Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-29644 State: PUBLISHED Published: 2021-10-12T18:19:29 Last Updated: 2024-08-03T22:11:06.349Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow. An attacker with network access to port 31016 may exploit this issue to execute code with unrestricted privileges on the underlying OS. Additional Analyst Notes: - CVE Program Container: References: - https://www.hitachi.com/hirt/security/index.html
CVE ID: CVE-2021-29645 State: PUBLISHED Published: 2021-10-12T18:30:35 Last Updated: 2024-08-03T22:11:06.115Z Severity: HIGH (CVSS 7 CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 calls the SendMessageTimeoutW API with arbitrary arguments via a local pipe, leading to a local privilege escalation vulnerability. An attacker who exploits this issue could execute arbitrary code on the local system. Additional Analyst Notes: - CVE Program Container: References: - https://www.hitachi.com/hirt/security/index.html
CVE ID: CVE-2021-29646 State: PUBLISHED Published: 2021-03-30T20:36:55 Last Updated: 2024-08-03T22:11:06.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does not properly validate certain data sizes, aka CID-0217ed2848e8. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0217ed2848e8538bcf9172d97ed2eeb4a26041bb - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y
.11.11 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/
CVE ID: CVE-2021-29647 State: PUBLISHED Published: 2021-03-30T20:36:42 Last Updated: 2024-08-03T22:11:06.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=50535249f624d0072cd885bcdce4e4b6fb770160 - https://lists.fedoraproject.org/archives/list
t/torvalds/linux.git/commit/?id=50535249f624d0072cd885bcdce4e4b6fb770160 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/ - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
CVE ID: CVE-2021-29648 State: PUBLISHED Published: 2021-03-30T20:36:25 Last Updated: 2024-08-03T22:11:06.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF), which can cause a system crash upon an unexpected access attempt (in map_create in kernel/bpf/syscall.c or check_btf_info in kernel/bpf/verifier.c), aka CID-350a5c4dd245. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11 - https://git.kernel
CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=350a5c4dd2452ea999cc5e1d4a8dbf12de2f97ef - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/
CVE ID: CVE-2021-29649 State: PUBLISHED Published: 2021-03-30T20:36:03 Last Updated: 2024-08-03T22:11:06.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.11.11. The user mode driver (UMD) has a copy_process() memory leak, related to a lack of cleanup steps in kernel/usermode_driver.c and kernel/bpf/preload/bpf_preload_kern.c, aka CID-f60a85cad677. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f60a85cad677c4f9bb4cadd764f1d106c38c7cf8 - https://lists.fedoraproject.org
inux/kernel/git/torvalds/linux.git/commit/?id=f60a85cad677c4f9bb4cadd764f1d106c38c7cf8 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/
CVE ID: CVE-2021-29650 State: PUBLISHED Published: 2021-03-30T20:35:47 Last Updated: 2024-08-03T22:11:06.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value, aka CID-175e476b8cdf. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=175e476b8cdf2a4de74325
ChangeLog-5.11.11 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=175e476b8cdf2a4de7432583b49c871345e4f8a1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/ - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
CVE ID: CVE-2021-29651 State: PUBLISHED Published: 2021-04-02T13:54:57 Last Updated: 2024-08-03T22:11:06.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pomerium/pomerium/security/advisories/GHSA-35vc-w93w-75c2
CVE ID: CVE-2021-29652 State: PUBLISHED Published: 2021-04-02T13:58:34 Last Updated: 2024-08-03T22:11:06.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pomerium/pomerium/security/advisories/GHSA-fv82-r8qv-ch4v
CVE ID: CVE-2021-29653 State: PUBLISHED Published: 2021-04-22T16:41:46 Last Updated: 2024-08-03T22:11:06.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Vault and Vault Enterprise 1.5.1 and newer, under certain circumstances, may exclude revoked but unexpired certificates from the CRL. Fixed in 1.5.8, 1.6.4, and 1.7.1. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.hashicorp.com/t/hcsec-2021-09-vault-s-pki-engine-crl-may-exclude-revoked-but-unexpired-certificates-after-tidy/23461/2
CVE ID: CVE-2021-29654 State: PUBLISHED Published: 2021-04-14T17:49:00 Last Updated: 2024-08-03T22:11:06.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: AjaxSearchPro before 4.20.8 allows Deserialization of Untrusted Data (in the import database feature of the administration panel), leading to Remote Code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.synacktiv.com/sites/default/files/2021-04/WP_AjaxSearchPro_Vulnerability.pdf
CVE ID: CVE-2021-29655 State: PUBLISHED Published: 2022-02-18T21:44:45 Last Updated: 2024-08-03T22:11:06.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks. Thus, untrusted code may execute. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm
CVE ID: CVE-2021-29656 State: PUBLISHED Published: 2022-02-18T21:47:00 Last Updated: 2024-08-03T22:11:06.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation. The allow list is not properly checked. Additional Analyst Notes: - CVE Program Container: References: - https://docs.pexip.com/admin/security_bulletins.htm
