Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
bility includes the theoretical possibility that a malicious non-administrative user can gain full administrative access to the affected system. Description: The FTL Server (tibftlserver) and Docker images containing tibftlserver components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, TIBCO ActiveSpaces - Enterprise Edition, TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FTL - Enterprise Edition, TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contain a vulnerability that theoretically allows a non-administrative, authenticated FTL user to trick the affected co
contain a vulnerability that theoretically allows a non-administrative, authenticated FTL user to trick the affected components into creating illegitimate certificates. These maliciously generated certificates can be used to enable man-in-the-middle attacks or to escalate privileges so that the malicious user has administrative privileges. Affected releases are TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition: versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.6.1, and 4.6.2, TIBCO ActiveSpaces - Developer Edition: versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.6.1, and 4.6.2, TIBCO ActiveSpaces - Enterprise Edition: versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.6.1, and 4.6.2, TIBCO FTL - Community Editi
CO ActiveSpaces - Enterprise Edition: versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.6.1, and 4.6.2, TIBCO FTL - Community Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0, TIBCO FTL - Developer Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0, TIBCO FTL - Enterprise Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0, TIBCO eFTL - Community Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0, TIBCO eFTL - Developer Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0, and TIBCO eFTL - Enterprise Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0
6.1, and 6.7.0, and TIBCO eFTL - Enterprise Edition: versions 6.2.0, 6.3.0, 6.3.1, 6.4.0, 6.5.0, 6.6.0, 6.6.1, and 6.7.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2021/10/tibco-security-advisory-october-5-2021-tibco-ftl-2021-35497
CVE ID: CVE-2021-35498 State: PUBLISHED Published: 2021-10-13T16:55:10.753037Z Last Updated: 2024-09-16T17:32:55.642Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO EBX, TIBCO Product and Service Catalog powered by TIBCO EBX Problem Types: In the worst case, if the targeted account is a privileged administrator, successful exploitation of this vulnerability can result in an attacker gaining full administrative access to the affected system. Description: The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, and TIBCO Product and Service Catalog powered by TIBCO EBX contains a vulner
are Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, and TIBCO Product and Service Catalog powered by TIBCO EBX contains a vulnerability that under certain specific conditions allows an attacker to enter a password other than the legitimate password and it will be accepted as valid. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.123 and below, TIBCO EBX: versions 5.9.3, 5.9.4, 5.9.5, 5.9.6, 5.9.7, 5.9.8, 5.9.9, 5.9.10, 5.9.11, 5.9.12, 5.9.13, and 5.9.14, TIBCO EBX: versions 6.0.0 and 6.0.1, and TIBCO Product and Service Catalog powered by TIBCO EBX: version 1.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories -
0. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2021/10/tibco-security-advisory-october-13-2021-tibco-ebx-2021-35498
CVE ID: CVE-2021-35499 State: PUBLISHED Published: 2021-10-26T16:35:09.440931Z Last Updated: 2024-09-17T01:27:09.136Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Nimbus Problem Types: In the worst case, if the victim is a privileged administrator, successful execution of these vulnerabilities can result in an attacker gaining full administrative access to the affected system or the victim's local system. Description: The Web Reporting component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Stored Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitim
able Stored Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts targeting the affected system or the victim's local system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Nimbus: versions 10.4.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2021/10/tibco-security-advisory-october-26-2021-tibco-nimbus-2021-35499
