Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-45740 State: PUBLISHED Published: 2022-02-04T01:33:52 Last Updated: 2024-08-04T04:47:02.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the pin parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_4/4.md
CVE ID: CVE-2021-45741 State: PUBLISHED Published: 2022-02-04T01:33:51 Last Updated: 2024-08-04T04:47:02.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the relay6to4 parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_11/11.md
CVE ID: CVE-2021-45742 State: PUBLISHED Published: 2022-02-04T01:33:51 Last Updated: 2024-08-04T04:47:02.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_3/3.md
CVE ID: CVE-2021-45744 State: PUBLISHED Published: 2022-01-06T15:43:53 Last Updated: 2024-08-04T04:47:01.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability exists in bludit 3.13.1 via the TAGS section in login panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.plsanu.com/bludit-3-13-1-tags-field-stored-cross-site-scripting-xss - https://github.com/plsanu/Bludit-3.13.1-TAGS-Field-Stored-Cross-Site-Scripting-XSS
CVE ID: CVE-2021-45745 State: PUBLISHED Published: 2022-01-06T15:45:12 Last Updated: 2024-08-04T04:47:02.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel. Additional Analyst Notes: - CVE Program Container: References: - https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss - https://github.com/plsanu/Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS
CVE ID: CVE-2021-45746 State: PUBLISHED Published: 2022-02-23T20:29:04 Last Updated: 2024-08-04T04:47:01.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Directory Traversal vulnerability exists in WeBankPartners wecube-platform 3.2.1 via the file variable in PluginPackageController.java. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/WeBankPartners/wecube-platform/issues/2297
CVE ID: CVE-2021-45756 State: PUBLISHED Published: 2022-03-23T10:49:10 Last Updated: 2024-08-04T04:47:01.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffer overflow in blocking_request.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://asus.com - http://rt-ac68u.com - https://github.com/IBUILI/Asus
CVE ID: CVE-2021-45757 State: PUBLISHED Published: 2022-03-23T10:55:27 Last Updated: 2024-08-04T04:47:01.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASUS AC68U <=3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which may cause a denial of service (DoS). Additional Analyst Notes: - CVE Program Container: References: - http://asus.com - https://github.com/IBUILI/Asus - http://ac68u.com
CVE ID: CVE-2021-45760 State: PUBLISHED Published: 2022-01-13T00:00:00 Last Updated: 2024-08-04T04:47:02.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_list_last(). This vulnerability allows attackers to cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1966 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-45761 State: PUBLISHED Published: 2022-01-14T18:58:00 Last Updated: 2024-08-04T04:47:02.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: ROPium v3.1 was discovered to contain an invalid memory address dereference via the find() function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Boyan-MILANOV/ropium/issues/32
CVE ID: CVE-2021-45762 State: PUBLISHED Published: 2022-01-14T00:00:00 Last Updated: 2024-08-04T04:47:02.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_sg_vrml_mf_reset(). This vulnerability allows attackers to cause a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1978 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-45763 State: PUBLISHED Published: 2022-01-14T00:00:00 Last Updated: 2024-08-04T04:47:02.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC v1.1.0 was discovered to contain an invalid call in the function gf_node_changed(). This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1974 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-45764 State: PUBLISHED Published: 2022-01-14T00:00:00 Last Updated: 2024-08-04T04:47:02.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shift_chunk_offsets.isra(). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1971 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-45767 State: PUBLISHED Published: 2022-01-14T00:00:00 Last Updated: 2024-08-04T04:47:02.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPAC 1.1.0 was discovered to contain an invalid memory address dereference via the function lsr_read_id(). This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1982 - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-45769 State: PUBLISHED Published: 2022-01-14T19:10:38 Last Updated: 2024-08-04T04:47:02.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference in AcseConnection_parseMessage at src/mms/iso_acse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mz-automation/libiec61850/issues/368
CVE ID: CVE-2021-45773 State: PUBLISHED Published: 2022-01-14T19:11:18 Last Updated: 2024-08-04T04:47:02.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference in CS104_IPAddress_setFromString at src/iec60870/cs104/cs104_slave.c of lib60870 commit 0d5e76e can lead to a segmentation fault or application crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mz-automation/lib60870/issues/100
CVE ID: CVE-2021-45774 State: REJECTED Published: 2022-01-14T19:12:56 Last Updated: 2022-01-15T14:57:05 Description: No description available.
