Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-28644 State: PUBLISHED Published: 2023-09-06T13:08:06.354Z Last Updated: 2024-08-03T21:47:33.036Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-22 Description: Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Path traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program
is issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb21-51.html
CVE ID: CVE-2021-28645 State: PUBLISHED Published: 2021-04-13T12:54:38 Last Updated: 2024-08-03T21:47:33.028Z Vendors: Trend Micro Products: Trend Micro Apex One , Trend Micro OfficeScan Problem Types: Incorrect Permission Assignment Description: An incorrect permission assignment vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/0002
erability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000286019 - https://success.trendmicro.com/solution/000286157 - https://www.zerodayinitiative.com/advisories/ZDI-21-402/
CVE ID: CVE-2021-28646 State: PUBLISHED Published: 2021-04-13T12:54:59 Last Updated: 2024-08-03T21:47:33.035Z Vendors: Trend Micro Products: Trend Micro Apex One , Trend Micro OfficeScan Problem Types: Insecure File Permissions Description: An insecure file permissions vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to take control of a specific log file on affected installations. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000286019 - https://success.trendmicro.com/solution/000286157
CVE ID: CVE-2021-28647 State: PUBLISHED Published: 2021-04-13T12:55:39 Last Updated: 2024-08-03T21:47:33.042Z Vendors: Trend Micro Products: Trend Micro Password Manager Problem Types: DLL Hijacking Description: Trend Micro Password Manager version 5 (Consumer) is vulnerable to a DLL Hijacking vulnerability which could allow an attacker to inject a malicious DLL file during the installation progress and could execute a malicious program each time a user installs a program. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10282
CVE ID: CVE-2021-28648 State: PUBLISHED Published: 2021-04-22T21:21:21 Last Updated: 2024-08-03T21:47:33.215Z Vendors: Trend Micro Products: Trend Micro Antivirus for Mac Problem Types: Improper Access Control Description: Trend Micro Antivirus for Mac 2020 v10.5 and 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulnerability that could allow an attacker to establish a connection that could lead to full local privilege escalation within the application. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References
d code on the target system to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10293 - https://www.zerodayinitiative.com/advisories/ZDI-21-420/
CVE ID: CVE-2021-28649 State: PUBLISHED Published: 2021-05-12T14:57:41 Last Updated: 2024-08-03T21:47:33.045Z Vendors: Trend Micro Products: Trend Micro HouseCall for Home Networks Problem Types: Incorrect Permission Assignment Description: An incorrect permission vulnerability in the product installer for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code be executed by an Administrator who is running a scan. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability. Additional Ana
rst obtain the ability to execute low-privileged code on the target system to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10310 - https://www.zerodayinitiative.com/advisories/ZDI-21-474/
CVE ID: CVE-2021-28650 State: PUBLISHED Published: 2021-03-17T05:51:33 Last Updated: 2024-08-03T21:47:33.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-36241. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/gnome-autoar/-/commit/8109c368c6cfdb593faaf698c2bf5da32bb1ace4 - https://lists.fedoraproject.org/archives/list/p
g/GNOME/gnome-autoar/-/commit/8109c368c6cfdb593faaf698c2bf5da32bb1ace4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BN5TVQ7OHZEGY6AGFLAZWCVCI53RYNHQ/ - https://security.gentoo.org/glsa/202105-10
CVE ID: CVE-2021-28651 State: PUBLISHED Published: 2021-05-27T00:00:00 Last Updated: 2024-08-03T21:47:32.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a buffer-management bug, it allows a denial of service. When resolving a request with the urn: scheme, the parser leaks a small amount of memory. However, there is an unspecified attack methodology that can easily trigger a large amount of memory consumption. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.squid-cache.org/show_bug.cgi?id=5104 - https://github.com/squid-cache/squid/security/advisories/GHSA-ch36-9jhx-phm4 - h
