Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-25096 State: PUBLISHED Published: 2022-02-07T15:47:20 Last Updated: 2024-08-03T19:56:10.854Z Vendors: Unknown Products: IP2Location Country Blocker Problem Types: CWE-639 Description: The IP2Location Country Blocker WordPress plugin before 2.26.5 bans can be bypassed by using a specific parameter in the URL Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/2652469 - https://wpscan.com/vulnerability/e6dd140e-0c9d-41dc-821e-4910a13122c1
CVE ID: CVE-2021-25097 State: PUBLISHED Published: 2022-02-01T00:00:00 Last Updated: 2024-08-03T19:56:11.072Z Vendors: Unknown Products: LabTools Problem Types: CWE-352, CWE-863 Description: The LabTools WordPress plugin through 1.0 does not have proper authorisation and CSRF check in place when deleting publications, allowing any authenticated users, such as subscriber to delete arbitrary publication Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/67f5beb8-2cb0-4b43-87c7-dead9c005f9c
CVE ID: CVE-2021-25098 State: PUBLISHED Published: 2022-03-07T08:16:20 Last Updated: 2024-08-03T19:56:10.667Z Vendors: Unknown Products: Pricing Tables WordPress Plugin – Easy Pricing Tables Problem Types: CWE-352 Description: The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trash Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/960a634d-a88a-4d90-9ac3-7d24b1fe07fe
CVE ID: CVE-2021-25099 State: PUBLISHED Published: 2022-02-21T10:45:53 Last Updated: 2024-08-03T19:56:10.761Z Vendors: Unknown Products: GiveWP – Donation Plugin and Fundraising Platform Problem Types: CWE-79 Description: The GiveWP WordPress plugin before 2.17.3 does not sanitise and escape the form_id parameter before outputting it back in the response of an unauthenticated request via the give_checkout_login AJAX action, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/87a64b27-23a3-40f5-a3d8-0650975fee6f - https://plugins.trac.wordpress.org/changeset/2659032
CVE ID: CVE-2021-25100 State: PUBLISHED Published: 2022-02-21T10:45:54 Last Updated: 2024-08-03T19:56:09.986Z Vendors: Unknown Products: GiveWP – Donation Plugin and Fundraising Platform Problem Types: CWE-79 Description: The GiveWP WordPress plugin before 2.17.3 does not escape the s parameter before outputting it back in an attribute in the Donation Forms dashboard, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/2659032 - https://wpscan.com/vulnerability/fe2c02bf-207c-43da-98bd-4c85d235de8b
CVE ID: CVE-2021-25101 State: PUBLISHED Published: 2022-02-21T10:45:56 Last Updated: 2024-08-03T19:56:10.539Z Vendors: Unknown Products: Anti-Malware Security and Brute-Force Firewall Problem Types: CWE-79 Description: The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.94 does not sanitise and escape the POST data before outputting it back in attributes of an admin page, leading to a Reflected Cross-Site scripting. Due to the presence of specific parameter value, available to admin users, this can only be exploited by an admin against another admin user. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5fd0380c-0d1
min user. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/5fd0380c-0d1d-4380-96f0-a07be5a61eba
CVE ID: CVE-2021-25102 State: PUBLISHED Published: 2022-05-02T16:05:32 Last Updated: 2024-08-03T19:56:10.670Z Vendors: Unknown Products: All In One WP Security & Firewall Problem Types: CWE-79 Description: The All In One WP Security & Firewall WordPress plugin before 4.4.11 does not validate, sanitise and escape the redirect_to parameter before using it to redirect user, either via a Location header, or meta url attribute, when the Rename Login Page is active, which could lead to an Arbitrary Redirect as well as Cross-Site Scripting issue. Exploitation of this issue requires the Login Page URL value to be known, which should be hard to guess, reducing the risk Additional Analyst Notes: - CVE
s the Login Page URL value to be known, which should be hard to guess, reducing the risk Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9b8a00a6-622b-4309-bbbf-fe2c7fc9f8b6
CVE ID: CVE-2021-25103 State: PUBLISHED Published: 2022-02-07T15:47:21 Last Updated: 2024-08-03T19:56:10.614Z Vendors: Unknown Products: Translate WordPress with GTranslate Problem Types: CWE-79 Description: The Translate WordPress with GTranslate WordPress plugin before 2.9.7 does not sanitise and escape the body parameter in the url_addon/gtranslate-email.php file before outputting it back in the page, leading to a Reflected Cross-Site Scripting issue. Note: exploitation of the issue requires knowledge of the NONCE_SALT and NONCE_KEY Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/90067336-c039-4cbe-aa9f-5eab5d1e1c3d
