Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ions and Remote Code Execution. (FSMD-2021-0016) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf
CVE ID: CVE-2021-31888 State: PUBLISHED Published: 2021-11-09T11:32:00 Last Updated: 2024-08-03T23:10:30.804Z Vendors: Siemens Products: APOGEE MBC (PPC) (BACnet), APOGEE MBC (PPC) (P2 Ethernet), APOGEE MEC (PPC) (BACnet), APOGEE MEC (PPC) (P2 Ethernet), APOGEE PXC Compact (BACnet), APOGEE PXC Compact (P2 Ethernet), APOGEE PXC Modular (BACnet), APOGEE PXC Modular (P2 Ethernet), Desigo PXC00-E.D, Desigo PXC00-U, Desigo PXC001-E.D, Desigo PXC100-E.D, Desigo PXC12-E.D, Desigo PXC128-U, Desigo PXC200-E.D, Desigo PXC22-E.D, Desigo PXC22.1-E.D, Desigo PXC36.1-E.D, Desigo PXC50-E.D, Desigo PXC64-U, Desigo PXM20-E, Nucleus NET, Nucleus ReadyStart V3, Nucleus Source Code, TALON TC Compact (BACnet), T
versions >= V2.3 and < V6.30.016), Desigo PXC50-E.D (All versions >= V2.3 and < V6.30.016), Desigo PXC64-U (All versions >= V2.3 and < V6.30.016), Desigo PXM20-E (All versions >= V2.3 and < V6.30.016), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus Source Code (All versions), TALON TC Compact (BACnet) (All versions < V3.5.4), TALON TC Modular (BACnet) (All versions < V3.5.4). FTP server does not properly validate the length of the “MKD/XMKD” command, leading to stack-based buffer overflows. This may result in Denial-of-Service conditions and Remote Code Execution. (FSMD-2021-0018) Additional Analyst Notes: - CVE Program Container: References: - https:
ions and Remote Code Execution. (FSMD-2021-0018) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf
CVE ID: CVE-2021-31889 State: PUBLISHED Published: 2021-11-09T11:32:01 Last Updated: 2025-03-11T09:47:45.226Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Siemens Products: Capital Embedded AR Classic 431-422, Capital Embedded AR Classic R20-11, PLUSCONTROL 1st Gen, SIMOTICS CONNECT 400 Problem Types: CWE-191 Description: A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0). Malformed TCP packets with a corrupted SACK option leads to Information Leaks and Denial-of-Service conditi
< V0.5.0.0). Malformed TCP packets with a corrupted SACK option leads to Information Leaks and Denial-of-Service conditions. (FSMD-2021-0015) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-223353.pdf - https://cert-portal.siemens.com/productcert/html/ssa-114589.html - https://cert-portal.siemens.com/productcert/html/ssa-044112.html - https://cert-portal.siemens.com/pr
/ssa-114589.html - https://cert-portal.siemens.com/productcert/html/ssa-044112.html - https://cert-portal.siemens.com/productcert/html/ssa-620288.html - https://cert-portal.siemens.com/productcert/html/ssa-845392.html - https://cert-portal.siemens.com/productcert/html/ssa-223353.html
CVE ID: CVE-2021-31890 State: PUBLISHED Published: 2021-11-09T11:32:02 Last Updated: 2025-03-11T09:47:46.741Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Siemens Products: Capital Embedded AR Classic 431-422, Capital Embedded AR Classic R20-11, PLUSCONTROL 1st Gen, SIMOTICS CONNECT 400 Problem Types: CWE-240 Description: A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All versions), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). The total length of an TCP payload (set in the IP header) i
< V0.5.0.0), SIMOTICS CONNECT 400 (All versions < V1.0.0.0). The total length of an TCP payload (set in the IP header) is unchecked. This may lead to various side effects, including Information Leak and Denial-of-Service conditions, depending on the network buffer organization in memory. (FSMD-2021-0017) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-114589.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-044112.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-620288.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-845392.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-223353.pdf - http