.squid-cache.org/show_bug.cgi?id=5104 - https://github.com/squid-cache/squid/security/advisories/GHSA-ch36-9jhx-phm4 - https://www.debian.org/security/2021/dsa-4924 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSQ3U54ZCNXR44QRPW3AV2VCS6K3TKCF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4EPIWUZDJAXADDHVOPKRBTQHPBR6H66/ - https://lists.debian.org/debian-lts-announce/2021/06/msg00014.html - https://security.netapp.com/advisory/ntap-20210716-0007/ - http://www.openwall.com/lists/oss-security/2023/10/11/3 - http://seclists.org/fulldisclosure/2023/Oct/14
CVE ID: CVE-2021-28652 State: PUBLISHED Published: 2021-05-27T00:00:00 Last Updated: 2024-08-03T21:47:33.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This allows a trusted client to trigger memory leaks that. over time, lead to a Denial of Service via an unspecified short query string. This attack is limited to clients with Cache Manager API access privilege. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.squid-cache.org/show_bug.cgi?id=5106 - https://github.com/squid-cache/
CVE Program Container: References: - https://bugs.squid-cache.org/show_bug.cgi?id=5106 - https://github.com/squid-cache/squid/security/advisories/GHSA-m47m-9hvw-7447 - https://www.debian.org/security/2021/dsa-4924 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSQ3U54ZCNXR44QRPW3AV2VCS6K3TKCF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4EPIWUZDJAXADDHVOPKRBTQHPBR6H66/ - https://lists.debian.org/debian-lts-announce/2021/06/msg00014.html - http://www.openwall.com/lists/oss-security/2023/10/11/3 - http://seclists.org/fulldisclosure/2023/Oct/14
CVE ID: CVE-2021-28653 State: PUBLISHED Published: 2021-03-18T23:40:52 Last Updated: 2024-08-03T21:47:32.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store keys insecurely. They choose a non-preferred storage mechanism if the device has Secure Enclave support but lacks biometric authentication hardware. Additional Analyst Notes: - CVE Program Container: References: - https://www.westerndigital.com/support/productsecurity/wdc-21003-armorLock-insecure-key-storage-vulnerability
CVE ID: CVE-2021-28655 State: PUBLISHED Published: 2022-12-16T12:51:51.927Z Last Updated: 2025-04-17T15:37:14.575Z Vendors: Apache Software Foundation Products: Apache Zeppelin Problem Types: CWE-20 Description: The improper Input Validation vulnerability in "”Move folder to Trash” feature of Apache Zeppelin allows an attacker to delete the arbitrary files. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/bxs056g3xlsofz0jb3wny9dw4llwptd2
CVE ID: CVE-2021-28656 State: PUBLISHED Published: 2024-04-09T09:12:58.493Z Last Updated: 2025-02-13T16:27:59.379Z Vendors: Apache Software Foundation Products: Apache Zeppelin Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in Credential page of Apache Zeppelin allows an attacker to submit malicious request. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/dttzkkv4qyn1rq2fdv1r94otb1osxztc - http://www.openwall.com/lists/oss-security/2024/04/09/3
CVE ID: CVE-2021-28657 State: PUBLISHED Published: 2021-03-31T07:35:14.000Z Last Updated: 2025-02-13T16:27:59.935Z Vendors: Apache Software Foundation Products: Apache Tika Problem Types: CWE-835 Description: A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r915add4aa52c60d1b5cf085039cfa73a98d7fae9673374dfd7744b5a%40%3Cdev.tika.apache.org%3E - https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E
apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2021.html - https://security.netapp.com/advisory/ntap-20210507-0004/ - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2021-28658 State: PUBLISHED Published: 2021-04-06T14:51:43 Last Updated: 2024-08-03T21:47:33.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://docs.djangoproject.com/en/3.1/releases/security/ - https://groups.google.com/g/django-announce/c/ePr5j-ngdPU - https://www.djangoproject.com/weblog/2021/apr/06/security-releases/ - https://lists.debian.org/debian-lts-announce
