Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-31911 State: PUBLISHED Published: 2021-05-11T12:04:09 Last Updated: 2024-08-03T23:10:30.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2020.2.3, reflected XSS was possible on several pages. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31912 State: PUBLISHED Published: 2021-05-11T12:05:35 Last Updated: 2024-08-03T23:10:31.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2020.2.3, account takeover was potentially possible during a password reset. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31913 State: PUBLISHED Published: 2021-05-11T12:09:57 Last Updated: 2024-08-03T23:10:30.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during GitHub SSO token exchange. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31914 State: PUBLISHED Published: 2021-05-11T12:11:47 Last Updated: 2024-08-03T23:10:30.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31915 State: PUBLISHED Published: 2021-05-11T12:12:41 Last Updated: 2024-08-03T23:10:31.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31916 State: PUBLISHED Published: 2021-05-06T16:14:42 Last Updated: 2024-08-03T23:10:30.921Z Vendors: n/a Products: kernel Problem Types: CWE-787 Description: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.c
em availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1946965 - https://github.com/torvalds/linux/commit/4edbe1d7bcffcd6269f3b5eb63f710393ff2ec7a - https://seclists.org/oss-sec/2021/q1/268 - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
CVE ID: CVE-2021-31917 State: PUBLISHED Published: 2021-09-21T10:33:41 Last Updated: 2024-08-03T23:10:31.025Z Vendors: n/a Products: Red Hat DataGrid and Infinispan Problem Types: CWE-287 Description: A flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 through 12.0.0). An attacker could bypass authentication on all REST endpoints when DIGEST is used as the authentication method. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/security/cve/cve-2021-31917
CVE ID: CVE-2021-31918 State: PUBLISHED Published: 2021-05-06T16:23:06 Last Updated: 2024-08-03T23:10:30.968Z Vendors: n/a Products: tripleo-ansible Problem Types: CWE-200 Description: A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to all users during stack update and creation. The highest threat from this vulnerability is to data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1954250
CVE ID: CVE-2021-31919 State: PUBLISHED Published: 2021-04-30T03:00:15 Last Updated: 2024-08-03T23:10:31.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0054.html
CVE ID: CVE-2021-31920 State: PUBLISHED Published: 2021-05-27T04:03:31 Last Updated: 2024-08-03T23:10:31.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio authorization policy when path based authorization rules are used. Additional Analyst Notes: - CVE Program Container: References: - https://istio.io/latest/news/security/istio-security-2021-005/
CVE ID: CVE-2021-31921 State: PUBLISHED Published: 2021-06-02T15:36:41 Last Updated: 2024-08-03T23:10:31.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is configured with AUTO_PASSTHROUGH routing configuration. Additional Analyst Notes: - CVE Program Container: References: - https://istio.io/latest/news/security/istio-security-2021-006/
CVE ID: CVE-2021-31922 State: PUBLISHED Published: 2021-05-14T00:41:27 Last Updated: 2024-08-03T23:10:31.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: An HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before 21.1 could allow an attacker to smuggle an HTTP request through an HTTP/2 Header. This vulnerability is resolved in 21.1, 20.3R1, 20.2R1, 20.1R2, 19.2R4, and 18.2R3. Additional Analyst Notes: - CVE Program Container: References: - https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44790
CVE ID: CVE-2021-31923 State: PUBLISHED Published: 2021-09-24T02:30:11 Last Updated: 2024-08-03T23:10:31.392Z Vendors: Ping Identity Products: PingAccess Problem Types: HTTP Request Smuggling Description: Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pingidentity.com/bundle/pingaccess-53/page/wco1629833104567.html
CVE ID: CVE-2021-31924 State: PUBLISHED Published: 2021-05-25T23:40:11 Last Updated: 2024-08-03T23:10:31.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and the application used, could lead to a local PIN bypass. This issue does not allow user presence (touch) or cryptographic signature verification to be bypassed, so an attacker would still need to physically possess and interact with the YubiKey or another enrolled authenticator. If pam-u2f is configured to require PIN authentication, and the application using pam-u2f allows the user to submit NULL as the PIN, pam-u2f will attempt to
IN authentication, and the application using pam-u2f allows the user to submit NULL as the PIN, pam-u2f will attempt to perform a FIDO2 authentication without PIN. If this authentication is successful, the PIN requirement is bypassed. Additional Analyst Notes: - CVE Program Container: References: - https://www.yubico.com/support/security-advisories/ysa-2021-03 - https://developers.yubico.com/pam-u2f/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CRBVOZEMVO72FV4Z5O4GBGSURXHWRGD3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IL3I5AKECLMK4ADLLACLOEF7H5CMNDP2/ - https://security.gentoo.org/
