Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-37470 State: PUBLISHED Published: 2021-07-25T20:08:15 Last Updated: 2024-08-04T01:16:04.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field. An authenticated user can add or modify the affected field to inject arbitrary JavaScript. Additional Analyst Notes: - CVE Program Container: References: - https://www.nch.com.au/webdictate/index.html - https://github.com/0xfml/poc/blob/main/NCH/WebDictate_2.13_XSS.md
CVE ID: CVE-2021-37471 State: PUBLISHED Published: 2021-11-07T15:25:13 Last Updated: 2024-08-04T01:16:04.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cradlepoint IBR900-600 devices running versions < 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line. Additional Analyst Notes: - CVE Program Container: References: - https://cradlepoint.com/product/endpoints/ibr900/ - https://securitybytes.me/posts/cve-2021-37471/
CVE ID: CVE-2021-37473 State: PUBLISHED Published: 2021-07-26T17:11:12 Last Updated: 2024-08-04T01:22:59.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `products-order` through a post request, which results in arbitrary sql query execution in the backend database. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/victomteng1997/ed429fed7de46651c89f05e7591fd4fe - https://github.com/NavigateCMS/Navigate-CMS - https://github.com/NavigateCMS/Navigate-CMS/issues/26
CVE ID: CVE-2021-37475 State: PUBLISHED Published: 2021-07-26T17:15:06 Last Updated: 2024-08-04T01:23:01.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NavigateCMS version 2.9.4 and below, function in `templates.php` is vulnerable to sql injection on parameter `template-properties-order`, which results in arbitrary sql query execution in the backend database. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/victomteng1997/ed429fed7de46651c89f05e7591fd4fe - https://github.com/NavigateCMS/Navigate-CMS - https://github.com/NavigateCMS/Navigate-CMS/issues/26
CVE ID: CVE-2021-37476 State: PUBLISHED Published: 2021-07-26T17:16:55 Last Updated: 2024-08-04T01:22:59.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `id` through a post request, which results in arbitrary sql query execution in the backend database. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/victomteng1997/ed429fed7de46651c89f05e7591fd4fe - https://github.com/NavigateCMS/Navigate-CMS - https://github.com/NavigateCMS/Navigate-CMS/issues/26
CVE ID: CVE-2021-37477 State: PUBLISHED Published: 2021-07-26T17:17:56 Last Updated: 2024-08-04T01:22:59.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NavigateCMS version 2.9.4 and below, function in `structure.php` is vulnerable to sql injection on parameter `children_order`, which results in arbitrary sql query execution in the backend database. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/victomteng1997/ed429fed7de46651c89f05e7591fd4fe - https://github.com/NavigateCMS/Navigate-CMS - https://github.com/NavigateCMS/Navigate-CMS/issues/26
CVE ID: CVE-2021-37478 State: PUBLISHED Published: 2021-07-26T17:18:39 Last Updated: 2024-08-04T01:22:59.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: In NavigateCMS version 2.9.4 and below, function `block` is vulnerable to sql injection on parameter `block-order`, which results in arbitrary sql query execution in the backend database. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/victomteng1997/ed429fed7de46651c89f05e7591fd4fe - https://github.com/NavigateCMS/Navigate-CMS - https://github.com/NavigateCMS/Navigate-CMS/issues/26
CVE ID: CVE-2021-37491 State: PUBLISHED Published: 2023-02-07T00:00:00.000Z Last Updated: 2025-03-25T17:42:06.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogecoin Core 1.14.3 and earlier allows attackers to view sensitive information via CWallet::CreateTransaction() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://dogecoin.com - https://github.com/bitcoin/bitcoin/commit/2fb9c1e6681370478e24a19172ed6d78d95d50d3 - https://github.com/dogecoin/dogecoin/blob/master/src/wallet/wallet.cpp#L2628-L2640 - https://github.com/VPRLab/BlkVulnReport/blob/main/NDSS23
gecoin/dogecoin/blob/master/src/wallet/wallet.cpp#L2628-L2640 - https://github.com/VPRLab/BlkVulnReport/blob/main/NDSS23_BlockScope.pdf - https://github.com/dogecoin/dogecoin/issues/2279
CVE ID: CVE-2021-37492 State: PUBLISHED Published: 2023-02-07T00:00:00.000Z Last Updated: 2025-03-25T17:37:58.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue discovered in src/wallet/wallet.cpp in Ravencoin Core 4.3.2.1 and earlier allows attackers to view sensitive information via CWallet::CreateTransactionAll() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/bitcoin/bitcoin/commit/2fb9c1e6681370478e24a19172ed6d78d95d50d3 - http://ravencoin.com - https://github.com/RavenProject/Ravencoin/blob/master/src/wallet/wallet.cpp#L3657-L3671 - https://github.com/RavenProject/Ravencoin/issues/1086
CVE ID: CVE-2021-37497 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-04-04T20:39:01.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.pbootcms.com/ - https://github.com/penson233/Vuln/issues/3