dPU - https://www.djangoproject.com/weblog/2021/apr/06/security-releases/ - https://lists.debian.org/debian-lts-announce/2021/04/msg00008.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE/ - https://security.netapp.com/advisory/ntap-20210528-0001/
CVE ID: CVE-2021-28660 State: PUBLISHED Published: 2021-03-17T00:00:00 Last Updated: 2024-08-03T21:47:32.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/co
lyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=74b6b20df8cfe90ada777d621b54c32e69e27cd7 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJPVQZPY3DHPV5I3IVNMSMO6D3PKZISX/ - https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html - https://security.netapp.com/advisory/ntap-20210507-0008/ - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - http://www.openwall.com/lists/oss-security/2022/11/18/1 - http://www.openwall.com/lists/oss-security/2022/11/21/2
CVE ID: CVE-2021-28661 State: PUBLISHED Published: 2021-10-07T14:06:31 Last Updated: 2024-08-03T21:47:32.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: Default SilverStripe GraphQL Server (aka silverstripe/graphql) 3.x through 3.4.1 permission checker not inherited by query subclass. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/silverstripe/silverstripe-graphql/releases - https://www.silverstripe.org/download/security-releases/CVE-2021-28661
CVE ID: CVE-2021-28662 State: PUBLISHED Published: 2021-05-27T00:00:00 Last Updated: 2024-08-03T21:47:33.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6. If a remote server sends a certain response header over HTTP or HTTPS, there is a denial of service. This header can plausibly occur in benign network traffic. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/squid-cache/squid/security/advisories/GHSA-jjq6-mh2h-g39h - https://github.com/squid-cache/squid/commit/051824924c709bd6162a378f746fb859454c674e - http://www.squid-cache.org/Versions/v6/changesets/squid-6-051824924c7
/commit/051824924c709bd6162a378f746fb859454c674e - http://www.squid-cache.org/Versions/v6/changesets/squid-6-051824924c709bd6162a378f746fb859454c674e.patch - https://www.debian.org/security/2021/dsa-4924 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSQ3U54ZCNXR44QRPW3AV2VCS6K3TKCF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4EPIWUZDJAXADDHVOPKRBTQHPBR6H66/ - http://www.openwall.com/lists/oss-security/2023/10/11/3 - http://seclists.org/fulldisclosure/2023/Oct/14
CVE ID: CVE-2021-28663 State: PUBLISHED Published: 2021-05-10T00:00:00.000Z Last Updated: 2025-10-21T23:25:46.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://developer.arm.com/support/arm-security-updates - https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver - https://git
pport/arm-security-updates - https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver - https://github.com/lntrx/CVE-2021-28663
CVE ID: CVE-2021-28664 State: PUBLISHED Published: 2021-05-10T00:00:00.000Z Last Updated: 2025-10-21T23:25:46.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages. This affects Bifrost r0p0 through r29p0 before r30p0, Valhall r19p0 through r29p0 before r30p0, and Midgard r8p0 through r30p0 before r31p0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.arm.com/support/arm-security-updates - https://developer.arm.com/support/arm-security-updates/ma
es: - https://developer.arm.com/support/arm-security-updates - https://developer.arm.com/support/arm-security-updates/mali-gpu-kernel-driver - https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
CVE ID: CVE-2021-28665 State: PUBLISHED Published: 2021-05-06T19:26:35 Last Updated: 2024-08-03T21:47:32.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in the SNMP plugin that can lead to excessive consumption of memory and CPU resources, and possibly a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu/ - https://advisories-admin.stormshield.eu/2021-014
CVE ID: CVE-2021-28667 State: PUBLISHED Published: 2021-03-18T02:16:23 Last Updated: 2024-08-03T21:47:33.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data (from an action or rule name). Additional Analyst Notes: - CVE Program Container: References: - https://stackstorm.com/2021/03/10/stackstorm-v3-4-1-security-fix/
CVE ID: CVE-2021-28668 State: PUBLISHED Published: 2021-03-29T19:28:09 Last Updated: 2024-08-03T21:47:33.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 has several SQL injection vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://securitydocs.business.xerox.com/wp-content/uploads/2020/09/cert_Security_Mini_Bulletin_XRX20R_for_ALB80xx-C80xx-2.pdf
