Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-37552 State: PUBLISHED Published: 2021-08-06T13:30:39 Last Updated: 2024-08-04T01:23:01.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2021.2.17925, stored XSS was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021/
CVE ID: CVE-2021-37553 State: PUBLISHED Published: 2021-08-06T13:31:50 Last Updated: 2024-08-04T01:23:01.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021/
CVE ID: CVE-2021-37554 State: PUBLISHED Published: 2021-08-06T13:32:19 Last Updated: 2024-08-04T01:22:59.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021/
CVE ID: CVE-2021-37555 State: PUBLISHED Published: 2021-07-26T20:27:20 Last Updated: 2024-08-04T01:23:01.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-16734. To connect, the telnet service is used on port 23 with the default password of 059AnkJ for the root account. The user can then download the filesystem through preinstalled BusyBox utilities (e.g., tar and nc). Additional Analyst Notes: - CVE Program Container: References: - http://urn.kb.se/resolve?urn=urn:nbn:se:kth:diva-296520
CVE ID: CVE-2021-37556 State: PUBLISHED Published: 2021-08-03T15:31:42 Last Updated: 2024-08-04T01:23:01.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/reporting/dashboard/csvExport/csv_HostGroupLogs.php start and end parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/centreon/centreon/pull/9781 - https://www.synacktiv.com/sites/default/files/2021-07/Centreon_Multiple_vulnerabilities_0.pdf
CVE ID: CVE-2021-37557 State: PUBLISHED Published: 2021-08-03T15:34:11 Last Updated: 2024-08-04T01:23:01.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/views/graphs/generateGraphs/generateImage.php index parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/centreon/centreon/pull/9787 - https://www.synacktiv.com/sites/default/files/2021-07/Centreon_Multiple_vulnerabilities_0.pdf
CVE ID: CVE-2021-37558 State: PUBLISHED Published: 2021-08-03T15:37:07 Last Updated: 2024-08-04T01:23:01.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unauthenticated attackers to execute arbitrary SQL commands via the host_name and service_description parameters. The vulnerability can be exploited only when a valid Knowledge Base URL is configured on the Knowledge Base configuration page and points to a MediaWiki instance. This relates to the proxy feature in class/centreon-knowledge/ProceduresProxy.class.php and include/configuration/configKnowledge/proxy/pr
e proxy feature in class/centreon-knowledge/ProceduresProxy.class.php and include/configuration/configKnowledge/proxy/proxy.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/centreon/centreon/pull/9796 - https://www.synacktiv.com/sites/default/files/2021-07/Centreon_Multiple_vulnerabilities_0.pdf
CVE ID: CVE-2021-37560 State: PUBLISHED Published: 2021-12-25T23:26:02 Last Updated: 2024-08-04T01:23:01.295Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Mu
CVE ID: CVE-2021-37561 State: PUBLISHED Published: 2021-12-25T23:25:53 Last Updated: 2024-08-04T01:23:01.231Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Mu
CVE ID: CVE-2021-37562 State: PUBLISHED Published: 2021-12-25T23:24:41 Last Updated: 2024-08-04T01:23:01.387Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds read). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Mul
CVE ID: CVE-2021-37563 State: PUBLISHED Published: 2021-12-25T23:25:29 Last Updated: 2024-08-04T01:23:01.161Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Mu
CVE ID: CVE-2021-37564 State: PUBLISHED Published: 2021-12-25T23:23:26 Last Updated: 2024-08-04T01:23:01.165Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 - ht
64368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2021-37565 State: PUBLISHED Published: 2021-12-25T23:23:36 Last Updated: 2024-08-04T01:23:01.285Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 - ht
CVE ID: CVE-2021-37566 State: PUBLISHED Published: 2021-12-25T23:24:32 Last Updated: 2024-08-04T01:23:01.194Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7610, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-P
.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2021-37567 State: PUBLISHED Published: 2021-12-25T23:23:45 Last Updated: 2024-08-04T01:23:01.324Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 - ht
