Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-44180 State: PUBLISHED Published: 2021-12-20T20:08:42.853Z Last Updated: 2025-04-23T19:16:10.209Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-787 Description: Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious GIF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb21-116.html - h
ontainer: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb21-116.html - https://www.zerodayinitiative.com/advisories/ZDI-21-1571/
CVE ID: CVE-2021-44181 State: PUBLISHED Published: 2021-12-20T20:08:43.559Z Last Updated: 2025-04-23T19:16:03.622Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Dimension Problem Types: CWE-787 Description: Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious GIF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb21-116.html - h
ontainer: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb21-116.html - https://www.zerodayinitiative.com/advisories/ZDI-21-1570/
CVE ID: CVE-2021-44182 State: PUBLISHED Published: 2021-12-20T20:08:41.375Z Last Updated: 2025-04-23T19:16:22.080Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious SVG file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.co
G file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb21-116.html - https://www.zerodayinitiative.com/advisories/ZDI-21-1573/
CVE ID: CVE-2021-44183 State: PUBLISHED Published: 2021-12-20T20:08:42.155Z Last Updated: 2025-04-23T19:16:16.149Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Dimension Problem Types: CWE-125 Description: Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious TIF file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.co
F file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/dimension/apsb21-116.html - https://www.zerodayinitiative.com/advisories/ZDI-21-1572/
CVE ID: CVE-2021-44185 State: PUBLISHED Published: 2021-12-07T13:18:07.765Z Last Updated: 2025-04-23T19:18:25.976Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Bridge Problem Types: CWE-125 Description: Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious RGB file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
must open a malicious RGB file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb22-03.html
CVE ID: CVE-2021-44186 State: PUBLISHED Published: 2021-12-07T13:17:54.910Z Last Updated: 2025-04-23T19:18:32.572Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Bridge Problem Types: CWE-125 Description: Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious SGI file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
must open a malicious SGI file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb22-03.html
CVE ID: CVE-2021-44187 State: PUBLISHED Published: 2021-12-07T13:17:49.893Z Last Updated: 2025-04-23T19:18:38.978Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Bridge Problem Types: CWE-125 Description: Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious SGI file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
CVE ID: CVE-2021-44188 State: PUBLISHED Published: 2023-09-07T12:54:35.641Z Last Updated: 2025-02-27T20:59:54.540Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: After Effects Problem Types: CWE-125 Description: Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Co
CVE ID: CVE-2021-44189 State: PUBLISHED Published: 2023-09-07T13:05:44.137Z Last Updated: 2025-02-27T20:58:46.995Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: After Effects Problem Types: CWE-416 Description: Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
tim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/after_effects/apsb21-115.html
CVE ID: CVE-2021-44190 State: PUBLISHED Published: 2023-09-07T13:05:40.140Z Last Updated: 2025-02-27T20:59:19.991Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: After Effects Problem Types: CWE-125 Description: Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/after_effects/apsb21-115.html
CVE ID: CVE-2021-44191 State: PUBLISHED Published: 2023-09-07T13:05:38.103Z Last Updated: 2025-02-27T20:59:25.744Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: After Effects Problem Types: CWE-125 Description: Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
CVE ID: CVE-2021-44192 State: PUBLISHED Published: 2023-09-07T13:05:40.904Z Last Updated: 2025-02-27T20:59:12.429Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: After Effects Problem Types: CWE-125 Description: Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
CVE ID: CVE-2021-44193 State: PUBLISHED Published: 2023-09-07T13:05:44.912Z Last Updated: 2025-02-27T20:58:38.081Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: After Effects Problem Types: CWE-125 Description: Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
