Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-34518 State: PUBLISHED Published: 2021-07-14T17:54:33 Last Updated: 2024-08-04T00:12:50.387Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Excel 2016, Microsoft Excel 2013 Service Pack 1, Microsoft Office Web Apps Server 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34518
CVE ID: CVE-2021-34519 State: PUBLISHED Published: 2021-07-14T17:54:34 Last Updated: 2024-08-04T00:12:50.375Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Enterprise Server 2013 Service Pack 1, Microsoft SharePoint Foundation 2013 Service Pack 1 Problem Types: Information Disclosure Description: Microsoft SharePoint Server Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34519 - https://www.zerodayinitiative.com/advisories/ZDI-21-
src.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34519 - https://www.zerodayinitiative.com/advisories/ZDI-21-830/
CVE ID: CVE-2021-34520 State: PUBLISHED Published: 2021-07-14T17:54:35 Last Updated: 2024-08-04T00:12:50.377Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Foundation 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft SharePoint Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34520 - https://www.zerodayinitiative.com/advisories/ZDI-21-828/
CVE ID: CVE-2021-34521 State: PUBLISHED Published: 2021-07-14T17:54:36 Last Updated: 2024-08-04T00:12:50.390Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 20H2, Windows Server version 20H2 Problem Types: Remote Code Execution Description: Raw Image Extension Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34521
CVE ID: CVE-2021-34522 State: PUBLISHED Published: 2021-07-14T17:54:37 Last Updated: 2024-08-04T00:12:50.411Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Malware Protection Engine Problem Types: Remote Code Execution Description: Microsoft Defender Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34522
CVE ID: CVE-2021-34523 State: PUBLISHED Published: 2021-07-14T17:54:38.000Z Last Updated: 2025-10-21T23:25:40.735Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 20, Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8 Problem Types: Elevation of Privilege Description: Microsoft Exchange Server Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34523 - https://www.zerodayinitiative.com/advisories/ZDI-21-822/ - http://packetstormsecurity.com/files/163895/Microsoft-Exchange-ProxyShell-Remote-Code-Execution.html
CVE ID: CVE-2021-34524 State: PUBLISHED Published: 2021-08-12T18:12:02 Last Updated: 2024-08-04T00:12:50.426Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Dynamics 365 (on-premises) version 9.1, Microsoft Dynamics 365 (on-premises) version 9.0 Problem Types: Remote Code Execution Description: Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34524
CVE ID: CVE-2021-34525 State: PUBLISHED Published: 2021-07-14T17:54:39 Last Updated: 2024-11-19T14:34:45.369Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server version 2004, Windows Server version 20H2, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows DNS Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://por
tion Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34525
CVE ID: CVE-2021-34527 State: PUBLISHED Published: 2021-07-02T21:25:11.000Z Last Updated: 2025-11-04T19:12:33.128Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2
ver 2016 (Server Core installation), Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code
performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>UPDATE July 7, 2021: The security update for Windows Server 2012, Windows Server 2016 and Windows 10, Version 1607 have been released. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulne
ates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability.</p> <p>In addition to installing the updates, in order to secure your system, you must confirm that the following registry settings are set to 0 (zero) or are not defined (<strong>Note</strong>: These registry keys do not exist by default, and therefore are already at the secure setting.), also that your Group Policy setting are correct (see FAQ):</p> <ul> <li>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint</li> <li>NoWarningNoElevationOnInstall = 0 (DWORD) or not defined (default setting)</li> <li>UpdatePromptSettings = 0 (DWORD)
li>NoWarningNoElevationOnInstall = 0 (DWORD) or not defined (default setting)</li> <li>UpdatePromptSettings = 0 (DWORD) or not defined (default setting)</li> </ul> <p><strong>Having NoWarningNoElevationOnInstall set to 1 makes your system vulnerable by design.</strong></p> <p>UPDATE July 6, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vuln