CVE ID: CVE-2021-25104 State: PUBLISHED Published: 2022-06-20T10:25:41 Last Updated: 2024-08-03T19:56:10.562Z Vendors: Unknown Products: Ocean Extra Problem Types: CWE-79 Description: The Ocean Extra WordPress plugin before 1.9.5 does not escape generated links which are then used when the OceanWP is active, leading to a Reflected Cross-Site Scripting issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2ee6f1d8-3803-42f6-9193-3dd8f416b558
CVE ID: CVE-2021-25105 State: PUBLISHED Published: 2022-02-07T15:47:22 Last Updated: 2024-08-03T19:56:10.637Z Vendors: Unknown Products: Ivory Search – WordPress Search Plugin Problem Types: CWE-79 Description: The Ivory Search WordPress plugin before 5.4.1 does not escape some of the Form settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/a9ab9e84-7f5e-4e7c-8647-114d9e02e59f
CVE ID: CVE-2021-25106 State: PUBLISHED Published: 2022-02-07T15:47:23 Last Updated: 2024-08-03T19:56:09.976Z Vendors: Unknown Products: Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages Problem Types: CWE-79 Description: The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages WordPress plugin before 2.7.1 does not check for authorisation and has a flawed CSRF logic when saving its settings, allowing any authenticated users, such as subscriber, to update them. Furthermore, due to the lack of sanitisation and escaping, it could lead to Stored Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: Referenc
n and escaping, it could lead to Stored Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/47df802d-5200-484b-959c-9f569edf992e
CVE ID: CVE-2021-25107 State: PUBLISHED Published: 2022-02-14T09:20:51 Last Updated: 2024-08-03T19:56:10.990Z Vendors: Unknown Products: Form Store to DB Problem Types: CWE-79 Description: The Form Store to DB WordPress plugin before 1.1.1 does not sanitise and escape parameter keys before outputting it back in the created entry, allowing unauthenticated attacker to perform Cross-Site Scripting attacks against admin Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/3999a1b9-df85-43b1-b412-dc8a6f71cc5d - https://plugins.trac.wordpress.org/changeset/2657583
CVE ID: CVE-2021-25108 State: PUBLISHED Published: 2022-02-07T15:47:24 Last Updated: 2024-08-03T19:56:10.877Z Vendors: Unknown Products: IP2Location Country Blocker Problem Types: CWE-352 Description: The IP2Location Country Blocker WordPress plugin before 2.26.6 does not have CSRF check in the ip2location_country_blocker_save_rules AJAX action, allowing attackers to make a logged in admin block arbitrary country, or block all of them at once, preventing users from accessing the frontend. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/9d416ca3-bd02-4fcf-b3b8-f2f2280d02d2 - https://plugins.trac.wordpress.org/changeset/2653459
CVE ID: CVE-2021-25109 State: PUBLISHED Published: 2022-02-14T09:20:52 Last Updated: 2024-08-03T19:56:10.564Z Vendors: Unknown Products: Futurio Extra Problem Types: CWE-89 Description: The Futurio Extra WordPress plugin before 1.6.3 is affected by a SQL Injection vulnerability that could be used by high privilege users to extract data from the database as well as used to perform Cross-Site Scripting (XSS) against logged in admins by making send open a malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/36261af9-3b34-4563-af3c-c9e54ae2d581
CVE ID: CVE-2021-25110 State: PUBLISHED Published: 2022-02-14T09:20:53 Last Updated: 2024-08-03T19:56:10.540Z Vendors: Unknown Products: Futurio Extra Problem Types: CWE-200 Description: The Futurio Extra WordPress plugin before 1.6.3 allows any logged in user, such as subscriber, to extract any other user's email address. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/b655fc21-47a1-4786-8911-d78ab823c153
CVE ID: CVE-2021-25111 State: PUBLISHED Published: 2022-04-25T15:50:47 Last Updated: 2024-08-03T19:56:10.419Z Vendors: Unknown Products: English WordPress Admin Problem Types: CWE-601 Description: The English WordPress Admin WordPress plugin before 1.5.2 does not validate the admin_custom_language_return_url before redirecting users o it, leading to an open redirect issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/af548fab-96c2-4129-b609-e24aad0b1fc4
CVE ID: CVE-2021-25112 State: PUBLISHED Published: 2022-02-28T09:06:36 Last Updated: 2024-08-03T19:56:09.987Z Vendors: Unknown Products: WHMCS Bridge Problem Types: CWE-79 Description: The WHMCS Bridge WordPress plugin before 6.4b does not sanitise and escape the error parameter before outputting it back in admin dashboard, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/4aae2dd9-8d51-4633-91bc-ddb53ca3471c - https://plugins.trac.wordpress.org/changeset/2659751
