Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-27778 State: PUBLISHED Published: 2022-05-31T23:50:11.060449Z Last Updated: 2024-09-17T00:06:06.792Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L) Vendors: HCL Software Products: HCL Traveler Problem Types: CWE-79 Description: HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exploit this vulnerability to execute a malicious script to access any cookies, session tokens, or other sensitive information retained by the browser and used with that site. Additional Analyst Notes: - CVE Program Container: Refer
ve information retained by the browser and used with that site. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098044
CVE ID: CVE-2021-27779 State: PUBLISHED Published: 2022-05-25T15:20:16.792317Z Last Updated: 2024-09-17T00:11:31.808Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: HCL Software Products: HCL VersionVault Express Problem Types: CWE-311 Description: VersionVault Express exposes sensitive information that an attacker can use to impersonate the server or eavesdrop on communications with the server. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098165
CVE ID: CVE-2021-27780 State: PUBLISHED Published: 2022-05-27T16:15:15.034768Z Last Updated: 2024-09-16T23:31:26.856Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: HCL Software Products: HCL BigFix Mobile / Modern Client Management Problem Types: CWE-112 Description: The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098028
CVE ID: CVE-2021-27781 State: PUBLISHED Published: 2022-05-27T16:15:16.664653Z Last Updated: 2024-09-16T23:21:37.184Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: HCL Software Products: HCL BigFix Mobile / Modern Client Management Problem Types: CWE-79 Description: The Master operator may be able to embed script tag in HTML with alert pop-up display cookie. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098028
CVE ID: CVE-2021-27782 State: PUBLISHED Published: 2023-01-19T18:54:01.027Z Last Updated: 2025-04-02T14:52:02.575Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: HCL Software Products: BigFix Mobile Problem Types: n/a Description: HCL BigFix Mobile / Modern Client Management Admin and Config UI passwords can be brute-forced. User should be locked out for multiple invalid attempts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102477
CVE ID: CVE-2021-27783 State: PUBLISHED Published: 2022-05-25T15:20:18.484594Z Last Updated: 2024-09-16T23:41:53.179Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L) Vendors: HCL Software Products: HCL BigFix Mobile / Modern Client Management Problem Types: CWE-311 Description: User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098586
CVE ID: CVE-2021-27784 State: PUBLISHED Published: 2022-10-31T22:05:09.914Z Last Updated: 2025-05-02T17:39:05.435Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: HCL Software Products: HCL Launch Problem Types: CWE-327 Description: The provided HCL Launch Container images contain non-unique HTTPS certificates and a database encryption key. The fix provides directions and tools to replace the non-unique keys and certificates. This does not affect the standard installer packages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0101093
CVE ID: CVE-2021-27785 State: PUBLISHED Published: 2022-07-29T23:55:10.012146Z Last Updated: 2024-09-16T19:05:29.360Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: HCL Software Products: HCL Commerce Problem Types: CWE-522 Description: HCL Commerce's Remote Store server could allow a local attacker to obtain sensitive personal information. The vulnerability requires the victim to first perform a particular operation on the website. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0099765
CVE ID: CVE-2021-27786 State: PUBLISHED Published: 2022-06-07T17:50:17.986852Z Last Updated: 2024-09-16T21:04:10.396Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: HCL Software Products: HCL OneTest Server Problem Types: CWE-942 Description: Cross-origin resource sharing (CORS) enables browsers to perform cross domain requests in a controlled manner. This request has an Origin header that identifies the domain that is making the initial request and defines the protocol between a browser and server to see if the request is allowed. An attacker can take advantage of this and possibly carry out privileged actions and access sensitive information when the Acce
cker can take advantage of this and possibly carry out privileged actions and access sensitive information when the Access-Control-Allow-Credentials is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0098603
CVE ID: CVE-2021-27788 State: PUBLISHED Published: 2023-03-10T04:13:05.839Z Last Updated: 2025-02-27T20:22:49.602Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: HCL Software Products: Verse Problem Types: n/a Description: HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability. By tricking a user into clicking a crafted URL, a remote unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?