dates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability. See also <a href="https://support.microsoft.com/topic/31b91c02-05bc-4ada-a7ea-183b129578a7">KB5005010: Restricting installation of new printer drivers after applying the July 6, 2021 updates</a>.</p> <p>Note that the security updates released on and after July 6, 2021 contain protections for CVE-2021-1675 and the additional remote code execution exploit in the Windows Print Spooler service known as “PrintNightmare”, documented in CVE-2021-34527.</p> Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.micro
</p> Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34527 - http://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.html
CVE ID: CVE-2021-34528 State: PUBLISHED Published: 2021-07-14T17:54:42 Last Updated: 2024-08-04T00:12:50.383Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Visual Studio Code Problem Types: Remote Code Execution Description: Visual Studio Code Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34528
CVE ID: CVE-2021-34529 State: PUBLISHED Published: 2021-07-14T17:54:43 Last Updated: 2024-08-04T00:12:50.404Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Visual Studio Code Problem Types: Remote Code Execution Description: Visual Studio Code Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34529 - https://www.zerodayinitiative.com/advisories/ZDI-21-827/
CVE ID: CVE-2021-34530 State: PUBLISHED Published: 2021-08-12T18:12:03 Last Updated: 2024-10-01T15:53:14.637Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Graphics Component Remote Code Execution Vulnera
installation) Problem Types: Remote Code Execution Description: Windows Graphics Component Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34530
CVE ID: CVE-2021-34532 State: PUBLISHED Published: 2021-08-12T18:12:05 Last Updated: 2024-08-04T00:12:50.394Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: ASP.NET Core 2.1, ASP.NET Core 3.1, ASP.NET Core 5.0, Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3), Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6), Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8), Microsoft Visual Studio 2019 version 16.10 (includes 16.0 - 16.9), Visual Studio 2019 for Mac version 8.10 Problem Types: Information Disclosure Description: ASP.NET Core and Visual Studio Information Disclosure Vulnerabil
8.10 Problem Types: Information Disclosure Description: ASP.NET Core and Visual Studio Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34532
CVE ID: CVE-2021-34533 State: PUBLISHED Published: 2021-08-12T18:12:07 Last Updated: 2024-08-04T00:12:50.418Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008
installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows Graphics Component Font Parsing Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/adv
onal Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34533
CVE ID: CVE-2021-34534 State: PUBLISHED Published: 2021-08-12T18:12:08 Last Updated: 2024-11-18T21:44:59.809Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows 10 Version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016 Problem Types: Remote Code Execution Description: Windows MSHTML Platform Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/
CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34534
CVE ID: CVE-2021-34535 State: PUBLISHED Published: 2021-08-12T18:12:10 Last Updated: 2024-08-04T00:12:50.411Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows 10 Version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2012, Windows Server 2012 R2 Problem Types: Remote Code Execution Description: Remote Desktop Client Remote Code Execution Vulnerability Additional Analyst
m Types: Remote Code Execution Description: Remote Desktop Client Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34535
CVE ID: CVE-2021-34536 State: PUBLISHED Published: 2021-08-12T18:12:11.000Z Last Updated: 2025-07-24T03:55:22.287Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: Elevation of Privilege Description: Storage Spaces Controller Elevation of Privilege V
Core installation) Problem Types: Elevation of Privilege Description: Storage Spaces Controller Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34536
CVE ID: CVE-2021-34537 State: PUBLISHED Published: 2021-08-12T18:12:13 Last Updated: 2024-08-04T00:12:50.365Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2
installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Bluetooth Driver Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34537