list/package-announce%40lists.fedoraproject.org/message/IL3I5AKECLMK4ADLLACLOEF7H5CMNDP2/ - https://security.gentoo.org/glsa/202208-11
CVE ID: CVE-2021-31925 State: PUBLISHED Published: 2021-07-07T14:01:52 Last Updated: 2024-08-03T23:10:31.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity 25.x before 25.4 has Improper Input Validation, and thus an unauthenticated remote attacker can cause a denial of service via the administrative web interface. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm - https://docs.pexip.com/admin/security_bulletins.htm#CVE-2021-31925
CVE ID: CVE-2021-31926 State: PUBLISHED Published: 2021-04-30T19:56:57 Last Updated: 2024-08-03T23:10:31.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the applicable API endpoint (despite not having permission to make changes to the system's network configuration). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CubeCoders/AMP/issues/443
CVE ID: CVE-2021-31927 State: PUBLISHED Published: 2021-06-10T14:58:16 Last Updated: 2024-08-03T23:10:31.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify any existing user, including users assigned to different environments and clients. It was fixed in v2021.1.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md - https://www.annexcloud.com/
CVE ID: CVE-2021-31928 State: PUBLISHED Published: 2021-06-10T14:02:56 Last Updated: 2024-08-03T23:10:31.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to escalate privileges to superadministrator. It was fixed in v2021.1.0.2. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md - https://www.annexcloud.com/
CVE ID: CVE-2021-31929 State: PUBLISHED Published: 2021-06-10T13:03:01 Last Updated: 2024-08-03T23:10:31.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify loyalty campaigns and settings, such as fraud prevention, coupon groups, email templates, or referrals. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Accenture/AARO-Bugs/blob/master/AARO-CVE-List.md - https://www.annexcloud.com/
CVE ID: CVE-2021-31930 State: PUBLISHED Published: 2021-05-19T14:06:57 Last Updated: 2024-08-03T23:10:31.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent cross-site scripting (XSS) in the web interface of Concerto through 2.3.6 allows an unauthenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into the First Name or Last Name parameter upon registration. When a privileged user attempts to delete the account, the XSS payload will be executed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/concerto/concerto/security/advisories - https://github.com/concerto/concerto/pull/1558
CVE ID: CVE-2021-31932 State: PUBLISHED Published: 2022-02-11T17:37:40 Last Updated: 2024-08-03T23:10:31.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. A malicious unauthenticated user can get access to all the functionalities exposed via the web panel, circumventing the authentication process, by using URL encoding for the . (dot) character. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/165964/Nokia-Transport-Module-Authentication-Bypass.html
CVE ID: CVE-2021-31933 State: PUBLISHED Published: 2021-04-30T20:49:20 Last Updated: 2024-08-03T23:10:31.405Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a parameter used for file uploads, and improper file-extension filtering for certain filenames (e.g., .phar or .pht). A remote authenticated administrator is able to upload a file containing arbitrary PHP code into specific directories via main/inc/lib/fileUpload.lib.php directory traversal to achieve PHP code execution. Additional Analyst Notes: -
ories via main/inc/lib/fileUpload.lib.php directory traversal to achieve PHP code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-48-2021-04-17-Critical-impact-high-risk-Remote-Code-Execution - https://github.com/chamilo/chamilo-lms/commit/f65d065061a77bb2e84f73217079ce3998cf3453 - https://github.com/chamilo/chamilo-lms/commit/229302139e8d23bf6862183cf219b967f6e2fbc1 - http://packetstormsecurity.com/files/162572/Chamilo-LMS-1.11.14-Remote-Code-Execution.html
CVE ID: CVE-2021-31934 State: PUBLISHED Published: 2021-04-30T21:19:43 Last Updated: 2024-08-03T23:10:31.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.10.4 and earlier allows XSS via a crafted contact object (payload in the position or company field) that is mishandled in the App Suite UI on a smartphone. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/162406/OX-App-Suite-OX-Guard-SSRF-DoS-Cross-Site-Scripting.html
CVE ID: CVE-2021-31935 State: PUBLISHED Published: 2021-04-30T21:19:30 Last Updated: 2024-08-03T23:10:31.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list (payload in the common name) that is mishandled in the scheduling view. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/162406/OX-App-Suite-OX-Guard-SSRF-DoS-Cross-Site-Scripting.html
CVE ID: CVE-2021-31936 State: PUBLISHED Published: 2021-05-11T19:11:45 Last Updated: 2024-08-03T23:10:31.296Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Accessibility Insights for Web Problem Types: Information Disclosure Description: Microsoft Accessibility Insights for Web Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31936