tional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0103678
CVE ID: CVE-2021-27789 State: PUBLISHED Published: 2022-03-18T17:59:09 Last Updated: 2024-08-03T21:33:15.754Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Insertion of Sensitive Information Into Debugging Code Description: The Web application of Brocade Fabric OS before versions Brocade Fabric OS v9.0.1a and v8.2.3a contains debug statements that expose sensitive information to the program's standard output device. An attacker who has compromised the FOS system may utilize this weakness to capture sensitive information, such as user credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advis
t Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1494
CVE ID: CVE-2021-27790 State: PUBLISHED Published: 2021-08-12T14:27:04 Last Updated: 2024-08-03T21:33:15.672Z Vendors: n/a Products: Brocade Fabric OS Problem Types: execution of arbitrary code Description: The command ipfilter in Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3, and v8.2.0_CBN4, and v7.4.2h uses unsafe string function to process user input. Authenticated attackers can abuse this vulnerability to exploit stack-based buffer overflows, allowing execution of arbitrary code as the root user account. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-20
References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1492 - https://security.netapp.com/advisory/ntap-20210819-0002/
CVE ID: CVE-2021-27791 State: PUBLISHED Published: 2021-08-12T14:27:35 Last Updated: 2024-08-03T21:33:15.770Z Vendors: n/a Products: Brocade Fabric OS Problem Types: authentication bypass Description: The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade Fabric OS v9.0.1a and v8.2.3a fails to properly process a malformed authentication header from the client, resulting in reading memory addresses outside the intended range. An unauthenticated attacker could discover a request, which could bypass the authentication process. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-
cation process. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1491 - https://security.netapp.com/advisory/ntap-20210819-0002/
CVE ID: CVE-2021-27792 State: PUBLISHED Published: 2021-08-12T14:24:27 Last Updated: 2024-08-03T21:33:15.673Z Vendors: n/a Products: Brocade Fabric OS Problem Types: system crash Description: The request handling functions in web management interface of Brocade Fabric OS versions before v9.0.1a, v8.2.3a, and v7.4.2h do not properly handle malformed user input, resulting in a service crash. An authenticated attacker could use this weakness to cause the FOS HTTP application handler to crash, requiring a reboot. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1490 - http
https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1490 - https://security.netapp.com/advisory/ntap-20210819-0002/ - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1492
CVE ID: CVE-2021-27793 State: PUBLISHED Published: 2021-08-12T14:24:18 Last Updated: 2024-08-03T21:33:15.756Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Improper Authorization Description: ntermittent authorization failure in aaa tacacs+ with Brocade Fabric OS versions before Brocade Fabric OS v9.0.1b and after 9.0.0, also in Brocade Fabric OS before Brocade Fabric OS v8.2.3a and after v8.2.0 could cause a user with a valid account to be unable to log into the switch. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1553 - https://security.netapp.com/advis
ort/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1553 - https://security.netapp.com/advisory/ntap-20210819-0001/
CVE ID: CVE-2021-27794 State: PUBLISHED Published: 2021-08-12T14:25:00 Last Updated: 2024-08-03T21:33:15.935Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Empty Password Description: A vulnerability in the authentication mechanism of Brocade Fabric OS versions before Brocade Fabric OS v.9.0.1a, v8.2.3a and v7.4.2h could allow a user to Login with empty password, and invalid password through telnet, ssh and REST. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1552 - https://security.netapp.com/advisory/ntap-20210819-0001/
CVE ID: CVE-2021-27795 State: PUBLISHED Published: 2023-12-06T01:16:07.122Z Last Updated: 2024-08-03T21:33:15.653Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H) Vendors: Brocade Products: Brocade Switches Problem Types: CWE-327 Description: Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cryptographic issues that could allow for the installation of forged or fraudulent license keys. This would allow attackers or a malicious party to forge a counterfeit license key that the Brocade Fabric OS platform would authenticate and activate as if it were a legitimate license key.
