Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-40150 State: PUBLISHED Published: 2022-07-17T22:54:25 Last Updated: 2024-08-04T02:27:31.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. In this way an attacker can download the entire NGINX/FastCGI configurations by querying the /conf/nginx.conf or /conf/fastcgi.conf URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2021-40150.txt
CVE ID: CVE-2021-40153 State: PUBLISHED Published: 2021-08-27T00:00:00 Last Updated: 2024-08-04T02:27:31.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file during the unsquash. The filename is not validated for traversal outside of the destination directory, and thus allows writing to locations outside of the destination. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/plougher/squashfs-tools/commit/79b5a555058eef4e1e7ff220c344d39f8cd09646 - https://github.com/plougher/squashfs-tools/issues/7
her/squashfs-tools/commit/79b5a555058eef4e1e7ff220c344d39f8cd09646 - https://github.com/plougher/squashfs-tools/issues/72 - https://bugs.launchpad.net/ubuntu/+source/squashfs-tools/+bug/1941790 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RAOZ4BKWAC4Y3U2K5MMW3S77HWWXHQDL/ - https://lists.debian.org/debian-lts-announce/2021/08/msg00030.html - https://www.debian.org/security/2021/dsa-4967 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GSMRKVJMJFX3MB7D3PXJSYY3TLZROE5S/ - https://security.gentoo.org/glsa/202305-29
CVE ID: CVE-2021-40154 State: PUBLISHED Published: 2021-12-01T14:50:48 Last Updated: 2024-08-04T02:27:31.524Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AC:L/AV:L/A:L/C:H/I:N/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming (ISP) mode. This discloses protected flash memory. Additional Analyst Notes: - CVE Program Container: References: - https://www.darkmatter.ae/xen1thlabs/published-advisories/ - https://github.com/Xen1thLabs-AE/CVE-2021-40154
CVE ID: CVE-2021-40155 State: PUBLISHED Published: 2021-09-15T16:35:25 Last Updated: 2024-08-04T02:27:31.839Z Vendors: n/a Products: Autodesk Navisworks Problem Types: Out-of-bound Read Description: A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0009
CVE ID: CVE-2021-40156 State: PUBLISHED Published: 2021-09-15T16:35:44 Last Updated: 2024-08-04T02:27:31.827Z Vendors: n/a Products: Autodesk Navisworks Problem Types: Out-of-bound Write Description: A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0009
CVE ID: CVE-2021-40157 State: PUBLISHED Published: 2021-09-15T14:11:21 Last Updated: 2024-08-04T02:27:31.582Z Vendors: n/a Products: Autodesk FBX Review Problem Types: Untrusted Pointer Dereference vulnerability Description: A user may be tricked into opening a malicious FBX file which may exploit an Untrusted Pointer Dereference vulnerability in FBX’s Review version 1.5.0 and prior causing it to run arbitrary code on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001
CVE ID: CVE-2021-40158 State: PUBLISHED Published: 2022-01-25T00:00:00 Last Updated: 2024-08-04T02:27:31.854Z Vendors: n/a Products: Inventor Problem Types: Out-of-bounds Read Description: A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002 - https://www.zerodayinitiative.com/advisories/ZDI-22-287/ - https://www.zerodayi
/security-advisories/adsk-sa-2022-0002 - https://www.zerodayinitiative.com/advisories/ZDI-22-287/ - https://www.zerodayinitiative.com/advisories/ZDI-22-283/ - https://www.zerodayinitiative.com/advisories/ZDI-22-288/ - https://www.zerodayinitiative.com/advisories/ZDI-22-286/ - https://www.zerodayinitiative.com/advisories/ZDI-22-284/ - https://www.zerodayinitiative.com/advisories/ZDI-22-285/ - https://www.zerodayinitiative.com/advisories/ZDI-22-281/ - https://www.zerodayinitiative.com/advisories/ZDI-22-449/ - https://www.zerodayinitiative.com/advisories/ZDI-22-441/ - https://www.zerodayinitiative.com/advisories/ZDI-22-453/ - https://www.zerodayinitiative.com/advisories/ZDI-22-444/ - https://ww