ortal.siemens.com/productcert/pdf/ssa-845392.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-223353.pdf - https://cert-portal.siemens.com/productcert/html/ssa-114589.html - https://cert-portal.siemens.com/productcert/html/ssa-044112.html - https://cert-portal.siemens.com/productcert/html/ssa-620288.html - https://cert-portal.siemens.com/productcert/html/ssa-845392.html - https://cert-portal.siemens.com/productcert/html/ssa-223353.html
CVE ID: CVE-2021-31891 State: PUBLISHED Published: 2021-09-14T10:47:31 Last Updated: 2024-08-03T23:10:30.639Z Vendors: Siemens Products: Desigo CC, GMA-Manager, Operation Scheduler, Siveillance Control, Siveillance Control Pro Problem Types: CWE-78 Description: A vulnerability has been identified in Desigo CC (All versions with OIS Extension Module), GMA-Manager (All versions with OIS running on Debian 9 or earlier), Operation Scheduler (All versions with OIS running on Debian 9 or earlier), Siveillance Control (All versions with OIS running on Debian 9 or earlier), Siveillance Control Pro (All versions). The affected application incorrectly neutralizes special elements in a specific HTTP GE
ance Control Pro (All versions). The affected application incorrectly neutralizes special elements in a specific HTTP GET request which could lead to command injection. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code on the system with root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-535380.pdf
CVE ID: CVE-2021-31892 State: PUBLISHED Published: 2021-07-13T11:02:55 Last Updated: 2024-08-03T23:10:30.735Z Vendors: Siemens Products: SINUMERIK Analyse MyCondition, SINUMERIK Analyze MyPerformance, SINUMERIK Analyze MyPerformance /OEE-Monitor, SINUMERIK Analyze MyPerformance /OEE-Tuning, SINUMERIK Integrate Client 02, SINUMERIK Integrate Client 03, SINUMERIK Integrate Client 04, SINUMERIK Integrate for Production 4.1, SINUMERIK Integrate for Production 5.1, SINUMERIK Manage MyMachines, SINUMERIK Manage MyMachines /Remote, SINUMERIK Manage MyMachines /Spindel Monitor, SINUMERIK Manage MyPrograms, SINUMERIK Manage MyResources /Programs, SINUMERIK Manage MyResources /Tools, SINUMERIK Manage
UMERIK Manage MyPrograms, SINUMERIK Manage MyResources /Programs, SINUMERIK Manage MyResources /Tools, SINUMERIK Manage MyTools, SINUMERIK Operate V4.8, SINUMERIK Operate V4.93, SINUMERIK Operate V4.94, SINUMERIK Optimize MyProgramming /NX-Cam Editor Problem Types: CWE-295 Description: A vulnerability has been identified in SINUMERIK Analyse MyCondition (All versions), SINUMERIK Analyze MyPerformance (All versions), SINUMERIK Analyze MyPerformance /OEE-Monitor (All versions), SINUMERIK Analyze MyPerformance /OEE-Tuning (All versions), SINUMERIK Integrate Client 02 (All versions >= V02.00.12 < 02.00.18), SINUMERIK Integrate Client 03 (All versions >= V03.00.12 < 03.00.18), SINUMERIK Integrate
ions >= V02.00.12 < 02.00.18), SINUMERIK Integrate Client 03 (All versions >= V03.00.12 < 03.00.18), SINUMERIK Integrate Client 04 (V04.00.02 and all versions >= V04.00.15 < 04.00.18), SINUMERIK Integrate for Production 4.1 (All versions < V4.1 SP10 HF3), SINUMERIK Integrate for Production 5.1 (V5.1), SINUMERIK Manage MyMachines (All versions), SINUMERIK Manage MyMachines /Remote (All versions), SINUMERIK Manage MyMachines /Spindel Monitor (All versions), SINUMERIK Manage MyPrograms (All versions), SINUMERIK Manage MyResources /Programs (All versions), SINUMERIK Manage MyResources /Tools (All versions), SINUMERIK Manage MyTools (All versions), SINUMERIK Operate V4.8 (All versions < V4.8 SP8)