CVE ID: CVE-2021-29657 State: PUBLISHED Published: 2021-07-22T16:44:33 Last Updated: 2024-08-03T22:11:06.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD KVM guest can bypass access control on host OS MSRs when there are nested guests, aka CID-a58d9166a756. This occurs because of a TOCTOU race condition associated with a VMCB12 double fetch in nested_svm_vmrun. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/163324/KVM-nested_svm_vmrun-Double-Fetch.html - https://bugs.chromium.org/p/project-zero/issues/detail?id=2177 - https://
63324/KVM-nested_svm_vmrun-Double-Fetch.html - https://bugs.chromium.org/p/project-zero/issues/detail?id=2177 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a58d9166a756a0f4a6618e4f593232593d6df134 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.12 - https://security.netapp.com/advisory/ntap-20210902-0008/
CVE ID: CVE-2021-29658 State: PUBLISHED Published: 2021-03-31T16:58:52 Last Updated: 2024-08-03T22:11:06.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unofficial vscode-rufo extension before 0.0.4 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace folder. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jnbt/vscode-rufo/commit/bc0d212436f76d12cbdab287802fa5bc743f818a - https://marketplace.visualstudio.com/items/jnbt.vscode-rufo/changelog - https://vuln.ryotak.me/advisories/8
CVE ID: CVE-2021-29659 State: PUBLISHED Published: 2021-05-20T12:46:20 Last Updated: 2024-08-03T22:11:06.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: ownCloud 10.7 has an incorrect access control vulnerability, leading to remote information disclosure. Due to a bug in the related API endpoint, the attacker can enumerate all users in a single request by entering three whitespaces. Secondary, the retrieval of all users on a large instance could cause higher than average load on the instance. Additional Analyst Notes: - CVE Program Container: References: - https://doc.owncloud.com/server/admin_manual/release_notes.html - https://owncloud.com/security-advisories/cve-2021-29659
ttps://doc.owncloud.com/server/admin_manual/release_notes.html - https://owncloud.com/security-advisories/cve-2021-29659/
CVE ID: CVE-2021-29660 State: PUBLISHED Published: 2021-04-02T18:42:02 Last Updated: 2024-08-03T22:11:06.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_setpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the administrative password by inducing the Administrator user to browse a URL controlled by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/redteam
CVE ID: CVE-2021-29661 State: PUBLISHED Published: 2021-04-02T18:43:44 Last Updated: 2024-08-03T22:11:06.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diag_values.html Stored XSS via the ITEMLISTVALUES##ITEMID parameter, resulting in JavaScript payload injection into the trace file. This payload will then be triggered every time an authenticated user browses the page containing it. Additional Analyst Notes: - CVE Program Container: References: - https://www.gruppotim.it/redteam
CVE ID: CVE-2021-29662 State: PUBLISHED Published: 2021-03-31T17:28:16 Last Updated: 2024-08-03T22:11:06.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data::Validate::IP module through 0.29 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses. Additional Analyst Notes: - CVE Program Container: References: - https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/ - https://github.com/houseabsolute/Data-Validate-IP/commit/3bba13c819d616514a75e089badd75002fd4f14e - https://sick.codes/sick-2021-018/ - htt
houseabsolute/Data-Validate-IP/commit/3bba13c819d616514a75e089badd75002fd4f14e - https://sick.codes/sick-2021-018/ - https://github.com/houseabsolute/Data-Validate-IP - https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-018.md - https://security.netapp.com/advisory/ntap-20210604-0002/
CVE ID: CVE-2021-29663 State: PUBLISHED Published: 2021-03-31T19:03:37 Last Updated: 2024-08-03T22:11:06.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: CourseMS (aka Course Registration Management System) 2.1 is affected by cross-site scripting (XSS). When an attacker with access to an Admin account creates a Job Title in the Site area (aka the admin/add_jobs.php name parameter), they can insert an XSS payload. This payload will execute whenever anyone visits the registration page. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/projects/coursems - https://github.com/cptsticky/A-0day-Per-Day-Keeps-The-Cope-Away/blob/main/CVE-2021-29663
CVE ID: CVE-2021-29665 State: PUBLISHED Published: 2021-05-31T14:50:18.877701Z Last Updated: 2024-09-17T00:21:32.420Z Severity: CRITICAL (CVSS 9 CVSS:3.0/A:H/I:H/UI:N/AV:N/PR:N/C:H/S:C/AC:H/RC:C/E:U/RL:O) Vendors: IBM Products: Security Verify Access Problem Types: Gain Privileges Description: IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457315 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199399
CVE ID: CVE-2021-29666 State: PUBLISHED Published: 2021-04-27T16:32:52.431642Z Last Updated: 2024-09-16T22:55:52.980Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AC:L/S:C/I:L/AV:N/PR:L/A:N/UI:R/C:L/RL:O/RC:C/E:H) Vendors: IBM Products: Spectrum Scale Problem Types: Cross-Site Scripting Description: IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199400. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com