CVE ID: CVE-2021-35500 State: PUBLISHED Published: 2022-01-12T18:40:11.398297Z Last Updated: 2024-09-16T16:18:36.002Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: TIBCO Software Inc. Products: TIBCO Data Virtualization, TIBCO Data Virtualization for AWS Marketplace Problem Types: Successful execution of this vulnerability can result in unauthorized read access to all files on the affected system. Description: The Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization, TIBCO Data Virtualization, TIBCO Data Virtualization, and TIBCO Data Virtualization for AWS Marketplace contains a difficult to exploit vulnerability that al
Virtualization, and TIBCO Data Virtualization for AWS Marketplace contains a difficult to exploit vulnerability that allows a low privileged attacker with local access to download arbitrary files outside of the scope of the user's permissions on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Data Virtualization: versions 8.3.0 and below, TIBCO Data Virtualization: version 8.4.0, TIBCO Data Virtualization: version 8.5.0, and TIBCO Data Virtualization for AWS Marketplace: versions 8.5.0 and below. Additional Analyst Notes: - CVE Program Container: References: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/01/tibco-se
erences: - https://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2022/01/tibco-security-advisory-january-12-2022-tibco-data-virtualization-2021-35500
CVE ID: CVE-2021-35501 State: PUBLISHED Published: 2021-06-25T15:05:04 Last Updated: 2024-08-04T00:40:46.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: PandoraFMS <=7.54 allows Stored XSS by placing a payload in the name field of a visual console. When a user or an administrator visits the console, the XSS payload will be executed. Additional Analyst Notes: - CVE Program Container: References: - https://k4m1ll0.com/cve-pandorafms754-chained-xss-rce.html - http://packetstormsecurity.com/files/163466/Pandora-FMS-7.54-Cross-Site-Scripting.html
CVE ID: CVE-2021-35502 State: PUBLISHED Published: 2021-06-25T20:49:50 Last Updated: 2024-08-04T00:40:46.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/View/Elements/genericElements/IndexTable/Fields/generic_field.ctp in MISP 2.4.144 does not sanitize certain data related to generic-template:index. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/2fde6476dc3173affc61874ba2adb35400a8fda5
CVE ID: CVE-2021-35503 State: PUBLISHED Published: 2021-10-05T11:58:28 Last Updated: 2024-08-04T00:40:47.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Afian FileRun 2021.03.26 allows stored XSS via an HTTP X-Forwarded-For header that is mishandled when rendering Activity Logs. Additional Analyst Notes: - CVE Program Container: References: - http://blog.filerun.com - https://syntegris-sec.github.io/filerun-advisory
CVE ID: CVE-2021-35504 State: PUBLISHED Published: 2021-10-05T11:59:27 Last Updated: 2024-08-04T00:40:46.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the ffmpeg binary. Additional Analyst Notes: - CVE Program Container: References: - http://blog.filerun.com - https://syntegris-sec.github.io/filerun-advisory
CVE ID: CVE-2021-35505 State: PUBLISHED Published: 2021-10-05T12:00:17 Last Updated: 2024-08-04T00:40:46.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the magick binary. Additional Analyst Notes: - CVE Program Container: References: - http://blog.filerun.com - https://syntegris-sec.github.io/filerun-advisory
CVE ID: CVE-2021-35506 State: PUBLISHED Published: 2021-10-05T12:01:19 Last Updated: 2024-08-04T00:40:46.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Afian FileRun 2021.03.26 allows XSS when an administrator encounters a crafted document during use of the HTML Editor for a preview or edit action. Additional Analyst Notes: - CVE Program Container: References: - http://blog.filerun.com - https://syntegris-sec.github.io/filerun-advisory
CVE ID: CVE-2021-35508 State: PUBLISHED Published: 2021-09-01T13:20:16 Last Updated: 2024-08-04T00:40:46.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: NMSAccess32.exe in TeraRecon AQNetClient 4.4.13 allows attackers to execute a malicious binary with SYSTEM privileges via a low-privileged user account. To exploit this, a low-privileged user must change the service configuration or overwrite the binary service. Additional Analyst Notes: - CVE Program Container: References: - https://www.linkedin.com/pulse/cve-2021-35508-privilege-escalation-via-weak-windows-marshall-mba - https://terarecon.sharefile.com/d-s05c8b7792f354a2d8115789a02449c4a
CVE ID: CVE-2021-35512 State: PUBLISHED Published: 2021-10-21T11:18:13 Last Updated: 2024-08-04T00:40:46.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/applications_manager/release-notes.html - https://www.manageengine.com/products/applications_manager/ - https://www.esecforte.com/server-side-request-forgery-india-ssrf-rvd-manage-engine/
