Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-27921 State: PUBLISHED Published: 2021-03-03T08:41:57.000Z Last Updated: 2025-08-15T04:41:08.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTSY25UJU7NJUFHH3HWT575LT4TDFWBZ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/messa
U7NJUFHH3HWT575LT4TDFWBZ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TQQY6472RX4J2SUJENWDZAWKTJJGP2ML/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S7G44Z33J4BNI2DPDROHWGVG2U7ZH5JU/ - https://security.gentoo.org/glsa/202107-33 - https://pillow.readthedocs.io/en/stable/releasenotes/8.1.2.html
CVE ID: CVE-2021-27922 State: PUBLISHED Published: 2021-03-03T08:41:50.000Z Last Updated: 2025-08-15T04:38:49.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTSY25UJU7NJUFHH3HWT575LT4TDFWBZ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/mes
UJU7NJUFHH3HWT575LT4TDFWBZ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TQQY6472RX4J2SUJENWDZAWKTJJGP2ML/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S7G44Z33J4BNI2DPDROHWGVG2U7ZH5JU/ - https://security.gentoo.org/glsa/202107-33 - https://pillow.readthedocs.io/en/stable/releasenotes/8.1.2.html
CVE ID: CVE-2021-27923 State: PUBLISHED Published: 2021-03-03T08:41:40.000Z Last Updated: 2025-08-15T04:40:08.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container, and thus an attempted memory allocation can be very large. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTSY25UJU7NJUFHH3HWT575LT4TDFWBZ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/mess
JU7NJUFHH3HWT575LT4TDFWBZ/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TQQY6472RX4J2SUJENWDZAWKTJJGP2ML/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S7G44Z33J4BNI2DPDROHWGVG2U7ZH5JU/ - https://security.gentoo.org/glsa/202107-33 - https://pillow.readthedocs.io/en/stable/releasenotes/8.1.2.html
CVE ID: CVE-2021-27924 State: PUBLISHED Published: 2021-05-19T19:01:24 Last Updated: 2024-08-03T21:33:17.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server 6.x through 6.6.1. The Couchbase Server UI is insecurely logging session cookies in the logs. This allows for the impersonation of a user if the log files are obtained by an attacker before a session cookie expires. Additional Analyst Notes: - CVE Program Container: References: - https://www.couchbase.com/resources/security#SecurityAlerts - https://www.couchbase.com/downloads
CVE ID: CVE-2021-27925 State: PUBLISHED Published: 2021-05-19T18:57:30 Last Updated: 2024-08-03T21:33:17.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View Engine and Auditing is enabled, a crash condition can (depending on a race condition) cause an internal user with administrator privileges, @ns_server, to have its credentials leaked in cleartext in the ns_server.info.log file. Additional Analyst Notes: - CVE Program Container: References: - https://www.couchbase.com/resources/security#SecurityAlerts - https://www.couchbase.com/downloads
CVE ID: CVE-2021-27927 State: PUBLISHED Published: 2021-03-03T00:00:00 Last Updated: 2024-08-03T21:33:16.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Zabbix from 4.0.x before 4.0.28rc1, 5.0.0alpha1 before 5.0.10rc1, 5.2.x before 5.2.6rc1, and 5.4.0alpha1 before 5.4.0beta2, the CControllerAuthenticationUpdate controller lacks a CSRF protection mechanism. The code inside this controller calls diableSIDValidation inside the init() method. An attacker doesn't have to know Zabbix user login credentials, but has to know the correct Zabbix URL and contact information of an existing user with sufficient privileges. Additional Analyst Notes: - CVE Program Container: References:
ormation of an existing user with sufficient privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.zabbix.com/browse/ZBX-18942 - https://lists.debian.org/debian-lts-announce/2023/04/msg00013.html
CVE ID: CVE-2021-27928 State: PUBLISHED Published: 2021-03-19T02:46:44 Last Updated: 2024-08-03T21:33:17.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product. Additional Analyst Notes: - CVE Program Container: References: - https://mariadb.com/kb/en/security
t an Oracle product. Additional Analyst Notes: - CVE Program Container: References: - https://mariadb.com/kb/en/security/ - https://jira.mariadb.org/browse/MDEV-25179 - https://mariadb.com/kb/en/mariadb-10237-release-notes/ - https://mariadb.com/kb/en/mariadb-10328-release-notes/ - https://mariadb.com/kb/en/mariadb-10418-release-notes/ - https://mariadb.com/kb/en/mariadb-1059-release-notes/ - https://lists.debian.org/debian-lts-announce/2021/03/msg00028.html - http://packetstormsecurity.com/files/162177/MariaDB-10.2-Command-Execution.html - https://security.gentoo.org/glsa/202105-28
