Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-3172 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-19T14:09:42.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Php-Fusion v9.03.90 fixed in v9.10.00 allows authenticated attackers to cause a Distributed Denial of Service via the Polling feature. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PHPFusion/PHPFusion/issues/2351 - https://github.com/PHPFusion/PHPFusion/commit/7b8df6925cc7cfd8585d4f34d9120ff3a2e5753e
CVE ID: CVE-2021-3176 State: PUBLISHED Published: 2021-01-29T06:29:19 Last Updated: 2024-08-03T16:45:51.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chat window of the Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.15 and 7.x before 7.1.2 could allow an attacker to gain access to user information by sending certain code, due to improper input validation of http links. A successful exploit could allow an attacker to view user information and application data. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advi
ww.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0001
CVE ID: CVE-2021-3177 State: PUBLISHED Published: 2021-01-19T00:00:00 Last Updated: 2024-08-03T16:45:51.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.python.org/issue42938 - https://github.com/python/cpython/pull/24239 - https://python-security.readthedocs.io/vuln/ctypes-buffer-overflow
2938 - https://github.com/python/cpython/pull/24239 - https://python-security.readthedocs.io/vuln/ctypes-buffer-overflow-pycarg_repr.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MGSV6BJQLRQ6RKVUXK7JGU7TP4QFGQXC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NQPARTLNSFQVMMQHPNBFOCOZOO3TMQNA/ - https://security.gentoo.org/glsa/202101-18 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7GZV74KM72O2PEJN2C4XP3V5Q5MZUOO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCFZMVRQUKCBQIG5F2C
/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCFZMVRQUKCBQIG5F2CBVADK63NFSE4A/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRHOCQYX3QLDGDQGTWQAUUT2GGIZCZUO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NXSMBHES3ANXXS2RSO5G6Q24BR4B2PWK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6XJAULOS5JVB2L67NCKKMJ5NTKZJBSD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YDTZVGSXQ7HR7OCGSUHTRNTMBG43OMKU/ - https://lists.fedoraproject.org
t/package-announce%40lists.fedoraproject.org/message/YDTZVGSXQ7HR7OCGSUHTRNTMBG43OMKU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4KSYYWMGAKOA2JVCQA422OINT6CKQ7O/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPE7SMXYUIWPOIZV4DQYXODRXMFX3C5E/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCQTCSP6SCVIYNIRUJC5X7YBVUHPLSC4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NODWHDIFBQE5RU5PUWUVE47JOT5VCMJ2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr
sage/NODWHDIFBQE5RU5PUWUVE47JOT5VCMJ2/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MP572OLHMS7MZO4KUPSCIMSZIA5IZZ62/ - https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FONHJIOZOFD7CD35KZL6SVBUTMBPGZGA/ - https://lists.debian.org/debian-lts-announce/2021/04/msg00005.html - https://www.oracle.com//security-alerts/cpujul2021.html - https://news.ycombinator.com/item?id=26185005 - https://security.netapp.com/advisory/ntap-20210226-0003/ - https://www.oracle.com/security-al
tor.com/item?id=26185005 - https://security.netapp.com/advisory/ntap-20210226-0003/ - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://lists.debian.org/debian-lts-announce/2022/02/msg00013.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html
CVE ID: CVE-2021-3178 State: PUBLISHED Published: 2021-01-19T06:44:51 Last Updated: 2024-08-03T16:45:51.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attack; see also the exports(5) no_subtree_check default behavior Additional Analyst Notes: - CVE Program Container: References: - https://patchwork.kernel.org/project/linux-nfs/patch/20210111210129.GA11652%40fieldses.org/ - https://git.ker
erences: - https://patchwork.kernel.org/project/linux-nfs/patch/20210111210129.GA11652%40fieldses.org/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=51b2ee7d006a736a9126e8111d1f24e4fd0afaa6 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5SGB7TNDVQEOJ7NVTGX56UWHDNQM5TRC/ - https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html