CVE ID: CVE-2021-31937 State: PUBLISHED Published: 2023-06-28T17:27:17.404Z Last Updated: 2025-02-28T19:40:48.893Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Elevation of Privilege Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31937
CVE ID: CVE-2021-31938 State: PUBLISHED Published: 2021-06-08T22:46:14 Last Updated: 2024-08-03T23:10:31.288Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Visual Studio Code - Kubernetes Tools Problem Types: Elevation of Privilege Description: Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31938
CVE ID: CVE-2021-31939 State: PUBLISHED Published: 2021-06-08T22:46:15 Last Updated: 2024-08-03T23:10:31.386Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Office Online Server, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Excel 2016, Microsoft Office 2016, Microsoft Excel 2013 Service Pack 1, Microsoft Office 2013 Service Pack 1, Microsoft Office Web Apps Server 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidanc
dditional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31939 - https://www.zerodayinitiative.com/advisories/ZDI-21-670/
CVE ID: CVE-2021-31940 State: PUBLISHED Published: 2021-06-08T22:46:15 Last Updated: 2024-08-03T23:10:31.330Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft Office 2019 for Mac, Microsoft 365 Apps for Enterprise, Microsoft Office 2016, Microsoft Office 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Office Graphics Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31940
CVE ID: CVE-2021-31941 State: PUBLISHED Published: 2021-06-08T22:46:16 Last Updated: 2024-08-03T23:10:31.277Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft Office 2019 for Mac, Microsoft 365 Apps for Enterprise, Microsoft Office 2016, Microsoft Office 2013 Service Pack 1, Microsoft Outlook 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Office Graphics Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31941 - https://www.zerodayinitiati
ences: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31941 - https://www.zerodayinitiative.com/advisories/ZDI-21-669/
CVE ID: CVE-2021-31942 State: PUBLISHED Published: 2021-06-08T22:46:17 Last Updated: 2024-08-03T23:10:31.381Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: 3D Viewer Problem Types: Remote Code Execution Description: 3D Viewer Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31942
CVE ID: CVE-2021-31943 State: PUBLISHED Published: 2021-06-08T22:46:17 Last Updated: 2024-08-03T23:10:31.295Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: 3D Viewer Problem Types: Remote Code Execution Description: 3D Viewer Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31943
CVE ID: CVE-2021-31944 State: PUBLISHED Published: 2021-06-08T22:46:18 Last Updated: 2024-08-03T23:10:31.262Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: 3D Viewer Problem Types: Information Disclosure Description: 3D Viewer Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31944
CVE ID: CVE-2021-31945 State: PUBLISHED Published: 2021-06-08T22:46:19 Last Updated: 2024-08-03T23:10:31.399Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Paint 3D Problem Types: Remote Code Execution Description: Paint 3D Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31945 - https://www.zerodayinitiative.com/advisories/ZDI-21-667/
CVE ID: CVE-2021-31946 State: PUBLISHED Published: 2021-06-08T22:46:19 Last Updated: 2024-08-03T23:10:31.283Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Paint 3D Problem Types: Remote Code Execution Description: Paint 3D Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31946 - https://www.zerodayinitiative.com/advisories/ZDI-21-671/ - https://www.zerodayinitiative.com/advisories/ZDI-21-684/
CVE ID: CVE-2021-31947 State: PUBLISHED Published: 2021-07-14T17:53:14 Last Updated: 2024-08-03T23:10:31.292Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: HEVC Video Extensions Problem Types: Remote Code Execution Description: HEVC Video Extensions Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31947
CVE ID: CVE-2021-31948 State: PUBLISHED Published: 2021-06-08T22:46:20 Last Updated: 2024-08-03T23:10:31.270Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Foundation 2013 Service Pack 1 Problem Types: Spoofing Description: Microsoft SharePoint Server Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31948
CVE ID: CVE-2021-31949 State: PUBLISHED Published: 2021-06-08T22:46:21.000Z Last Updated: 2025-02-28T20:55:15.422Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Outlook 2016, Microsoft Outlook 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Outlook Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31949
CVE ID: CVE-2021-31950 State: PUBLISHED Published: 2021-06-08T22:46:21 Last Updated: 2024-08-03T23:10:31.396Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Foundation 2013 Service Pack 1 Problem Types: Spoofing Description: Microsoft SharePoint Server Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31950 - http://packetstormsecurity.com/files/163080/Microsoft-SharePoint-Server-16.0.10372.20060-Server-Side-Request
021-31950 - http://packetstormsecurity.com/files/163080/Microsoft-SharePoint-Server-16.0.10372.20060-Server-Side-Request-Forgery.html