors: n/a Products: Puppet Enterprise, Puppet Connect Problem Types: Sensitive Information May be Logged Description: A flaw was divered in Puppet Enterprise and other Puppet products where sensitive plan parameters may be logged Additional Analyst Notes: - CVE Program Container: References: - https://puppet.com/security/cve/cve-2021-27026
CVE ID: CVE-2021-27027 State: PUBLISHED Published: 2021-04-19T15:08:48 Last Updated: 2024-08-03T20:40:47.233Z Vendors: n/a Products: Autodesk FBX Review Problem Types: Out-Of-Bounds Read Vulnerability Description: An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to code execution through maliciously crafted DLL files or information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001 - https://www.zerodayinitiative.com/advisories/ZDI-21-471/ - https://www.zerodayinitiative.com/advisories/ZDI-21-473/ - https://www.zerodayinitiative.com/advisories/ZDI-21-469/
/ - https://www.zerodayinitiative.com/advisories/ZDI-21-473/ - https://www.zerodayinitiative.com/advisories/ZDI-21-469/ - https://www.zerodayinitiative.com/advisories/ZDI-21-472/ - https://www.zerodayinitiative.com/advisories/ZDI-21-470/
CVE ID: CVE-2021-27028 State: PUBLISHED Published: 2021-04-19T15:09:01 Last Updated: 2024-08-03T20:40:47.287Z Vendors: n/a Products: Autodesk FBX Review Problem Types: Memory Corruption - Generic Description: A Memory Corruption Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to remote code execution through maliciously crafted DLL files. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001 - https://www.zerodayinitiative.com/advisories/ZDI-21-467/ - https://www.zerodayinitiative.com/advisories/ZDI-21-465/
CVE ID: CVE-2021-27029 State: PUBLISHED Published: 2021-04-19T15:10:08 Last Updated: 2024-08-03T20:40:47.184Z Vendors: n/a Products: Autodesk FBX Review Problem Types: Untrusted Pointer Dereference Remote Code Execution Vulnerability Description: The user may be tricked into opening a malicious FBX file which may exploit a Null Pointer Dereference vulnerability in FBX's Review version 1.5.0 and prior causing the application to crash leading to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001 - https://www.zerodayinitiative.com/advisories/ZDI-21-464/
CVE ID: CVE-2021-27030 State: PUBLISHED Published: 2021-04-19T15:10:21 Last Updated: 2024-08-03T20:40:46.892Z Vendors: n/a Products: Autodesk FBX Review Problem Types: Directory Traversal Remote Code Execution Vulnerability Description: A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vulnerability in FBX’s Review causing it to run arbitrary code on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001 - https://www.zerodayinitiative.com/advisories/ZDI-21-466/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1070/