CVE ID: CVE-2021-27930 State: PUBLISHED Published: 2021-07-06T11:43:17 Last Updated: 2024-08-03T21:33:16.999Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stored XSS vulnerabilities in IrisNext Edition 9.5.16, which allows an authenticated (or compromised) user to inject malicious JavaScript in folder/file name within the application in order to grab other users’ sessions or execute malicious code in their browsers (1-click RCE). Additional Analyst Notes: - CVE Program Container: References: - https://varsnext.iriscorporate.com/history.html - https://github.com/post-cyberlabs/CVE-Advisory/blob/mai
References: - https://varsnext.iriscorporate.com/history.html - https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE-2021-27930.pdf
CVE ID: CVE-2021-27931 State: PUBLISHED Published: 2021-03-03T19:38:12 Last Updated: 2024-08-03T21:33:16.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sl4cky/LumisXP-XXE---POC/blob/main/poc.txt
CVE ID: CVE-2021-27932 State: PUBLISHED Published: 2023-08-25T00:00:00 Last Updated: 2024-10-02T18:10:28.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stormshield Network Security (SNS) VPN SSL Client 2.1.0 through 2.8.0 has Insecure Permissions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://advisories.stormshield.eu - https://advisories.stormshield.eu/2021-004/
CVE ID: CVE-2021-27933 State: PUBLISHED Published: 2021-04-28T06:30:59 Last Updated: 2024-08-03T21:33:16.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: pfSense 2.5.0 allows XSS via the services_wol_edit.php Description field. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2021/Apr/61
CVE ID: CVE-2021-27935 State: PUBLISHED Published: 2021-03-03T19:37:13 Last Updated: 2024-08-03T21:33:17.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AdguardTeam/AdGuardHome/issues/2470
CVE ID: CVE-2021-27938 State: PUBLISHED Published: 2021-03-16T15:09:39 Last Updated: 2024-08-03T21:33:17.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/symbiote/silverstripe-queuedjobs/releases - https://www.silverstripe.org/download/security-releases/cve-2021-27938
CVE ID: CVE-2021-27940 State: PUBLISHED Published: 2021-03-03T22:00:05 Last Updated: 2024-08-03T21:33:16.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows XSS via the orchestrator-msg parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openark/orchestrator/pull/1313 - https://github.com/openark/orchestrator/releases/tag/v3.2.4 - https://www.youtube.com/watch?v=DOYm0DIS3Us
CVE ID: CVE-2021-27941 State: PUBLISHED Published: 2021-05-06T20:31:53 Last Updated: 2024-08-03T21:33:16.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application (through 4.9.2 on Android and through 4.9.1 on iOS) allows a physically proximate attacker to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during a device pairing process. Additional Analyst Notes: - CVE Program Container: References: - https://play.google.com/store/apps/details?id=com.coolkit&hl=en_US - https://apps.apple.com/us/app/ewelink-smart-home
- https://play.google.com/store/apps/details?id=com.coolkit&hl=en_US - https://apps.apple.com/us/app/ewelink-smart-home/id1035163158 - https://github.com/salgio/eWeLink-QR-Code
CVE ID: CVE-2021-27942 State: PUBLISHED Published: 2021-08-03T17:09:52 Last Updated: 2024-08-03T21:33:17.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs allow a threat actor to execute arbitrary code from a USB drive via the Smart Cast functionality, because files on the USB drive are effectively under the web root and can be executed. Additional Analyst Notes: - CVE Program Container: References: - https://www.l9group.com/advisories/vizio-tv-code-execution-from-a-usb-drive
CVE ID: CVE-2021-27943 State: PUBLISHED Published: 2021-08-02T20:41:58 Last Updated: 2024-08-03T21:33:17.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pairing procedure used by the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs and mobile application is vulnerable to a brute-force attack (against only 10000 possibilities), allowing a threat actor to forcefully pair the device, leading to remote control of the TV settings and configurations. Additional Analyst Notes: - CVE Program Container: References: - https://www.vizio.com - https://www.l9group.com/advisories/vizio-tv-mobile-pairing-is-vulnerable-to-brute-force-attacks