ed session. IBM X-Force ID: 199400. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6447107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199400
CVE ID: CVE-2021-29667 State: PUBLISHED Published: 2021-04-27T16:32:53.068503Z Last Updated: 2024-09-16T21:58:07.196Z Severity: HIGH (CVSS 7 CVSS:3.0/C:H/A:H/UI:R/PR:N/AV:L/I:H/S:U/AC:H/RL:O/RC:C/E:U) Vendors: IBM Products: Spectrum Scale Problem Types: Gain Access Description: IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 199403. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6447107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/1
r: References: - https://www.ibm.com/support/pages/node/6447107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199403
CVE ID: CVE-2021-29668 State: PUBLISHED Published: 2021-06-02T20:40:44.845040Z Last Updated: 2024-09-17T02:42:44.006Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/S:C/C:L/PR:L/AV:N/I:L/UI:R/A:N/AC:L/RL:O/E:H/RC:C) Vendors: IBM Products: Engineering Test Management, Rational Quality Manager, Rational Rhapsody Model Manager, Rational DOORS Next Generation, Engineering Lifecycle Optimization, Rational Engineering Lifecycle Manager, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering
to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199406. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199406
CVE ID: CVE-2021-29669 State: PUBLISHED Published: 2025-01-12T01:30:05.836Z Last Updated: 2025-01-13T15:18:46.605Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: Jazz Foundation Problem Types: CWE-79 Description: IBM Jazz Foundation 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7180689
CVE ID: CVE-2021-29670 State: PUBLISHED Published: 2021-06-02T20:40:45.538245Z Last Updated: 2024-09-16T20:36:39.542Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/UI:R/I:L/PR:L/AV:N/C:L/S:C/E:H/RL:O/RC:C) Vendors: IBM Products: Engineering Test Management, Rational Rhapsody Model Manager, Rational Quality Manager, Rational DOORS Next Generation, Engineering Lifecycle Optimization, Rational Collaborative Lifecycle Management, Rational Engineering Lifecycle Manager Problem Types: Cross-Site Scripting Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering
to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199408. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6457739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199408
CVE ID: CVE-2021-29671 State: PUBLISHED Published: 2021-04-09T16:45:18.550924Z Last Updated: 2024-09-16T20:37:52.214Z Severity: MEDIUM (CVSS 4 CVSS:3.0/S:U/UI:N/I:L/C:N/AC:L/PR:N/A:N/AV:L/E:U/RC:C/RL:O) Vendors: IBM Products: Spectrum Scale Problem Types: Bypass Security Description: IBM Spectrum Scale 5.1.0.1 could allow a local attacker to bypass the filesystem audit logging mechanism when file audit logging is enabled. IBM X-Force ID: 199478. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6441429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199478
CVE ID: CVE-2021-29672 State: PUBLISHED Published: 2021-04-26T16:30:45.624450Z Last Updated: 2024-09-17T01:21:21.614Z Severity: HIGH (CVSS 8.4 CVSS:3.0/AC:L/C:H/PR:N/AV:L/UI:N/I:H/S:U/A:H/E:U/RL:O/RC:C) Vendors: IBM Products: Spectrum Protect for Space Management Problem Types: Gain Privileges Description: IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the current locale settings. A local attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges or cause the application to crash. IBM X-Force ID: 199479 Additional Analyst Notes: - CVE Program Contai
ated privileges or cause the application to crash. IBM X-Force ID: 199479 Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6445497 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199479 - https://security.gentoo.org/glsa/202209-02
CVE ID: CVE-2021-29673 State: PUBLISHED Published: 2021-10-27T16:00:24.866700Z Last Updated: 2024-09-17T00:45:51.739Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/UI:R/AC:L/A:N/PR:L/AV:N/C:L/I:L/S:C/RC:C/RL:O/E:H) Vendors: IBM Products: Rational Team Concert, Rational DOORS Next Generation, Rational Engineering Lifecycle Manager, Engineering Workflow Management, Engineering Lifecycle Optimization, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to
users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199482. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6508583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199482
CVE ID: CVE-2021-29676 State: PUBLISHED Published: 2021-06-25T17:40:28.694701Z Last Updated: 2024-09-17T02:47:53.688Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/I:L/AV:N/A:N/PR:L/AC:L/C:L/S:U/UI:R/E:U/RL:O/RC:C) Vendors: IBM Products: Security Verify Privilege Vault Problem Types: Gain Access Description: IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote attacker could exploit this vulnerability to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking Additional Analyst Notes: - CVE Program Container: Referen
ng cross-site scripting, cache poisoning or session hijacking Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6467045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/199575