Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-3355 State: PUBLISHED Published: 2021-02-24T15:00:48 Last Updated: 2024-08-03T16:53:17.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/SensitiveWords. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eddy8/LightCMS/issues/18 - http://packetstormsecurity.com/files/161562/LightCMS-1.3.4-Cross-Site-Scripting.html - https://gist.github.com/Peithon/1c628ded0c4fc96c6331c3cce1d0c69b - https://www.exploit-db.com/exploits/49598
CVE ID: CVE-2021-3370 State: PUBLISHED Published: 2021-12-08T03:42:23 Last Updated: 2024-08-03T16:53:17.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/congcong9184-123/congcong9184-123.github.io/blob/master/douphp_xss.docx
CVE ID: CVE-2021-3374 State: PUBLISHED Published: 2021-04-02T18:13:44 Last Updated: 2024-08-03T16:53:17.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/colemanjp/shinyserver-directory-traversal-source-code-leak - https://blog.rstudio.com/2021/01/13/shiny-server-1-5-16-update/
CVE ID: CVE-2021-3375 State: PUBLISHED Published: 2021-02-15T17:39:44 Last Updated: 2024-08-03T16:53:17.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: ActivePresenter 6.1.6 is affected by a memory corruption vulnerability that may result in a denial of service (DoS) or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://code610.blogspot.com/2021/01/crashing-activepresenter.html
CVE ID: CVE-2021-3376 State: PUBLISHED Published: 2021-12-14T13:16:55 Last Updated: 2024-08-03T16:53:17.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cuppa CMS Versions Before 31 Jan 2021 allows authenticated attackers to gain escalated privileges via a crafted POST request using the user_group_id_field parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CuppaCMS/CuppaCMS/issues/12
CVE ID: CVE-2021-3377 State: PUBLISHED Published: 2021-03-05T19:03:58.000Z Last Updated: 2025-11-03T21:44:49.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: The npm package ansi_up converts ANSI escape codes into HTML. In ansi_up v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting (XSS) vulnerability. This issue is fixed in v5.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://doyensec.com/resources/Doyensec_Advisory_ansi_up4_XSS.pdf - https://github.com/drudru/ansi_up/commit/c8c726ed1db979bae4f257b7fa41775155ba2e27
CVE ID: CVE-2021-3378 State: PUBLISHED Published: 2021-02-01T22:08:33 Last Updated: 2024-08-03T16:53:17.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/erberkan/fortilogger_arbitrary_fileupload - http://packetstormsecurity.com/files/161601/FortiLogger-4.4.2.2-Arbitrary-File-Upload.html - http://packetstormsecurity.com/files/161974/FortiLogger-Arbitrary-File-Upload.html
CVE ID: CVE-2021-3380 State: PUBLISHED Published: 2021-11-10T16:30:03 Last Updated: 2024-08-03T16:53:17.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure direct object reference (IDOR) vulnerability in ICREM H8 SSRMS allows attackers to disclose sensitive information via the Print Invoice Functionality. Additional Analyst Notes: - CVE Program Container: References: - http://height8.com - http://icrem.com - http://www.height8tech.com/carrier-grade-OSS-BSS.php - https://www.exploit-db.com/exploits/49508
CVE ID: CVE-2021-3382 State: PUBLISHED Published: 2021-02-05T15:15:04 Last Updated: 2024-08-03T16:53:17.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service (crash) via vectors related to a file path. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/go-gitea/gitea/pull/14390
CVE ID: CVE-2021-3384 State: PUBLISHED Published: 2021-03-02T17:08:54 Last Updated: 2024-08-03T16:53:17.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Stormshield Network Security could allow an attacker to trigger a protection related to ARP/NDP tables management, which would temporarily prevent the system to contact new hosts via IPv4 or IPv6. This affects versions 2.0.0 to 2.7.7, 2.8.0 to 2.16.0, 3.0.0 to 3.7.16, 3.8.0 to 3.11.4, and 4.0.0 to 4.1.5. Fixed in versions 2.7.8, 3.7.17, 3.11.5, and 4.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu/2020-049/
