Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-41855 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:34.170Z Description: No description available.
CVE ID: CVE-2021-41856 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:34.704Z Description: No description available.
CVE ID: CVE-2021-41857 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:35.240Z Description: No description available.
CVE ID: CVE-2021-41858 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:35.803Z Description: No description available.
CVE ID: CVE-2021-41859 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:36.338Z Description: No description available.
CVE ID: CVE-2021-41860 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:36.913Z Description: No description available.
CVE ID: CVE-2021-41861 State: PUBLISHED Published: 2021-10-04T02:58:42 Last Updated: 2024-08-04T03:22:25.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Telegram application 7.5.0 through 7.8.0 for Android does not properly implement image self-destruction, a different vulnerability than CVE-2019-16248. After approximately two to four uses of the self-destruct feature, there is a misleading UI indication that an image was deleted (on both the sender and recipient sides). The images are still present in the /Storage/Emulated/0/Telegram/Telegram Image/ directory. Additional Analyst Notes: - CVE Program Container: References: - https://habr.com/ru/post/580582/ - https://tele
ectory. Additional Analyst Notes: - CVE Program Container: References: - https://habr.com/ru/post/580582/ - https://telegram.org/blog/autodelete-inv2/ru#avtomaticheskoe-udalenie-soobschenii - https://desktop.telegram.org/changelog#v-2-6-23-02-21 - https://pikabu.ru/story/konfidentsialnost_polzovateley_telegram_snova_narushena_predstaviteli_messendzhera_trebuyut_ne_raskryivat_podrobnostey_8511495
CVE ID: CVE-2021-41862 State: PUBLISHED Published: 2021-10-01T23:21:13 Last Updated: 2024-08-04T03:22:24.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library (BCEL). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/killme2008/aviatorscript/issues/421
CVE ID: CVE-2021-41864 State: PUBLISHED Published: 2021-10-01T23:46:17 Last Updated: 2024-08-04T03:22:25.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=30e29a9a2bc6a4888335a6ede968b75cd329657a - https://github.com/torvalds/linux/commit/30e29a9a2bc6a4888335a6ede968b75cd329657a - https://lists.fedoraproject.org/archives/list/package-announce%40
inux/commit/30e29a9a2bc6a4888335a6ede968b75cd329657a - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYKURLXBB2555ASWMPDNMBUPD6AG2JKQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7BLLVKYAIETEORUPTFO3TR3C33ZPFXQM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LAT3RERO6QBKSPJBNNRWY3D4NCGTFOS7/ - https://security.netapp.com/advisory/ntap-20211029-0004/ - https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.12 - https://lists.debian.org/debian-lts-announce/2022/03/
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.12 - https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html - https://www.debian.org/security/2022/dsa-5096
CVE ID: CVE-2021-41865 State: PUBLISHED Published: 2021-10-07T13:48:36 Last Updated: 2024-08-04T03:22:25.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Nomad and Nomad Enterprise 1.1.1 through 1.1.5 allowed authenticated users with job submission capabilities to cause denial of service by submitting incomplete job specifications with a Consul mesh gateway and host networking mode. Fixed in 1.1.6. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.hashicorp.com/t/hcsec-2021-26-nomad-denial-of-service-via-submission-of-incomplete-job-specification-using-consul-mesh-gateway-host-network/30311
CVE ID: CVE-2021-41866 State: PUBLISHED Published: 2021-10-26T21:25:47 Last Updated: 2024-08-04T03:22:25.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB before 1.8.28 allows stored XSS because the displayed Template Name value in the Admin CP's theme management is not escaped properly. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mybb/mybb/security/advisories/ - https://github.com/mybb/mybb/security/advisories/GHSA-gxhv-r3m5-6qv7
CVE ID: CVE-2021-41867 State: PUBLISHED Published: 2021-10-04T13:48:07 Last Updated: 2024-08-04T03:22:25.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/onionshare/onionshare/compare/v2.3.3...v2.4 - https://www.ihteam.net/advisory/onionshare/
CVE ID: CVE-2021-41868 State: PUBLISHED Published: 2021-10-04T13:45:49 Last Updated: 2024-08-04T03:22:25.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/onionshare/onionshare/compare/v2.3.3...v2.4 - https://www.ihteam.net/advisory/onionshare/