license key that the Brocade Fabric OS platform would authenticate and activate as if it were a legitimate license key. Additional Analyst Notes: - CVE Program Container: References: - https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/21289
CVE ID: CVE-2021-27796 State: PUBLISHED Published: 2022-02-21T17:49:34 Last Updated: 2024-08-03T21:33:15.743Z Vendors: n/a Products: Brocade Fabric OS Problem Types: Privileged File Read Description: A vulnerability in Brocade Fabric OS versions before Brocade Fabric OS v8.0.1b, v7.4.1d could allow an authenticated attacker within the restricted shell environment (rbash) as either the “user” or “factory” account, to read the contents of any file on the filesystem utilizing one of a few available binaries. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1721
CVE ID: CVE-2021-27797 State: PUBLISHED Published: 2022-02-21T17:49:35 Last Updated: 2024-08-03T21:33:15.786Z Vendors: n/a Products: Brocade Fabric OS Problem Types: hard coded credentials Description: Brocade Fabric OS before Brocade Fabric OS v8.2.1c, v8.1.2h, and all versions of Brocade Fabric OS v8.0.x and v7.x contain documented hard-coded credentials, which could allow attackers to gain access to the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2021-1722
CVE ID: CVE-2021-27798 State: PUBLISHED Published: 2022-08-05T15:24:40 Last Updated: 2025-02-15T00:16:51.895Z Vendors: Brocade Products: Brocade Fabric OS Problem Types: CWE-22 Description: A vulnerability in Brocade Fabric OS versions 7.4.1b and 7.3.1d could allow local users to conduct privileged directory transversal. Brocade Fabric OS versions 7.4.1.x and 7.3.x have reached end of life. Brocade Fabric OS Users should upgrade to supported versions as described in the Product End-of-Life published report. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-ad
ntainer: References: - https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2022-2012
CVE ID: CVE-2021-27799 State: PUBLISHED Published: 2021-02-26T21:31:44 Last Updated: 2024-08-03T21:33:15.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: ean_leading_zeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes the Zint Barcode Generator library code. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/zint/tickets/218/ - http://zint.org.uk/Manual.aspx?type=p&page=3 - http://zint.org.uk/Manual.aspx?type=p&page=4 - http://zint.org.uk/Manual.aspx?type=p&page=5 - https://sourceforge.net/p/zint/code/ci/7f8c8114f31c09a986597e0b
&page=4 - http://zint.org.uk/Manual.aspx?type=p&page=5 - https://sourceforge.net/p/zint/code/ci/7f8c8114f31c09a986597e0ba63a49f96150368a/
CVE ID: CVE-2021-27802 State: REJECTED Published: 2021-04-29T15:29:43 Last Updated: 2021-04-29T15:29:43 Description: No description available.
CVE ID: CVE-2021-27803 State: PUBLISHED Published: 2021-02-26T22:11:27 Last Updated: 2024-08-03T21:33:15.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2021/02/25/3 - https://w1.fi/security/2021-1/wpa_supplicant-p2p-provision-discovery-processing-vulnerability.txt - https://w1.fi/security/2021-1/0001-
ecurity/2021-1/wpa_supplicant-p2p-provision-discovery-processing-vulnerability.txt - https://w1.fi/security/2021-1/0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch - http://www.openwall.com/lists/oss-security/2021/02/27/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KOGP2VIVVXXQ6CZ2HU4DKGPDB4WR24XF/ - https://lists.debian.org/debian-lts-announce/2021/03/msg00003.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZGUR5XFHATVXTRAEJMODS7ROYHA56NX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEHS2CFGH3KCSNPHBHNGN5SGV6QPM
//lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEHS2CFGH3KCSNPHBHNGN5SGV6QPMLZ4/ - https://www.debian.org/security/2021/dsa-4898
CVE ID: CVE-2021-27804 State: PUBLISHED Published: 2021-03-02T00:30:58 Last Updated: 2024-08-03T21:33:15.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: JPEG XL (aka jpeg-xl) through 0.3.2 allows writable memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/wg1/jpeg-xl/-/tags - http://www.openwall.com/lists/oss-security/2021/03/01/3 - http://seclists.org/fulldisclosure/2021/Mar/2 - http://packetstormsecurity.com/files/161623/jpeg-xl-0.3.1-Memory-Corruption.html
