Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-26216 State: PUBLISHED Published: 2021-03-18T15:44:55 Last Updated: 2024-08-03T20:19:20.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditFolder.php. Additional Analyst Notes: - CVE Program Container: References: - http://seeddms.com - https://tuhin1729.medium.com/cve-2021-26216-ffb33321dc91
CVE ID: CVE-2021-26220 State: PUBLISHED Published: 2021-02-08T20:13:36 Last Updated: 2024-08-03T20:19:20.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ezxml_toxml function in ezxml 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/ezxml/bugs/23/
CVE ID: CVE-2021-26221 State: PUBLISHED Published: 2021-02-08T20:13:36 Last Updated: 2024-08-03T20:19:20.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/ezxml/bugs/21/
CVE ID: CVE-2021-26222 State: PUBLISHED Published: 2021-02-08T20:13:36 Last Updated: 2024-08-03T20:19:20.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/ezxml/bugs/22/
CVE ID: CVE-2021-26223 State: PUBLISHED Published: 2021-07-22T18:34:46 Last Updated: 2024-08-03T20:19:20.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to view_pay.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/CASAP-Automated-Enrollment-System-3.md
CVE ID: CVE-2021-26224 State: PUBLISHED Published: 2021-07-22T18:40:50 Last Updated: 2024-08-03T20:19:20.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SourceCodester Fantastic-Blog-CMS V 1.0 allows remote attackers to inject arbitrary web script or HTML via the search field to search.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BigTiger2020/Fantastic-Blog-CMS-/blob/main/Fantastic-Blog-CMS-2.md
CVE ID: CVE-2021-26226 State: PUBLISHED Published: 2021-07-22T17:06:13 Last Updated: 2024-08-03T20:19:20.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_user.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/CASAP-Automated-Enrollment-System-2.md
CVE ID: CVE-2021-26227 State: PUBLISHED Published: 2021-07-22T16:49:17 Last Updated: 2024-08-03T20:19:20.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the student information parameters to edit_stud.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/CASAP-Automated-Enrollment-System-4.md
CVE ID: CVE-2021-26228 State: PUBLISHED Published: 2021-07-22T16:23:57 Last Updated: 2024-08-03T20:19:20.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_class1.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/README.md
CVE ID: CVE-2021-26229 State: PUBLISHED Published: 2021-07-22T16:17:05 Last Updated: 2024-08-03T20:19:20.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_stud.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/CASAP-Automated-Enrollment-System-1.md
CVE ID: CVE-2021-26230 State: PUBLISHED Published: 2021-07-22T16:39:47 Last Updated: 2024-08-03T20:19:20.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the user information to save_user.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BigTiger2020/CASAP-Automated-Enrollment-System/blob/main/CASAP-Automated-Enrollment-System-5.md
CVE ID: CVE-2021-26231 State: PUBLISHED Published: 2021-07-22T16:29:20 Last Updated: 2024-08-03T20:19:20.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SourceCodester Fantastic Blog CMS v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to category.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BigTiger2020/Fantastic-Blog-CMS-/blob/main/README.md
CVE ID: CVE-2021-26232 State: PUBLISHED Published: 2021-07-22T16:44:37 Last Updated: 2024-08-03T20:19:20.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SourceCodester Simple College Website v 1.0 allows remote attackers to execute arbitrary SQL statements via the id parameter to news.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BigTiger2020/Simple-College-Website/blob/main/README.md
CVE ID: CVE-2021-26233 State: PUBLISHED Published: 2021-03-18T13:53:52 Last Updated: 2024-08-03T20:19:20.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfcb, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution. Additional Analyst Notes: - CVE Program Container: References: - https://voidsec.com/advisories/cve-2021-26233-faststone-image-viewer-v-7-5-user-mode-write-access-violation/
CVE ID: CVE-2021-26234 State: PUBLISHED Published: 2021-03-18T13:55:18 Last Updated: 2024-08-03T20:19:20.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d8a, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution. Additional Analyst Notes: - CVE Program Container: References: - https://voidsec.com/advisories/cve-2021-26234-faststone-image-viewer-v-7-5-user-mode-write-access-violation/
CVE ID: CVE-2021-26235 State: PUBLISHED Published: 2021-03-18T13:56:33 Last Updated: 2024-08-03T20:19:20.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfc9, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution. Additional Analyst Notes: - CVE Program Container: References: - https://voidsec.com/advisories/cve-2021-26235-faststone-image-viewer-v-7-5-user-mode-write-access-violation/
CVE ID: CVE-2021-26236 State: PUBLISHED Published: 2021-03-18T12:55:54 Last Updated: 2024-08-03T20:19:20.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsing functionality (BITMAPINFOHEADER Structure, 'BitCount' file format field), that will end up corrupting the Structure Exception Handler (SEH). Attackers could exploit this issue to achieve code execution when a user opens or views a malformed/specially crafted CUR file. Additional Analyst Notes: - CVE Program Container: References: - https://voidsec.com/fuzzing-faststone-image-viewer-cve-2021-26236 - https:
Notes: - CVE Program Container: References: - https://voidsec.com/fuzzing-faststone-image-viewer-cve-2021-26236 - https://www.exploit-db.com/exploits/49660 - https://voidsec.com/advisories/cve-2021-26236-faststone-image-viewer-v-7-5-stack-based-buffer-overflow/
CVE ID: CVE-2021-26237 State: PUBLISHED Published: 2021-03-18T13:59:13 Last Updated: 2024-08-03T20:19:20.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution. Additional Analyst Notes: - CVE Program Container: References: - https://voidsec.com/advisories/cve-2021-26237-faststone-image-viewer-v-7-5-user-mode-write-access-violation/
CVE ID: CVE-2021-26246 State: REJECTED Published: N/A Last Updated: 2023-03-07T22:15:14.837Z Description: No description available.