CVE ID: CVE-2021-45775 State: REJECTED Published: 2022-01-14T19:13:31 Last Updated: 2022-01-15T14:56:28 Description: No description available.
CVE ID: CVE-2021-45778 State: REJECTED Published: 2022-01-14T19:14:03 Last Updated: 2022-01-15T14:55:35 Description: No description available.
CVE ID: CVE-2021-45779 State: REJECTED Published: 2022-01-14T19:15:42 Last Updated: 2022-01-15T14:54:52 Description: No description available.
CVE ID: CVE-2021-45780 State: REJECTED Published: 2022-01-14T20:00:09 Last Updated: 2022-01-15T14:54:03 Description: No description available.
CVE ID: CVE-2021-45781 State: REJECTED Published: 2022-01-14T20:00:10 Last Updated: 2022-01-15T14:53:11 Description: No description available.
CVE ID: CVE-2021-45782 State: REJECTED Published: 2022-01-14T20:01:25 Last Updated: 2022-01-15T14:51:20 Description: No description available.
CVE ID: CVE-2021-45783 State: PUBLISHED Published: 2022-05-05T10:22:05 Last Updated: 2024-08-04T04:47:02.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bookeen Notea Firmware BK_R_1.0.5_20210608 is affected by a directory traversal vulnerability that allows an attacker to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://bookeen.com - https://github.com/cmaillioux/SecurityResearch/blob/main/CVE-2021-45783 - http://packetstormsecurity.com/files/167016/Bookeen-Notea-BK_R_1.0.5_20210608-Directory-Traversal.html
CVE ID: CVE-2021-45785 State: PUBLISHED Published: 2024-06-24T00:00:00 Last Updated: 2024-08-04T04:54:29.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: TruDesk Help Desk/Ticketing Solution v1.1.11 is vulnerable to a Cross-Site Request Forgery (CSRF) attack which would allow an attacker to restart the server, causing a DoS attack. The attacker must craft a webpage that would perform a GET request to the /api/v1/admin/restart endpoint, then the victim (who has sufficient privileges), would visit the page and the server restart would begin. The attacker must know the full URL that TruDesk is on in order to craft the webpage. Additional Analyst Notes: - CISA ADP Vulnrichment: -
now the full URL that TruDesk is on in order to craft the webpage. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://1d8.github.io/cves/cve_2021_45785/
CVE ID: CVE-2021-45786 State: PUBLISHED Published: 2022-03-16T12:29:54 Last Updated: 2024-08-04T04:54:29.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/magicblack/maccms10/issues/747
CVE ID: CVE-2021-45787 State: PUBLISHED Published: 2022-03-16T12:38:41 Last Updated: 2024-08-04T04:54:29.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a stored Cross Site Scripting (XSS) vulnerability in maccms v10 through adding videos. XSS code can be inserted at parameter positions including name and remarks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/magicblack/maccms10/issues/746
CVE ID: CVE-2021-45788 State: PUBLISHED Published: 2021-12-27T11:42:48 Last Updated: 2024-08-04T04:54:29.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Time-based SQL Injection vulnerabilities were found in Metersphere v1.15.4 via the "orders" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/metersphere/metersphere/issues/8651
CVE ID: CVE-2021-45789 State: PUBLISHED Published: 2021-12-27T11:51:55 Last Updated: 2024-08-04T04:54:30.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file download function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/metersphere/metersphere/issues/8652
CVE ID: CVE-2021-45790 State: PUBLISHED Published: 2021-12-27T11:58:36 Last Updated: 2024-08-04T04:54:29.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability was found in Metersphere v1.15.4. Unauthenticated users can upload any file to arbitrary directory, where attackers can write a cron job to execute commands. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/metersphere/metersphere/issues/8653
CVE ID: CVE-2021-45791 State: PUBLISHED Published: 2022-03-17T10:35:45 Last Updated: 2024-08-04T04:54:31.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Slims8 Akasia 8.3.1 is affected by SQL injection in /admin/modules/bibliography/index.php, /admin/modules/membership/member_type.php, /admin/modules/system/user_group.php, and /admin/modules/membership/index.php through the dir parameter. It can be used by remotely authenticated librarian users. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slims/slims8_akasia/issues/200
