Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-41408 State: PUBLISHED Published: 2022-06-17T10:09:04 Last Updated: 2024-08-04T03:08:32.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: VoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the "api.php" file and "user" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/divinepwner/e51050e0d7df77ff1f1379583e8cf7db - https://www.voipmonitor.org/changelog-gui?major=5
CVE ID: CVE-2021-41411 State: PUBLISHED Published: 2022-06-16T09:52:01 Last Updated: 2024-08-04T03:08:32.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kiegroup/drools/pull/3808
CVE ID: CVE-2021-41413 State: PUBLISHED Published: 2022-06-15T11:19:06 Last Updated: 2024-08-04T03:08:32.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: ok-file-formats master 2021-9-12 is affected by a buffer overflow in ok_jpg_convert_data_unit_grayscale and ok_jpg_convert_YCbCr_to_RGB. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/brackeen/ok-file-formats - https://github.com/brackeen/ok-file-formats/issues/20
CVE ID: CVE-2021-41415 State: PUBLISHED Published: 2022-06-15T20:00:53 Last Updated: 2024-08-04T03:08:32.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Subscription-Manager v1.0 /main.js has a cross-site scripting (XSS) vulnerability in the machineDetail parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/youranreus/Subscription-Manager/issues/2
CVE ID: CVE-2021-41418 State: PUBLISHED Published: 2022-06-15T19:40:18 Last Updated: 2024-08-04T03:08:32.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: AriaNg v0.1.0~v1.2.2 is affected by an incorrect access control vulnerability through not authenticating visitors' access rights. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Amozing/Am0zang/issues/1
CVE ID: CVE-2021-41419 State: PUBLISHED Published: 2022-07-17T23:23:21 Last Updated: 2024-08-04T03:08:32.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/Me9187/status/1414904314368348163 - https://github.com/projectdiscovery/nuclei-templates/blob/master/iot/qvisdvr-deserialization-rce.yaml - https://gist.github.com/Meeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee/712ac36c8a08e2698e875169442a23a4
CVE ID: CVE-2021-41420 State: PUBLISHED Published: 2022-06-16T16:43:03 Last Updated: 2024-08-04T03:08:32.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript code execution in the context of authenticated and unauthenticated users through the MaianAffiliate admin panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.maianaffiliate.com/ - https://github.com/mari0x00/MaianAffiliate-Code-execution-and-XSS/blob/main/README.md
CVE ID: CVE-2021-41421 State: PUBLISHED Published: 2022-06-16T16:51:18 Last Updated: 2024-08-04T03:15:28.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE through the MaianAffiliate admin panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.maianaffiliate.com/ - https://github.com/mari0x00/MaianAffiliate-Code-execution-and-XSS/blob/main/README.md
CVE ID: CVE-2021-41426 State: PUBLISHED Published: 2021-11-10T15:43:18 Last Updated: 2024-08-04T03:15:27.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery (CSRF) via mgt_end_user.htm. Additional Analyst Notes: - CVE Program Container: References: - https://tula.beeline.ru/customers/pomosh/home/domashnij-internet/nastrojki-s-routerom/beelinesmartbox/ - https://youtu.be/WtcyIVImcwc - https://youtu.be/HL73yOW7YWU?t=540
CVE ID: CVE-2021-41427 State: PUBLISHED Published: 2021-11-10T15:38:26 Last Updated: 2024-08-04T03:15:27.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting (XSS) via the choose_mac parameter to setup.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://tula.beeline.ru/customers/pomosh/home/domashnij-internet/nastrojki-s-routerom/beelinesmartbox/ - https://youtu.be/CbWI-JQteRo - https://youtu.be/HL73yOW7YWU?t=520
CVE ID: CVE-2021-41428 State: REJECTED Published: 2021-09-23T14:11:34 Last Updated: 2021-10-20T05:52:40 Description: No description available.