CVE ID: CVE-2021-28669 State: PUBLISHED Published: 2021-03-29T19:27:59 Last Updated: 2024-08-03T21:47:32.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration attributes without administrative rights. Additional Analyst Notes: - CVE Program Container: References: - https://securitydocs.business.xerox.com/wp-content/uploads/2020/09/cert_Security_Mini_Bulletin_XRX20R_for_ALB80xx-C80xx-2.pdf
CVE ID: CVE-2021-28670 State: PUBLISHED Published: 2021-03-29T17:40:09 Last Updated: 2024-08-03T21:47:33.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk. Additional Analyst Notes: - CVE Program Container: References: - https://securitydocs.business.xerox.com/wp-content/uploads/2020/12/cert_Security_Mini_Bulletin_XRX20X_for_ALB80xx-C80xxv.pdf
CVE ID: CVE-2021-28671 State: PUBLISHED Published: 2021-03-29T20:06:50 Last Updated: 2024-08-03T21:47:33.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01 (Bridge), B600/B610 before 32.65.51 and 32.59.01 (Bridge), B605/B615 before 33.65.51 and 33.59.01 (Bridge), B7025/30/35 before 58.65.51 and 58.59.11 (Bridge), C400 before 67.65.51 and 67.59.01 (Bridge), C405 before 68.65.51 and 68.59.01 (Bridge), C500/C600 before 61.65.51 and 61.59.01 (Bridge), C505/C605 before 62.65.51 and 62.59
ore 68.65.51 and 68.59.01 (Bridge), C500/C600 before 61.65.51 and 61.59.01 (Bridge), C505/C605 before 62.65.51 and 62.59.01 (Bridge), C7000 before 56.65.51 and 56.59.01 (Bridge), C7020/25/30 before 57.65.51 and 57.59.01 (Bridge), C8000/C9000 before 70.65.51 and 70.59.01 (Bridge), C8000W before 72.65.51 have a remote Command Execution vulnerability in the Web User Interface that allows remote attackers with "a weaponized clone file" to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - https://securitydocs.business.xerox.com/wp-content/uploads/2021/03/cert_Security_Mini_Bulletin_XRX21D_for_PH6510_WC6515_VersaLink-1.pdf
CVE ID: CVE-2021-28672 State: PUBLISHED Published: 2021-03-29T20:06:46 Last Updated: 2024-08-03T21:47:33.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01 (Bridge), B600/B610 before 32.65.51 and 32.59.01 (Bridge), B605/B615 before 33.65.51 and 33.59.01 (Bridge), B7025/30/35 before 58.65.51 and 58.59.11 (Bridge), C400 before 67.65.51 and 67.59.01 (Bridge), C405 before 68.65.51 and 68.59.01 (Bridge), C500/C600 before 61.65.51 and 61.59.01 (Bridge), C505/C605 before 62.65.51 and 62.59
ore 68.65.51 and 68.59.01 (Bridge), C500/C600 before 61.65.51 and 61.59.01 (Bridge), C505/C605 before 62.65.51 and 62.59.01 (Bridge), C7000 before 56.65.51 and 56.59.01 (Bridge), C7020/25/30 before 57.65.51 and 57.59.01 (Bridge), C8000/C9000 before 70.65.51 and 70.59.01 (Bridge), C8000W before 72.65.51 allows remote attackers to execute arbitrary code through a buffer overflow in Web page parameter handling. Additional Analyst Notes: - CVE Program Container: References: - https://securitydocs.business.xerox.com/wp-content/uploads/2021/03/cert_Security_Mini_Bulletin_XRX21D_for_PH6510_WC6515_VersaLink-1.pdf
CVE ID: CVE-2021-28673 State: PUBLISHED Published: 2021-03-29T19:00:49 Last Updated: 2024-08-03T21:47:33.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLink B400 before 37.61.23 and 37.59.01 (Bridge), B405 before 38.61.23 and 38.59.01 (Bridge), B600/B610 before 32.61.23 and 32.59.01 (Bridge), B605/B615 before 33.61.23 and 33.59.01 (Bridge), B7025/30/35 before 58.61.23 and 58.59.11 (Bridge), C400 before 67.61.23 and 67.59.01 (Bridge), C405 before 68.61.23 and 68.59.01 (Bridge), C500/C600 before 61.61.23 and 61.59.01 (Bridge), C505/C605 before 62.61.23 and 62.59
ore 68.61.23 and 68.59.01 (Bridge), C500/C600 before 61.61.23 and 61.59.01 (Bridge), C505/C605 before 62.61.23 and 62.59.11 (Bridge), C7000 before 56.61.23 and 56.59.01 (Bridge), C7020/25/30 before 57.61.23 and 57.59.01 (Bridge), C8000/C9000 before 70.61.23 and 70.59.01 (Bridge), allows remote attackers with "a weaponized clone file" to execute arbitrary commands in the Web User Interface. Additional Analyst Notes: - CVE Program Container: References: - https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20K_for_PH6510_WC6515_VLB4xx_C4xx_B6XX_B70xx_C5xx_C6xx_C7xxx.pdf