www.zerodayinitiative.com/advisories/ZDI-22-453/ - https://www.zerodayinitiative.com/advisories/ZDI-22-444/ - https://www.zerodayinitiative.com/advisories/ZDI-22-447/ - https://www.zerodayinitiative.com/advisories/ZDI-22-448/ - https://www.zerodayinitiative.com/advisories/ZDI-22-452/ - https://www.zerodayinitiative.com/advisories/ZDI-22-445/ - https://www.zerodayinitiative.com/advisories/ZDI-22-466/ - https://www.zerodayinitiative.com/advisories/ZDI-22-451/ - https://www.zerodayinitiative.com/advisories/ZDI-22-454/ - https://www.zerodayinitiative.com/advisories/ZDI-22-443/ - https://www.zerodayinitiative.com/advisories/ZDI-22-450/ - https://www.zerodayinitiative.com/advisories/ZDI-22-455/
CVE ID: CVE-2021-40159 State: PUBLISHED Published: 2022-01-25T00:00:00 Last Updated: 2024-08-04T02:27:31.832Z Vendors: n/a Products: Inventor Problem Types: Information Disclosure Description: An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002 - https://www.zerodayinitiative.com/advisories/ZDI-22-282/ - https://www.zerodayinitiative.com/advisories/ZDI-22-289/
CVE ID: CVE-2021-40160 State: PUBLISHED Published: 2021-12-23T18:31:31 Last Updated: 2024-08-04T02:27:31.871Z Vendors: n/a Products: Revit, Navisworks, Autodesk® Advance Steel, AutoCAD®, AutoCAD® Architecture, AutoCAD® Electrical, AutoCAD® Map 3D, AutoCAD® Mechanical, AutoCAD® MEP, AutoCAD® Plant 3D, AutoCAD® LT, Autodesk® Civil 3D, AutoCAD® Mac, AutoCAD® LT for Mac Problem Types: Out-of-bound Read Vulnerability Description: PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF file. This vulnerability can be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autod
exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010
CVE ID: CVE-2021-40161 State: PUBLISHED Published: 2021-12-23T18:31:43 Last Updated: 2024-08-04T02:27:31.589Z Vendors: n/a Products: Revit, Navisworks, Autodesk® Advance Steel, AutoCAD®, AutoCAD® Architecture, AutoCAD® Electrical, AutoCAD® Map 3D, AutoCAD® Mechanical, AutoCAD® MEP, AutoCAD® Plant 3D, AutoCAD® LT, Autodesk® Civil 3D, AutoCAD® Mac, AutoCAD® LT for Mac Problem Types: Memory Corruption Vulnerability Description: A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 version. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021
al Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010
CVE ID: CVE-2021-40162 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-04T02:27:31.539Z Vendors: n/a Products: Revit, Inventor, Infraworks, Navisworks, Fusion, Infrastructure Parts Editors, Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Out-of-Band Read Description: A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code. Additional Analyst Notes: -
FF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0011
CVE ID: CVE-2021-40163 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-04T02:27:31.853Z Vendors: n/a Products: Revit, Inventor, Infraworks, Navisworks, Fusion, Infrastructure Parts Editors, Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Memory Corruption Description: A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0011
CVE ID: CVE-2021-40164 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-04T02:27:31.502Z Vendors: n/a Products: Revit, Inventor, Infraworks, Navisworks, Fusion, Infrastructure Parts Editors, Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Heap-based Overflow Description: A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-202
nal Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0011
CVE ID: CVE-2021-40165 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-04T02:27:31.537Z Vendors: n/a Products: Revit, Inventor, Infraworks, Navisworks, Fusion, Infrastructure Parts Editors, Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Buffer Overflow Description: A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code. Additional Analyst Notes: - CVE P
ICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0011
CVE ID: CVE-2021-40166 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-04T02:27:31.562Z Vendors: n/a Products: Revit, Inventor, Infraworks, Navisworks, Fusion, Infrastructure Parts Editors, Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D Problem Types: Use-After-Free Description: A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Contai
is vulnerability may be exploited by attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0011
CVE ID: CVE-2021-40167 State: PUBLISHED Published: 2022-01-25T19:11:06 Last Updated: 2024-08-04T02:27:31.853Z Vendors: n/a Products: Autodesk® Design Review Problem Types: Memory Corruption Description: A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