CVE ID: CVE-2021-35513 State: PUBLISHED Published: 2021-06-27T11:03:30 Last Updated: 2024-08-04T00:40:47.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mermaid before 8.11.0 allows XSS when the antiscript feature is used. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mermaid-js/mermaid/issues/2122 - https://github.com/mermaid-js/mermaid/pull/2123 - https://github.com/mermaid-js/mermaid/releases/tag/8.11.0-rc2
CVE ID: CVE-2021-35514 State: PUBLISHED Published: 2021-06-28T11:29:24 Last Updated: 2024-08-04T00:40:46.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Narou (aka Narou.rb) before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel. Additional Analyst Notes: - CVE Program Container: References: - https://vuln.ryotak.me/advisories/51 - https://github.com/whiteleaf7/narou/blob/develop/ChangeLog.md#380-20210627
CVE ID: CVE-2021-35515 State: PUBLISHED Published: 2021-07-13T07:15:19 Last Updated: 2024-08-04T00:40:47.264Z Vendors: Apache Software Foundation Products: Apache Commons Compress Problem Types: CWE-834 Description: When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package. Additional Analyst Notes: - CVE Program Container: References: - https://commons.apache.org/proper/commons-compress/security-reports.html - https://lists.apache.org/thread.html/r19ebfd71770ec0617a9ea180e321ef927b3fefb4c81ec5d1902d20ab%4
security-reports.html - https://lists.apache.org/thread.html/r19ebfd71770ec0617a9ea180e321ef927b3fefb4c81ec5d1902d20ab%40%3Cuser.commons.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/07/13/1 - https://lists.apache.org/thread.html/rbaea15ddc5a7c0c6b66660f1d6403b28595e2561bb283eade7d7cd69%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/rb064d705fdfa44b5dae4c366b369ef6597951083196321773b983e71%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/rf2f4d7940371a7c7c5b679f50e28fc7fcc82cd00670ced87e013ac88%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/rab292091eadd1ecc63c516e9541a7f241091cf2e652b8185a6059945%40%3Ccom
.apache.org%3E - https://lists.apache.org/thread.html/rab292091eadd1ecc63c516e9541a7f241091cf2e652b8185a6059945%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/rbe91c512c5385181149ab087b6c909825d34299f5c491c6482a2ed57%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/rd4332baaf6debd03d60deb7ec93bee49e5fdbe958cb6800dff7fb00e%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/rb7adf3e55359819e77230b4586521e5c6874ce5ed93384bdc14d6aee%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/rfba19167efc785ad3561e7ef29f340d65ac8f0d897aed00e0731e742%40%3Cnotifications.skywalking.apache.org%3E -
org/thread.html/rfba19167efc785ad3561e7ef29f340d65ac8f0d897aed00e0731e742%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/rba65ed5ddb0586f5b12598f55ec7db3633e7b7fede60466367fbf86a%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/r9f54c0caa462267e0cc68b49f141e91432b36b23348d18c65bd0d040%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/racd0c0381c8404f298b226cd9db2eaae965b14c9c568224aa3f437ae%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/rb6e1fa80d34e5ada45f72655d84bfd90db0ca44ef19236a49198c88c%40%3Cnotifications.skywalking.apache.org%3E - https://lists.ap
rb6e1fa80d34e5ada45f72655d84bfd90db0ca44ef19236a49198c88c%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/r67ef3c07fe3b8c1b02d48012149d280ad6da8e4cec253b527520fb2b%40%3Cdev.poi.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.netapp.com/advisory/ntap-20211022-0001/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-35516 State: PUBLISHED Published: 2021-07-13T07:15:20 Last Updated: 2024-08-04T00:40:46.628Z Vendors: Apache Software Foundation Products: Apache Commons Compress Problem Types: CWE-130 Description: When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz package. Additional Analyst Notes: - CVE Program Container: References: - https://commons.apache.org/proper/commons-compress/security-reports.html - https://lists.apache.org/thread.html/rf68442d67eb166f4b6cf0bbb
pache.org/proper/commons-compress/security-reports.html - https://lists.apache.org/thread.html/rf68442d67eb166f4b6cf0bbbe6c7f99098c12954f37332073c9822ca%40%3Cuser.commons.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/07/13/2 - https://lists.apache.org/thread.html/rf5b1016fb15b7118b9a5e16bb0b78cb4f1dfcf7821eb137ab5757c91%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/rb064d705fdfa44b5dae4c366b369ef6597951083196321773b983e71%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/rd4332baaf6debd03d60deb7ec93bee49e5fdbe958cb6800dff7fb00e%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/rb7adf3e55359819e7723
cb6800dff7fb00e%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/rb7adf3e55359819e77230b4586521e5c6874ce5ed93384bdc14d6aee%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/rfba19167efc785ad3561e7ef29f340d65ac8f0d897aed00e0731e742%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/rba65ed5ddb0586f5b12598f55ec7db3633e7b7fede60466367fbf86a%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/r9f54c0caa462267e0cc68b49f141e91432b36b23348d18c65bd0d040%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/racd0c0381c8404f298b226cd9db2eaae965b
