Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-3559 State: PUBLISHED Published: 2021-05-24T11:55:02 Last Updated: 2024-08-03T17:01:07.894Z Vendors: n/a Products: libvirt Problem Types: CWE-119 Description: A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It only affects hosts with a PCI device and driver that supports mediated devices (e.g., GRID driver). This flaw could be used by an unprivileged client with a read-only connection to crash the libvirt daemon by executing the 'nodedev-list' virsh command. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cg
m availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1962306 - https://security.netapp.com/advisory/ntap-20210706-0006/
CVE ID: CVE-2021-3560 State: PUBLISHED Published: 2022-02-16T00:00:00.000Z Last Updated: 2025-10-21T23:15:46.259Z Vendors: n/a Products: polkit Problem Types: CWE-863 Description: It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=19
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1961710 - https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/ - http://packetstormsecurity.com/files/172836/polkit-Authentication-Bypass.html - http://packetstormsecurity.com/files/172846/Facebook-Fizz-Denial-Of-Service.html
CVE ID: CVE-2021-3561 State: PUBLISHED Published: 2021-05-26T21:27:36 Last Updated: 2024-08-03T17:01:08.146Z Vendors: n/a Products: fig2dev Problem Types: CWE-119 Description: An Out of Bounds flaw was found fig2dev version 3.2.8a. A flawed bounds check in read_objects() could allow an attacker to provide a crafted malicious input causing the application to either crash or in some cases cause memory corruption. The highest threat from this vulnerability is to integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/mcj/tickets/116/ - https://sourceforge.net/p/mcj/fig2dev/ci/6827c09d2d6491cb2ae3ac7196439ff3aa791fd9/ -
ourceforge.net/p/mcj/tickets/116/ - https://sourceforge.net/p/mcj/fig2dev/ci/6827c09d2d6491cb2ae3ac7196439ff3aa791fd9/ - https://bugzilla.redhat.com/show_bug.cgi?id=1955675 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JKMOIQX6GULVSYXLYW5JQY6KJNTWV3E4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C44WSY5KAQXC3Y2NMSVXXZS3M5U5U2E6/ - https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html
CVE ID: CVE-2021-3563 State: PUBLISHED Published: 2022-08-26T15:25:41.000Z Last Updated: 2025-02-13T16:28:24.713Z Vendors: n/a Products: keystone Problem Types: CWE-863 Description: A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ossa/+bug/1901891 - https://bugzilla.redhat.com/show_bug.cgi?id=1962908 - https://access.redhat.com/security/cve/CVE-2021-3563 - https://secur
tps://bugzilla.redhat.com/show_bug.cgi?id=1962908 - https://access.redhat.com/security/cve/CVE-2021-3563 - https://security-tracker.debian.org/tracker/CVE-2021-3563 - https://lists.debian.org/debian-lts-announce/2024/01/msg00007.html
CVE ID: CVE-2021-3564 State: PUBLISHED Published: 2021-06-08T11:59:04 Last Updated: 2024-08-03T17:01:07.513Z Vendors: n/a Products: kernel Problem Types: CWE-415 Description: A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all the Linux kernel versions starting from 3.13. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2021/05/25/1 - http://www.openwall.com/lists/oss-security/2021/06/01/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1964139 - https:
- http://www.openwall.com/lists/oss-security/2021/06/01/2 - https://bugzilla.redhat.com/show_bug.cgi?id=1964139 - https://www.openwall.com/lists/oss-security/2021/05/25/1 - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
CVE ID: CVE-2021-3565 State: PUBLISHED Published: 2021-06-04T11:39:40 Last Updated: 2024-08-03T17:01:07.389Z Vendors: n/a Products: tpm2-tools Problem Types: CWE-665 Description: A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1964427 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ESY6
g.cgi?id=1964427 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ESY6HRYUKR5ZG2K5QAJQC5S6HMKZMFK7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XK5M7I66PBXSN663TSLAZ3V6TWWFCV7C/