CVE ID: CVE-2021-25113 State: PUBLISHED Published: 2022-04-04T15:35:39 Last Updated: 2024-08-03T19:56:10.552Z Vendors: Unknown Products: Dropdown Menu Widget Problem Types: CWE-79 Description: The Dropdown Menu Widget WordPress plugin through 1.9.7 does not have authorisation and CSRF checks when saving its settings, allowing low privilege users such as subscriber to update them. Due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7a5078db-e0d4-4076-9de9-5401c3ca0d65
CVE ID: CVE-2021-25114 State: PUBLISHED Published: 2022-02-07T15:47:24 Last Updated: 2024-08-03T19:56:10.572Z Vendors: Unknown Products: Paid Memberships Pro Problem Types: CWE-89 Description: The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (available to unauthenticated users) before using it in a SQL statement, leading to a SQL injection Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/6c25a5f0-a137-4ea5-9422-8ae393d7b76b - https://www.paidmembershipspro.com/pmpro-update-2-6-7-security-release/
CVE ID: CVE-2021-25115 State: PUBLISHED Published: 2022-02-14T09:20:55 Last Updated: 2024-08-03T19:56:10.439Z Vendors: Unknown Products: WP Photo Album Plus Problem Types: CWE-79 Description: The WP Photo Album Plus WordPress plugin before 8.0.10 was vulnerable to Stored Cross-Site Scripting (XSS). Error log content was handled improperly, therefore any user, even unauthenticated, could cause arbitrary javascript to be executed in the admin panel. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/dbc18c2c-7547-44fc-8a41-c819757e47a7 - https://plugins.trac.wordpress.org/changeset/2655859/wp-photo-album-plus
CVE ID: CVE-2021-25116 State: PUBLISHED Published: 2022-06-13T12:41:23 Last Updated: 2024-08-03T19:56:10.649Z Vendors: Unknown Products: Enqueue Anything Problem Types: CWE-862 Missing Authorization, CWE-352 Cross-Site Request Forgery (CSRF) Description: The Enqueue Anything WordPress plugin through 1.0.1 does not have authorisation and CSRF checks in the remove_asset AJAX action, and does not ensure that the item to be deleted is actually an asset. As a result, low privilege users such as subscriber could delete arbitrary assets, as well as put arbitrary posts in the trash. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/140a15b6-12c8-4f03-a
. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/140a15b6-12c8-4f03-a877-3876db866852
CVE ID: CVE-2021-25117 State: PUBLISHED Published: 2024-01-16T15:49:22.142Z Last Updated: 2025-06-17T14:09:11.308Z Vendors: Unknown Products: WP-PostRatings Problem Types: CWE-79 Cross-Site Scripting (XSS), CWE-352 Cross-Site Request Forgery (CSRF) Description: The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratings_image parameter from its options page (wp-admin/admin.php?page=wp-postratings/postratings-options.php). Even though the page is only accessible to administrators, and protected against CSRF attacks, the issue is still exploitable when the unfiltered_html capability is disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
the unfiltered_html capability is disabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d2d9a789-edae-4ae1-92af-e6132db7efcd/
CVE ID: CVE-2021-25118 State: PUBLISHED Published: 2022-02-28T09:06:38 Last Updated: 2024-08-03T19:56:10.582Z Vendors: Unknown Products: Yoast SEO Problem Types: CWE-200 Description: The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the full internal path of featured images in posts via the wp/v2/posts REST endpoints which could help an attacker identify other vulnerabilities or help during the exploitation of other identified vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/2c3f9038-632d-40ef-a099-6ea202efb550 - https://plugins.trac.wordpress.org/changeset/2608691
CVE ID: CVE-2021-25119 State: PUBLISHED Published: 2022-05-16T14:30:27 Last Updated: 2024-08-03T19:56:09.988Z Vendors: Unknown Products: AGIL(Automatic Grid Image Listing) Problem Types: CWE-434 Description: The AGIL WordPress plugin through 1.0 accepts all zip files and automatically extracts the zip file without validating the extracted file type. Allowing high privilege users such as admin to upload an arbitrary file like PHP, leading to RCE Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/47235989-d9f1-48a5-9799-fdef0889bf8a
CVE ID: CVE-2021-25120 State: PUBLISHED Published: 2022-04-18T17:10:26 Last Updated: 2024-08-03T19:56:10.563Z Vendors: Unknown Products: Easy Social Feed Pro, Easy Social Feed – Social Photos Gallery – Post Feed – Like Box Problem Types: CWE-79 Description: The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise some of their parameters used via AJAX actions before outputting them back in the response, leading to Reflected Cross-Site Scripting issues Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/0ad020b5-0d16-4521-8ea7-39cd206ab9f6