CVE ID: CVE-2021-41432 State: PUBLISHED Published: 2022-06-22T18:21:51 Last Updated: 2024-08-04T03:15:27.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog content. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flatpressblog/flatpress/issues/88
CVE ID: CVE-2021-41433 State: PUBLISHED Published: 2022-09-27T19:10:37.000Z Last Updated: 2025-05-21T15:02:54.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability exists in version 1.0 of the Resumes Management and Job Application Website application login form by EGavilan Media that allows authentication bypass through login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/martinkubecka/CVE-References/blob/main/Untitled-SQLi.md - https://github.com/martinkubecka/CVE-References/blob/main/CVE-2021-41433.md
CVE ID: CVE-2021-41434 State: PUBLISHED Published: 2022-09-28T16:39:40.000Z Last Updated: 2025-05-20T20:19:24.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management System application that allows for arbitrary execution of JavaScript commands through index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://egavilanmedia.com/Expense-Management-System/ - https://github.com/martinkubecka/CVE-References/blob/main/CVE-2021-41434.md
CVE ID: CVE-2021-41435 State: PUBLISHED Published: 2021-11-19T11:26:30 Last Updated: 2024-08-04T03:15:27.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote attacker to attempt any number of login attempts via sending a specific HTTP request. Additional Analyst
allows a remote attacker to attempt any number of login attempts via sending a specific HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://asus.com - https://www.asus.com/Networking-IoT-Servers/Whole-Home-Mesh-WiFi-System/ZenWiFi-WiFi-Systems/ASUS-ZenWiFi-AX-XT8-/HelpDesk_BIOS/ - https://rog.asus.com/networking/rog-rapture-gt-ax11000-model/helpdesk_bios - https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AX3000/HelpDesk_BIOS/ - https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/All-series/RT-AX55/HelpDesk_BIOS/ - https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AX56U/HelpDesk_BIOS/ - https://www
BIOS/ - https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AX56U/HelpDesk_BIOS/ - https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AX68U/HelpDesk_BIOS/ - https://www.asus.com/Networking-IoT-Servers/Whole-Home-Mesh-WiFi-System/ZenWiFi-WiFi-Systems/ASUS-ZenWiFi-XD6/HelpDesk_BIOS/
CVE ID: CVE-2021-41436 State: PUBLISHED Published: 2021-11-19T11:14:09 Last Updated: 2024-08-04T03:15:28.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote unauthenticated attacker to DoS via sending a specially crafted HTTP packet. Additional Analyst Notes: - CVE Prog
remote unauthenticated attacker to DoS via sending a specially crafted HTTP packet. Additional Analyst Notes: - CVE Program Container: References: - http://asus.com - https://www.asus.com/Networking-IoT-Servers/Whole-Home-Mesh-WiFi-System/ZenWiFi-WiFi-Systems/ASUS-ZenWiFi-AX-XT8-/HelpDesk_BIOS/ - https://rog.asus.com/networking/rog-rapture-gt-ax11000-model/helpdesk_bios - https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AX3000/HelpDesk_BIOS/ - https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/All-series/RT-AX55/HelpDesk_BIOS/ - https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AX56U/HelpDesk_BIOS/ - https://www.asus.com/Networki
w.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AX56U/HelpDesk_BIOS/ - https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AX68U/HelpDesk_BIOS/ - https://www.asus.com/Networking-IoT-Servers/Whole-Home-Mesh-WiFi-System/ZenWiFi-WiFi-Systems/ASUS-ZenWiFi-XD6/HelpDesk_BIOS/
CVE ID: CVE-2021-41437 State: PUBLISHED Published: 2022-09-26T13:18:38.000Z Last Updated: 2025-05-21T18:37:09.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/efchatz/easy-exploits/tree/main/Web/ASUS/CVE-2021-41437 - https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AX88U/HelpDesk_BIOS/
CVE ID: CVE-2021-41438 State: REJECTED Published: 2022-06-13T16:25:41 Last Updated: 2022-06-13T16:25:41 Description: No description available.
