Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-3524 State: PUBLISHED Published: 2021-05-17T00:00:00 Last Updated: 2024-08-03T17:01:06.034Z Vendors: n/a Products: ceph Problem Types: CWE-20 Description: A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the ExposeHeader tag in the CORS configuration file generates a header injection in the response when the CORS request is made. In addition, the prior bug fix for CVE-2020-10753 did not account for the use of \r as a header separator, thus a new flaw has been created. Additional Analyst Notes: - CVE Program
ount for the use of \r as a header separator, thus a new flaw has been created. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1951674 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPCJN2YDZCBMF4FOJXSTAADKFGEQEO7O/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FX5ZHI5L7FOHXOSEV3TYBAL66DMLJ7V5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZRUNDH2TJRZRWL3DCH2PQ6KROWTPQ7AJ/ - https://lists.debian.org/debian-lts-announce/2021/08/msg00013.html - https://lists.debian.org/debian-l
2PQ6KROWTPQ7AJ/ - https://lists.debian.org/debian-lts-announce/2021/08/msg00013.html - https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
CVE ID: CVE-2021-3525 State: REJECTED Published: 2021-06-11T21:21:20 Last Updated: 2021-06-11T21:21:20 Description: No description available.
CVE ID: CVE-2021-3526 State: REJECTED Published: 2021-06-23T15:18:25 Last Updated: 2021-06-23T15:18:25 Description: No description available.
CVE ID: CVE-2021-3527 State: PUBLISHED Published: 2021-05-26T21:13:56 Last Updated: 2024-08-03T17:01:07.589Z Vendors: n/a Products: QEMU Problem Types: CWE-770 Description: A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk transfer is used to dynamically allocate a variable length array (VLA) on the stack without proper validation. Since the total size is not bounded, a malicious guest could use this flaw to influence the array length and cause the QEMU process to perform an excessive allocation on the stack, resulting in a denia
luence the array length and cause the QEMU process to perform an excessive allocation on the stack, resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1955695 - https://www.openwall.com/lists/oss-security/2021/05/05/5 - https://gitlab.com/qemu-project/qemu/-/commit/7ec54f9eb62b5d177e30eb8b1cad795a5f8d8986 - https://gitlab.com/qemu-project/qemu/-/commit/05a40b172e4d691371534828078be47e7fff524c - https://security.netapp.com/advisory/ntap-20210708-0008/ - https://lists.debian.org/debian-lts-announce/2021/09/msg00000.html - https://security.gentoo.org/glsa/202208-27 - https://lists.debian.org/debian-lts-a
-lts-announce/2021/09/msg00000.html - https://security.gentoo.org/glsa/202208-27 - https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html
CVE ID: CVE-2021-3528 State: PUBLISHED Published: 2021-05-13T14:30:07 Last Updated: 2024-08-03T17:01:07.389Z Vendors: n/a Products: NooBaa Problem Types: CWE-522 Description: A flaw was found in noobaa-operator in versions before 5.7.0, where internal RPC AuthTokens between the noobaa operator and the noobaa core are leaked into log files. An attacker with access to the log files could use this AuthToken to gain additional access into noobaa deployment and can read/modify system configuration. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1955601
CVE ID: CVE-2021-3529 State: PUBLISHED Published: 2021-06-02T16:10:51 Last Updated: 2024-08-03T17:01:07.751Z Vendors: n/a Products: noobaa-core Problem Types: CWE-79 Description: A flaw was found in noobaa-core in versions before 5.7.0. This flaw results in the name of an arbitrarily URL being copied into an HTML document as plain text between tags, including potentially a payload script. The input was echoed unmodified in the application response, resulting in arbitrary JavaScript being injected into an application's response. The highest threat to the system is for confidentiality, availability, and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzill
entiality, availability, and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1950479
CVE ID: CVE-2021-3530 State: PUBLISHED Published: 2021-06-02T14:31:23 Last Updated: 2024-08-03T17:01:05.995Z Vendors: n/a Products: binutils Problem Types: CWE-674 Description: A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1956423 - https://src.fedoraproject.org/rpms/binutils/blob/rawhide/f/binutils-CVE-2021-3530.patch - https://security.netapp.com/advisory/ntap-20210716-0006/ - https://security.gentoo.org/glsa/202208-30
CVE ID: CVE-2021-3531 State: PUBLISHED Published: 2021-05-18T00:00:00 Last Updated: 2024-08-03T17:01:07.787Z Vendors: n/a Products: ceph Problem Types: CWE-20 Description: A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash, resulting in a denial of service. The greatest threat to the system is of availability. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2021/05/14/5 - http://www.openwall.com/lists/oss-security/2021/05/17/7 - https://bugzilla.redhat.com/show_bug.cgi?id=1955326 - https://lists.fedoraproj
all.com/lists/oss-security/2021/05/17/7 - https://bugzilla.redhat.com/show_bug.cgi?id=1955326 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPCJN2YDZCBMF4FOJXSTAADKFGEQEO7O/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FX5ZHI5L7FOHXOSEV3TYBAL66DMLJ7V5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZRUNDH2TJRZRWL3DCH2PQ6KROWTPQ7AJ/ - https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
CVE ID: CVE-2021-3532 State: REJECTED Published: 2021-06-09T11:09:03 Last Updated: 2024-01-15T16:44:44.547Z Description: No description available.