CVE ID: CVE-2021-44194 State: PUBLISHED Published: 2023-09-07T13:05:42.580Z Last Updated: 2025-02-27T20:59:05.706Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: After Effects Problem Types: CWE-125 Description: Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
CVE ID: CVE-2021-44195 State: PUBLISHED Published: 2023-09-07T13:05:43.343Z Last Updated: 2025-02-27T20:58:56.900Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: After Effects Problem Types: CWE-125 Description: Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
CVE ID: CVE-2021-44196 State: PUBLISHED Published: 2023-03-07T13:07:00.764Z Last Updated: 2025-03-04T21:17:47.836Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: UBIT Information Technologies Products: Student Information Management System Problem Types: CWE-80 Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in UBIT Information Technologies Student Information Management System.This issue affects Student Information Management System: before 20211126. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0131
CVE ID: CVE-2021-44197 State: PUBLISHED Published: 2023-03-07T13:07:38.175Z Last Updated: 2025-03-03T16:28:26.457Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: UBIT Information Technologies Products: Student Information Management System Problem Types: CWE-80 Description: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in UBIT Information Technologies Student Information Management System.This issue affects Student Information Management System: before 20211126. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0131
CVE ID: CVE-2021-44198 State: PUBLISHED Published: 2021-11-29T18:18:56.612364Z Last Updated: 2024-09-16T20:27:10.015Z Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-427 Description: DLL hijacking could lead to local privilege escalation. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-2128
CVE ID: CVE-2021-44199 State: PUBLISHED Published: 2021-11-29T18:19:12.590356Z Last Updated: 2024-09-16T22:20:30.242Z Vendors: Acronis Products: Acronis Cyber Protect 15, Acronis Agent, Acronis Cyber Protect Home Office Problem Types: CWE-427 Description: DLL hijacking could lead to denial of service. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27305, Acronis Cyber Protect Home Office (Windows) before build 39612 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-2508
CVE ID: CVE-2021-44200 State: PUBLISHED Published: 2021-11-29T18:19:18.256020Z Last Updated: 2024-09-16T22:36:09.882Z Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-79 Description: Self cross-site scripting (XSS) was possible on devices page. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 28035 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-2803
CVE ID: CVE-2021-44201 State: PUBLISHED Published: 2021-11-29T18:18:51.474533Z Last Updated: 2024-09-17T01:36:52.438Z Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-79 Description: Cross-site scripting (XSS) was possible in notification pop-ups. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 28035 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-3167
CVE ID: CVE-2021-44202 State: PUBLISHED Published: 2021-11-29T18:19:06.652238Z Last Updated: 2024-09-17T00:35:33.222Z Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-79 Description: Stored cross-site scripting (XSS) was possible in activity details. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 28035 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-3283
CVE ID: CVE-2021-44203 State: PUBLISHED Published: 2021-11-29T18:19:01.156130Z Last Updated: 2024-09-16T22:45:05.734Z Vendors: Acronis Products: Acronis Cyber Protect 15 Problem Types: CWE-79 Description: Stored cross-site scripting (XSS) was possible in protection plan details. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 28035 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-3294
CVE ID: CVE-2021-44204 State: PUBLISHED Published: 2022-02-04T22:29:33.071413Z Last Updated: 2024-09-17T01:12:21.982Z Vendors: Acronis Products: Acronis Cyber Protect 15, Acronis Agent, Acronis Cyber Protect Home Office, Acronis True Image 2021 Problem Types: CWE-285 Description: Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287 Additional Analyst Notes: - CVE Program Container: References: - https://security-adv
2021 (Windows) before build 39287 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-2355
CVE ID: CVE-2021-44205 State: PUBLISHED Published: 2022-02-04T22:29:31.627056Z Last Updated: 2024-09-17T01:36:39.205Z Vendors: Acronis Products: Acronis Cyber Protect Home Office, Acronis True Image 2021 Problem Types: CWE-427 Description: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-3059
