Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
low an attacker to:- Infect end users with viruses or malware- Gain control over an end-user's computer and execute operating system commands- Steal sensitive information- Forge, spoof or modify data that appears to be generated by the affected system. Description: The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition for z/Linux, and TIBCO Administrator - Enterprise Edition for z/Linux contains an easily expl
rator - Enterprise Edition for z/Linux, and TIBCO Administrator - Enterprise Edition for z/Linux contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a persistent CSV injection attack from the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.10.2 and below, TIBCO Administrator - Enterpr
ator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.10.2 and below, and TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.11.0 and 5.11.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2021/04/tibco-security-advisory-april-20-2021-tibco-administrator-2021-28829
CVE ID: CVE-2021-28830 State: PUBLISHED Published: 2021-06-29T17:15:12.487779Z Last Updated: 2024-09-16T23:10:44.562Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server, TIBCO Spotfire Statistics Services Problem Types: The impact of this vulnerability includes the possibility of an attacker gaining full access to the Windows operating system at the privilege level of the affected component. Description: The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Ente
Description: The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server, TIBCO Spotfire Server, TIBCO Spotfire Server, TIBCO Spotfire Statistics Services, TIBCO Spotfire Statistics Services, and TIBCO Spotfire Statistics Services contain a vulnerability that theoretically allows a low privileged attacker with local access on the Windows operating system to insert malicious software. The affected component can be abused to execute the
ccess on the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from the affected component searching for run-time artifacts outside of the installation hierarchy. Affected releases are TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition: versions 1.2.4 and below, TIBCO Enterprise Runtime for R - Server Edition: versions 1.3.0 and 1.3.1, TIBCO Enterprise Runtime for R - Server Edition: versions 1.4.0, 1.5.0, and 1.6.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions 11.3.0 and below, TIB
versions 1.4.0, 1.5.0, and 1.6.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions 11.3.0 and below, TIBCO Spotfire Server: versions 10.3.12 and below, TIBCO Spotfire Server: versions 10.4.0, 10.5.0, 10.6.0, 10.6.1, 10.7.0, 10.8.0, 10.8.1, 10.9.0, 10.10.0, 10.10.1, 10.10.2, 10.10.3, and 10.10.4, TIBCO Spotfire Server: versions 11.0.0, 11.1.0, 11.2.0, and 11.3.0, TIBCO Spotfire Statistics Services: versions 10.3.0 and below, TIBCO Spotfire Statistics Services: versions 10.10.0, 10.10.1, and 10.10.2, and TIBCO Spotfire Statistics Services: versions 11.1.0, 11.2.0, and 11.3.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/
2.0, and 11.3.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2021/06/tibco-security-advisory-june-29-2021-tibco-spotfire-2021-28830
CVE ID: CVE-2021-28831 State: PUBLISHED Published: 2021-03-19T04:01:54.000Z Last Updated: 2025-11-03T20:33:34.419Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data. Additional Analyst Notes: - CVE Program Container: References: - https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4
ttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/ - https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html - https://security.gentoo.org/glsa/202105-09
CVE ID: CVE-2021-28832 State: PUBLISHED Published: 2021-04-05T06:01:35 Last Updated: 2024-08-03T21:55:11.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: VSCodeVim before 1.19.0 allows attackers to execute arbitrary code via a crafted workspace configuration. Additional Analyst Notes: - CVE Program Container: References: - https://marketplace.visualstudio.com/items?itemName=vscodevim.vim - https://vuln.ryotak.me/advisories/9 - https://github.com/VSCodeVim/Vim/commit/939df0e7fd55a9840dbd4fb3c907315e2a5ef446