CVE ID: CVE-2021-45792 State: PUBLISHED Published: 2022-03-17T10:55:48 Last Updated: 2024-08-04T04:54:30.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Slims9 Bulian 9.4.2 is affected by Cross Site Scripting (XSS) in /admin/modules/system/custom_field.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slims/slims9_bulian/issues/122
CVE ID: CVE-2021-45793 State: PUBLISHED Published: 2022-03-17T11:12:50 Last Updated: 2024-08-04T04:54:29.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slims/slims9_bulian/issues/123
CVE ID: CVE-2021-45794 State: PUBLISHED Published: 2022-03-17T11:16:56 Last Updated: 2024-08-04T04:54:30.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/slims/slims9_bulian/issues/124
CVE ID: CVE-2021-45802 State: PUBLISHED Published: 2022-01-25T12:56:31 Last Updated: 2024-08-04T04:54:29.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because the email and phone parameter values are added to the SQL query without any verification at the time of membership registration. Additional Analyst Notes: - CVE Program Container: References: - https://blog.pocas.kr/posts/sqli-iResturant/ - https://gist.github.com/P0cas/5aa55f62781364a750ac4a4d47f319fa#file-cve-2021-45802-md
CVE ID: CVE-2021-45803 State: PUBLISHED Published: 2022-01-25T12:56:37 Last Updated: 2024-08-04T04:54:29.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because this view parameter value is added to the SQL query without additional verification when viewing reservation. Additional Analyst Notes: - CVE Program Container: References: - https://blog.pocas.kr/posts/sqli-iResturant-2/ - https://gist.github.com/P0cas/5aa55f62781364a750ac4a4d47f319fa#cve-2021-45803
CVE ID: CVE-2021-45806 State: PUBLISHED Published: 2022-01-13T13:47:37 Last Updated: 2024-08-04T04:54:29.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious code. Additional Analyst Notes: - CVE Program Container: References: - http://jpress.com - https://github.com/JPressProjects/jpress - https://github.com/JPressProjects/jpress/issues/166
CVE ID: CVE-2021-45807 State: PUBLISHED Published: 2022-01-13T18:22:45 Last Updated: 2024-08-04T04:54:30.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall. Additional Analyst Notes: - CVE Program Container: References: - http://jpress.com - https://github.com/JPressProjects/jpress - https://github.com/JPressProjects/jpress/issues/167
CVE ID: CVE-2021-45808 State: PUBLISHED Published: 2022-01-19T12:51:44 Last Updated: 2024-08-04T04:54:29.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server. Additional Analyst Notes: - CVE Program Container: References: - http://jpress.com - https://github.com/JPressProjects/jpress - https://github.com/JPressProjects/jpress/issues/173
CVE ID: CVE-2021-45809 State: PUBLISHED Published: 2022-03-22T10:30:20 Last Updated: 2024-08-04T04:54:29.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: GlobalProtect-openconnect versions prior to 1.4.3 are affected by incorrect access control in GPService through DBUS, GUI Application. The way GlobalProtect-Openconnect is set up enables arbitrary users to execute commands as root by submitting the `--script=<script>` parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yuezk/GlobalProtect-openconnect/issues/113
CVE ID: CVE-2021-45810 State: PUBLISHED Published: 2022-03-22T00:00:00 Last Updated: 2024-08-04T04:54:30.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: GlobalProtect-openconnect versions prior to 2.0.0 (exclusive) are affected by incorrect access control in GPService through DBUS, GUI. The way GlobalProtect-Openconnect is set up enables arbitrary users to start a VPN connection to arbitrary servers. By hosting an openconnect compatible server, the attack can redirect the entire host's traffic via their own server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yuezk/GlobalProtect-openconnect/issues/114 - https://github.com/yuezk/GlobalPro