sources /Tools (All versions), SINUMERIK Manage MyTools (All versions), SINUMERIK Operate V4.8 (All versions < V4.8 SP8), SINUMERIK Operate V4.93 (All versions < V4.93 HF7), SINUMERIK Operate V4.94 (All versions < V4.94 HF5), SINUMERIK Optimize MyProgramming /NX-Cam Editor (All versions). Due to an error in a third-party dependency the ssl flags used for setting up a TLS connection to a server are overwitten with wrong settings. This results in a missing validation of the server certificate and thus in a possible TLS MITM szenario. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-729965.pdf - https://us-cert.cisa.gov/ics/adv
ntainer: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-729965.pdf - https://us-cert.cisa.gov/ics/advisories/icsa-21-194-04
CVE ID: CVE-2021-31893 State: PUBLISHED Published: 2021-07-13T11:02:56 Last Updated: 2024-08-03T23:10:30.646Z Vendors: Siemens Products: SIMATIC PCS 7 V8.2 and earlier, SIMATIC PCS 7 V9.0, SIMATIC PDM, SIMATIC STEP 7 V5.X, SINAMICS STARTER (containing STEP 7 OEM version) Problem Types: CWE-120 Description: A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). The affected software contains a buffer overflow vulnerability while handling certain files that c
versions < V5.4 HF2). The affected software contains a buffer overflow vulnerability while handling certain files that could allow a local attacker to trigger a denial-of-service condition or potentially lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-641963.pdf
CVE ID: CVE-2021-31894 State: PUBLISHED Published: 2021-07-13T11:02:58 Last Updated: 2024-08-03T23:10:30.952Z Vendors: Siemens Products: SIMATIC PCS 7 V8.2 and earlier, SIMATIC PCS 7 V9.X, SIMATIC PDM, SIMATIC STEP 7 V5.X, SINAMICS STARTER (containing STEP 7 OEM version) Problem Types: CWE-732 Description: A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions < V9.1 SP2), SIMATIC PDM (All versions < V9.2 SP2), SIMATIC STEP 7 V5.X (All versions < V5.7), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 SP2 HF1). A directory containing metafiles relevant to devices' configurations has write permissions. An att
ions < V5.4 SP2 HF1). A directory containing metafiles relevant to devices' configurations has write permissions. An attacker could leverage this vulnerability by changing the content of certain metafiles and subsequently manipulate parameters or behavior of devices that would be later configured by the affected software. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-661034.pdf
CVE ID: CVE-2021-31895 State: PUBLISHED Published: 2021-07-13T11:02:59 Last Updated: 2025-10-14T09:14:56.660Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Siemens Products: RUGGEDCOM i800, RUGGEDCOM i801, RUGGEDCOM i802, RUGGEDCOM i803, RUGGEDCOM M2100, RUGGEDCOM M2200, RUGGEDCOM M969, RUGGEDCOM RMC30, RUGGEDCOM RMC8388 V4.X, RUGGEDCOM RMC8388 V5.X, RUGGEDCOM RP110, RUGGEDCOM RS1600, RUGGEDCOM RS1600F, RUGGEDCOM RS1600T, RUGGEDCOM RS400, RUGGEDCOM RS401, RUGGEDCOM RS416, RUGGEDCOM RS416P, RUGGEDCOM RS416Pv2 V4.X, RUGGEDCOM RS416Pv2 V5.X, RUGGEDCOM RS416v2 V4.X, RUGGEDCOM RS416v2 V5.X, RUGGEDCOM RS8000, RUGGEDCOM RS8000A, RUGGEDCOM RS8000H, RUG
416Pv2 V5.X, RUGGEDCOM RS416v2 V4.X, RUGGEDCOM RS416v2 V5.X, RUGGEDCOM RS8000, RUGGEDCOM RS8000A, RUGGEDCOM RS8000H, RUGGEDCOM RS8000T, RUGGEDCOM RS900 (32M) V4.X, RUGGEDCOM RS900 (32M) V5.X, RUGGEDCOM RS900G, RUGGEDCOM RS900G (32M) V4.X, RUGGEDCOM RS900G (32M) V5.X, RUGGEDCOM RS900GP, RUGGEDCOM RS900L, RUGGEDCOM RS900W, RUGGEDCOM RS910, RUGGEDCOM RS910L, RUGGEDCOM RS910W, RUGGEDCOM RS920L, RUGGEDCOM RS920W, RUGGEDCOM RS930L, RUGGEDCOM RS930W, RUGGEDCOM RS940G, RUGGEDCOM RS969, RUGGEDCOM RSG2100, RUGGEDCOM RSG2100 (32M) V4.X, RUGGEDCOM RSG2100 (32M) V5.X, RUGGEDCOM RSG2100P, RUGGEDCOM RSG2100P (32M) V4.X, RUGGEDCOM RSG2100P (32M) V5.X, RUGGEDCOM RSG2200, RUGGEDCOM RSG2288 V4.X, RUGGEDCOM RSG