CVE ID: CVE-2021-37568 State: PUBLISHED Published: 2021-12-25T23:24:14 Last Updated: 2024-08-04T01:23:01.219Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 - h
064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2021-37569 State: PUBLISHED Published: 2021-12-25T23:24:23 Last Updated: 2024-08-04T01:23:01.346Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 - h
CVE ID: CVE-2021-37570 State: PUBLISHED Published: 2021-12-25T23:23:12 Last Updated: 2024-08-04T01:23:01.294Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds read). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 - ht
CVE ID: CVE-2021-37571 State: PUBLISHED Published: 2021-12-25T23:23:55 Last Updated: 2024-08-04T01:23:01.288Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 - h
CVE ID: CVE-2021-37572 State: PUBLISHED Published: 2021-12-25T23:23:02 Last Updated: 2024-08-04T01:23:01.328Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Missing authorization). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 -
00064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2021-37573 State: PUBLISHED Published: 2021-08-09T12:42:12 Last Updated: 2024-08-04T01:23:01.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in the web server TTiny Java Web Server and Servlet Container (TJWS) <=1.115 allows an adversary to inject malicious code on the server's "404 Page not Found" error page Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-042.txt - http://seclists.org/fulldisclosure/2021/Aug/13 - http://packetstormsecurity.com/files/163825/Tiny-Java-Web-Server-1.115-Cross-Site-Scripting.html
CVE ID: CVE-2021-37576 State: PUBLISHED Published: 2021-07-26T21:35:58 Last Updated: 2024-08-04T01:23:01.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e. Additional Analyst Notes: - CVE Program Container: References: - https://lore.kernel.org/linuxppc-dev/87im0x1lqi.fsf%40mpe.ellerman.id.au/T/#u - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f62f3c20647ebd5fb6ecb8f0b477b9281c44c10a - http://www.openwall.com/lists/oss-security/2021/07/27/2 - https://lists
t/?id=f62f3c20647ebd5fb6ecb8f0b477b9281c44c10a - http://www.openwall.com/lists/oss-security/2021/07/27/2 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z2YZ2DNURMYYVDT2NYAFDESJC35KCUDS/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WDFA7DSQIPM7XPNXJBXFWXHJFVUBCAG6/ - https://security.netapp.com/advisory/ntap-20210917-0005/ - https://www.debian.org/security/2021/dsa-4978
CVE ID: CVE-2021-37577 State: PUBLISHED Published: 2024-10-01T00:00:00 Last Updated: 2024-11-15T20:32:52.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluetooth LE and BR/EDR Secure Connections pairing and Secure Simple Pairing using the Passkey entry protocol in Bluetooth Core Specifications 2.1 through 5.3 may permit an unauthenticated man-in-the-middle attacker to identify the Passkey used during pairing by reflection of a crafted public key with the same X coordinate as the offered public key and by reflection of the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using t
iating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. This is a related issue to CVE-2020-26558. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://bluetooth.com - https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/ - https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/passkey-impersonation/
CVE ID: CVE-2021-37578 State: PUBLISHED Published: 2021-07-29T07:05:10 Last Updated: 2024-08-04T01:23:01.344Z Vendors: Apache Software Foundation Products: Apache jUDDI Problem Types: CWE-502 Description: Apache jUDDI uses several classes related to Java's Remote Method Invocation (RMI) which (as an extension to UDDI) provides an alternate transport for accessing UDDI services. RMI uses the default Java serialization mechanism to pass parameters in RMI invocations. A remote attacker can send a malicious serialized object to the above RMI entries. The objects get deserialized without any check on the incoming data. In the worst case, it may let the attacker run arbitrary code remotely. For bo