CVE ID: CVE-2021-3533 State: REJECTED Published: 2021-06-09T11:09:16 Last Updated: 2024-01-23T12:25:46.129Z Description: No description available.
CVE ID: CVE-2021-3534 State: REJECTED Published: 2022-02-01T04:31:55 Last Updated: 2022-02-01T04:31:55 Description: No description available.
CVE ID: CVE-2021-3535 State: PUBLISHED Published: 2021-06-16T01:40:12.586548Z Last Updated: 2024-09-16T23:10:39.986Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Rapid7 Products: Rapid7 Nexpose Problem Types: CWE-79 Description: Rapid7 Nexpose is vulnerable to a non-persistent cross-site scripting vulnerability affecting the Security Console's Filtered Asset Search feature. A specific search criterion and operator combination in Filtered Asset Search could have allowed a user to pass code through the provided search field. This issue affects version 6.6.80 and prior, and is fixed in 6.6.81. If your Security Console currently falls on or within this affect
ects version 6.6.80 and prior, and is fixed in 6.6.81. If your Security Console currently falls on or within this affected version range, ensure that you update your Security Console to the latest version. Additional Analyst Notes: - CVE Program Container: References: - https://docs.rapid7.com/release-notes/nexpose/20210505/
CVE ID: CVE-2021-3536 State: PUBLISHED Published: 2021-05-20T12:15:09 Last Updated: 2024-08-03T17:01:07.095Z Vendors: n/a Products: wildfly Problem Types: CWE-79 Description: A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1948001
CVE ID: CVE-2021-3537 State: PUBLISHED Published: 2021-05-14T19:50:10 Last Updated: 2024-08-03T17:01:08.318Z Vendors: n/a Products: libxml2 Problem Types: CWE-476 Description: A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the application. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QVM4UJ3
: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QVM4UJ3376I6ZVOYMHBNX4GY3NIV52WV/ - https://lists.debian.org/debian-lts-announce/2021/05/msg00008.html - https://bugzilla.redhat.com/show_bug.cgi?id=1956522 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZOMV5J4PMZAORVT64BKLV6YIZAFDGX6/ - https://security.gentoo.org/glsa/202107-05 - https://security.netapp.com/advisory/ntap-20210625-0002/ - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-3538 State: PUBLISHED Published: 2021-06-02T13:22:21 Last Updated: 2024-08-03T17:01:07.411Z Vendors: n/a Products: satori/go.uuid Problem Types: CWE-338 Description: A flaw was found in github.com/satori/go.uuid in versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45. Due to insecure randomness in the g.rand.Read function the generated UUIDs are predictable for an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1954376 - https://github.com/satori/go.uuid/issues/73 - https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMSATORIGOUUID-72488
CVE ID: CVE-2021-3539 State: PUBLISHED Published: 2021-08-04T22:20:47.939271Z Last Updated: 2024-09-16T18:39:36.342Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N) Vendors: EspoCRM Products: EspoCRM Problem Types: CWE-79 Description: EspoCRM 6.1.6 and prior suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. This issue was fixed in version 6.1.7 of the product. Additional Analyst Notes: - CVE Program Container: References: - https://www.rapid7.com/blog/post/2021/07/27/multiple-open-source-web-app-vulnerabilities-fixed/
CVE ID: CVE-2021-3540 State: PUBLISHED Published: 2021-07-22T18:27:21.040230Z Last Updated: 2024-09-17T00:30:44.288Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Ivanti Products: MobileIron Core Problem Types: CWE-88 Description: By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.rapid7.com/blog/post/2021/06/02/untitled-cve-2021-3198-and-cve-2021-3540-mobileiron-shell-escape-privilege-escalation-vulnerabilities/
CVE ID: CVE-2021-3541 State: PUBLISHED Published: 2021-07-09T16:02:21 Last Updated: 2024-08-03T17:01:07.290Z Vendors: n/a Products: libxml2 Problem Types: Denial of Service Description: A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1950515 - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.netapp.com/advisory/ntap-20210805-0007/
CVE ID: CVE-2021-3542 State: REJECTED Published: 2021-10-20T14:31:43 Last Updated: 2021-10-20T14:31:43 Description: No description available.