CVE ID: CVE-2021-27944 State: PUBLISHED Published: 2021-08-26T11:23:00 Last Updated: 2024-08-03T21:33:16.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Several high privileged APIs on the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs do not enforce access controls, allowing an unauthenticated threat actor to access privileged functionality, leading to OS command execution. The specific attack methodology is a file upload. Additional Analyst Notes: - CVE Program Container: References: - https://www.vizio.com - https://www.l9group.com/advisories/vizio-tv-unauthenticated-remote-code-execution
CVE ID: CVE-2021-27945 State: PUBLISHED Published: 2021-04-08T16:53:56 Last Updated: 2024-08-03T21:33:16.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Squirro Insights Engine was affected by a Reflected Cross-Site Scripting (XSS) vulnerability affecting versions 2.0.0 up to and including 3.2.4. An attacker can use the vulnerability to inject malicious JavaScript code into the application, which will execute within the browser of any user who views the relevant application content. The attacker-supplied code can perform a wide variety of actions, such as stealing victims' session tokens or login credentials, performing arbitrary actions on their behalf, and logging their
s stealing victims' session tokens or login credentials, performing arbitrary actions on their behalf, and logging their keystrokes. Additional Analyst Notes: - CVE Program Container: References: - https://squirro.atlassian.net/wiki/spaces/DOC/pages/2389672672/CVE-2021-27945+-+Cross-Site+Scripting
CVE ID: CVE-2021-27946 State: PUBLISHED Published: 2021-03-15T17:08:09 Last Updated: 2024-08-03T21:33:17.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. (issue 1 of 3). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mybb/mybb/security/advisories/GHSA-23m9-w75q-ph4p - http://packetstormsecurity.com/files/161918/MyBB-1.8.25-SQL-Injection.html
CVE ID: CVE-2021-27947 State: PUBLISHED Published: 2021-03-15T17:10:33 Last Updated: 2024-08-03T21:33:16.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. (issue 2 of 3). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mybb/mybb/security/advisories/GHSA-jjx8-8mcp-7h65
CVE ID: CVE-2021-27948 State: PUBLISHED Published: 2021-03-15T17:13:33 Last Updated: 2024-08-03T21:33:17.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in MyBB before 1.8.26 via User Groups. (issue 3 of 3). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mybb/mybb/security/advisories/GHSA-3p9w-2q65-r6g2
CVE ID: CVE-2021-27949 State: PUBLISHED Published: 2021-03-15T17:19:11 Last Updated: 2024-08-03T21:33:17.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site Scripting vulnerability in MyBB before 1.8.26 via Custom moderator tools. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mybb/mybb/security/advisories/GHSA-cmmr-39v8-8rx2
CVE ID: CVE-2021-27950 State: PUBLISHED Published: 2021-07-02T14:26:04 Last Updated: 2024-08-03T21:33:17.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to mesdocs.ajax.php in azurWebEngine/eShop. By default, the query is executed as DBA. Additional Analyst Notes: - CVE Program Container: References: - https://www.sitasoftware.lu/ - http://www.azurcms.com/ - https://www.sitasoftware.lu/azur/software/web.php - https://raw.githubusercontent.com/post-cyberlabs/CVE-Advisory/main/CVE-2021-27950.pdf
CVE ID: CVE-2021-27952 State: PUBLISHED Published: 2021-08-03T14:31:18 Last Updated: 2024-08-03T21:33:17.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hardcoded default root credentials exist on the ecobee3 lite 4.5.81.200 device. This allows a threat actor to gain access to the password-protected bootloader environment through the serial console. Additional Analyst Notes: - CVE Program Container: References: - https://www.l9group.com/advisories/hard-coded-default-root-credentials-for-all-ecobee3-lite-devices
CVE ID: CVE-2021-27953 State: PUBLISHED Published: 2021-08-03T14:36:41 Last Updated: 2024-08-03T21:33:16.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HomeKit Wireless Access Control setup process. A threat actor can exploit this vulnerability to cause a denial of service, forcing the device to reboot via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://www.l9group.com/advisories/remote-denial-of-service-of-ecobee3-lite
CVE ID: CVE-2021-27954 State: PUBLISHED Published: 2021-08-03T14:26:39 Last Updated: 2024-08-03T21:33:17.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HKProcessConfig function of the HomeKit Wireless Access Control setup process. A threat actor can exploit this vulnerability to force the device to connect to a SSID or cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.l9group.com/advisories/ecobee3-lite-heap-overflow