CVE ID: CVE-2021-44206 State: PUBLISHED Published: 2022-02-04T22:29:33.897481Z Last Updated: 2024-09-16T22:45:14.240Z Vendors: Acronis Products: Acronis Cyber Protect Home Office, Acronis True Image 2021 Problem Types: CWE-427 Description: Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287 Additional Analyst Notes: - CVE Program Container: References: - https://security-advisory.acronis.com/advisories/SEC-3058
CVE ID: CVE-2021-44207 State: PUBLISHED Published: 2021-12-21T17:45:33.000Z Last Updated: 2025-10-21T23:15:50.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.acclaimsystems.com - https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0012/MNDT-2021-0012.md
CVE ID: CVE-2021-44208 State: PUBLISHED Published: 2022-03-28T00:55:19 Last Updated: 2024-08-04T04:17:24.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.5 allows XSS via an unknown system message in Chat. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - http://packetstormsecurity.com/files/166389/OX-App-Suite-7.10.5-Cross-Site-Scripting.html
CVE ID: CVE-2021-44209 State: PUBLISHED Published: 2022-03-28T00:57:11 Last Updated: 2024-08-04T04:17:24.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - http://packetstormsecurity.com/files/166389/OX-App-Suite-7.10.5-Cross-Site-Scripting.html
CVE ID: CVE-2021-44210 State: PUBLISHED Published: 2022-03-28T00:59:16 Last Updated: 2024-08-04T04:17:24.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.5 allows XSS via NIFF (Notation Interchange File Format) data. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - http://packetstormsecurity.com/files/166389/OX-App-Suite-7.10.5-Cross-Site-Scripting.html
CVE ID: CVE-2021-44211 State: PUBLISHED Published: 2022-03-28T01:01:07 Last Updated: 2024-08-04T04:17:24.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail signature. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - http://packetstormsecurity.com/files/166389/OX-App-Suite-7.10.5-Cross-Site-Scripting.html
CVE ID: CVE-2021-44212 State: PUBLISHED Published: 2022-03-28T01:03:46 Last Updated: 2024-08-04T04:17:24.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t substring. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - http://packetstormsecurity.com/files/166389/OX-App-Suite-7.10.5-Cross-Site-Scripting.html
CVE ID: CVE-2021-44213 State: PUBLISHED Published: 2022-03-28T01:06:11 Last Updated: 2024-08-04T04:17:24.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite through 7.10.5 allows XSS via uuencoding in a multipart/alternative message. Additional Analyst Notes: - CVE Program Container: References: - https://open-xchange.com - https://packetstormsecurity.com/files/166389/OX-App-Suite-7.10.5-Cross-Site-Scripting.html
CVE ID: CVE-2021-44215 State: PUBLISHED Published: 2022-03-07T14:43:39 Last Updated: 2024-08-04T04:17:24.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users to have an unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - https://northern.tech - https://cfengine.com/blog/2022/cve-2021-44215-and-cve-2021-44216/
CVE ID: CVE-2021-44216 State: PUBLISHED Published: 2022-03-07T14:43:32 Last Updated: 2024-08-04T04:17:24.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions that may allow unauthorized local users to access the Apache and Mission Portal log files. Additional Analyst Notes: - CVE Program Container: References: - https://northern.tech - https://cfengine.com/blog/2022/cve-2021-44215-and-cve-2021-44216/
CVE ID: CVE-2021-44217 State: PUBLISHED Published: 2022-01-18T15:00:55 Last Updated: 2024-08-04T04:17:24.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Ericsson CodeChecker through 6.18.0, a Stored Cross-site scripting (XSS) vulnerability in the comments component of the reports viewer allows remote attackers to inject arbitrary web script or HTML via the POST JSON data of the /CodeCheckerService API. Additional Analyst Notes: - CVE Program Container: References: - https://codechecker-demo.eastus.cloudapp.azure.com/ - https://user-images.githubusercontent.com/9525971/142965091-e118b012-a7fc-4c2f-ad0c-80aeed6f7ec9.png - https://github.com/Ericsson/codechecker/releases - ht
t.com/9525971/142965091-e118b012-a7fc-4c2f-ad0c-80aeed6f7ec9.png - https://github.com/Ericsson/codechecker/releases - https://github.com/Hyperkopite/CVE-2021-44217/blob/main/README.md - https://github.com/Ericsson/codechecker/pull/3549
CVE ID: CVE-2021-44219 State: PUBLISHED Published: 2021-11-24T22:49:15 Last Updated: 2024-08-04T04:17:24.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gin-Vue-Admin before 2.4.6 mishandles a SQL database. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flipped-aurora/gin-vue-admin/issues/813 - https://github.com/flipped-aurora/gin-vue-admin/pull/811