Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-20993 State: PUBLISHED Published: 2021-05-13T13:45:24.560374Z Last Updated: 2024-09-16T22:46:34.608Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: WAGO Products: 0852-0303, 0852-1305, 0852-1505, 0852-1305/000-001, 0852-1505/000-001 Problem Types: CWE-200 Description: In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-013
CVE ID: CVE-2021-20994 State: PUBLISHED Published: 2021-05-13T13:45:24.684398Z Last Updated: 2024-09-17T01:16:25.472Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: WAGO Products: 0852-0303, 0852-1305, 0852-1505, 0852-1305/000-001, 0852-1505/000-001 Problem Types: CWE-79 Description: In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-013
CVE ID: CVE-2021-20995 State: PUBLISHED Published: 2021-05-13T13:45:24.828603Z Last Updated: 2024-09-17T04:24:28.648Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: WAGO Products: 0852-0303, 0852-1305, 0852-1505, 0852-1305/000-001, 0852-1505/000-001 Problem Types: CWE-312 Description: In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-013
CVE ID: CVE-2021-20996 State: PUBLISHED Published: 2021-05-13T13:45:24.938129Z Last Updated: 2024-09-16T23:15:25.537Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: WAGO Products: 0852-0303, 0852-1305, 0852-1505, 0852-1305/000-001, 0852-1505/000-001 Problem Types: CWE-732 Description: In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-013
CVE ID: CVE-2021-20997 State: PUBLISHED Published: 2021-05-13T13:45:25.054592Z Last Updated: 2024-09-16T23:42:19.095Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: WAGO Products: 0852-0303, 0852-1305, 0852-1505, 0852-1305/000-001, 0852-1505/000-001 Problem Types: CWE-522 Description: In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-013
CVE ID: CVE-2021-20998 State: PUBLISHED Published: 2021-05-13T13:45:25.179394Z Last Updated: 2024-09-17T00:51:42.120Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: WAGO Products: 0852-0303, 0852-1305, 0852-1505, 0852-1305/000-001, 0852-1505/000-001 Problem Types: CWE-306 Description: In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-013
CVE ID: CVE-2021-20999 State: PUBLISHED Published: 2021-05-13T13:45:25.284617Z Last Updated: 2024-09-17T01:16:17.295Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: Weidmüller Products: UC20-WL2000-AC (No. 1334950000), UC20-WL2000-IOT (No. 1334990000), IOT-GW30 (No. 2682620000), IOT-GW30-4G-EU (No. 2682630000) Problem Types: CWE-668 Description: In Weidmüller u-controls and IoT-Gateways in versions up to 1.12.1 a network port intended only for device-internal usage is accidentally accessible via external network interfaces. By exploiting this vulnerability the device may be manipulated or the operation may be stopped. Additional Analyst Notes: - CVE Progr
this vulnerability the device may be manipulated or the operation may be stopped. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-016
CVE ID: CVE-2021-21000 State: PUBLISHED Published: 2021-05-24T11:05:05.975839Z Last Updated: 2024-09-16T18:43:52.677Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: WAGO Products: Series PFC200 Controller, Series Ethernet Controller Problem Types: CWE-770 Description: On WAGO PFC200 devices in different firmware versions with special crafted packets an attacker with network access to the device could cause a denial of service for the login service of the runtime. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-014
CVE ID: CVE-2021-21001 State: PUBLISHED Published: 2021-05-24T11:05:06.147811Z Last Updated: 2024-09-16T16:19:02.930Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: WAGO Products: Series PFC200 Controller, Series Ethernet Controller Problem Types: CWE-22 Description: On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file system with higher privileges. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-014
CVE ID: CVE-2021-21002 State: PUBLISHED Published: 2021-06-25T18:25:50.373345Z Last Updated: 2024-09-17T03:58:42.845Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Phoenix Contact Products: FL COMSERVER Problem Types: CWE-772 Description: In Phoenix Contact FL COMSERVER UNI in versions < 2.40 a invalid Modbus exception response can lead to a temporary denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-022
CVE ID: CVE-2021-21003 State: PUBLISHED Published: 2021-06-25T18:25:51.312211Z Last Updated: 2024-09-17T01:31:02.647Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Phoenix Contact Products: FL SWITCH, FL NAT Problem Types: CWE-404 Description: In Phoenix Contact FL SWITCH SMCS series products in multiple versions fragmented TCP-Packets may cause a Denial of Service of Web-, SNMP- and ICMP-Echo services. The switching functionality of the device is not affected. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-023