CVE ID: CVE-2021-28833 State: PUBLISHED Published: 2021-06-21T12:18:38 Last Updated: 2024-08-03T21:55:11.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Increments Qiita::Markdown before 0.34.0 allows XSS via a crafted gist link, a different vulnerability than CVE-2021-28796. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/increments/qiita-markdown/releases - https://vuln.ryotak.me/advisories/50
CVE ID: CVE-2021-28834 State: PUBLISHED Published: 2021-03-19T06:51:15 Last Updated: 2024-08-03T21:55:11.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kramdown before 2.3.1 does not restrict Rouge formatters to the Rouge::Formatters namespace, and thus arbitrary classes can be instantiated. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gettalong/kramdown/pull/708 - https://gitlab.com/gitlab-org/gitlab/-/commit/179329b5c3c118924fb242dc449d06b4ed6ccb66 - https://github.com/gettalong/kramdown/compare/REL_2_3_0...REL_2_3_1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S3BBLUIDCUUR3NEE4NJL
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S3BBLUIDCUUR3NEE4NJLOCCAV3ALQ3O6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYOLQKFL6IJCQLBXV34Z4TI4O54GESPR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJCJVYHPY6LNUFM6LYZIAUIYOMVT5QGV/ - https://www.debian.org/security/2021/dsa-4890
CVE ID: CVE-2021-28835 State: PUBLISHED Published: 2023-08-11T00:00:00 Last Updated: 2024-10-09T17:35:30.049Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.xnview.com/en/xnview/#changelog - https://newsgroup.xnview.com/viewtopic.php?f=35&t=44679
CVE ID: CVE-2021-28838 State: PUBLISHED Published: 2021-08-10T17:23:52 Last Updated: 2024-08-03T21:55:11.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null pointer dereference vulnerability in D-Link DAP-2310 2,10RC039, DAP-2330 1.10RC036 BETA, DAP-2360 2.10RC055, DAP-2553 3.10rc039 BETA, DAP-2660 1.15rc131b, DAP-2690 3.20RC115 BETA, DAP-2695 1.20RC093, DAP-3320 1.05RC027 BETA and DAP-3662 1.05rc069 in the sbin/httpd binary. The crash happens at the `atoi' operation when a specific network package are sent to the httpd binary. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/zyw-200/EQUAFL/blob
VE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/zyw-200/EQUAFL/blob/main/dlink-email-cve.pdf - https://github.com/zyw-200/EQUAFL/blob/main/dlink-email-cve2.pdf
CVE ID: CVE-2021-28839 State: PUBLISHED Published: 2021-08-10T17:29:13 Last Updated: 2024-08-03T21:55:11.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, DAP-2553 3.06.RC027, DAP-2660 1.13.RC074, DAP-2690 3.16.RC100, DAP-2695 1.17.RC063, DAP-3320 1.01.RC014 and DAP-3662 1.01.RC022 in the upload_certificate function of sbin/httpd binary. When the binary handle the specific HTTP GET request, the strrchr in the upload_certificate function would take NULL as first argument, and incur the NULL pointer dereference vulnerability. Additional Analyst Notes: - CVE Progr
take NULL as first argument, and incur the NULL pointer dereference vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/zyw-200/EQUAFL/blob/main/dlink-email-cve.pdf - https://github.com/zyw-200/EQUAFL/blob/main/dlink-email-cve2.pdf
CVE ID: CVE-2021-28840 State: PUBLISHED Published: 2021-08-10T17:32:44 Last Updated: 2024-08-03T21:55:11.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference vulnerability exists in D-Link DAP-2310 2.07.RC031, DAP-2330 1.07.RC028, DAP-2360 2.07.RC043, DAP-2553 3.06.RC027, DAP-2660 1.13.RC074, DAP-2690 3.16.RC100, DAP-2695 1.17.RC063, DAP-3320 1.01.RC014 and DAP-3662 1.01.RC022 in the upload_config function of sbin/httpd binary. When the binary handle the specific HTTP GET request, the content in upload_file variable is NULL in the upload_config function then the strncasecmp would take NULL as first argument, and incur the NULL pointer dereference vulnerabi
config function then the strncasecmp would take NULL as first argument, and incur the NULL pointer dereference vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/zyw-200/EQUAFL/blob/main/dlink-email-cve.pdf - https://github.com/zyw-200/EQUAFL/blob/main/dlink-email-cve2.pdf
CVE ID: CVE-2021-28841 State: PUBLISHED Published: 2021-08-10T18:02:51 Last Updated: 2024-08-03T21:55:11.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference vulnerability in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending a POST request to apply_cgi via an action ping_test without a ping_ipaddr key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf
CVE ID: CVE-2021-28842 State: PUBLISHED Published: 2021-08-10T18:34:56 Last Updated: 2024-08-03T21:55:11.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Deference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial os service by sending the POST request to apply_cgi via action do_graph_auth without login_name key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf
CVE ID: CVE-2021-28843 State: PUBLISHED Published: 2021-08-10T18:47:43 Last Updated: 2024-08-03T21:55:11.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi with an unknown action name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf
CVE ID: CVE-2021-28844 State: PUBLISHED Published: 2021-08-10T18:54:10 Last Updated: 2024-08-03T21:55:11.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03 by sending the POST request to apply_cgi via a do_graph_auth action without a session_id key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf
CVE ID: CVE-2021-28845 State: PUBLISHED Published: 2021-08-10T19:13:10 Last Updated: 2024-08-03T21:55:12.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference vulnerability exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending the POST request to apply_cgi via the lang action without a language key. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf
CVE ID: CVE-2021-28846 State: PUBLISHED Published: 2021-08-10T19:22:31 Last Updated: 2024-08-03T21:55:11.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Format String vulnerablity exists in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service due to a logic bug at address 0x40dcd0 when calling fprintf with "%s: key len = %d, too long\n" format. The two variables seem to be put in the wrong order. The vulnerability could be triggered by sending the POST request to apply_cgi with a long and unknown key in the request body. Additional Analyst Notes: - CVE Program Con
e POST request to apply_cgi with a long and unknown key in the request body. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zyw-200/EQUAFL/blob/main/TRENDnet%20ticket.pdf
CVE ID: CVE-2021-28847 State: PUBLISHED Published: 2021-06-03T10:58:16 Last Updated: 2024-08-03T21:55:11.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: MobaXterm before 21.0 allows remote servers to cause a denial of service (Windows GUI hang) via tab title change requests that are sent repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. Additional Analyst Notes: - CVE Program Container: References: - https://mobaxterm.mobatek.net/preview.html - https://mobaxterm.mobatek.net/download-home-edition.html
CVE ID: CVE-2021-28848 State: PUBLISHED Published: 2021-06-03T11:11:18 Last Updated: 2024-08-03T21:55:11.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mintty before 3.4.5 allows remote servers to cause a denial of service (Windows GUI hang) by telling the Mintty window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. In other words, it does not implement a usleep or similar delay upon processing a title change. Additional Analyst Notes: - CVE Program Container: References: - https://mintty.github.io/ - https://github.com/mintty/mintty/commit/bd52109993440b6996760aaccb66e68e782762b9 - https://github.com/mintty/mintty
o/ - https://github.com/mintty/mintty/commit/bd52109993440b6996760aaccb66e68e782762b9 - https://github.com/mintty/mintty/compare/3.4.4...3.4.5
CVE ID: CVE-2021-28855 State: PUBLISHED Published: 2021-04-14T16:11:11 Last Updated: 2024-08-03T21:55:11.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Deark before 1.5.8, a specially crafted input file can cause a NULL pointer dereference in the dbuf_write function (src/deark-dbuf.c). Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.github.io/posts/NULL-Pointer-Dereference-Deark/ - https://github.com/jsummers/deark/commit/287f5ac31dfdc074669182f51ece637706070eeb
CVE ID: CVE-2021-28856 State: PUBLISHED Published: 2021-04-14T16:11:08 Last Updated: 2024-08-03T21:55:11.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Deark before v1.5.8, a specially crafted input file can cause a division by zero in (src/fmtutil.c) because of the value of pixelsize. Additional Analyst Notes: - CVE Program Container: References: - https://fatihhcelik.github.io/posts/Division-By-Zero-Deark/ - https://github.com/jsummers/deark/commit/62acb7753b0e3c0d3ab3c15057b0a65222313334