CVE ID: CVE-2021-3179 State: PUBLISHED Published: 2021-12-16T19:13:08 Last Updated: 2024-08-03T16:45:51.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: GGLocker iOS application, contains an insecure data storage of the password hash value which results in an authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - https://apps.apple.com/us/app/gglocker/id1449241376#?platform=iphone - https://github.com/ggreco/gglocker/blob/master/gglocker/LoginCheck.m - https://medium.com/%40ksteo11/yet-another-password-manager-app-how-to-better-secure-it-8e9df2ce35c8
CVE ID: CVE-2021-3181 State: PUBLISHED Published: 2021-01-19T14:30:37 Last Updated: 2024-08-03T16:45:51.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with sequences of semicolon characters in RFC822 address fields (aka terminators of empty groups). A small email message from the attacker can cause large memory consumption, and the victim may then be unable to see email messages from other persons. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/muttmua/mutt/-/issues/323 - https://gitlab.com/muttmua/mutt/-/
- CVE Program Container: References: - https://gitlab.com/muttmua/mutt/-/issues/323 - https://gitlab.com/muttmua/mutt/-/commit/4a2becbdb4422aaffe3ce314991b9d670b7adf17 - https://gitlab.com/muttmua/mutt/-/commit/939b02b33ae29bc0d642570c1dcfd4b339037d19 - https://gitlab.com/muttmua/mutt/-/commit/d4305208955c5cdd9fe96dfa61e7c1e14e176a14 - http://www.openwall.com/lists/oss-security/2021/01/19/10 - https://lists.debian.org/debian-lts-announce/2021/01/msg00017.html - https://security.gentoo.org/glsa/202101-25 - https://www.debian.org/security/2021/dsa-4838 - http://www.openwall.com/lists/oss-security/2021/01/27/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraprojec
om/lists/oss-security/2021/01/27/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2OMLQKAOHPYQA4GI7ZUO6UKCPUHLYO7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXGWXFO77HBCD3VYEIYHHYU33LYWWWNQ/
CVE ID: CVE-2021-3182 State: PUBLISHED Published: 2021-01-19T14:40:57 Last Updated: 2024-08-03T16:45:51.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DCS-5220 devices have a buffer overflow. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10203
CVE ID: CVE-2021-3183 State: PUBLISHED Published: 2021-01-19T14:58:10 Last Updated: 2024-08-03T16:45:51.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: Files.com Fat Client 3.3.6 allows authentication bypass because the client continues to have access after a logout and a removal of a login profile. Additional Analyst Notes: - CVE Program Container: References: - https://seclists.org/fulldisclosure/2021/Jan/20
CVE ID: CVE-2021-3184 State: PUBLISHED Published: 2021-01-19T16:01:04 Last Updated: 2024-08-03T16:45:51.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/global_menu.ctp user homepage favourite button. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/8283e0fbec551f45f3f181cdb2cf29cddc23df66
CVE ID: CVE-2021-3185 State: PUBLISHED Published: 2021-01-25T16:33:15 Last Updated: 2024-08-03T16:45:51.407Z Vendors: n/a Products: gstreamer Problem Types: CWE-120 Description: A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1917192 - https://security.gentoo.org/glsa/202208-31
CVE ID: CVE-2021-3186 State: PUBLISHED Published: 2021-01-24T19:35:34 Last Updated: 2024-08-03T16:45:51.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross-site scripting (XSS) vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47_multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.hackingarticles.in/exploiting-stored-cross-site-scripting-at-tenda-ac5-ac1200/ - http://packetstormsecurity.com/files/161119/Tenda-AC5-AC1200-Wireless-Cross-Site-Scripting.html
CVE ID: CVE-2021-3187 State: PUBLISHED Published: 2023-12-11T00:00:00.000Z Last Updated: 2025-05-27T14:50:21.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script (that executes as root from a temporary directory) during install time. (This applies to macOS before 10.15.5, or Security Update 2020-003 on Mojave and High Sierra, Later versions of macOS are not vulnerable.) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.beyondtrust.com/docs/release-notes/privilege-
CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.beyondtrust.com/docs/release-notes/privilege-management/index.htm - https://www.beyondtrust.com/trust-center/security-advisories/bt22-06
CVE ID: CVE-2021-3188 State: PUBLISHED Published: 2021-01-21T06:54:34 Last Updated: 2024-08-03T16:45:51.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports. Additional Analyst Notes: - CVE Program Container: References: - https://wehackmx.com/security-research/WeHackMX-2021-001/
CVE ID: CVE-2021-3189 State: PUBLISHED Published: 2021-02-19T22:24:31 Last Updated: 2024-08-03T16:45:51.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: The slashify package 1.0.0 for Node.js allows open-redirect attacks, as demonstrated by a localhost:3000///example.com/ substring. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/slashify - https://securitylab.github.com/advisories/GHSL-2020-199-open-redirect-slashify - https://security.netapp.com/advisory/ntap-20210401-0004/
CVE ID: CVE-2021-3190 State: PUBLISHED Published: 2021-01-21T07:11:33 Last Updated: 2024-08-03T16:45:51.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/omrilotan/async-git/pull/13 - https://github.com/omrilotan/async-git/pull/13/commits/a5f45f58941006c4cc1699609383b533d9b92c6a - https://github.com/omrilotan/async-git/pull/13/commits/611823bd97dd41e9e8127c38066868ff9dcfa57a - https://github.com/omrilotan/async-git/pull/14 - https://advisory.checkmarx.ne
11823bd97dd41e9e8127c38066868ff9dcfa57a - https://github.com/omrilotan/async-git/pull/14 - https://advisory.checkmarx.net/advisory/CX-2021-4772
CVE ID: CVE-2021-3191 State: PUBLISHED Published: 2021-02-09T18:17:18 Last Updated: 2024-08-03T16:45:51.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0952L01^AAR through T0952L01^AAX, and T0986L01^AAD through T0986L01^AAJ (L) and T0320H01^ABW through T0320H01^ACC, T0952H01^AAQ through T0952H01^AAW, and T0986H01^AAC through T0986H01^AAI (J and H). Additional Analyst Notes: - CVE Program Container: References: - https://idelji.com - https://techpartner.ext.hpe.com/TechPartner/PartnerDetail.xhtml?Partner=Idelji - https://support.hpe.com/hpe
delji.com - https://techpartner.ext.hpe.com/TechPartner/PartnerDetail.xhtml?Partner=Idelji - https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbns04081en_us
CVE ID: CVE-2021-3193 State: PUBLISHED Published: 2021-01-22T03:56:03 Last Updated: 2024-08-03T16:45:51.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper access and command validation in the Nagios Docker Config Wizard before 1.1.2, as used in Nagios XI through 5.7, allows an unauthenticated attacker to execute remote code as the apache user. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/products/security/
CVE ID: CVE-2021-3195 State: PUBLISHED Published: 2021-01-21T07:48:58 Last Updated: 2024-08-03T16:45:51.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has implemented dumpwallet restrictions Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitcoin/bitcoin/issues/20866
CVE ID: CVE-2021-3196 State: PUBLISHED Published: 2021-06-09T14:10:56 Last Updated: 2024-08-03T16:45:51.390Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0. When using federated identity management (authenticating via SAML through a third-party identity provider), an attacker can inject additional data into a signed SAML response being transmitted to the service provider (ID Bravura Security Fabric). The application successfully validates the signed values but uses the unsigned malicious value
Bravura Security Fabric). The application successfully validates the signed values but uses the unsigned malicious values. An attacker with lower-privilege access to the application can inject the username of a high-privilege user to impersonate that user. Additional Analyst Notes: - CVE Program Container: References: - https://www.hitachi.com/hirt/security/index.html - https://www.hitachi.com/hirt/hitachi-sec/2021/601.html - https://www.hitachi-id.com/cve-2021-3196-attackers-can-impersonate-another-user
CVE ID: CVE-2021-3197 State: PUBLISHED Published: 2021-02-27T00:00:00 Last Updated: 2024-08-03T16:45:51.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/saltstack/salt/releases - https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWF
://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/ - https://security.gentoo.org/glsa/202103-01 - https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html - https://www.debian.org/security/2021/dsa-5011 - https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html - https://security.gentoo.org/glsa/202310-22
CVE ID: CVE-2021-3198 State: PUBLISHED Published: 2021-07-22T18:27:20.123916Z Last Updated: 2024-09-16T19:10:11.444Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Ivanti Products: MobileIron Core Problem Types: CWE-78 Description: By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.rapid7.com/blog/post/2021/06/02/untitled-cve-2021-3198-and-cve-2021-3540-mobileiron-shell-escape-privilege-escalation-vulnerabilities/
CVE ID: CVE-2021-3199 State: PUBLISHED Published: 2021-01-22T02:41:34 Last Updated: 2024-08-03T16:45:51.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563 - https://github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py - https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile
E-2021-3199/poc_uploadImageFile.py - https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py
CVE ID: CVE-2021-3200 State: PUBLISHED Published: 2021-05-18T16:14:25 Last Updated: 2024-08-03T16:45:51.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool, FILE *fp, const char *testcase, Queue *job, char **resultp, int *resultflagsp function at src/testcase.c: line 2334, which could cause a denial of service Additional Analyst Notes: - CVE Program Container: References: - https://github.com/openSUSE/libsolv/issues/416 - https://github.com/yangjiageng/PoC/blob/master/libsolv-PoCs/PoC-testcase_read-2334 - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2021-3204 State: PUBLISHED Published: 2021-02-19T13:25:40 Last Updated: 2024-08-03T16:45:51.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSRF in the document conversion component of Webware Webdesktop 5.1.15 allows an attacker to read all files from the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.l0l.xyz/sec/2021/01/05/1-webdesktop-root-ssrf.html
CVE ID: CVE-2021-3210 State: PUBLISHED Published: 2021-02-19T13:06:42 Last Updated: 2024-08-03T16:45:51.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound <= 4.0.1 allows remote attackers to execute arbitrary system commands when the victim imports a malicious data file containing JavaScript in the objectId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/BloodHoundAD/BloodHound/issues/338 - https://github.com/BloodHoundAD/BloodHound/blob/338e197dc4b7a1ee929c335141172ada5bc80800/src/components/Modals/HelpTexts/GenericAll/GenericAll.jsx#L31-L37 - https://github.com/Bl
b7a1ee929c335141172ada5bc80800/src/components/Modals/HelpTexts/GenericAll/GenericAll.jsx#L31-L37 - https://github.com/BloodHoundAD/BloodHound/blob/338e197dc4b7a1ee929c335141172ada5bc80800/src/components/Modals/HelpModal.jsx#L57
CVE ID: CVE-2021-3223 State: PUBLISHED Published: 2021-01-26T05:58:52 Last Updated: 2024-08-03T16:53:16.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/node-red/node-red-dashboard/issues/669 - https://github.com/node-red/node-red-dashboard/releases/tag/2.26.2
CVE ID: CVE-2021-3224 State: PUBLISHED Published: 2021-03-10T13:38:23 Last Updated: 2024-08-03T16:53:16.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.cszcms.com/ - https://github.com/cskaza/cszcms/issues/28
CVE ID: CVE-2021-3229 State: PUBLISHED Published: 2021-02-05T21:36:48 Last Updated: 2024-08-03T16:53:17.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.384_10177 and earlier versions allows an attacker to disrupt the use of device setup services via continuous login error. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/us/ASUSWRT/ - https://dlcdnimgs.asus.com/websites/global/productcustomizedTab/562/ASUSWRT%20portal%20feature.pdf - https://github.com/fullbbadda1208/CVE-2021-3229
CVE ID: CVE-2021-3236 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-10T14:30:31.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex_buffer_all method. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vim/vim/issues/7674 - https://security.netapp.com/advisory/ntap-20230915-0001/