Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-45831 State: PUBLISHED Published: 2022-01-05T00:00:00 Last Updated: 2024-08-04T04:54:30.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1990 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-45832 State: PUBLISHED Published: 2022-01-05T20:32:16 Last Updated: 2024-08-04T04:54:30.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 at at hdf5/src/H5Eint.c, which causes a Denial of Service (context-dependent). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HDFGroup/hdf5/issues/1315
CVE ID: CVE-2021-45833 State: PUBLISHED Published: 2022-01-05T20:44:32 Last Updated: 2024-08-04T04:54:30.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 via the H5D__create_chunk_file_map_hyper function in /hdf5/src/H5Dchunk.c, which causes a Denial of Service (context-dependent). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HDFGroup/hdf5/issues/1313
CVE ID: CVE-2021-45834 State: PUBLISHED Published: 2022-03-18T10:55:59 Last Updated: 2024-08-04T04:54:30.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: An attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via add.php using MIME-bypass, which may be automatically processed within the product's environment or lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://opendocman.com - https://github.com/opendocman/opendocman - https://github.com/opendocman/opendocman/issues/326 - https://github.com/opendocman/opendocman/issues/330
CVE ID: CVE-2021-45835 State: PUBLISHED Published: 2022-03-18T10:53:01 Last Updated: 2024-08-04T04:54:31.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Online Admission System 1.0 allows an unauthenticated attacker to upload or transfer files of dangerous types to the application through documents.php, which may be used to execute malicious code or lead to code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rskoolrash/Online-Admission-System - https://github.com/rskoolrash/Online-Admission-System/issues/2 - https://www.exploit-db.com/exploits/50623
CVE ID: CVE-2021-45836 State: PUBLISHED Published: 2022-04-25T10:41:38 Last Updated: 2024-08-04T04:54:29.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authenticated attacker can execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) by injecting a maliciously crafted input in the request through /tos/index.php?app/hand_app. Additional Analyst Notes: - CVE Program Container: References: - https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/
CVE ID: CVE-2021-45837 State: PUBLISHED Published: 2022-04-25T00:00:00 Last Updated: 2024-08-04T04:54:31.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) by sending a specifically crafted input to /tos/index.php?app/del. Additional Analyst Notes: - CVE Program Container: References: - https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/ - http://packetstormsecurity.com/files/172881/TerraMaster-TOS-4.2.15-Remote-Code-Execution.html
CVE ID: CVE-2021-45839 State: PUBLISHED Published: 2022-04-25T00:00:00 Last Updated: 2024-08-04T04:54:31.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: It is possible to obtain the first administrator's hash set up on the system in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) as well as other information such as MAC address, internal IP address etc. by performing a request to the /module/api.php?mobile/webNasIPS endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/ - http://packetstormsecurity.com/files/172881/TerraMaster-TOS-4.2.15-Remote-Code-Execution.html
CVE ID: CVE-2021-45840 State: PUBLISHED Published: 2022-04-25T10:25:41 Last Updated: 2024-08-04T04:54:30.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) by sending specifically crafted input to /tos/index.php?app/app_start_stop. Additional Analyst Notes: - CVE Program Container: References: - https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/
CVE ID: CVE-2021-45841 State: PUBLISHED Published: 2022-04-25T00:00:00 Last Updated: 2024-08-04T04:54:30.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517), an attacker can self-sign session cookies by knowing the target's MAC address and the user's password hash. Guest users (disabled by default) can be abused using a null/empty hash and allow an unauthenticated attacker to login as guest. Additional Analyst Notes: - CVE Program Container: References: - https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/ - http://packetstormsecurity.com/files/172881/TerraMaster-TOS-4.2.15-Remote-Code-Execution.html
CVE ID: CVE-2021-45842 State: PUBLISHED Published: 2022-04-25T10:21:12 Last Updated: 2024-08-04T04:54:30.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: It is possible to obtain the first administrator's hash set up in Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517) on the system as well as other information such as MAC address, internal IP address etc. by performing a request to the /module/api.php?mobile/wapNasIPS endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://thatsn0tmy.site/posts/2021/12/how-to-summon-rces/