CVE ID: CVE-2021-34538 State: PUBLISHED Published: 2022-07-16T07:10:09 Last Updated: 2024-08-04T00:12:50.447Z Vendors: Apache Software Foundation Products: Apache Hive Problem Types: CWE-306 Description: Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization of involved entities in the query. It was found that an unauthorized user can manipulate an existing UDF without having the privileges to do so. This allowed unauthorized or underprivileged users to drop and recreate UDFs pointing them to new jars that could be potentially malicious. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/oqqgnh
ially malicious. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/oqqgnhz4c6nxsfd0xstosnk0g15f7354
CVE ID: CVE-2021-34539 State: PUBLISHED Published: 2021-06-10T10:59:29 Last Updated: 2024-08-04T00:12:50.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in CubeCoders AMP before 2.1.1.8. A lack of validation of the Java Version setting means that an unintended executable path can be set. The result is that high-privileged users can trigger code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CubeCoders/AMP/issues/464
CVE ID: CVE-2021-34540 State: PUBLISHED Published: 2021-06-11T11:26:02 Last Updated: 2024-08-04T00:12:50.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard. Additional Analyst Notes: - CVE Program Container: References: - https://www.advantech.com/support - https://github.com/ethancsyang/CveProject/tree/main/CVE-2021-34540
CVE ID: CVE-2021-34543 State: PUBLISHED Published: 2021-12-07T20:39:05 Last Updated: 2024-11-11T23:01:45.243821 Vendors: n/a Products: n/a Problem Types: n/a Description: The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require authentication, which allows remote attackers to gain administrative privileges by connecting to the server. As a result, the attacker can modify configuration files and change the system status. Fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1z1TaANlDyX4SOP2vjNzkPQI3nETL
onal Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1z1TaANlDyX4SOP2vjNzkPQI3nETL9kZM/view?usp=sharing - https://www.solar-log.com/en/support/firmware/ - https://www.exploit-db.com/exploits/49986
CVE ID: CVE-2021-34544 State: PUBLISHED Published: 2021-12-07T20:41:21 Last Updated: 2024-11-11T23:00:23.843210 Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email.html, and sms.html, cleartext passwords are stored. This may allow sensitive information to be read by someone with access to the device. Fixed with 3.0.0-60 11.10.2013 for SL 200, 500, 1000 / not existing for SL 250, 300, 1200, 2000, SL 50 Gateway, SL Base. Additional Analyst Notes: - CVE Program Container: References: - https://www.solar-log.com/en/support/firmware/ - https://drive.google.com/file/d/1N8Ch1UGNcoocUaPhOe_1mAECO
eferences: - https://www.solar-log.com/en/support/firmware/ - https://drive.google.com/file/d/1N8Ch1UGNcoocUaPhOe_1mAECOe5kr4pt/view?usp=sharing - https://www.exploit-db.com/exploits/49987
CVE ID: CVE-2021-34546 State: PUBLISHED Published: 2021-06-10T15:04:44 Last Updated: 2024-08-04T00:12:50.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated attacker with physical access to a computer with NetSetMan Pro before 5.0 installed, that has the pre-logon profile switch button within the Windows logon screen enabled, is able to drop to an administrative shell and execute arbitrary commands as SYSTEM via the "save log to file" feature. To accomplish this, the attacker can navigate to cmd.exe. Additional Analyst Notes: - CVE Program Container: References: - https://www.secuvera.de/advisories/secuvera-SA-2021-01.txt - https://www.secuvera.de - https://www
tainer: References: - https://www.secuvera.de/advisories/secuvera-SA-2021-01.txt - https://www.secuvera.de - https://www.netsetman.com - http://seclists.org/fulldisclosure/2021/Jun/17 - http://packetstormsecurity.com/files/163097/NetSetManPro-4.7.2-Privilege-Escalation.html
CVE ID: CVE-2021-34547 State: PUBLISHED Published: 2021-06-10T13:49:11 Last Updated: 2024-08-04T00:12:50.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/likhihcv/PRTG_Network_Monitor_20.1.55.1775_CSRF
CVE ID: CVE-2021-34548 State: PUBLISHED Published: 2021-06-29T11:00:16 Last Updated: 2024-08-04T00:12:50.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge RELAY_END or RELAY_RESOLVED to bypass the intended access control for ending a stream. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.torproject.org/tpo/core/tor/-/issues/40389 - https://blog.torproject.org/node/2041 - https://security.gentoo.org/glsa/202107-25 - http://packetstormsecurity.com/files/163510/Tor-Half-Closed-Connection-Stream-Confusion.html