CVE ID: CVE-2021-27956 State: PUBLISHED Published: 2021-05-20T17:55:22 Last Updated: 2024-08-03T21:33:17.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADSelfService Plus before 6104 allows stored XSS on the /webclient/index.html#/directory-search user search page via the e-mail address field. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com - https://raxis.com/blog/cve-2021-27956-manage-engine-xss - https://pitstop.manageengine.com/portal/en/community/topic/adselfservice-plus-6104-released-with-an-important-security-fixes
CVE ID: CVE-2021-27961 State: PUBLISHED Published: 2025-07-09T00:00:00.000Z Last Updated: 2025-07-09T19:49:15.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: evesys 7.1 (2152) through 8.0 (2202) allows Reflected XSS via the indexeva.php action parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://evasys.de/en/blog/ - https://gist.github.com/phlmox/c24bf28f12fbc0f2ea73dd9e8cfa94e3
CVE ID: CVE-2021-27962 State: PUBLISHED Published: 2021-03-22T13:55:39 Last Updated: 2024-08-03T21:33:17.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access. Additional Analyst Notes: - CVE Program Container: References: - https://community.grafana.com/t/release-notes-v6-7-x/27119 - https://community.grafana.com - http://www.openwall.com/lists/oss-security/2021/03/19/5 - https://grafana.com/blog/2021/03/18/grafana-6.7.6-7.3.10-and-7.4.5-released-with-important-security-fixes-for-grafana-enterprise
grafana.com/blog/2021/03/18/grafana-6.7.6-7.3.10-and-7.4.5-released-with-important-security-fixes-for-grafana-enterprise/ - https://community.grafana.com/t/grafana-enterprise-6-7-6-7-3-10-and-7-4-5-security-update/44724 - https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-5/
CVE ID: CVE-2021-27963 State: PUBLISHED Published: 2021-03-05T01:37:36 Last Updated: 2024-08-03T21:33:17.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous user can send a POST request to /User/saveUser without any authentication or session header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/erberkan/SonLogger-vulns - https://www.sonlogger.com/releasenotes
CVE ID: CVE-2021-27964 State: PUBLISHED Published: 2021-03-05T01:37:20 Last Updated: 2024-08-03T21:33:16.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Config/SaveUploadedHotspotLogoFile without any authentication or session header. There is no check for the file extension or content of the uploaded file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/erberkan/SonLogger-vulns - https://www.sonlogger.com/releasenotes - http://packetstormsecurity.com/files/161793/SonLogger-4.2.3.3-Shell-Upload.html
CVE ID: CVE-2021-27965 State: PUBLISHED Published: 2021-03-05T01:53:46 Last Updated: 2024-08-03T21:33:17.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kronl/cve/tree/master/MSI_Dragon_Center - https://www.microsoft.com/en-us/p/msi-dragon-center/9nh7n2bv1cqq?activetab=pivot:overviewtab
CVE ID: CVE-2021-27969 State: PUBLISHED Published: 2021-03-23T13:24:16 Last Updated: 2024-08-03T21:33:16.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder "width" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1suqBvuoE-3U2QmWpCOXXV4_5rEu_XGJL/view?usp=sharing - https://www.exploit-db.com/exploits/49670
CVE ID: CVE-2021-27971 State: PUBLISHED Published: 2022-01-31T07:06:51 Last Updated: 2024-08-03T21:33:17.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alps Alpine Touchpad Driver 10.3201.101.215 is vulnerable to DLL Injection. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/165690/Alps-Alpine-Touchpad-Driver-DLL-Injection.html
CVE ID: CVE-2021-27973 State: PUBLISHED Published: 2021-04-02T18:19:28 Last Updated: 2024-08-03T21:33:17.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Piwigo/Piwigo/issues/1352 - http://packetstormsecurity.com/files/162404/Piwigo-11.3.0-SQL-Injection.html
CVE ID: CVE-2021-27983 State: PUBLISHED Published: 2021-12-10T18:14:32 Last Updated: 2024-08-03T21:33:17.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/maxsite/cms/issues/430
CVE ID: CVE-2021-27984 State: PUBLISHED Published: 2021-12-10T18:40:01 Last Updated: 2024-08-03T21:33:17.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Pluck-4.7.15 admin background a remote command execution vulnerability exists when uploading files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pluck-cms/pluck/issues/98