CVE ID: CVE-2021-3543 State: PUBLISHED Published: 2021-06-01T13:20:34 Last Updated: 2024-08-03T17:01:07.979Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1953022 - https://lore.kernel.org/lkml/20210429165941.27020-2-andraprs%40amazon.com/
CVE ID: CVE-2021-3544 State: PUBLISHED Published: 2021-06-02T13:30:24 Last Updated: 2024-08-03T17:01:06.520Z Vendors: n/a Products: QEMU Problem Types: CWE-401 Description: Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory (i.e., free) after effective lifetime. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2021/05/31/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1958935 - https://security.netapp.com/advisory/ntap-20210720-0008/ -
/31/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1958935 - https://security.netapp.com/advisory/ntap-20210720-0008/ - https://www.debian.org/security/2021/dsa-4980 - https://security.gentoo.org/glsa/202208-27
CVE ID: CVE-2021-3545 State: PUBLISHED Published: 2021-06-02T13:30:27 Last Updated: 2024-08-03T17:01:06.578Z Vendors: n/a Products: QEMU Problem Types: CWE-908 Description: An information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw exists in virgl_cmd_get_capset_info() in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest could exploit this issue to leak memory from the host. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2021/05/31/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1
r: References: - http://www.openwall.com/lists/oss-security/2021/05/31/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1958955 - https://security.netapp.com/advisory/ntap-20210720-0008/ - https://www.debian.org/security/2021/dsa-4980 - https://security.gentoo.org/glsa/202208-27
CVE ID: CVE-2021-3546 State: PUBLISHED Published: 2021-06-02T13:30:30 Last Updated: 2024-08-03T17:01:07.614Z Vendors: n/a Products: QEMU Problem Types: CWE-787 Description: An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service condition, or potential code execution with the privileges of the QEMU process. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-sec
the QEMU process. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2021/05/31/1 - https://bugzilla.redhat.com/show_bug.cgi?id=1958978 - https://security.netapp.com/advisory/ntap-20210720-0008/ - https://www.debian.org/security/2021/dsa-4980 - https://security.gentoo.org/glsa/202208-27
CVE ID: CVE-2021-3547 State: PUBLISHED Published: 2021-07-12T10:35:52 Last Updated: 2024-08-03T17:01:06.568Z Vendors: n/a Products: OpenVPN 3 Core Library Problem Types: CWE-305 Description: OpenVPN 3 Core Library version 3.6 and 3.6.1 allows a man-in-the-middle attacker to bypass the certificate authentication by issuing an unrelated server certificate using the same hostname found in the verify-x509-name option in a client configuration. Additional Analyst Notes: - CVE Program Container: References: - https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements - https://community.openvpn.net/openvpn/wiki/CVE-2021-3547
CVE ID: CVE-2021-3548 State: PUBLISHED Published: 2021-05-26T20:32:33 Last Updated: 2024-08-03T17:01:07.399Z Vendors: n/a Products: dmg2img Problem Types: CWE-125 Description: A flaw was found in dmg2img through 20170502. dmg2img did not validate the size of the read buffer during memcpy() inside the main() function. This possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1959585
CVE ID: CVE-2021-3549 State: PUBLISHED Published: 2021-05-26T20:41:11.000Z Last Updated: 2025-02-28T13:07:22.670Z Vendors: n/a Products: binutils Problem Types: CWE-119 Description: An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1960717 - https://security.gentoo.org/glsa/202208-30
CVE ID: CVE-2021-3550 State: PUBLISHED Published: 2021-07-16T20:30:19 Last Updated: 2024-08-03T17:01:07.162Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Lenovo Products: PCManager Problem Types: CWE-427 Description: A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://iknow.lenovo.com.cn/detail/dc_197169.html