CVE ID: CVE-2021-27807 State: PUBLISHED Published: 2021-03-19T16:05:20.000Z Last Updated: 2025-02-13T16:27:57.032Z Vendors: Apache Software Foundation Products: Apache PDFBox Problem Types: CWE-834 Description: A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r818058ff1e4b9f6bef4e5a2e74faff38cb3d3885c1e2db398bc55cfb%40%3Cusers.pdfbox.apache.org%3E - https://lists.apache.org/thread.html/r818058ff1e4b9f6bef4e5a2e74faff38cb3d3885c1e2db398bc55cfb%40%3Cusers.pdfbox.apache.org%3E - http://www
e.org/thread.html/r818058ff1e4b9f6bef4e5a2e74faff38cb3d3885c1e2db398bc55cfb%40%3Cusers.pdfbox.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/03/19/9 - https://lists.apache.org/thread.html/r4717f902f8bc36d47b3fa978552a25e4ed3ddc2fffb52b94fbc4ab36%40%3Cusers.pdfbox.apache.org%3E - https://lists.apache.org/thread.html/r043edc5dcf9199f7f882ed7906b41cb816753766e88b8792dbf319a9%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/r1d268642f8b52456ee8f876b888b8ed7a9e9568c7770789f3ded7f9e%40%3Ccommits.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/r7ee634c21816c69ce829d0c41f35afa2a53a99bdd3c7cce8644fdc0e%40%3Cnotifications.ofbiz.apache.org%3E - https://list
ead.html/r7ee634c21816c69ce829d0c41f35afa2a53a99bdd3c7cce8644fdc0e%40%3Cnotifications.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/re1e35881482e07dc2be6058d9b44483457f36133cac67956686ad9b9%40%3Cnotifications.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/rc69140d894c6a9c67a8097a25656cce59b46a5620c354ceba10543c3%40%3Cnotifications.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/r9ffe179385637b0b5cbdabd0246118005b4b8232909d2d14cd68ccd3%40%3Ccommits.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/raa35746227f3f8d50fff1db9899524423a718f6f35cd39bd4769fa6c%40%3Cnotifications.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/r5c8e2125d18af184
3a718f6f35cd39bd4769fa6c%40%3Cnotifications.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/r5c8e2125d18af184c80f7a986fbe47eaf0d30457cd450133adc235ac%40%3Ccommits.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/r1218e60c32829f76943ecaca79237120c2ec1ab266459d711a578b50%40%3Cdev.pdfbox.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PT72QOFDXLJ7PLTN66EMG5EHPTE7TFZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6KDA2U4KL2N3XT3PM4ZJEBBA6JJIH2G4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AVLKAHFMPH72T
IH2G4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AVLKAHFMPH72TTP25INPZPGX5FODK3H/ - https://lists.apache.org/thread.html/r6e067a6d83ccb6892d0ff867bd216704f21fb0b6a854dea34be04f12%40%3Cnotifications.ofbiz.apache.org%3E - https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E - https://lists.apache.org/thread.html/r54594251369e14c185da9662a5340a52afbbdf75d61c9c3a69c8f2e8%40%3Cdev.pdfbox.apache.org%3E - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpuap
/cpujul2021.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2021-27811 State: PUBLISHED Published: 2021-05-21T17:11:47 Last Updated: 2024-08-03T21:33:15.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able execute arbitrary PHP code via exploitation of client_upgrade_edition.php and Upgrade.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/whiskey-jj/w2s2x2222.github.io/issues/2 - https://www.cnvd.org.cn/flaw/show/2297879
CVE ID: CVE-2021-27815 State: PUBLISHED Published: 2021-04-14T00:00:00 Last Updated: 2024-08-03T21:33:15.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service (DoS) by uploading a malicious JPEG file, causing the application to crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libexif/exif/issues/4 - https://github.com/libexif/exif/commit/f6334d9d32437ef13dc902f0a88a2be0063d9d1c - https://github.com/libexif/exif/commit/eb84b0e3c5f2a86013b6fcfb800d187896a648fa - https://list
dc902f0a88a2be0063d9d1c - https://github.com/libexif/exif/commit/eb84b0e3c5f2a86013b6fcfb800d187896a648fa - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSWAXZVNXYLV3E4R6YQTEGRGMGWEAR76/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZQ3L45F7S7PQPG5HEHXOCGNOO64MJOS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMC6OTXZRPCUD3LOSWO4ISR7CH7NJQDT/ - https://security.gentoo.org/glsa/202210-28
CVE ID: CVE-2021-27817 State: PUBLISHED Published: 2021-03-15T16:41:45 Last Updated: 2024-08-03T21:33:16.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote command execution vulnerability in shopxo 1.9.3 allows an attacker to upload malicious code generated by phar where the suffix is JPG, which is uploaded after modifying the phar suffix. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gongfuxiang/shopxo - https://github.com/h4ckdepy/vuls/blob/main/shopxo.md