CVE ID: CVE-2021-26247 State: PUBLISHED Published: 2022-01-19T20:38:53 Last Updated: 2024-08-03T20:19:20.307Z Vendors: n/a Products: Cacti Problem Types: CWE-79 Description: As an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" to successfully execute the JavaScript payload present in the "ref" URL parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.cacti.net/info/changelog
CVE ID: CVE-2021-26248 State: PUBLISHED Published: 2021-11-19T18:37:35 Last Updated: 2024-08-03T20:19:20.386Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Philips Products: MRI 1.5T, MRI 3T Problem Types: CWE-708 Description: Philips MRI 1.5T and MRI 3T Version 5.x.x assigns an owner who is outside the intended control sphere to a resource. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-313-01 - https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE ID: CVE-2021-26251 State: PUBLISHED Published: 2022-11-11T15:48:43.246Z Last Updated: 2025-02-05T20:52:20.981Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Distribution of OpenVINO(TM) Toolkit Problem Types: denial of service Description: Improper input validation in the Intel(R) Distribution of OpenVINO(TM) Toolkit may allow an authenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00642.html
CVE ID: CVE-2021-26252 State: PUBLISHED Published: 2022-02-24T00:00:00 Last Updated: 2024-08-03T20:19:20.140Z Vendors: n/a Products: htmldoc Problem Types: CWE-787 Description: A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in pspdf_prepare_page(),in ps-pdf.cxx may lead to execute arbitrary code and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1967009
CVE ID: CVE-2021-26253 State: PUBLISHED Published: 2022-05-06T16:34:33 Last Updated: 2024-08-03T20:19:20.123Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Splunk Products: Splunk Enterprise Problem Types: CWE-287 Description: A potential vulnerability in Splunk Enterprise's implementation of DUO MFA allows for bypassing the MFA verification in Splunk Enterprise versions before 8.1.6. The potential vulnerability impacts Splunk Enterprise instances configured to use DUO MFA and does not impact or affect a DUO product or service. Additional Analyst Notes: - CVE Program Container: References: - https://www.splunk.com/en_us/product-security/announcements/svd-202
nalyst Notes: - CVE Program Container: References: - https://www.splunk.com/en_us/product-security/announcements/svd-2022-0504.html
CVE ID: CVE-2021-26254 State: PUBLISHED Published: 2022-08-18T19:39:46.000Z Last Updated: 2025-05-05T16:53:52.273Z Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products Problem Types: denial of service Description: Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE ID: CVE-2021-26256 State: PUBLISHED Published: 2022-02-21T17:49:34.180Z Last Updated: 2025-02-20T20:31:01.205Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: Survey Maker team Products: Survey Maker (WordPress plugin) Problem Types: CWE-79 Description: Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Survey Maker WordPress plugin (versions <= 2.0.6). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/survey-maker/#developers - https://patchstack.com/database/vulnerability/survey-maker/wordpress-survey-maker-plugin-2-0-6-unauthenticated-stored-cross-site-scr
hstack.com/database/vulnerability/survey-maker/wordpress-survey-maker-plugin-2-0-6-unauthenticated-stored-cross-site-scripting-xss-vulnerability
CVE ID: CVE-2021-26257 State: PUBLISHED Published: 2022-08-18T19:44:07.000Z Last Updated: 2025-05-05T16:53:40.846Z Vendors: n/a Products: Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products Problem Types: denial of service Description: Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.html
CVE ID: CVE-2021-26258 State: PUBLISHED Published: 2022-05-12T16:35:51.000Z Last Updated: 2025-05-05T16:53:30.853Z Vendors: n/a Products: Intel(R) Killer(TM) Control Center software Problem Types: escalation of privilege Description: Improper access control for the Intel(R) Killer(TM) Control Center software before version 2.4.3337.0 may allow an authorized user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00644.html
CVE ID: CVE-2021-26259 State: PUBLISHED Published: 2022-03-03T00:00:00 Last Updated: 2024-08-03T20:19:20.148Z Vendors: n/a Products: htmldoc Problem Types: CWE-787 Description: A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in render_table_row(),in ps-pdf.cxx may lead to arbitrary code execution and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/michaelrsweet/htmldoc/issues/417 - https://github.com/michaelrsweet/htmldoc/commit/0ddab26a542c74770317b622e985c52430092ba5
CVE ID: CVE-2021-26260 State: PUBLISHED Published: 2021-06-08T00:00:00 Last Updated: 2024-08-03T20:19:20.135Z Vendors: n/a Products: OpenEXR Problem Types: CWE-400 Description: An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. This is a different flaw from CVE-2021-23215. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BXFLD4ZAXKAIWO6ZPBCQEEDZB5IG676K/ - https://bugzilla.redhat.com/show_bug.cgi?id=1947582 - https://lists.debian.org