CVE ID: CVE-2021-21004 State: PUBLISHED Published: 2021-06-25T18:25:52.190088Z Last Updated: 2024-09-16T22:08:28.813Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N) Vendors: Phoenix Contact Products: FL SWITCH, FL NAT Problem Types: CWE-79 Description: In Phoenix Contact FL SWITCH SMCS series products in multiple versions an attacker may insert malicious code via LLDP frames into the web-based management which could then be executed by the client. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-023
CVE ID: CVE-2021-21005 State: PUBLISHED Published: 2021-06-25T18:25:53.099513Z Last Updated: 2024-09-17T02:17:13.899Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Phoenix Contact Products: FL SWITCH, FL NAT Problem Types: CWE-362 Description: In Phoenix Contact FL SWITCH SMCS series products in multiple versions if an attacker sends a hand-crafted TCP-Packet with the Urgent-Flag set and the Urgent-Pointer set to 0, the network stack will crash. The device needs to be rebooted afterwards. Additional Analyst Notes: - CVE Program Container: References: - https://cert.vde.com/en-us/advisories/vde-2021-023
CVE ID: CVE-2021-21006 State: PUBLISHED Published: 2021-01-13T22:53:05.307Z Last Updated: 2025-04-23T19:46:51.711Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Photoshop Problem Types: CWE-122 Description: Adobe Photoshop version 22.1 (and earlier) is affected by a heap buffer overflow vulnerability when handling a specially crafted font file. Successful exploitation could lead to arbitrary code execution. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/photoshop
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/photoshop/apsb21-01.html
CVE ID: CVE-2021-21007 State: PUBLISHED Published: 2021-01-13T22:54:53.688Z Last Updated: 2025-04-23T19:46:39.150Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Illustrator Problem Types: CWE-427 Description: Adobe Illustrator version 25.0 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/illustrator/apsb21-02.html
CVE ID: CVE-2021-21008 State: PUBLISHED Published: 2021-01-13T22:50:58.480Z Last Updated: 2025-04-23T19:46:59.464Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-427 Description: Adobe Animate version 21.0 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/animate/apsb21-03.html
CVE ID: CVE-2021-21009 State: PUBLISHED Published: 2021-01-13T22:47:48.937Z Last Updated: 2025-04-23T19:47:08.752Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Adobe Products: Campaign Problem Types: CWE-918 Description: Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier), 19.2.3 (and earlier) and 19.1.7 (and earlier) are affected by a server-side request forgery (SSRF) vulnerability. Successful exploitation could allow an attacker to use the Campaign instance to issue unauthorized requests to internal or external resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
uthorized requests to internal or external resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/campaign/apsb21-04.html
CVE ID: CVE-2021-21010 State: PUBLISHED Published: 2021-01-13T22:43:50.400522Z Last Updated: 2024-09-16T20:31:44.226Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-427 Description: InCopy version 15.1.1 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/incopy/apsb21-05.html
CVE ID: CVE-2021-21011 State: PUBLISHED Published: 2021-01-13T22:40:01.701Z Last Updated: 2025-04-23T19:47:19.884Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Captivate Problem Types: CWE-427 Description: Adobe Captivate 2019 version 11.5.1.499 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with permissions to write to the file system could leverage this vulnerability to escalate privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/captivate/apsb21-06.html
CVE ID: CVE-2021-21012 State: PUBLISHED Published: 2021-01-13T22:35:38.509589Z Last Updated: 2024-09-16T17:33:28.974Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-639 Description: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the checkout module. Successful exploitation could lead to sensitive information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-08.html
CVE ID: CVE-2021-21013 State: PUBLISHED Published: 2021-01-13T22:35:54.370195Z Last Updated: 2024-09-17T02:28:00.147Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-863 Description: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the customer API module. Successful exploitation could lead to sensitive information disclosure and update arbitrary information on another user's account. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-08
tional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-08.html
CVE ID: CVE-2021-21014 State: PUBLISHED Published: 2021-02-11T20:17:28.841945Z Last Updated: 2024-09-16T22:25:57.187Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-434 Description: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-08.html