CVE ID: CVE-2021-25121 State: PUBLISHED Published: 2022-06-20T10:25:43 Last Updated: 2024-08-03T19:56:09.993Z Vendors: Unknown Products: Rating by BestWebSoft Problem Types: CWE-191 Description: The Rating by BestWebSoft WordPress plugin before 1.6 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service on the post/page when a user submit such rating Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/efb1ddef-2123-416c-a932-856d41ed836d
CVE ID: CVE-2021-25122 State: PUBLISHED Published: 2021-03-01T12:00:20.000Z Last Updated: 2025-02-13T16:27:48.175Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: CWE-200 Description: When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could both see the results of user A's request. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cannounce.tomcat.apache
tps://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cannounce.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cannounce.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r7b95bc24860336050
ef31e9fd6d7c981fcc4ccfc3bc272fc9%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cannounce.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/03/01/1 - https://lists.apache.org/thread.html/rcd90bf36b1877e1310b87ecd14ed7bbb15da52b297efd9f0e7253a3b%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rd0463f9a5cbc02a485404c4b990f0da452e5ac5c237808edba11c947%40%3Cusers.tomcat.apache.org%3E - https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html - https://www.debian.org/security/2021/dsa-4891 - https://www.oracle.com//security-alerts/cpujul2021.html - https://security.ne
://www.debian.org/security/2021/dsa-4891 - https://www.oracle.com//security-alerts/cpujul2021.html - https://security.netapp.com/advisory/ntap-20210409-0002/ - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.gentoo.org/glsa/202208-34
CVE ID: CVE-2021-25123 State: PUBLISHED Published: 2021-01-29T12:30:08 Last Updated: 2024-08-03T19:56:10.273Z Vendors: n/a Products: HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server Problem Types: local spx_restservice addlicense_func function buffer overflow Description: The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice addlicense_func function. Ad
E Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice addlicense_func function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us
CVE ID: CVE-2021-25124 State: PUBLISHED Published: 2021-01-29T18:06:42 Last Updated: 2024-08-03T19:56:10.252Z Vendors: n/a Products: HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server Problem Types: local spx_restservice deletevideo_func function path traversal Description: The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice deletevideo_func function path traversal vulner
E Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice deletevideo_func function path traversal vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us
CVE ID: CVE-2021-25125 State: PUBLISHED Published: 2021-01-29T18:10:21 Last Updated: 2024-08-03T19:56:10.671Z Vendors: n/a Products: HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server Problem Types: local spx_restservice delsolrecordedvideo_func function path traversal Description: The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice delsolrecordedvideo_func function path
rver; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice delsolrecordedvideo_func function path traversal vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us
CVE ID: CVE-2021-25126 State: PUBLISHED Published: 2021-01-29T18:08:28 Last Updated: 2024-08-03T19:56:10.545Z Vendors: n/a Products: HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server Problem Types: local spx_restservice downloadkvmjnlp_func function buffer overflow Description: The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice downloadkvmjnlp_func fu
r; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice downloadkvmjnlp_func function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us
CVE ID: CVE-2021-25127 State: PUBLISHED Published: 2021-01-29T18:33:16 Last Updated: 2024-08-03T19:56:10.547Z Vendors: n/a Products: HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server Problem Types: local spx_restservice generatesslcertificate_func function buffer overflow Description: The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice generatesslcerti
0 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice generatesslcertificate_func function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us