CVE ID: CVE-2021-37498 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T12:59:10.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outbound requests to intranet servers, conduct port scans via the actserver parameter in License Activation function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://reprise.com - http://reprisesoftware.com - https://github.com/blakduk/Advisories/blob/main/Reprise%20License%20Manager/README.md
CVE ID: CVE-2021-37499 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T17:41:06.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote attackers to inject arbitrary HTTP headers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://reprise.com - http://reprisesoftware.com - https://github.com/blakduk/Advisories/blob/main/Reprise%20License%20Manager/README.md
CVE ID: CVE-2021-37500 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T16:02:57.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Reprise License Manager (RLM) web interface before 14.2BL4 in the diagnostics function that allows RLM users with sufficient privileges to overwrite any file the on the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://reprise.com - http://reprisesoftware.com - https://github.com/blakduk/Advisories/blob/main/Reprise%20License%20Manager/README.md
CVE ID: CVE-2021-37501 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:38:24.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/HDFGroup/hdf5 - https://github.com/ST4RF4LL/Something_Found/blob/main/HDF5_v1.13.0_h5dump_heap_overflow.md - https://github.com/HDFGroup/hdf5/issues/2458
CVE ID: CVE-2021-37502 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:20:51.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user name field when adding a user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/marcantondahmen/automad/issues/29
CVE ID: CVE-2021-37504 State: PUBLISHED Published: 2022-02-25T18:15:47 Last Updated: 2024-08-04T01:22:59.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name. Additional Analyst Notes: - CVE Program Container: References: - http://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js - http://hayageek.github.io/jQuery-Upload-File/4.0.11/jquery.uploadfile.min.js - http://hayageek.github.io/jQuery-Upload-File/4.0.11/uploadfile.css - http://haygeek.com - http://j
y.uploadfile.min.js - http://hayageek.github.io/jQuery-Upload-File/4.0.11/uploadfile.css - http://haygeek.com - http://jquery-upload-file.com - https://github.com/hayageek/jquery-upload-file/blob/master/js/jquery.uploadfile.js#L469 - https://raw.githubusercontent.com/hayageek/jquery-upload-file/master/js/jquery.uploadfile.js
CVE ID: CVE-2021-37517 State: PUBLISHED Published: 2022-03-31T18:06:03 Last Updated: 2024-08-04T01:23:01.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password function becuase the application allows email addresses as usernames, which can cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Dolibarr/dolibarr/commit/b57eb8284e830e30eefb26e3c5ede076ea24037c
CVE ID: CVE-2021-37518 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:19:25.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/philc/vimium/issues/3832 - https://github.com/philc/vimium/pull/3850
CVE ID: CVE-2021-37519 State: PUBLISHED Published: 2023-02-03T00:00:00.000Z Last Updated: 2025-03-26T18:16:52.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/memcached/memcached/issues/805 - https://github.com/memcached/memcached/pull/806/commits/264722ae4e248b453be00e97197dadc685b60fd0
CVE ID: CVE-2021-37522 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-10-28T16:59:05.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in HKing2802 Locke-Bot 2.0.2 allows remote attackers to run arbitrary SQL commands via crafted string to /src/db.js, /commands/mute.js, /modules/event/messageDelete.js. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/0xHornet/9789d70454a47764b611afc8e84d6c0d - https://cinquito.github.io/jekyll/update/2021/10/17/discord_bot_sqli.html
CVE ID: CVE-2021-37524 State: PUBLISHED Published: 2022-07-01T17:16:07 Last Updated: 2024-08-04T01:23:01.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.fusionpbx.com/app/tickets/ticket_edit.php?id=4a0666cd-8c12-46ae-bc0a-02f007b62cdb - https://github.com/fusionpbx/fusionpbx/commit/c3b811393de63e324eaa64fe5c9ea3fce428fe1a
CVE ID: CVE-2021-37529 State: PUBLISHED Published: 2022-01-12T20:12:04 Last Updated: 2024-08-04T01:22:59.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which could cause a denial of service (context-dependent). Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/125/
CVE ID: CVE-2021-37530 State: PUBLISHED Published: 2022-01-12T20:18:32 Last Updated: 2024-08-04T01:22:59.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/126/
CVE ID: CVE-2021-37531 State: PUBLISHED Published: 2021-09-14T11:15:08 Last Updated: 2024-08-04T01:22:59.365Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP SE Products: SAP NetWeaver Knowledge Management XML Forms Problem Types: Code Injection Description: SAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, contains an XSLT vulnerability which allows a non-administrative authenticated attacker to craft a malicious XSL stylesheet file containing a script with OS-level commands, copy it into a location to be accessed by the system and then create a file which will trigger the XSLT engine to execute the script con