CVE ID: CVE-2021-21015 State: PUBLISHED Published: 2021-02-11T19:29:31.987970Z Last Updated: 2024-09-17T01:06:41.339Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-78 Description: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an OS command injection via the customer attribute save controller. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/produ
ul exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-08.html
CVE ID: CVE-2021-21016 State: PUBLISHED Published: 2021-02-11T19:38:50.385879Z Last Updated: 2024-09-16T20:12:07.684Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-78 Description: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to OS command injection via the WebAPI. Successful exploitation could lead to remote code execution by an authenticated attacker. Access to the admin console is required for successful exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-08.html
CVE ID: CVE-2021-21017 State: PUBLISHED Published: 2021-02-11T19:42:20.225Z Last Updated: 2025-10-21T23:35:28.186Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-122 Description: Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst
er. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/acrobat/apsb21-09.html
CVE ID: CVE-2021-21018 State: PUBLISHED Published: 2021-02-11T19:29:32.294692Z Last Updated: 2024-09-16T23:26:22.810Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-78 Description: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to OS command injection via the scheduled operation module. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/m
ploitation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-08.html
CVE ID: CVE-2021-21019 State: PUBLISHED Published: 2021-02-11T19:29:31.885358Z Last Updated: 2024-09-17T02:16:25.056Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-91 Description: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in the Widgets module. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-08.htm
al Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-08.html
CVE ID: CVE-2021-21020 State: PUBLISHED Published: 2021-02-11T19:29:31.778778Z Last Updated: 2024-09-16T23:37:01.379Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-284 Description: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an access control bypass vulnerability in the Login as Customer module. Successful exploitation could lead to unauthorized access to restricted resources. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-08.html
CVE ID: CVE-2021-21021 State: PUBLISHED Published: 2021-02-11T19:42:21.354171Z Last Updated: 2024-09-17T03:27:40.772Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: -
itation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb21-09.html
CVE ID: CVE-2021-21022 State: PUBLISHED Published: 2021-02-11T19:29:31.371671Z Last Updated: 2024-09-16T17:57:55.462Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-639 Description: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object reference (IDOR) in the product module. Successful exploitation could lead to unauthorized access to restricted resources. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-08.html
CVE ID: CVE-2021-21023 State: PUBLISHED Published: 2021-02-11T19:29:31.477040Z Last Updated: 2024-09-17T03:18:53.007Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-79 Description: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a stored cross-site scripting vulnerability in the admin console. Successful exploitation could lead to arbitrary JavaScript execution in the victim's browser. Access to the admin console is required for successful exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/pr
ssful exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-08.html
CVE ID: CVE-2021-21024 State: PUBLISHED Published: 2021-02-11T19:29:31.680840Z Last Updated: 2024-09-17T02:32:55.081Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-89 Description: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a blind SQL injection vulnerability in the Search module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin console is required for successful exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com
ed for successful exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-08.html
CVE ID: CVE-2021-21025 State: PUBLISHED Published: 2021-02-11T19:29:32.393015Z Last Updated: 2024-09-16T18:44:45.724Z Severity: CRITICAL (CVSS 9.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-91 Description: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in the product layout updates. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb2
Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/magento/apsb21-08.html
CVE ID: CVE-2021-21026 State: PUBLISHED Published: 2021-02-11T19:29:31.581101Z Last Updated: 2024-09-16T20:17:11.549Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-285 Description: Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin console is required for successful exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.