CVE ID: CVE-2021-3391 State: PUBLISHED Published: 2021-03-29T19:37:09 Last Updated: 2024-08-03T16:53:17.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: MobileIron Mobile@Work through 2021-03-22 allows attackers to distinguish among valid, disabled, and nonexistent user accounts by observing the number of failed login attempts needed to produce a Lockout error message Additional Analyst Notes: - CVE Program Container: References: - https://www.mobileiron.com/en/blog/mobileiron-security-updates-available - https://www.optiv.com/explore-optiv-insights/source-zero/mobileiron-mdm-contains-static-key-allowing-account-enumeration - https://github.com/optiv/rustyIron
CVE ID: CVE-2021-3392 State: PUBLISHED Published: 2021-03-23T19:07:17 Last Updated: 2024-08-03T16:53:17.469Z Vendors: n/a Products: QEMU Problem Types: CWE-416 Description: A use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while processing SCSI I/O requests in the case of an error mptsas_free_request() that does not dequeue the request object 'req' from a pending requests queue. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. Versions between 2.10.0 and 5.2.0 are potentially affected. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1
affected. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1924042 - https://bugs.launchpad.net/qemu/+bug/1914236 - https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html - https://security.netapp.com/advisory/ntap-20210507-0001/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2021-3393 State: PUBLISHED Published: 2021-04-01T13:46:02 Last Updated: 2024-08-03T16:53:17.479Z Vendors: n/a Products: postgresql Problem Types: CWE-209 Description: An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=192
t read. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1924005 - https://security.netapp.com/advisory/ntap-20210507-0006/ - https://security.gentoo.org/glsa/202105-32
CVE ID: CVE-2021-3394 State: PUBLISHED Published: 2021-02-09T14:51:09 Last Updated: 2024-08-03T16:53:17.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a malicious user for a local privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/161334/Millewin-13.39.028-Unquoted-Service-Path-Insecure-Permissions.html - https://www.exploit-db.com/exploits/49530
CVE ID: CVE-2021-3395 State: PUBLISHED Published: 2021-02-02T20:43:34 Last Updated: 2024-08-03T16:53:17.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jet-pentest/CVE-2021-3395/ - https://pryaniky.com/en/home/
CVE ID: CVE-2021-3396 State: PUBLISHED Published: 2021-02-17T20:13:54 Last Updated: 2024-08-03T16:53:17.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <1.5.3 has Incorrect Access Control, which allows local and remote code execution using JEXL expressions. Additional Analyst Notes: - CVE Program Container: References: - https://www.opennms.com - https://www.opennms.com/en/blog/2021-02-16-cve-2021-3396-full-security-disclosure/
CVE ID: CVE-2021-3398 State: PUBLISHED Published: 2022-02-10T16:13:24 Last Updated: 2024-08-03T16:53:17.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component. Additional Analyst Notes: - CVE Program Container: References: - https://www.stormshield.com/category/alert/ - https://advisories.stormshield.eu/2021-001/
CVE ID: CVE-2021-3401 State: PUBLISHED Published: 2021-02-04T04:47:30 Last Updated: 2024-08-03T16:53:17.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer states "I believe that this vulnerability cannot actually be exploited." Additional Analyst Notes: - CVE Program Container: References: - https://achow101.com/2021/02/0.18-uri-vuln - https://github.com/bitcoin/bitcoin/pull/16578
CVE ID: CVE-2021-3402 State: PUBLISHED Published: 2021-05-14T20:05:25 Last Updated: 2024-08-03T16:53:17.490Z Vendors: n/a Products: libyara Problem Types: CWE-190 Description: An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4 Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXM224OLGI6KAOROLDPPGGCZ2OQVQ6HH/ - https://lists.fedoraproject.org/archives/list/package-ann