ocation to be accessed by the system and then create a file which will trigger the XSLT engine to execute the script contained within the malicious XSL file. This can result in a full compromise of the confidentiality, integrity, and availability of the system. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3081888 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405 - http://seclists.org/fulldisclosure/2022/Jan/75 - http://packetstormsecurity.com/files/165751/SAP-Enterprise-Portal-XSLT-Injection.html
CVE ID: CVE-2021-37532 State: PUBLISHED Published: 2021-09-14T11:15:27 Last Updated: 2024-08-04T01:23:01.245Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SAP SE Products: SAP Business One Problem Types: CWE-22 Description: SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be restricted to high privileged User. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405 - https://launchpad.support.sap.com/#/notes/3075546
CVE ID: CVE-2021-37533 State: PUBLISHED Published: 2022-12-03T00:00:00.000Z Last Updated: 2025-04-24T15:25:18.237Z Vendors: Apache Software Foundation Products: Apache Commons Net Problem Types: CWE-20 Description: Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711. Additi
version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/o6yn9r9x6s94v97264hmgol1sf48mvx7 - http://www.openwall.com/lists/oss-security/2022/12/03/1 - https://lists.debian.org/debian-lts-announce/2022/12/msg00038.html - https://www.debian.org/security/2022/dsa-5307
CVE ID: CVE-2021-37534 State: PUBLISHED Published: 2021-07-26T13:16:25 Last Updated: 2024-08-04T01:23:01.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/78edbbca64a1edc4390560cc106d0d418064355d
CVE ID: CVE-2021-37535 State: PUBLISHED Published: 2021-09-14T11:21:27 Last Updated: 2024-08-04T01:23:01.156Z Severity: CRITICAL (CVSS 10 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SAP SE Products: SAP NetWeaver Application Server Java (JMS Connector Service) Problem Types: Missing Authorization Check Description: SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405 - https://launchpad.support.sap.com/#/notes/3078609
CVE ID: CVE-2021-37538 State: PUBLISHED Published: 2021-08-24T12:45:07 Last Updated: 2024-08-04T01:23:01.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to execute arbitrary SQL commands via the day, month, or year parameter to the controllers/front/archive.php archive controller, or the id_category parameter to the controllers/front/category.php category controller. Additional Analyst Notes: - CVE Program Container: References: - https://classydevs.com/free-modules/smartblog/ - https://blog.sorcery.ie/posts/smartblog_sqli/
CVE ID: CVE-2021-37539 State: PUBLISHED Published: 2021-09-27T14:05:37 Last Updated: 2024-08-04T01:23:01.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com - https://www.manageengine.com/products/ad-manager/release-notes.html#7111
CVE ID: CVE-2021-37540 State: PUBLISHED Published: 2021-08-06T13:20:09 Last Updated: 2024-08-04T01:23:01.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment feature was used. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021/
CVE ID: CVE-2021-37541 State: PUBLISHED Published: 2021-08-06T13:21:06 Last Updated: 2024-08-04T01:23:01.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021/
CVE ID: CVE-2021-37542 State: PUBLISHED Published: 2021-08-06T13:22:54 Last Updated: 2024-08-04T01:23:01.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2020.2.3, XSS was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021/
CVE ID: CVE-2021-37543 State: PUBLISHED Published: 2021-08-06T13:21:46 Last Updated: 2024-08-04T01:23:01.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains RubyMine before 2021.1.1, code execution without user confirmation was possible for untrusted projects. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021/
CVE ID: CVE-2021-37544 State: PUBLISHED Published: 2021-08-06T13:23:39 Last Updated: 2024-08-04T01:23:01.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021/
CVE ID: CVE-2021-37545 State: PUBLISHED Published: 2021-08-06T13:24:10 Last Updated: 2024-08-04T01:23:01.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021/
CVE ID: CVE-2021-37546 State: PUBLISHED Published: 2021-08-06T13:24:39 Last Updated: 2024-08-04T01:23:01.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted properties was used. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021/
CVE ID: CVE-2021-37547 State: PUBLISHED Published: 2021-08-06T13:25:19 Last Updated: 2024-08-04T01:23:01.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021/
CVE ID: CVE-2021-37548 State: PUBLISHED Published: 2021-08-06T13:26:13 Last Updated: 2024-08-04T01:23:01.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021/
CVE ID: CVE-2021-37549 State: PUBLISHED Published: 2021-08-06T13:26:43 Last Updated: 2024-08-04T01:23:01.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021/
CVE ID: CVE-2021-37550 State: PUBLISHED Published: 2021-08-06T13:29:57 Last Updated: 2024-08-04T01:23:01.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021/
CVE ID: CVE-2021-37551 State: PUBLISHED Published: 2021-08-06T13:31:20 Last Updated: 2024-08-04T01:23:01.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021/