CVE ID: CVE-2021-45843 State: PUBLISHED Published: 2021-12-27T11:18:31 Last Updated: 2024-08-04T04:54:30.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: glFusion CMS v1.7.9 is affected by a reflected Cross Site Scripting (XSS) vulnerability. The value of the title request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. This input was echoed unmodified in the application's response. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/glfusion/XSS-Reflected
CVE ID: CVE-2021-45844 State: PUBLISHED Published: 2022-01-25T12:42:03 Last Updated: 2024-08-04T04:54:31.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper sanitization in the invocation of ODA File Converter from FreeCAD 0.19 allows an attacker to inject OS commands via a crafted filename. Additional Analyst Notes: - CVE Program Container: References: - https://tracker.freecad.org/view.php?id=4809 - https://forum.freecadweb.org/viewtopic.php?t=64733 - https://lists.debian.org/debian-lts-announce/2022/03/msg00004.html - https://lists.debian.org/debian-lts-announce/2022/08/msg00008.html - https://www.debian.org/security/2022/dsa-5229
CVE ID: CVE-2021-45845 State: PUBLISHED Published: 2022-01-25T12:55:21 Last Updated: 2024-08-04T04:54:31.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Path Sanity Check script of FreeCAD 0.19 is vulnerable to OS command injection, allowing an attacker to execute arbitrary commands via a crafted FCStd document. Additional Analyst Notes: - CVE Program Container: References: - https://tracker.freecad.org/view.php?id=4810 - https://github.com/FreeCAD/FreeCAD/pull/5306 - https://www.debian.org/security/2022/dsa-5229
CVE ID: CVE-2021-45846 State: PUBLISHED Published: 2022-01-25T13:20:56 Last Updated: 2024-08-04T04:54:31.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a "type" attribute. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slic3r/Slic3r/issues/5117
CVE ID: CVE-2021-45847 State: PUBLISHED Published: 2022-01-25T13:28:59 Last Updated: 2024-08-04T04:54:30.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slic3r/Slic3r/issues/5118 - https://github.com/slic3r/Slic3r/issues/5119 - https://github.com/slic3r/Slic3r/issues/5120
CVE ID: CVE-2021-45848 State: PUBLISHED Published: 2022-03-15T00:00:00 Last Updated: 2024-08-04T04:54:31.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nicotine-plus/nicotine-plus/issues/1777 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HWYV53KERFH2EC4XI2IVVQFTV75E5XM6/ - https://security.gentoo.org/glsa/202210-20
CVE ID: CVE-2021-45851 State: PUBLISHED Published: 2022-03-16T09:51:25 Last Updated: 2024-08-04T04:54:30.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the server's internal environment and services, often potentially leading to the attacker executing commands on the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=JE1Kcq3iJpc
CVE ID: CVE-2021-45852 State: PUBLISHED Published: 2022-03-16T09:37:31 Last Updated: 2024-08-04T04:54:31.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via add_patient.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/projectworldsofficial/hospital-management-system-in-php/issues/6
CVE ID: CVE-2021-45856 State: PUBLISHED Published: 2022-01-09T18:55:14 Last Updated: 2024-08-04T04:54:30.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Accu-Time Systems MAXIMUS 1.0 telnet service suffers from a remote buffer overflow which causes the telnet service to crash Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/165392/Accu-Time-Systems-MAXIMUS-1.0-Buffer-Overflow-Denial-Of-Service.html
CVE ID: CVE-2021-45860 State: PUBLISHED Published: 2022-03-01T23:47:09 Last Updated: 2024-08-04T04:54:31.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in DTSStreamReader::findFrame() of tsMuxer git-2678966 allows attackers to cause a Denial of Service (DoS) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/justdan96/tsMuxer/issues/510 - https://github.com/justdan96/tsMuxer/pull/511
CVE ID: CVE-2021-45861 State: PUBLISHED Published: 2022-03-01T23:47:04 Last Updated: 2024-08-04T04:54:31.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an Assertion `num <= INT_BIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of tsMuxer git-c6a0277. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/justdan96/tsMuxer/issues/478 - https://github.com/justdan96/tsMuxer/pull/481
CVE ID: CVE-2021-45863 State: PUBLISHED Published: 2022-03-01T23:47:16 Last Updated: 2024-08-04T04:54:30.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: tsMuxer git-2678966 was discovered to contain a heap-based buffer overflow via the function HevcUnit::updateBits in hevc.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/justdan96/tsMuxer/issues/509 - https://github.com/justdan96/tsMuxer/pull/512