CVE ID: CVE-2021-41869 State: PUBLISHED Published: 2021-10-04T06:13:28 Last Updated: 2024-08-04T03:22:25.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuiteCRM 7.10.x before 7.10.33 and 7.11.x before 7.11.22 is vulnerable to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://suitecrm.com - https://github.com/salesagility/SuiteCRM - https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_22 - https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_33 - https://github.com/ach-ing/cves/blob/main/CVE-2021-41869.md
CVE ID: CVE-2021-41870 State: PUBLISHED Published: 2021-12-15T05:48:27 Last Updated: 2024-08-04T03:22:25.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can bypass a client-side file-type check and upload arbitrary .php files. Additional Analyst Notes: - CVE Program Container: References: - https://www.socomec.com/remote-view-software_en.html - https://f20.be/cves/socomec
CVE ID: CVE-2021-41871 State: PUBLISHED Published: 2021-12-15T05:49:12 Last Updated: 2024-08-04T03:22:25.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored XSS payload. This is executed if an administrator views the System Event Log. Additional Analyst Notes: - CVE Program Container: References: - https://www.socomec.com/remote-view-software_en.html - https://f20.be/cves/socomec
CVE ID: CVE-2021-41872 State: PUBLISHED Published: 2021-10-27T13:00:13 Last Updated: 2024-08-04T03:22:25.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability, which can be exploited by attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.cnvd.org.cn/flaw/show/2928136
CVE ID: CVE-2021-41873 State: PUBLISHED Published: 2021-10-26T11:28:39 Last Updated: 2024-08-04T03:22:25.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vulnerability exists in the Penguin Aurora Box. An attacker can use the vulnerability to gain unauthorized access to a specific link to remotely control the TV. Additional Analyst Notes: - CVE Program Container: References: - https://www.cnvd.org.cn/flaw/show/2934166
CVE ID: CVE-2021-41874 State: REJECTED Published: 2021-10-29T00:00:00.000Z Last Updated: 2025-08-27T22:34:46.053Z Description: No description available.
CVE ID: CVE-2021-41878 State: PUBLISHED Published: 2021-10-04T11:58:51 Last Updated: 2024-08-04T03:22:25.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console and it is possible to insert a vulnerable malicious button. Additional Analyst Notes: - CVE Program Container: References: - https://cybergroot.com/cve_submission/2021-1/XSS_i-Panel_2.0.html - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41878 - http://packetstormsecurity.com/files/164519/i-Panel-Adminis
github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41878 - http://packetstormsecurity.com/files/164519/i-Panel-Administration-System-2.0-Cross-Site-Scripting.html
CVE ID: CVE-2021-41916 State: PUBLISHED Published: 2021-10-08T15:31:51 Last Updated: 2024-08-04T03:22:25.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) vulnerability in webTareas version 2.4 and earlier allows a remote attacker to create a new administrative profile and add a new user to the new profile. without the victim's knowledge, by enticing an authenticated admin user to visit an attacker's web page. Additional Analyst Notes: - CVE Program Container: References: - https://n4nj0.github.io/advisories/webtareas-multiple-vulnerabilities-i/
CVE ID: CVE-2021-41917 State: PUBLISHED Published: 2021-10-08T15:33:33 Last Updated: 2024-08-04T03:22:25.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: webTareas version 2.4 and earlier allows an authenticated user to store arbitrary web script or HTML by creating or editing a client name in the clients section, due to incorrect sanitization of user-supplied data and achieve a Stored Cross-Site Scripting attack against the platform users and administrators. The affected endpoint is /clients/editclient.php, on the HTTP POST cn parameter. Additional Analyst Notes: - CVE Program Container: References: - https://n4nj0.github.io/advisories/webtareas-multiple-vulnerabilities-i/
CVE ID: CVE-2021-41918 State: PUBLISHED Published: 2021-10-08T15:35:03 Last Updated: 2024-08-04T03:22:25.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: webTareas version 2.4 and earlier allows an authenticated user to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Reflected Cross-Site Scripting attack against the platform users and administrators. The issue affects every endpoint on the application because it is related on how each URL is echoed back on every response page. Additional Analyst Notes: - CVE Program Container: References: - https://n4nj0.github.io/advisories/webtareas-multiple-vulnerabilities-i/