CVE ID: CVE-2021-41439 State: REJECTED Published: 2022-06-13T16:25:42 Last Updated: 2022-06-13T16:25:42 Description: No description available.
CVE ID: CVE-2021-41441 State: PUBLISHED Published: 2022-02-09T16:55:47 Last Updated: 2024-08-04T03:15:27.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: A DoS attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to reboot the router via sending a specially crafted URL to an authenticated victim. The authenticated victim need to visit this URL, for the router to reboot. Additional Analyst Notes: - CVE Program Container: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - http://dir-x1860.com - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10283
CVE ID: CVE-2021-41442 State: PUBLISHED Published: 2022-02-09T19:04:28 Last Updated: 2024-08-04T03:15:27.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: An HTTP smuggling attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP packet. Additional Analyst Notes: - CVE Program Container: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - http://dir-x1860.com - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10283
CVE ID: CVE-2021-41445 State: PUBLISHED Published: 2022-02-10T16:36:36 Last Updated: 2024-08-04T03:15:27.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated victim. Additional Analyst Notes: - CVE Program Container: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - http://dir-x1860.com - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10283
CVE ID: CVE-2021-41446 State: REJECTED Published: 2022-06-13T16:25:42 Last Updated: 2022-06-13T16:25:42 Description: No description available.
CVE ID: CVE-2021-41447 State: REJECTED Published: 2022-06-13T16:25:43 Last Updated: 2022-06-13T16:25:43 Description: No description available.
CVE ID: CVE-2021-41448 State: REJECTED Published: 2022-06-13T16:25:44 Last Updated: 2022-06-13T16:25:44 Description: No description available.
CVE ID: CVE-2021-41449 State: PUBLISHED Published: 2021-12-09T13:05:13 Last Updated: 2024-08-04T03:15:28.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted HTTP packet. Additional Analyst Notes: - CVE Program Container: References: - http://netgear.com - https://www.netgear.com/about/security/ - http://rax40.com - https://kb.netgear.com/000064405/Security-Advisory-for-Path-Traversal-on-Some-Routers-PSV-2021
ity/ - http://rax40.com - https://kb.netgear.com/000064405/Security-Advisory-for-Path-Traversal-on-Some-Routers-PSV-2021-0268
CVE ID: CVE-2021-41450 State: PUBLISHED Published: 2021-12-08T15:35:00 Last Updated: 2024-08-04T03:15:28.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: An HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP packet. Additional Analyst Notes: - CVE Program Container: References: - http://tp-link.com - http://ax10v1.com - https://www.tp-link.com/us/support/download/archer-ax10/v1/#Firmware
CVE ID: CVE-2021-41451 State: PUBLISHED Published: 2021-12-17T14:32:24 Last Updated: 2024-08-04T03:15:27.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: A misconfiguration in HTTP/1.0 and HTTP/1.1 of the web interface in TP-Link AX10v1 before V1_211117 allows a remote unauthenticated attacker to send a specially crafted HTTP request and receive a misconfigured HTTP/0.9 response, potentially leading into a cache poisoning attack. Additional Analyst Notes: - CVE Program Container: References: - http://tp-link.com - http://ax10v1.com - https://www.tp-link.com/us/support/download/archer-ax10/v1/#Firmware
CVE ID: CVE-2021-41452 State: REJECTED Published: 2022-06-13T16:25:45 Last Updated: 2022-06-13T16:25:45 Description: No description available.
CVE ID: CVE-2021-41453 State: REJECTED Published: 2022-06-13T16:25:45 Last Updated: 2022-06-13T16:25:45 Description: No description available.
CVE ID: CVE-2021-41454 State: REJECTED Published: 2022-06-13T16:25:46 Last Updated: 2022-06-13T16:25:46 Description: No description available.