CVE ID: CVE-2021-45864 State: PUBLISHED Published: 2022-03-01T23:47:07 Last Updated: 2024-08-04T04:54:31.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: tsMuxer git-c6a0277 was discovered to contain a segmentation fault via DTSStreamReader::findFrame in dtsStreamReader.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/justdan96/tsMuxer/issues/476 - https://github.com/justdan96/tsMuxer/pull/480
CVE ID: CVE-2021-45865 State: PUBLISHED Published: 2022-03-29T00:41:43 Last Updated: 2024-08-04T04:54:31.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: A File Upload vulnerability exists in Sourcecodester Student Attendance Manageent System 1.0 via the file upload functionality. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lohyt/Code-execution-via-vulnerable-file-upload-functionality-found-in-Student-Attendance-Management-Syste
CVE ID: CVE-2021-45866 State: PUBLISHED Published: 2022-03-29T00:39:09 Last Updated: 2024-08-04T04:54:30.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Student Attendance Management System 1.0 via the couse filed in index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lohyt/XSS-in-Student-attendance-management
CVE ID: CVE-2021-45868 State: PUBLISHED Published: 2022-03-18T06:22:48 Last Updated: 2024-08-04T04:54:30.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.15.3, fs/quota/quota_tree.c does not validate the block number in the quota tree (on disk). This can, for example, lead to a kernel/locking/rwsem.c use-after-free if there is a corrupted quota file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.kernel.org/show_bug.cgi?id=214655 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9bf3d20331295b1ecb81f4ed9ef358c51699a050 - https://www.openwall.com/lists/oss-security/2022/03/17/2 - https
t/commit/?id=9bf3d20331295b1ecb81f4ed9ef358c51699a050 - https://www.openwall.com/lists/oss-security/2022/03/17/2 - https://www.openwall.com/lists/oss-security/2022/03/17/1 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.3 - https://security.netapp.com/advisory/ntap-20220419-0003/
CVE ID: CVE-2021-45876 State: PUBLISHED Published: 2022-03-21T10:27:40 Last Updated: 2024-08-04T04:54:31.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by unauthenticated command injection. The url parameter of the function module downloadAndUpdate is vulnerable to an command Injection. Unfiltered user input is used to generate code which then gets executed when downloading new firmware. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/delikely/advisory/tree/main/GARO
CVE ID: CVE-2021-45877 State: PUBLISHED Published: 2022-03-21T10:38:37 Last Updated: 2024-08-04T04:54:30.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials. A hardcoded credential exist in /etc/tomcat8/tomcat-user.xml, which allows attackers to gain authorized access and control the tomcat completely on port 8000 in the tomcat manger page. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/delikely/advisory/tree/main/GARO
CVE ID: CVE-2021-45878 State: PUBLISHED Published: 2022-03-21T10:46:38 Last Updated: 2024-08-04T04:54:30.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by incorrect access control. Lack of access control on the web manger pages allows any user to view and modify information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/delikely/advisory/tree/main/GARO
CVE ID: CVE-2021-45884 State: PUBLISHED Published: 2021-12-27T21:31:48 Last Updated: 2024-08-04T04:54:30.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with a SOCKS fallback are enabled, additional DNS requests are issued outside of the proxying extension using the system's DNS settings, resulting in information disclosure. NOTE: this issue exists because of an incomplete fix for CVE-2021-21323 and CVE-2021-22916. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/brave/brave-core/pull/10742 - https://github.com/brave/brave-browser/issues/
Container: References: - https://github.com/brave/brave-core/pull/10742 - https://github.com/brave/brave-browser/issues/19070 - https://github.com/brave/brave-browser/issues/20079 - https://hackerone.com/reports/1377864
CVE ID: CVE-2021-45885 State: PUBLISHED Published: 2021-12-29T16:02:03 Last Updated: 2024-08-04T04:54:31.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8). Under a specific update-migration scenario, the first SSH password change does not properly clear the old password. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu - https://advisories.stormshield.eu/2021-069/
CVE ID: CVE-2021-45886 State: PUBLISHED Published: 2022-03-13T01:30:07 Last Updated: 2024-08-04T04:54:30.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PONTON X/P Messenger before 3.11.2. Anti-CSRF tokens are globally valid, making the web application vulnerable to a weakened version of CSRF, where an arbitrary token of a low-privileged user (such as operator) can be used to confirm actions of higher-privileged ones (such as xpadmin). Additional Analyst Notes: - CVE Program Container: References: - https://www.ponton.de/products/xpmessenger/ - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-080.txt