CVE ID: CVE-2021-28857 State: PUBLISHED Published: 2021-06-15T21:51:56 Last Updated: 2024-08-03T21:55:11.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie. Additional Analyst Notes: - CVE Program Container: References: - https://yunus-shn.medium.com/tp-links-tl-wpa4220-v4-0-cleartext-credentials-in-cookie-7516a2649394
CVE ID: CVE-2021-28858 State: PUBLISHED Published: 2021-06-15T21:51:50 Last Updated: 2024-08-03T21:55:12.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://yunus-shn.medium.com/tp-links-tl-wpa4220-v4-0-cleartext-transmission-of-sensitive-information-40357c778b84
CVE ID: CVE-2021-28860 State: PUBLISHED Published: 2021-05-03T11:48:33 Last Updated: 2024-08-03T21:55:11.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Node.js mixme, prior to v0.5.1, an attacker can add or alter properties of an object via '__proto__' through the mutate() and merge() functions. The polluted attribute will be directly assigned to every object in the program. This will put the availability of the program at risk causing a potential denial of service (DoS). Additional Analyst Notes: - CVE Program Container: References: - http://nodejs.com - https://www.npmjs.com/~david - https://github.com/adaltas/node-mixme/issues/1 - https://github.com/adaltas/node-mixme/
- https://www.npmjs.com/~david - https://github.com/adaltas/node-mixme/issues/1 - https://github.com/adaltas/node-mixme/commit/cfd5fbfc32368bcf7e06d1c5985ea60e34cd4028 - https://github.com/adaltas/node-mixme/security/advisories/GHSA-79jw-6wg7-r9g4 - https://security.netapp.com/advisory/ntap-20210618-0005/
CVE ID: CVE-2021-28861 State: PUBLISHED Published: 2022-08-23T00:00:00.000Z Last Updated: 2025-11-03T21:44:41.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks." Additional Analyst Notes: - CVE Program Container: References: - https://bugs.python.org/issue43223 - https://github.com/python/cpyth
alyst Notes: - CVE Program Container: References: - https://bugs.python.org/issue43223 - https://github.com/python/cpython/pull/93879 - https://github.com/python/cpython/pull/24848 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKYE2DOI2X7WZXAWTQJZAXYIWM37HDCY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LTSPFIULY2GZJN3QYNFVM4JSU6H4D6J/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S7G66SRWUM36ENQ3X6LAIG7HAB27D4XJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DISZAFSIQ7IAPAEQTC7G2
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DISZAFSIQ7IAPAEQTC7G2Z5QUA2V2PSW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QLE5INSVJUZJGY5OJXV6JREXWD7UDHYN/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPX4XHT2FGVQYLY2STT2MRVENILNZTTU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X46T4EFTIBXZRYTGASBDEZGYJINH2OWV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRGKPYA5YHIXQAMRIXO5DSCX7D4UUW4Q/ - https://lists.fedoraproject.org/a
package-announce%40lists.fedoraproject.org/message/KRGKPYA5YHIXQAMRIXO5DSCX7D4UUW4Q/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I3MQT5ZE3QH5PVDJMERTBOCILHK35CBE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2TRINJE3INWDVIHIABW4L2NP3RUSK7BJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXF6MQ74HVIDDSR5AE2UDR24I6D4FEPC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IFGV7P2PYFBMK32OKHCAC2ZPJQV5AUDF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproj
ge/IFGV7P2PYFBMK32OKHCAC2ZPJQV5AUDF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZEPOPUFC42KXXSLFPZ47ZZRGPOR7SQE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5OABQ5CMPQETJLFHROAXDIDXCMDTNVYG/ - https://security.gentoo.org/glsa/202305-02
CVE ID: CVE-2021-28874 State: PUBLISHED Published: 2021-04-06T12:08:55 Last Updated: 2024-08-03T21:55:11.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: SerenityOS fixed as of c9f25bca048443e317f1994ba9b106f2386688c3 contains a buffer overflow vulnerability in LibTextCode through opening a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SerenityOS/serenity/issues/5769 - https://github.com/SerenityOS/serenity/pull/5802 - https://github.com/SerenityOS/serenity/commit/c9f25bca048443e317f1994ba9b106f2386688c3
CVE ID: CVE-2021-28875 State: PUBLISHED Published: 2021-04-11T00:00:00 Last Updated: 2024-08-03T21:55:11.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rust-lang/rust/issues/80894 - https://github.com/rust-lang/rust/pull/80895 - https://security.gentoo.org/glsa/202210-09