CVE ID: CVE-2021-3566 State: PUBLISHED Published: 2021-08-05T20:21:37 Last Updated: 2024-08-03T17:01:08.129Z Vendors: n/a Products: ffmpeg Problem Types: CWE-200 Description: Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitimate "ffconcat" file that references an image, followed by a file the triggers the tty demuxer, the contents of the second file will be copied into the output file verbatim (as long as the `-vcodec copy` option is passed to ffmpeg). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/3bce9e9b3ea35c54bacccc793d7da99ea5157532#diff-74f6b92a0541378ad15de9c
erences: - https://github.com/FFmpeg/FFmpeg/commit/3bce9e9b3ea35c54bacccc793d7da99ea5157532#diff-74f6b92a0541378ad15de9c29c0a2b0c69881ad9ffc71abe568b88b535e00a7f - https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html
CVE ID: CVE-2021-3567 State: PUBLISHED Published: 2022-03-25T18:02:48 Last Updated: 2024-08-03T17:01:07.891Z Vendors: n/a Products: caribou Problem Types: CWE-20 Description: A flaw was found in Caribou due to a regression of CVE-2020-25712 fix. An attacker could use this flaw to bypass screen-locking applications that leverage Caribou as an input mechanism. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1962836
CVE ID: CVE-2021-3569 State: PUBLISHED Published: 2021-06-03T11:05:49 Last Updated: 2024-08-03T17:01:07.692Z Vendors: n/a Products: libtpms Problem Types: CWE-120 Description: A stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while decrypting data using RSA. This flaw could result in a SIGBUS (bad memory access) and termination of swtpm. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1964358
CVE ID: CVE-2021-3570 State: PUBLISHED Published: 2021-07-09T10:33:01 Last Updated: 2024-08-03T17:01:07.495Z Vendors: n/a Products: linuxptp Problem Types: CWE-119 Description: A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1. Additional Analyst Notes: - CVE Program
2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1966240 - https://www.debian.org/security/2021/dsa-4938 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUBKTRCMJ6VKS7DIBSZQB4ATSKVCJYXJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RHRUVSDP673LXJ5HGIPQPWPIYUPWYQA7/ - https://lists.debian.org/debian-lts-announce/2021/07/msg00025.html
CVE ID: CVE-2021-3571 State: PUBLISHED Published: 2021-07-09T10:33:09 Last Updated: 2024-08-03T17:01:08.291Z Vendors: n/a Products: linuxptp Problem Types: CWE-119 Description: A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. This flaw affects linuxptp versions before 3.1.1 and before 2.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=19662
.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1966241 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUBKTRCMJ6VKS7DIBSZQB4ATSKVCJYXJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RHRUVSDP673LXJ5HGIPQPWPIYUPWYQA7/
CVE ID: CVE-2021-3572 State: PUBLISHED Published: 2021-11-10T17:55:47 Last Updated: 2024-08-03T17:01:08.109Z Vendors: n/a Products: python-pip Problem Types: CWE-20 Description: A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1962856 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.h
d=1962856 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2021-3573 State: PUBLISHED Published: 2021-08-13T00:00:00 Last Updated: 2024-08-03T17:01:07.293Z Vendors: n/a Products: kernel Problem Types: CWE-362 Description: A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blacklist_del(), hci_get_conn_info(), hci_get_auth_info(). A privileged local user could use this flaw to crash the system or escalate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5. Additional Analyst No
ate their privileges on the system. This flaw affects the Linux kernel versions prior to 5.13-rc5. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1966578 - https://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git/commit/?id=e305509e678b3a4af2b3cfd410f409f7cdaabb52 - https://www.openwall.com/lists/oss-security/2021/06/08/2 - http://www.openwall.com/lists/oss-security/2023/07/02/1
CVE ID: CVE-2021-3574 State: PUBLISHED Published: 2022-08-26T00:00:00 Last Updated: 2024-08-03T17:01:08.128Z Vendors: n/a Products: ImageMagick Problem Types: CWE-401 Description: A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/3540 - https://github.com/ImageMagick/ImageMagick/commit/c6ad94fbb7b280f39c2fbbdc1c140e51b1b466e9 - https://github.com/ImageMagick/ImageMagick6/commit/cd7f9fb7751b0d59d5a74b12d971155caad5a792 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedor
/cd7f9fb7751b0d59d5a74b12d971155caad5a792 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNVDNM4ZEIYPT3SLZHPYN7OG4CZLEXZJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5C6XAGUFPUF4SNVCI2T4OJK3EFIENBGP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4Q6MJAMGHGB552KSFTQKXEKJVQNM4MCT/ - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2021-3575 State: PUBLISHED Published: 2022-03-04T17:20:40.000Z Last Updated: 2025-11-03T19:25:50.833Z Vendors: n/a Products: OpenJPEG Problem Types: CWE-787 Description: A heap-based buffer overflow was found in openjpeg in color.c:379:42 in sycc420_to_rgb when decompressing a crafted .j2k file. An attacker could use this to execute arbitrary code with the permissions of the application compiled against openjpeg. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fe
rg/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/ - https://bugzilla.redhat.com/show_bug.cgi?id=1957616 - https://github.com/uclouvain/openjpeg/issues/1347 - https://ubuntu.com/security/CVE-2021-3575
CVE ID: CVE-2021-3576 State: PUBLISHED Published: 2021-10-28T13:50:23.098032Z Last Updated: 2024-09-17T03:14:27.882Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Bitdefender Products: Endpoint Security Tools, Total Security Problem Types: CWE-250 Description: Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System. Impersonation enables the server thread to perform actions on behalf of the client but within the limits of the client's security context. This issue affects: Bitdefender Endpoint Security Tools versions prior to 7.2.1.65. Bitdefender Tot
's security context. This issue affects: Bitdefender Endpoint Security Tools versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 25.0.26. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/privilege-escalation-via-seimpersonateprivilege-in-bitdefender-endpoint-security-tools-va-9848/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1276/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1376/
CVE ID: CVE-2021-3577 State: PUBLISHED Published: 2021-11-12T22:05:31 Last Updated: 2024-08-03T17:01:07.325Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Motorola Products: Binatone Hubble Cameras Problem Types: CWE-78 Description: An unauthenticated remote code execution vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker on the same network unauthorized access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://binatoneglobal.com/security-advisory/
CVE ID: CVE-2021-3578 State: PUBLISHED Published: 2022-02-16T18:35:33 Last Updated: 2024-08-03T17:01:07.795Z Vendors: n/a Products: isync Problem Types: CWE-704 Description: A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arbitrary integer value past the end of a heap-allocated structure by issuing an unexpected APPENDUID response. This could be plausibly exploited for remote code execution on the client. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2021/06/07/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap
all.com/lists/oss-security/2021/06/07/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U75UFEWRAZYKVL5NHMPBUOLWN3WXTOEI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RPIDLIJKNRJHUVBCL7QGAPAAVPIHQGXK/ - https://bugzilla.redhat.com/show_bug.cgi?id=1961710 - https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/ - https://bugzilla.redhat.com/show_bug.cgi?id=1967397 - https://www.openwall.com/lists/oss-security/2021/06/07/1 - https://lists.debian.org/debian-lts-announce/2022/07/msg00001.html - https://security.gentoo.org/glsa/202208-15
CVE ID: CVE-2021-3579 State: PUBLISHED Published: 2021-10-28T13:50:14.759316Z Last Updated: 2024-09-16T23:50:57.228Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Bitdefender Products: ENdpoint Security Tools for Windows, Total Security Problem Types: CWE-276 Description: Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7