d without any check on the incoming data. In the worst case, it may let the attacker run arbitrary code remotely. For both jUDDI web service applications and jUDDI clients, the usage of RMI is disabled by default. Since this is an optional feature and an extension to the UDDI protocol, the likelihood of impact is low. Starting with 3.3.10, all RMI related code was removed. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r82047b3ba774cf870ea8e1e9ec51c6107f6cd056d4e36608148c6e71%40%3Cprivate.juddi.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/07/29/1
CVE ID: CVE-2021-37579 State: PUBLISHED Published: 2021-09-09T07:45:12 Last Updated: 2024-08-04T01:23:01.305Z Vendors: Apache Software Foundation Products: Apache Dubbo Problem Types: Remote Code Execution by tempering the serialization id on server side. Description: The Dubbo Provider will check the incoming request and the corresponding serialization type of this request meet the configuration set by the server. But there's an exception that the attacker can use to skip the security check (when enabled) and reaching a deserialization operation with native java serialization. Apache Dubbo 2.7.13, 3.0.2 fixed this issue by quickly fail when any unrecognized request was found. Additional Ana
ion. Apache Dubbo 2.7.13, 3.0.2 fixed this issue by quickly fail when any unrecognized request was found. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r898afa109cdbb4b79724308648ff0718152ebe1d3d6dfc7202d958bc%40%3Cdev.dubbo.apache.org%3E
CVE ID: CVE-2021-37580 State: PUBLISHED Published: 2021-11-16T09:35:11 Last Updated: 2024-08-04T01:23:01.186Z Vendors: Apache Software Foundation Products: Apache ShenYu Admin Problem Types: CWE-287 Description: A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0 Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/o15j25qwtpcw62k48xw1tnv48skh3zgb - http://www.openwall.com/lists/oss-security/2021/11/16/1
CVE ID: CVE-2021-37583 State: PUBLISHED Published: 2021-12-25T23:24:05 Last Updated: 2024-08-04T01:23:01.295Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 - h
CVE ID: CVE-2021-37584 State: PUBLISHED Published: 2021-12-25T23:25:39 Last Updated: 2024-08-04T01:23:01.320Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds write). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Mu
CVE ID: CVE-2021-37586 State: PUBLISHED Published: 2021-08-13T15:36:33 Last Updated: 2024-08-04T01:23:01.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PowerPlay Web component of Mitel Interaction Recording Multitenancy systems before 6.7 could allow a user (with Administrator rights) to replay a previously recorded conversation of another tenant due to insufficient validation. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0006
CVE ID: CVE-2021-37587 State: PUBLISHED Published: 2021-07-27T22:06:48 Last Updated: 2024-08-04T01:23:01.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Charm 0.43, any single user can decrypt DAC-MACS or MA-ABE-YJ14 data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JHUISI/charm/issues/276 - https://jhuisi.github.io/charm/charm/schemes/abenc/abenc_dacmacs_yj14.html - https://jhuisi.github.io/charm/_modules/abenc_maabe_yj14.html - https://eprint.iacr.org/2020/460 - https://www2.hci.uni-hannover.de/papers/Tan2019.pdf
CVE ID: CVE-2021-37588 State: PUBLISHED Published: 2021-07-27T22:06:37 Last Updated: 2024-08-04T01:23:01.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JHUISI/charm/issues/276 - https://eprint.iacr.org/2020/460 - https://www2.hci.uni-hannover.de/papers/Tan2019.pdf - https://github.com/JHUISI/charm/blob/dev/charm/schemes/abenc/abenc_yct14.py
CVE ID: CVE-2021-37589 State: PUBLISHED Published: 2022-06-07T13:49:57 Last Updated: 2024-08-04T01:23:01.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Virtua Cobranca before 12R allows SQL Injection on the login page. Additional Analyst Notes: - CVE Program Container: References: - https://www.virtuasoftware.com.br/conteudo.php?content=downloads&lang=pt-br - https://github.com/luca-regne/my-cves/tree/main/CVE-2021-37589 - http://packetstormsecurity.com/files/167480/Virtua-Software-Cobranca-12S-SQL-Injection.html
CVE ID: CVE-2021-37592 State: PUBLISHED Published: 2021-11-19T14:18:58 Last Updated: 2024-08-04T01:23:01.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OISF/suricata/releases - https://forum.suricata.io/t/suricata-6-0-4-and-5-0-8-released/1942 - https://redmine.openinfosecfoundation.org/issues/4569