CVE ID: CVE-2021-41456 State: PUBLISHED Published: 2021-10-01T00:00:00 Last Updated: 2024-08-04T03:15:28.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1004 in the nhmldmx_send_sample() function szXmlTo parameter which leads to a denial of service vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1911 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-41457 State: PUBLISHED Published: 2021-10-01T00:00:00 Last Updated: 2024-08-04T03:15:28.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmx_nhml.c in nhmldmx_init_parsing which leads to a denial of service vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1909 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-41458 State: PUBLISHED Published: 2022-06-16T09:19:53 Last Updated: 2024-08-04T03:15:27.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1910
CVE ID: CVE-2021-41459 State: PUBLISHED Published: 2021-10-01T00:00:00 Last Updated: 2024-08-04T03:15:27.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1008 in the nhmldmx_send_sample() function szXmlFrom parameter which leads to a denial of service vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1912 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-41460 State: PUBLISHED Published: 2022-06-28T12:28:32 Last Updated: 2024-08-04T03:15:28.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.cnvd.org.cn/flaw/show/CNVD-2020-58823
CVE ID: CVE-2021-41461 State: PUBLISHED Published: 2021-10-01T15:42:14 Last Updated: 2024-08-04T03:15:28.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the mode parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/concrete5/concrete5-legacy/issues/2006 - https://github.com/concrete5/concrete5-legacy
CVE ID: CVE-2021-41462 State: PUBLISHED Published: 2021-10-01T15:42:15 Last Updated: 2024-08-04T03:15:28.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the ctID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/concrete5/concrete5-legacy/issues/2006 - https://github.com/concrete5/concrete5-legacy
CVE ID: CVE-2021-41463 State: PUBLISHED Published: 2021-10-01T15:42:15 Last Updated: 2024-08-04T03:15:28.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in toos/permissions/dialogs/access/entity/types/group_combination.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the cID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/concrete5/concrete5-legacy/issues/2006 - https://github.com/concrete5/concrete5-legacy
CVE ID: CVE-2021-41464 State: PUBLISHED Published: 2021-10-01T15:42:16 Last Updated: 2024-08-04T03:15:28.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the rel parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/concrete5/concrete5-legacy/issues/2006 - https://github.com/concrete5/concrete5-legacy
CVE ID: CVE-2021-41465 State: PUBLISHED Published: 2021-10-01T15:42:16 Last Updated: 2024-08-04T03:15:28.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in concrete/elements/collection_theme.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the rel parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/concrete5/concrete5-legacy/issues/2006 - https://github.com/concrete5/concrete5-legacy
CVE ID: CVE-2021-41467 State: PUBLISHED Published: 2021-10-01T15:42:17 Last Updated: 2024-08-04T03:15:28.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hjue/JustWriting/issues/106 - https://github.com/hjue/JustWriting/
CVE ID: CVE-2021-41471 State: PUBLISHED Published: 2022-01-24T15:34:11 Last Updated: 2024-08-04T03:15:28.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/CVE-nu11-12-09162021
CVE ID: CVE-2021-41472 State: PUBLISHED Published: 2022-01-24T15:54:44 Last Updated: 2024-08-04T03:15:28.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/razormist
CVE ID: CVE-2021-41487 State: PUBLISHED Published: 2022-06-16T17:24:47 Last Updated: 2024-08-04T03:15:29.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/48528 - https://twitter.com/exploitdb/status/1265973982936748032
CVE ID: CVE-2021-41490 State: PUBLISHED Published: 2022-06-17T10:39:10 Last Updated: 2024-08-04T03:15:28.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ompl/ompl/issues/833
CVE ID: CVE-2021-41492 State: PUBLISHED Published: 2021-11-03T19:11:44 Last Updated: 2024-08-04T03:15:28.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System (POS) 1.0 via the (1) Product Code in the pos page in cashiering. (2) id parameter in manage_products and the (3) t paramater in actions.php. Additional Analyst Notes: - CVE Program Container: References: - https://3xpl017.blogspot.com/2021/09/multiple-sql-injections-in.html - https://www.nu11secur1ty.com/2021/12/cve-2021-41492.html - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41492