CVE ID: CVE-2021-41919 State: PUBLISHED Published: 2021-10-08T15:36:45 Last Updated: 2024-08-04T03:22:25.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: webTareas version 2.4 and earlier allows an authenticated user to arbitrarily upload potentially dangerous files without restrictions. This is working by adding or replacing a personal profile picture. The affected endpoint is /includes/upload.php on the HTTP POST data. This allows an attacker to exploit the platform by injecting code or malware and, under certain conditions, to execute code on remote user browsers. Additional Analyst Notes: - CVE Program Container: References: - https://n4nj0.github.io/advisories/webtareas-m
rowsers. Additional Analyst Notes: - CVE Program Container: References: - https://n4nj0.github.io/advisories/webtareas-multiple-vulnerabilities-i/
CVE ID: CVE-2021-41920 State: PUBLISHED Published: 2021-10-08T15:37:54 Last Updated: 2024-08-04T03:22:25.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: webTareas version 2.4 and earlier allows an unauthenticated user to perform Time and Boolean-based blind SQL Injection on the endpoint /includes/library.php, via the sor_cible, sor_champs, and sor_ordre HTTP POST parameters. This allows an attacker to access all the data in the database and obtain access to the webTareas application. Additional Analyst Notes: - CVE Program Container: References: - https://n4nj0.github.io/advisories/webtareas-multiple-vulnerabilities-i/
CVE ID: CVE-2021-41921 State: PUBLISHED Published: 2022-04-28T12:16:26 Last Updated: 2024-08-04T03:22:25.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/201206030/novel-plus/issues/62
CVE ID: CVE-2021-41924 State: PUBLISHED Published: 2022-06-21T14:18:15 Last Updated: 2024-08-04T03:22:25.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/krayin/laravel-crm/pull/195/commits/882dc2e7e7e9149b96cf1ccacf34900960b92fb7
CVE ID: CVE-2021-41927 State: REJECTED Published: 2022-05-16T13:32:59 Last Updated: 2022-05-16T13:32:59 Description: No description available.
CVE ID: CVE-2021-41928 State: PUBLISHED Published: 2022-01-24T18:45:58 Last Updated: 2024-08-04T03:22:25.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection in Sourcecodester Try My Recipe (Recipe Sharing Website - CMS) 1.0 by oretnom23, allows attackers to execute arbitrary code via the rid parameter to the view_recipe page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-17-092921
CVE ID: CVE-2021-41929 State: PUBLISHED Published: 2022-01-24T18:00:54 Last Updated: 2024-08-04T03:22:25.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Sourcecodester The Electric Billing Management System 1.0 by oretnom23, allows attackers to execute arbitrary code via the about page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-19-302021
CVE ID: CVE-2021-41930 State: PUBLISHED Published: 2022-01-24T18:06:26 Last Updated: 2024-08-04T03:22:25.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, allows attackers to execute arbitrary code via the lid parameter to /scheduler/addSchedule.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-18-09-2821
CVE ID: CVE-2021-41931 State: PUBLISHED Published: 2021-11-17T11:33:02 Last Updated: 2024-08-04T03:22:25.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Company's Recruitment Management System in id=2 of the parameter from view_vacancy app on-page appears to be vulnerable to SQL injection. The payloads 19424269' or '1309'='1309 and 39476597' or '2917'='2923 were each submitted in the id parameter. These two requests resulted in different responses, indicating that the input is being incorporated into a SQL query in an unsafe way. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CV
: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-20-100121
CVE ID: CVE-2021-41932 State: PUBLISHED Published: 2022-06-06T14:33:35 Last Updated: 2024-08-04T03:22:25.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: A blind SQL injection vulnerability in search form in TeamMate+ Audit version 28.0.19.0 allows any authenticated user to create malicious SQL injections, which can result in complete database compromise, gaining information about other users, unauthorized access to audit data etc. Additional Analyst Notes: - CVE Program Container: References: - https://mjilek.cz/blog/CVE-2021-41932/
CVE ID: CVE-2021-41938 State: PUBLISHED Published: 2022-05-19T14:01:55 Last Updated: 2024-08-04T03:22:25.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulnerability in three locations. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gongfuxiang/shopxo/issues/64
CVE ID: CVE-2021-41942 State: PUBLISHED Published: 2022-04-29T11:05:52 Last Updated: 2024-08-04T03:22:25.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Magic CMS MSVOD v10 video system has a SQL injection vulnerability. Attackers can use vulnerabilities to obtain sensitive information in the database. Additional Analyst Notes: - CVE Program Container: References: - https://www.cnvd.org.cn/flaw/show/CNVD-2021-35892