CVE ID: CVE-2021-40170 State: PUBLISHED Published: 2021-12-15T06:47:03 Last Updated: 2024-08-04T02:27:31.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117, allows an attacker to trigger arbitrary system functionality by replaying previously recorded signals. This lets an adversary, among other things, disarm an armed system. Additional Analyst Notes: - CVE Program Container: References: - https://www.securitashome.se/product.html/securitashome - https://www.diva-portal.org/smash/get/diva2:1600180/FULLTEXT04.pdf
CVE ID: CVE-2021-40171 State: PUBLISHED Published: 2021-12-15T06:45:38 Last Updated: 2024-08-04T02:27:31.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: The absence of notifications regarding an ongoing RF jamming attack in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117, allows an attacker to block legitimate traffic while not alerting the owner of the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.securitashome.se/product.html/securitashome - https://www.diva-portal.org/smash/get/diva2:1600180/FULLTEXT04.pdf
CVE ID: CVE-2021-40172 State: PUBLISHED Published: 2021-08-29T19:18:22 Last Updated: 2024-08-04T02:27:31.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Log360 before Build 5219 allows a CSRF attack on proxy settings. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/log-management/readme.html#Build%205219
CVE ID: CVE-2021-40173 State: PUBLISHED Published: 2021-08-29T19:18:10 Last Updated: 2024-08-04T02:27:31.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Cloud Security Plus before Build 4117 allows a CSRF attack on the server proxy settings. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/cloud-security/release-notes.html#build%204117
CVE ID: CVE-2021-40174 State: PUBLISHED Published: 2021-08-29T19:17:59 Last Updated: 2024-08-04T02:27:31.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Log360 before Build 5224 allows a CSRF attack for disabling the logon security settings. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/log-management/readme.html#Build%205224
CVE ID: CVE-2021-40175 State: PUBLISHED Published: 2021-08-29T19:17:47 Last Updated: 2024-08-04T02:27:31.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/log-management/readme.html#Build%205219
CVE ID: CVE-2021-40176 State: PUBLISHED Published: 2021-08-29T19:17:35 Last Updated: 2024-08-04T02:27:31.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Log360 before Build 5225 allows stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/log-management/readme.html#Build%205225
CVE ID: CVE-2021-40177 State: PUBLISHED Published: 2021-08-29T19:17:25 Last Updated: 2024-08-04T02:27:31.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/log-management/readme.html#Build%205225
CVE ID: CVE-2021-40178 State: PUBLISHED Published: 2021-08-29T19:17:14 Last Updated: 2024-08-04T02:27:31.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Log360 before Build 5224 allows stored XSS via the LOGO_PATH key value in the logon settings. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/log-management/readme.html#Build%205224
CVE ID: CVE-2021-40180 State: PUBLISHED Published: 2022-07-26T22:36:45 Last Updated: 2024-08-04T02:27:31.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts. Additional Analyst Notes: - CVE Program Container: References: - https://pan.baidu.com/s/1RqMrZBruZZ4OHdnXUN5xDw - https://pan.baidu.com/s/116sAQvs1CEzCeIfpI1NZvA - https://arxiv.org/pdf/2205.15202.pdf - https://github.com/BESTICSP/Vulnerabilities-Related-to-Mini-Programs-Permissions/blob/main/WX%20applet%20contact%20permission%20vulnerability%20report.pdf
CVE ID: CVE-2021-40186 State: PUBLISHED Published: 2022-05-31T18:09:43 Last Updated: 2024-08-04T02:27:31.884Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: DNNSoftware Products: DNN Platform Problem Types: CWE-918 Description: The AppCheck research team identified a Server-Side Request Forgery (SSRF) vulnerability within the DNN CMS platform, formerly known as DotNetNuke. SSRF vulnerabilities allow the attacker to exploit the target system to make network requests on their behalf, allowing a range of possible attacks. In the most common scenario, the attacker exploits SSRF vulnerabilities to attack systems behind the firewall and access sensitive informati