CVE ID: CVE-2021-45887 State: PUBLISHED Published: 2022-03-13T01:34:54 Last Updated: 2024-08-04T04:54:30.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PONTON X/P Messenger before 3.11.2. Due to path traversal in private/SchemaSetUpload.do for uploaded ZIP files, an executable script can be uploaded by web application administrators, giving the attacker remote code execution on the underlying server via an imgs/*.jsp URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.ponton.de/products/xpmessenger/ - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-077.txt
CVE ID: CVE-2021-45888 State: PUBLISHED Published: 2022-03-13T01:18:57 Last Updated: 2024-08-04T04:54:31.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PONTON X/P Messenger before 3.11.2. The navigation tree that is shown on the left side of every page of the web application is vulnerable to XSS: it allows injection of JavaScript into its nodes. Creating such nodes is only possible for users who have the role Configuration Administrator or Administrator. Additional Analyst Notes: - CVE Program Container: References: - https://www.ponton.de/products/xpmessenger/ - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-079.txt
CVE ID: CVE-2021-45889 State: PUBLISHED Published: 2022-03-13T01:25:46 Last Updated: 2024-08-04T04:54:31.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PONTON X/P Messenger before 3.11.2. Several functions are vulnerable to reflected XSS, as demonstrated by private/index.jsp?partners/ShowNonLocalPartners.do?localID= or private/index.jsp or private/index.jsp?database/databaseTab.jsp or private/index.jsp?activation/activationMainTab.jsp or private/index.jsp?communication/serverTab.jsp or private/index.jsp?emailNotification/notificationTab.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://www.ponton.de/products/xpmessenger/
ionTab.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://www.ponton.de/products/xpmessenger/ - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-078.txt
CVE ID: CVE-2021-45890 State: PUBLISHED Published: 2021-12-27T19:34:36 Last Updated: 2024-08-04T04:54:30.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: basic/BasicAuthProvider.java in AuthGuard before 0.9.0 allows authentication via an inactive identifier. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/AuthGuard/AuthGuard/commit/9783b1143da6576028de23e15a1f198b1f937b82 - https://github.com/AuthGuard/AuthGuard/compare/v0.8.0...v0.9.0 - https://github.com/AuthGuard/AuthGuard/issues/166 - https://github.com/AuthGuard/AuthGuard/pull/181
CVE ID: CVE-2021-45891 State: PUBLISHED Published: 2022-04-05T01:30:20 Last Updated: 2024-08-04T04:54:31.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4., that allows attackers to escalate privileges within the application, since all permission checks are done client-side, not server-side. Additional Analyst Notes: - CVE Program Container: References: - https://syss.de - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-063.txt
CVE ID: CVE-2021-45892 State: PUBLISHED Published: 2022-04-05T01:18:23 Last Updated: 2024-08-04T04:54:30.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is storage of Passwords in a Recoverable Format. Additional Analyst Notes: - CVE Program Container: References: - https://syss.de - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-064.txt
CVE ID: CVE-2021-45893 State: PUBLISHED Published: 2022-04-05T01:12:22 Last Updated: 2024-08-04T04:54:30.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Improper Handling of Case Sensitivity, which makes password guessing easier. Additional Analyst Notes: - CVE Program Container: References: - https://syss.de - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-065.txt
CVE ID: CVE-2021-45894 State: PUBLISHED Published: 2022-04-05T01:00:23 Last Updated: 2024-08-04T04:54:30.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Cleartext Transmission of Sensitive Information. Additional Analyst Notes: - CVE Program Container: References: - https://syss.de - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-066.txt
CVE ID: CVE-2021-45895 State: PUBLISHED Published: 2021-12-27T20:10:29 Last Updated: 2024-08-04T04:54:30.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/netgen/TagsBundle/releases/tag/3.4.11 - https://github.com/netgen/TagsBundle/releases/tag/4.0.15
CVE ID: CVE-2021-45896 State: PUBLISHED Published: 2021-12-27T21:22:35 Last Updated: 2024-08-04T04:54:30.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nokia FastMile 3TG00118ABAD52 devices allow privilege escalation by an authenticated user via is_ctc_admin=1 to login_web_app.cgi and use of Import Config File. Additional Analyst Notes: - CVE Program Container: References: - https://eddiez.me/hacking-the-nokia-fastmile/ - https://gist.github.com/thedroidgeek/80c379aa43b71015d71da130f85a435a