40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/racd0c0381c8404f298b226cd9db2eaae965b14c9c568224aa3f437ae%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/rb6e1fa80d34e5ada45f72655d84bfd90db0ca44ef19236a49198c88c%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/r67ef3c07fe3b8c1b02d48012149d280ad6da8e4cec253b527520fb2b%40%3Cdev.poi.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.netapp.com/advisory/ntap-20211022-0001/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle
ty.netapp.com/advisory/ntap-20211022-0001/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-35517 State: PUBLISHED Published: 2021-07-13T07:15:22 Last Updated: 2024-08-04T00:40:46.713Z Vendors: Apache Software Foundation Products: Apache Commons Compress Problem Types: CWE-130 Description: When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package. Additional Analyst Notes: - CVE Program Container: References: - https://commons.apache.org/proper/commons-compress/security-reports.html - https://lists.apache.org/thread.html/r605d906b710b95f1bbe0036a53
che.org/proper/commons-compress/security-reports.html - https://lists.apache.org/thread.html/r605d906b710b95f1bbe0036a53ac6968f667f2c249b6fbabada9a940%40%3Cuser.commons.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/07/13/3 - https://lists.apache.org/thread.html/ra393ffdc7c90a4a37ea023946f390285693795013a642d80fba20203%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/r54afdab05e01de970649c2d91a993f68a6b00cd73e6e34e16c832d46%40%3Cuser.ant.apache.org%3E - https://lists.apache.org/thread.html/r457b2ed564860996b20d938566fe8bd4bfb7c37be8e205448ccb5975%40%3Cannounce.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/07/13/5 - https://lists.apache.org
ccb5975%40%3Cannounce.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/07/13/5 - https://lists.apache.org/thread.html/rb064d705fdfa44b5dae4c366b369ef6597951083196321773b983e71%40%3Ccommits.pulsar.apache.org%3E - https://lists.apache.org/thread.html/rd4332baaf6debd03d60deb7ec93bee49e5fdbe958cb6800dff7fb00e%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/rb7adf3e55359819e77230b4586521e5c6874ce5ed93384bdc14d6aee%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/rfba19167efc785ad3561e7ef29f340d65ac8f0d897aed00e0731e742%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/rba65ed5ddb05
ac8f0d897aed00e0731e742%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/rba65ed5ddb0586f5b12598f55ec7db3633e7b7fede60466367fbf86a%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/r9f54c0caa462267e0cc68b49f141e91432b36b23348d18c65bd0d040%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/racd0c0381c8404f298b226cd9db2eaae965b14c9c568224aa3f437ae%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/rb6e1fa80d34e5ada45f72655d84bfd90db0ca44ef19236a49198c88c%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/r31f75743ac173b0a606f8ea6ea53
198c88c%40%3Cnotifications.skywalking.apache.org%3E - https://lists.apache.org/thread.html/r31f75743ac173b0a606f8ea6ea53f351f386c44e7bcf78ae04007c29%40%3Cissues.flink.apache.org%3E - https://lists.apache.org/thread.html/r67ef3c07fe3b8c1b02d48012149d280ad6da8e4cec253b527520fb2b%40%3Cdev.poi.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.netapp.com/advisory/ntap-20211022-0001/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-35520 State: PUBLISHED Published: 2021-07-22T11:32:33 Last Updated: 2024-08-04T00:40:47.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports. Additional Analyst Notes: - CVE Program Container: References: - https://www.idemia.com - https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true - https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true
CVE ID: CVE-2021-35521 State: PUBLISHED Published: 2021-07-22T11:32:42 Last Updated: 2024-08-04T00:40:47.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve denial of services and information disclosure via TCP/IP packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.idemia.com - https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true - https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true
CVE ID: CVE-2021-35522 State: PUBLISHED Published: 2021-07-22T11:32:50 Last Updated: 2024-08-04T00:40:46.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.idemia.com - https://biometricdevices.idemia.com/s/global-search/0696700000JJa0zAAD?sharing=true - https://biometricdevices.idemia.com/s/global-search/0696700000J
ia.com/s/global-search/0696700000JJa0zAAD?sharing=true - https://biometricdevices.idemia.com/s/global-search/0696700000JJa1nAAD?sharing=true