cenario, the attacker exploits SSRF vulnerabilities to attack systems behind the firewall and access sensitive information from Cloud Provider metadata services. Additional Analyst Notes: - CVE Program Container: References: - https://appcheck-ng.com/dnn-cms-server-side-request-forgery-cve-2021-40186
CVE ID: CVE-2021-40188 State: PUBLISHED Published: 2021-10-11T18:41:31 Last Updated: 2024-08-04T02:27:31.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPFusion 9.03.110 is affected by an arbitrary file upload vulnerability. The File Manager function in admin panel does not filter all PHP extensions such as ".php, .php7, .phtml, .php5, ...". An attacker can upload a malicious file and execute code on the server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PHPFusion/PHPFusion/issues/2372
CVE ID: CVE-2021-40189 State: PUBLISHED Published: 2021-10-11T18:27:33 Last Updated: 2024-08-04T02:27:31.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will extract a file to "webroot/themes/{Theme Folder], where an attacker can access and execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/PHPFusion/PHPFusion/issues/2374
CVE ID: CVE-2021-40191 State: PUBLISHED Published: 2021-10-11T13:34:42 Last Updated: 2024-08-04T02:27:31.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dzzoffice Version 2.02.1 is affected by cross-site scripting (XSS) due to a lack of sanitization of input data at all upload functions in webroot/dzz/attach/Uploader.class.php and return a wrong response in content-type of output data in webroot/dzz/attach/controller.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zyx0814/dzzoffice/issues/196
CVE ID: CVE-2021-40211 State: PUBLISHED Published: 2023-08-22T00:00:00 Last Updated: 2024-10-03T18:11:20.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ImageMagick/ImageMagick/issues/4097
CVE ID: CVE-2021-40212 State: PUBLISHED Published: 2022-06-15T10:13:07 Last Updated: 2024-08-04T02:27:31.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: An exploitable out-of-bounds write vulnerability in PotPlayer 1.7.21523 build 210729 may lead to code execution, information disclosure, and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://a-man-in-the-cookie.blogspot.com - https://a-man-in-the-cookie.blogspot.com/2021/08/PotPlayer-Critical-Memory-Access-Violation-Vulnerability.html
CVE ID: CVE-2021-40214 State: PUBLISHED Published: 2021-09-13T11:30:57 Last Updated: 2024-08-04T02:27:31.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gibbon v22.0.00 suffers from a stored XSS vulnerability within the wall messages component. Additional Analyst Notes: - CVE Program Container: References: - https://gibbonedu.org/ - https://github.com/GibbonEdu/core/releases/download/v22.0.00/GibbonEduCore-InstallBundle.zip - https://github.com/GibbonEdu/core/blob/v22.0.01/CHANGELOG.txt
CVE ID: CVE-2021-40219 State: PUBLISHED Published: 2022-04-11T16:45:54 Last Updated: 2024-08-04T02:27:31.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject server-side template injection that leads to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - http://boltcms.com - https://github.com/bolt/core - https://github.com/bolt/core/blob/3b21a73ebf519b76756d3ad2841312d10ef11461/src/Controller/Frontend/TemplateController.php - https://github.com/iiSiLvEr/CVEs/tree/main/CVE-2021-40219
CVE ID: CVE-2021-40222 State: PUBLISHED Published: 2021-09-09T11:04:43 Last Updated: 2024-08-04T02:27:31.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rittal CMC PU III Web management Version affected: V3.11.00_2. Version fixed: V3.17.10 is affected by a remote code execution vulnerablity. It is possible to introduce shell code to create a reverse shell in the PU-Hostname field of the TCP/IP Configuration dialog. Web application fails to sanitize user input on Network TCP/IP configuration page. This allows the attacker to inject commands as root on the device which will be executed once the data is received. Additional Analyst Notes: - CVE Program Container: References: - h
ice which will be executed once the data is received. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/asang17/CVE-2021-RCE