CVE ID: CVE-2021-41943 State: PUBLISHED Published: 2022-12-12T00:00:00.000Z Last Updated: 2025-04-22T20:13:50.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action -> Create a new Contextualize Action -> Inject your HTML tag in the name field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%40idema16/how-i-found-a-cve-in-logrhythm-cve-2021-41943-61cef1797cb
CVE ID: CVE-2021-41945 State: PUBLISHED Published: 2022-04-28T13:22:10 Last Updated: 2024-08-04T03:22:25.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`. Additional Analyst Notes: - CVE Program Container: References: - http://encode.com - https://gist.github.com/lebr0nli/4edb76bbd3b5ff993cf44f2fbce5e571 - https://github.com/encode/httpx - https://github.com/encode/httpx/discussions/1831 - https://github.com/encode/httpx/issues/2184 - https://github.com/encode/httpx/releases/tag/0.23.0
CVE ID: CVE-2021-41946 State: PUBLISHED Published: 2022-05-18T10:05:35 Last Updated: 2024-08-04T03:22:25.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: In FiberHome VDSL2 Modem HG150-Ub_V3.0, a stored cross-site scripting (XSS) vulnerability in Parental Control --> Access Time Restriction --> Username field, a user cannot delete the rule due to the XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.fiberhome.com/ - https://github.com/afaq1337/CVE-2021-41946
CVE ID: CVE-2021-41947 State: PUBLISHED Published: 2021-10-08T12:40:28 Last Updated: 2024-08-04T03:22:25.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/intelliants/subrion/issues/887 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41947
CVE ID: CVE-2021-41948 State: PUBLISHED Published: 2022-04-29T13:41:22 Last Updated: 2024-08-04T03:22:25.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability exists in the "contact us" plugin for Subrion CMS <= 4.2.1 version via "List of subjects". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/intelliants/subrion-plugin-contact_us/issues/8
CVE ID: CVE-2021-41950 State: PUBLISHED Published: 2021-11-15T15:52:56 Last Updated: 2024-08-04T03:22:25.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote unauthenticated attackers to delete arbitrary files on the ResourceSpace server via the provider and variant parameters in pages/ajax/tiles.php. Attackers can delete configuration or source code files, causing the application to become unavailable to all users. Additional Analyst Notes: - CVE Program Container: References: - http://svn.resourcespace.com/svn/rs/releases/9.6/pages/ajax/tiles.php - https://www.horizon3.ai/multiple-vulnerabilities
http://svn.resourcespace.com/svn/rs/releases/9.6/pages/ajax/tiles.php - https://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace/
CVE ID: CVE-2021-41951 State: PUBLISHED Published: 2021-11-15T15:27:22 Last Updated: 2024-08-04T03:22:25.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpress_sso/pages/index.php via the wordpress_user parameter. If an attacker is able to persuade a victim to visit a crafted URL, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CVE Program Container: References: - https://www.horizon3.ai/multiple-vulnerabilities-in-resourcespace/
CVE ID: CVE-2021-41952 State: PUBLISHED Published: 2022-03-14T14:53:55 Last Updated: 2024-08-04T03:22:25.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zenario CMS 9.0.54156 is vulnerable to Cross Site Scripting (XSS) via upload file to *.SVG. An attacker can send malicious files to victims and steals victim's cookie leads to account takeover. The person viewing the image of a contact can be victim of XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hieuminhnv/Zenario-CMS-9.0-last-version/issues/1
CVE ID: CVE-2021-41959 State: PUBLISHED Published: 2022-05-03T10:48:22 Last Updated: 2024-08-04T03:22:25.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after RegExp, which causes a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/4781 - https://github.com/jerryscript-project/jerryscript/pull/4787
CVE ID: CVE-2021-41962 State: PUBLISHED Published: 2021-12-16T17:43:05 Last Updated: 2024-08-04T03:22:25.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Owner fullname parameter in a Send Service Request in vehicle_service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lohyt/-CVE-2021-41962
CVE ID: CVE-2021-41965 State: PUBLISHED Published: 2022-05-15T10:37:28 Last Updated: 2024-08-04T03:22:25.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exists in ChurchCRM version 2.0.0 to 4.4.5 that allows an authenticated attacker to issue an arbitrary SQL command to the database through the unsanitized EN_tyid, theID and EID fields used when an Edit action on an existing record is being performed. Additional Analyst Notes: - CVE Program Container: References: - https://churchcrm.io/ - https://www.alexbilz.com/post/2022-05-14-cve-2021-41965/