, RUGGEDCOM RSG2100P (32M) V4.X, RUGGEDCOM RSG2100P (32M) V5.X, RUGGEDCOM RSG2200, RUGGEDCOM RSG2288 V4.X, RUGGEDCOM RSG2288 V5.X, RUGGEDCOM RSG2300 V4.X, RUGGEDCOM RSG2300 V5.X, RUGGEDCOM RSG2300P V4.X, RUGGEDCOM RSG2300P V5.X, RUGGEDCOM RSG2488 V4.X, RUGGEDCOM RSG2488 V5.X, RUGGEDCOM RSG907R, RUGGEDCOM RSG908C, RUGGEDCOM RSG909R, RUGGEDCOM RSG910C, RUGGEDCOM RSG920P V4.X, RUGGEDCOM RSG920P V5.X, RUGGEDCOM RSL910, RUGGEDCOM RST2228, RUGGEDCOM RST2228P, RUGGEDCOM RST916C, RUGGEDCOM RST916P Problem Types: CWE-120 Description: A vulnerability has been identified in RUGGEDCOM i800 (All versions < V4.3.7), RUGGEDCOM i801 (All versions < V4.3.7), RUGGEDCOM i802 (All versions < V4.3.7), RUGGEDCOM
i800 (All versions < V4.3.7), RUGGEDCOM i801 (All versions < V4.3.7), RUGGEDCOM i802 (All versions < V4.3.7), RUGGEDCOM i803 (All versions < V4.3.7), RUGGEDCOM M2100 (All versions < V4.3.7), RUGGEDCOM M2200 (All versions < V4.3.7), RUGGEDCOM M969 (All versions < V4.3.7), RUGGEDCOM RMC30 (All versions < V4.3.7), RUGGEDCOM RMC8388 V4.X (All versions < V4.3.7), RUGGEDCOM RMC8388 V5.X (All versions < V5.5.4), RUGGEDCOM RP110 (All versions < V4.3.7), RUGGEDCOM RS1600 (All versions < V4.3.7), RUGGEDCOM RS1600F (All versions < V4.3.7), RUGGEDCOM RS1600T (All versions < V4.3.7), RUGGEDCOM RS400 (All versions < V4.3.7), RUGGEDCOM RS401 (All versions < V4.3.7), RUGGEDCOM RS416 (All versions < V4.3.7),
GGEDCOM RS400 (All versions < V4.3.7), RUGGEDCOM RS401 (All versions < V4.3.7), RUGGEDCOM RS416 (All versions < V4.3.7), RUGGEDCOM RS416P (All versions < V4.3.7), RUGGEDCOM RS416Pv2 V4.X (All versions < V4.3.7), RUGGEDCOM RS416Pv2 V5.X (All versions < V5.5.4), RUGGEDCOM RS416v2 V4.X (All versions < V4.3.7), RUGGEDCOM RS416v2 V5.X (All versions < 5.5.4), RUGGEDCOM RS8000 (All versions < V4.3.7), RUGGEDCOM RS8000A (All versions < V4.3.7), RUGGEDCOM RS8000H (All versions < V4.3.7), RUGGEDCOM RS8000T (All versions < V4.3.7), RUGGEDCOM RS900 (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RS900 (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RS900G (All versions < V4.3.7), RUGGEDCOM RS900G (32M) V4.X
UGGEDCOM RS900 (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RS900G (All versions < V4.3.7), RUGGEDCOM RS900G (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RS900G (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RS900GP (All versions < V4.3.7), RUGGEDCOM RS900L (All versions < V4.3.7), RUGGEDCOM RS900W (All versions < V4.3.7), RUGGEDCOM RS910 (All versions < V4.3.7), RUGGEDCOM RS910L (All versions < V4.3.7), RUGGEDCOM RS910W (All versions < V4.3.7), RUGGEDCOM RS920L (All versions < V4.3.7), RUGGEDCOM RS920W (All versions < V4.3.7), RUGGEDCOM RS930L (All versions < V4.3.7), RUGGEDCOM RS930W (All versions < V4.3.7), RUGGEDCOM RS940G (All versions < V4.3.7), RUGGEDCOM RS969 (All versions < V4.3.7)
GEDCOM RS930W (All versions < V4.3.7), RUGGEDCOM RS940G (All versions < V4.3.7), RUGGEDCOM RS969 (All versions < V4.3.7), RUGGEDCOM RSG2100 (All versions < V4.3.7), RUGGEDCOM RSG2100 (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RSG2100 (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RSG2100P (All versions < V4.3.7), RUGGEDCOM RSG2100P (32M) V4.X (All versions < V4.3.7), RUGGEDCOM RSG2100P (32M) V5.X (All versions < V5.5.4), RUGGEDCOM RSG2200 (All versions < V4.3.7), RUGGEDCOM RSG2288 V4.X (All versions < V4.3.7), RUGGEDCOM RSG2288 V5.X (All versions < V5.5.4), RUGGEDCOM RSG2300 V4.X (All versions < V4.3.7), RUGGEDCOM RSG2300 V5.X (All versions < V5.5.4), RUGGEDCOM RSG2300P V4.X (All versions