CVE ID: CVE-2021-3551 State: PUBLISHED Published: 2022-02-16T16:37:57 Last Updated: 2024-08-03T17:01:06.563Z Vendors: n/a Products: pki-server Problem Types: CWE-312 Description: A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This flaw allows a local attacker to retrieve the file to obtain the admin password and gain admin privileges to the Dogtag CA manager. The highest threat from this vulnerability is to confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1959971
CVE ID: CVE-2021-3552 State: PUBLISHED Published: 2021-11-24T14:40:13.004867Z Last Updated: 2024-09-16T17:33:06.659Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Bitdefender Products: Endpoint Security Tools, GravityZone Problem Types: CWE-918 Description: A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Endpoint Security Tools versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender GravityZone 6.24.1-1. Additional Analyst Notes: - CVE Program Container: References: - https://www
7.1.2.33. Bitdefender GravityZone 6.24.1-1. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/insufficient-validation-regular-expression-eppupdateservice-config-file-va-9825
CVE ID: CVE-2021-3553 State: PUBLISHED Published: 2021-11-24T14:45:20.276136Z Last Updated: 2024-09-17T01:25:41.833Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Bitdefender Products: Endpoint Security Tools, Unified Endpoint for Linux, GravityZone Problem Types: CWE-918 Description: A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows an attacker to use the Endpoint Protection relay as a proxy for any remote host. This issue affects: Bitdefender Endpoint Security Tools versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender Unified Endpoint for Linux versions prior to 6.2.2
versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender Unified Endpoint for Linux versions prior to 6.2.21.160. Bitdefender GravityZone versions prior to 6.24.1-1. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/server-side-request-forgery-eppupdateservice-remote-config-file-va-9825/
CVE ID: CVE-2021-3554 State: PUBLISHED Published: 2021-11-24T14:45:12.904727Z Last Updated: 2024-09-16T20:03:20.270Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Bitdefender Products: Endpoint Security Tools for Linux, Unified Endpoint, GravityZone Problem Types: CWE-284 Description: Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the remote address used for pulling patches. This issue affects: Bitdefender Endpoint Security Tools for Linux versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender Unified Endpoint vers
int Security Tools for Linux versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender Unified Endpoint versions prior to 6.2.21.160. Bitdefender GravityZone versions prior to 6.24.1-1. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/improper-access-control-vulnerability-patchesupdate-api-va-9825
CVE ID: CVE-2021-3555 State: PUBLISHED Published: 2022-05-31T09:45:12.553101Z Last Updated: 2024-09-17T03:08:09.236Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Eufy Products: Indoor 2K Indoor Camera Problem Types: CWE-120 Description: A Buffer Overflow vulnerability in the RSTP server component of Eufy Indoor 2K Indoor Camera allows a local attacker to achieve remote code execution. This issue affects: Eufy Indoor 2K Indoor Camera 2.0.9.3 version and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-eufy2k-indoor-camera/
CVE ID: CVE-2021-3556 State: REJECTED Published: 2021-06-28T14:51:27 Last Updated: 2021-06-28T14:51:27 Description: No description available.
CVE ID: CVE-2021-3557 State: PUBLISHED Published: 2022-02-16T16:37:57 Last Updated: 2024-08-03T17:01:07.314Z Vendors: n/a Products: argocd Problem Types: CWE-732 Description: A flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and with the created ServiceAccount argocd-argocd-server, the unprivileged user is able to read all resources of the cluster including all secrets which might enable privilege escalations. The highest threat from this vulnerability is to data confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1961929
CVE ID: CVE-2021-3558 State: REJECTED Published: 2022-03-09T15:12:32 Last Updated: 2022-03-09T15:12:32 Description: No description available.