tdefender Endpoint Security Tools for Windows versions prior to 7.2.1.65. Bitdefender Total Security versions prior to 7.2.1.65. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/incorrect-default-permissions-vulnerability-in-bdservicehost-exe-and-vulnerability-scan-exe-va-9848/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1277/
CVE ID: CVE-2021-3580 State: PUBLISHED Published: 2021-08-05T00:00:00 Last Updated: 2024-11-19T14:24:23.265Z Vendors: n/a Products: nettle Problem Types: CWE-20 Description: A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated ciphertext leading to application crash and denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1967983 - https://lists.debian.org/debian-lts-announce/2021/09/msg00008.html - https://security.netapp.com/advisory/ntap-20211104-0006/ - https://security.gentoo.org/glsa/2
ce/2021/09/msg00008.html - https://security.netapp.com/advisory/ntap-20211104-0006/ - https://security.gentoo.org/glsa/202401-24
CVE ID: CVE-2021-3581 State: PUBLISHED Published: 2021-10-05T20:50:18.826412Z Last Updated: 2024-09-16T19:05:46.027Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-805 Description: Buffer Access with Incorrect Length Value in zephyr. Zephyr versions >= >=2.5.0 contain Buffer Access with Incorrect Length Value (CWE-805). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5 Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8q65-5gqf-fmw5
CVE ID: CVE-2021-3582 State: PUBLISHED Published: 2022-03-25T18:02:49 Last Updated: 2024-08-03T17:01:07.405Z Vendors: n/a Products: QEMU Problem Types: CWE-119 Description: A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMA_CMD_CREATE_MR" command due to improper memory remapping (mremap). This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1966266 - https://security.netapp.com/advisory/ntap-20220429-0003/ - https://security
ugzilla.redhat.com/show_bug.cgi?id=1966266 - https://security.netapp.com/advisory/ntap-20220429-0003/ - https://security.gentoo.org/glsa/202208-27 - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2021-3583 State: PUBLISHED Published: 2021-09-22T00:00:00 Last Updated: 2024-08-03T17:01:07.381Z Vendors: n/a Products: ansible Problem Types: CWE-20 Description: A flaw was found in Ansible, where a user's controller is vulnerable to template injection. This issue can occur through facts used in the template if the user is trying to put templates in multi-line YAML strings and the facts being handled do not routinely include special template characters. This flaw allows attackers to perform command injection, which discloses sensitive information. The highest threat from this vulnerability is to confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: Re
hreat from this vulnerability is to confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1968412 - https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html
CVE ID: CVE-2021-3584 State: PUBLISHED Published: 2021-12-23T19:48:46 Last Updated: 2024-08-03T17:01:07.414Z Vendors: n/a Products: foreman Problem Types: CWE-78 Description: A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Sendmail configuration options to overwrite the defaults and perform command injection. The highest threat from this vulnerability is to confidentiality, integrity and availability of system. Fixed releases are 2.4.1, 2.5.1, 3.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://projects.theforeman.org/issues/32753 - https://github.com/theforeman/foreman/pull/8599 - https://bugzilla
ces: - https://projects.theforeman.org/issues/32753 - https://github.com/theforeman/foreman/pull/8599 - https://bugzilla.redhat.com/show_bug.cgi?id=1968439
CVE ID: CVE-2021-3585 State: PUBLISHED Published: 2022-08-26T15:25:41 Last Updated: 2024-08-03T17:01:07.616Z Vendors: n/a Products: openstack/tripleo-heat-templates. Problem Types: CWE-200 Description: A flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs during OSP13 deployment with subscription-manager. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1961709 - https://bugzilla.redhat.com/show_bug.cgi?id=1968247 - https://bugs.launchpad.net/tripleo/+bug/1931132 - https://review.opendev.org/c/openstack/tripleo-heat-templates/+/791988 - https://access.redhat.com/security/cve/CVE-2021-3585