300 V4.X (All versions < V4.3.7), RUGGEDCOM RSG2300 V5.X (All versions < V5.5.4), RUGGEDCOM RSG2300P V4.X (All versions < V4.3.7), RUGGEDCOM RSG2300P V5.X (All versions < V5.5.4), RUGGEDCOM RSG2488 V4.X (All versions < V4.3.7), RUGGEDCOM RSG2488 V5.X (All versions < V5.5.4), RUGGEDCOM RSG907R (All versions < V5.5.4), RUGGEDCOM RSG908C (All versions < V5.5.4), RUGGEDCOM RSG909R (All versions < V5.5.4), RUGGEDCOM RSG910C (All versions < V5.5.4), RUGGEDCOM RSG920P V4.X (All versions < V4.3.7), RUGGEDCOM RSG920P V5.X (All versions < V5.5.4), RUGGEDCOM RSL910 (All versions < V5.5.4), RUGGEDCOM RST2228 (All versions < V5.5.4), RUGGEDCOM RST2228P (All versions < V5.5.4), RUGGEDCOM RST916C (All vers
5.4), RUGGEDCOM RST2228 (All versions < V5.5.4), RUGGEDCOM RST2228P (All versions < V5.5.4), RUGGEDCOM RST916C (All versions < V5.5.4), RUGGEDCOM RST916P (All versions < V5.5.4). The DHCP client in affected devices fails to properly sanitize incoming DHCP packets. This could allow an unauthenticated remote attacker to cause memory to be overwritten, potentially allowing remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-373591.pdf - https://cert-portal.siemens.com/productcert/html/ssa-373591.html
CVE ID: CVE-2021-31897 State: PUBLISHED Published: 2021-05-11T12:19:47 Last Updated: 2024-08-03T23:10:30.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31898 State: PUBLISHED Published: 2021-05-11T12:18:20 Last Updated: 2024-08-03T23:10:30.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31899 State: PUBLISHED Published: 2021-05-11T11:21:55 Last Updated: 2024-08-03T23:10:30.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Code With Me bundled to the compatible IDEs before version 2021.1, the client could execute code in read-only mode. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31900 State: PUBLISHED Published: 2021-05-11T11:22:47 Last Updated: 2024-08-03T23:10:30.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Code With Me bundled to the compatible IDE versions before 2021.1, a client could open a browser on a host. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31901 State: PUBLISHED Published: 2021-05-11T11:34:00 Last Updated: 2024-08-03T23:10:30.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31902 State: PUBLISHED Published: 2021-05-11T11:38:49 Last Updated: 2024-08-03T23:10:30.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31903 State: PUBLISHED Published: 2021-05-11T11:37:43 Last Updated: 2024-08-03T23:10:31.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31904 State: PUBLISHED Published: 2021-05-11T11:46:23 Last Updated: 2024-08-03T23:10:30.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2020.2.2, XSS was potentially possible on the test history page. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31905 State: PUBLISHED Published: 2021-05-11T11:40:48 Last Updated: 2024-08-03T23:10:30.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31906 State: PUBLISHED Published: 2021-05-11T11:54:46 Last Updated: 2024-08-03T23:10:30.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2020.2.2, audit logs were not sufficient when an administrator uploaded a file. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31907 State: PUBLISHED Published: 2021-05-11T11:56:05 Last Updated: 2024-08-03T23:10:31.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2020.2.2, permission checks for changing TeamCity plugins were implemented improperly. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31908 State: PUBLISHED Published: 2021-05-11T12:00:45 Last Updated: 2024-08-03T23:10:31.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2020.2.3, stored XSS was possible on several pages. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31909 State: PUBLISHED Published: 2021-05-11T11:59:25 Last Updated: 2024-08-03T23:10:31.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-31910 State: PUBLISHED Published: 2021-05-11T12:02:20 Last Updated: 2024-08-03T23:10:30.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/