.fedoraproject.org/message/XXM224OLGI6KAOROLDPPGGCZ2OQVQ6HH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FKNXSH5ERG6NELTXCYVJLUPJJJ2TNEBD/ - https://bugzilla.redhat.com/show_bug.cgi?id=1930175 - https://www.openwall.com/lists/oss-security/2021/01/29/2 - https://www.x41-dsec.de/lab/advisories/x41-2021-001-yara/
CVE ID: CVE-2021-3403 State: PUBLISHED Published: 2021-03-04T21:10:50 Last Updated: 2024-08-03T16:53:17.578Z Vendors: n/a Products: ytnef Problem Types: CWE-416 Description: In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1926967 - https://github.com/Yeraze/ytnef/issues/85
CVE ID: CVE-2021-3404 State: PUBLISHED Published: 2021-03-04T21:10:57 Last Updated: 2024-08-03T16:53:17.530Z Vendors: n/a Products: ytnef Problem Types: CWE-119 Description: In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1926965 - https://github.com/Yeraze/ytnef/issues/86
CVE ID: CVE-2021-3405 State: PUBLISHED Published: 2021-02-23T19:05:27 Last Updated: 2024-08-03T16:53:17.531Z Vendors: n/a Products: libebml Problem Types: CWE-787 Description: A flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData in libebml. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Matroska-Org/libebml/issues/74 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YY7R2JZRO5I6WS62KTJFTZGKYELVFTVB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JNHQI6MDOECJ2HT5GC
B/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JNHQI6MDOECJ2HT5GCLEX2DMJFEOWPW7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHIIMWZKHHELFF4NRDMOOCS3HKK3K4DF/ - https://lists.debian.org/debian-lts-announce/2021/04/msg00016.html - https://security.gentoo.org/glsa/202208-21
CVE ID: CVE-2021-3406 State: PUBLISHED Published: 2021-02-25T19:15:57 Last Updated: 2024-08-03T16:53:17.575Z Vendors: n/a Products: keylime Problem Types: CWE-347 Description: A flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates the cryptographic chain of trust from the Endorsement Key certificate to agent attestations. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1932469 - https://github.com/keylime/keylime/security/advisories/GHSA-78f8-6c68-375m - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YAWKEF2LVXUME266T6RNRVBGAD375QA
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YAWKEF2LVXUME266T6RNRVBGAD375QAT/
CVE ID: CVE-2021-3407 State: PUBLISHED Published: 2021-02-23T22:04:15.000Z Last Updated: 2025-02-13T16:28:22.945Z Vendors: n/a Products: mupdf Problem Types: CWE-415 Description: A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - http://git.ghostscript.com/?p=mupdf.git%3Bh=cee7cefc610d42fd383b3c80c12cbc675443176a - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCADE3VSPWCGTE5BV4KL273R5VK3GDKM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists
t.org/message/LCADE3VSPWCGTE5BV4KL273R5VK3GDKM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M44PNYCBL33OD7GC75XNE6CDS4VSGVWO/ - https://lists.debian.org/debian-lts-announce/2021/03/msg00012.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLC6MPH7YS6JPU427XOFRLF3KKZQUZJN/ - https://security.gentoo.org/glsa/202105-30 - https://bugs.ghostscript.com/show_bug.cgi?id=703366
CVE ID: CVE-2021-3408 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2021-3409 State: PUBLISHED Published: 2021-03-23T20:20:58 Last Updated: 2024-08-03T16:53:17.527Z Vendors: n/a Products: QEMU Problem Types: CWE-119 Description: The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1928146 - https:/
onal Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1928146 - https://www.openwall.com/lists/oss-security/2021/03/09/1 - https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html - https://security.netapp.com/advisory/ntap-20210507-0001/ - https://security.gentoo.org/glsa/202208-27
CVE ID: CVE-2021-3410 State: PUBLISHED Published: 2021-02-23T22:22:18 Last Updated: 2024-08-03T16:53:17.677Z Vendors: n/a Products: libcaca Problem Types: CWE-119 Description: A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1928437 - https://github.com/cacalabs/libcaca/issues/52 - https://lists.debian.org/debian-lts-announce/2021/03/msg00006.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNT
g00006.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/
CVE ID: CVE-2021-3411 State: PUBLISHED Published: 2021-03-09T19:08:30 Last Updated: 2024-08-03T16:53:17.577Z Vendors: n/a Products: Linux kernel Problem Types: CWE-94 Description: A flaw was found in the Linux kernel in versions prior to 5.10. A violation of memory access was found while detecting a padding of int3 in the linking state. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1928236 - http://blog.pi3.com.pl/?p=831
CVE ID: CVE-2021-3412 State: PUBLISHED Published: 2021-06-01T13:47:23 Last Updated: 2024-08-03T16:53:17.533Z Vendors: n/a Products: 3Scale Problem Types: CWE-307 Description: It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, and access privileged information, or possibly conduct further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1928301
CVE ID: CVE-2021-3413 State: PUBLISHED Published: 2021-04-08T22:06:48 Last Updated: 2024-08-03T16:53:17.509Z Vendors: n/a Products: Satellite Problem Types: CWE-200 Description: A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1930352
CVE ID: CVE-2021-3414 State: PUBLISHED Published: 2022-08-26T15:25:42 Last Updated: 2024-08-03T16:53:17.555Z Vendors: n/a Products: satellite Problem Types: CWE-281 Description: A flaw was found in satellite. When giving granular permission related to the organization, other permissions allowing a user to view and manage other organizations are also granted. The highest threat from this vulnerability is to data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1926139 - https://access.redhat.com/security/cve/CVE-2021-3414
CVE ID: CVE-2021-3416 State: PUBLISHED Published: 2021-03-18T19:53:29 Last Updated: 2024-08-03T16:53:17.483Z Vendors: n/a Products: QEMU Problem Types: CWE-835 Description: A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1932827 - https://www.openwall.com/lists/oss-security/2021/02/26/1 - http
- https://bugzilla.redhat.com/show_bug.cgi?id=1932827 - https://www.openwall.com/lists/oss-security/2021/02/26/1 - https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html - https://security.netapp.com/advisory/ntap-20210507-0002/ - https://security.gentoo.org/glsa/202208-27 - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2021-3417 State: PUBLISHED Published: 2021-03-09T16:15:21.061681Z Last Updated: 2024-09-16T16:28:25.678Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Lenovo Products: XClarity Orchestrator Problem Types: CWE-319 Description: An internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials for Lenovo XClarity Administrator (LXCA), if added as a Resource Manager, are encoded then written to an internal LXCO log file each time a session is established with LXCA. Affected logs are captured in the First Failure Data Capture (FFDC) service log. The FFDC service log is only generated when requested by a privileged LXCO
rst Failure Data Capture (FFDC) service log. The FFDC service log is only generated when requested by a privileged LXCO user and it is only accessible to the privileged LXCO user that requested the file. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-49884
CVE ID: CVE-2021-3418 State: PUBLISHED Published: 2021-03-15T21:17:52 Last Updated: 2024-08-03T16:53:17.504Z Vendors: n/a Products: grub2 Problem Types: CWE-281 Description: If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kernel will think it was booted in secureboot mode and will implement lockdown, yet it could have been tampered. This flaw is a reintroduction of CVE-2020-15705 and only affects grub2 versions prior to 2.06 and upstream and distributions using the shim_lock mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.
m_lock mechanism. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1933757
CVE ID: CVE-2021-3419 State: REJECTED Published: 2021-03-03T15:59:51 Last Updated: 2021-03-03T15:59:51 Description: No description available.