ssage/BXFLD4ZAXKAIWO6ZPBCQEEDZB5IG676K/ - https://bugzilla.redhat.com/show_bug.cgi?id=1947582 - https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html - https://www.debian.org/security/2022/dsa-5299 - https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
CVE ID: CVE-2021-26262 State: PUBLISHED Published: 2021-11-19T18:35:52 Last Updated: 2024-08-03T20:19:20.290Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Philips Products: MRI 1.5T, MRI 3T Problem Types: CWE-284 Description: Philips MRI 1.5T and MRI 3T Version 5.x.x does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsma-21-313-01 - https://www.usa.philips.com/healthcare/about/customer-support/product-security
CVE ID: CVE-2021-26263 State: PUBLISHED Published: 2023-04-25T18:33:40.613Z Last Updated: 2024-08-03T20:19:20.148Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-79 Description: Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/107693 - https://www.debian.org/security/2023/dsa-5399
CVE ID: CVE-2021-26264 State: PUBLISHED Published: 2022-01-28T19:09:49.871Z Last Updated: 2025-04-17T15:51:47.289Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: n/a Description: A specially crafted script could cause the DeltaV Distributed Control System Controllers (All Versions) to restart and cause a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-355-04
CVE ID: CVE-2021-26266 State: PUBLISHED Published: 2021-01-26T03:35:43 Last Updated: 2024-08-03T20:19:20.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/92-change-log/
CVE ID: CVE-2021-26267 State: PUBLISHED Published: 2021-01-26T03:35:35 Last Updated: 2024-08-03T20:19:20.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass suspension (SEC-579). Additional Analyst Notes: - CVE Program Container: References: - https://docs.cpanel.net/changelogs/92-change-log/
CVE ID: CVE-2021-26271 State: PUBLISHED Published: 2021-01-26T20:39:46 Last Updated: 2024-08-03T20:19:20.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-416 - https://www.oracle.com//security-alerts/cpujul2021.html - https://ckeditor.com/blog/CKEditor-4.16-with-improved-image-pasting-High-Contrast-support-and-a-new-color-API/#security-comes-f
/ckeditor.com/blog/CKEditor-4.16-with-improved-image-pasting-High-Contrast-support-and-a-new-color-API/#security-comes-first - https://www.oracle.com/security-alerts/cpuoct2021.html
CVE ID: CVE-2021-26272 State: PUBLISHED Published: 2021-01-26T20:39:56 Last Updated: 2024-08-03T20:19:20.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-416 - https://www.oracle.com//security-alerts/cpujul2021.html - https://ckeditor.com/blog/CKEditor-4.16-with-improved-image-pasting-High-Contrast-support-and-a-new-color-API/#security-comes-fir
keditor.com/blog/CKEditor-4.16-with-improved-image-pasting-High-Contrast-support-and-a-new-color-API/#security-comes-first - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html
CVE ID: CVE-2021-26273 State: PUBLISHED Published: 2021-07-07T13:56:58 Last Updated: 2024-08-03T20:19:20.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Agent in NinjaRMM 5.0.909 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://www.ninjarmm.com - https://www.ninjarmm.com/blog/cve-2021-26273-cve-2021-26274/ - https://improsec.com/tech-blog/privilege-escalation-vulnerability-in-ninjarmm
CVE ID: CVE-2021-26274 State: PUBLISHED Published: 2021-07-07T13:59:37 Last Updated: 2024-08-03T20:19:20.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Agent in NinjaRMM 5.0.909 has Insecure Permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.ninjarmm.com - https://www.ninjarmm.com/blog/cve-2021-26273-cve-2021-26274/ - https://improsec.com/tech-blog/privilege-escalation-vulnerability-in-ninjarmm
CVE ID: CVE-2021-26275 State: PUBLISHED Published: 2021-03-18T23:34:13 Last Updated: 2024-08-03T20:19:20.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.npmjs.com/package/eslint-fixer - https://advisory.checkmarx.net/advisory/CX-2021-4774
CVE ID: CVE-2021-26276 State: PUBLISHED Published: 2021-01-27T19:36:02 Last Updated: 2024-11-19T15:26:17.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: scripts/cli.js in the GoDaddy node-config-shield (aka Config Shield) package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendor reportedly states that this is not a vulnerability. The set command was not intended for use with untrusted data Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/godaddy/node-config-shield/commit/cdba5d3a7accd661ffbc52e208153464bd0d9da6 - https://advisory.checkmarx.net/advisory/CX-2021-4773
CVE ID: CVE-2021-26277 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-18T15:29:56.643Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N) Vendors: vivo Products: Frame service Problem Types: CWE-94 Description: The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vivo.com/en/support/security-advisory-detail?id=8