tainer: References: - https://github.com/yuezk/GlobalProtect-openconnect/issues/114 - https://github.com/yuezk/GlobalProtect-openconnect/issues/114#issuecomment-1914008203
CVE ID: CVE-2021-45811 State: PUBLISHED Published: 2023-09-08T00:00:00 Last Updated: 2024-09-26T18:42:15.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topic_id" URL parameters combination. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://osticket.com - http://enhancesoft.com - https://members.backbox.org/osticket-sql-injection/
CVE ID: CVE-2021-45812 State: PUBLISHED Published: 2021-12-28T14:26:44 Last Updated: 2024-08-04T04:54:31.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: NUUO Network Video Recorder NVRsolo 3.9.1 is affected by a Cross Site Scripting (XSS) vulnerability. An attacker can steal the user's session by injecting malicious JavaScript codes which leads to session hijacking. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/drive/folders/18YCKzFnS5CZRmzgcwc8g7jvLpmqgy68B?usp=sharing
CVE ID: CVE-2021-45813 State: PUBLISHED Published: 2021-12-28T14:42:55 Last Updated: 2024-08-04T04:54:30.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: SLICAN WebCTI 1.01 2015 is affected by a Cross Site Scripting (XSS) vulnerability. The attacker can steal the user's session by injecting malicious JavaScript codes which leads to Session Hijacking and cause user's credentials theft. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1oKuzCZob9-LOAp-pdGN0MYYBx8y9FnHK/view?usp=sharing
CVE ID: CVE-2021-45814 State: PUBLISHED Published: 2021-12-28T15:11:10 Last Updated: 2024-08-04T04:54:30.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nettmp NNT 5.1 is affected by a SQL injection vulnerability. An attacker can bypass authentication and access the panel with an administrative account. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1-WiC1RDbcUqNB5sYd2h2n4rcU873s3gM/view?usp=sharing - https://drive.google.com/file/d/1WS_pa2PzLS1EplBu7pjx7hXlyBwCepP9/view?usp=sharing - http://packetstormsecurity.com/files/165438/Nettmp-NNT-5.1-SQL-Injection.html
CVE ID: CVE-2021-45815 State: PUBLISHED Published: 2021-12-30T12:53:08 Last Updated: 2024-08-04T04:54:30.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quectel UC20 UMTS/HSPA+ UC20 6.3.14 is affected by a Cross Site Scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1SizrkduiRFzjDcld4e9F_RV6N9DcIOQE/view?usp=sharing
CVE ID: CVE-2021-45817 State: REJECTED Published: 2022-01-03T15:09:47 Last Updated: 2022-01-04T03:52:56 Description: No description available.
CVE ID: CVE-2021-45818 State: PUBLISHED Published: 2021-12-30T12:33:22 Last Updated: 2024-08-04T04:54:29.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: SAFARI Montage 8.7.32 is affected by a CRLF injection vulnerability which can lead to HTTP response splitting. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/19_O6Sfc0PvgEZD7m98a5heNNOp28ZfcE/view?usp=sharing
CVE ID: CVE-2021-45819 State: PUBLISHED Published: 2022-03-03T14:04:55 Last Updated: 2024-08-04T04:54:30.589Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Wordline HIDCCEMonitorSVC before v5.2.4.3 contains an unquoted service path which allows attackers to escalate privileges to the system level. Additional Analyst Notes: - CVE Program Container: References: - https://hansesecure.de/2021/12/vulnerability-wordline/?lang=en
CVE ID: CVE-2021-45821 State: PUBLISHED Published: 2022-03-16T15:01:28 Last Updated: 2024-08-04T04:54:31.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat/getHistoryChatData.php file that is accessible by a registered user. As a result, a malicious user can extract sensitive data such as usernames and passwords and in some cases use this vulnerability in order to get a remote code execution on the remote web server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/btiteam/xbtit-3.1/blob/master/ajaxchat/getHistoryChatData.php - https://emaragkos.gr/infosec
ences: - https://github.com/btiteam/xbtit-3.1/blob/master/ajaxchat/getHistoryChatData.php - https://emaragkos.gr/infosec-adventures/xbtit-3-1-sql-njection/ - https://github.com/btiteam/xbtit-3.1/issues/6
CVE ID: CVE-2021-45822 State: PUBLISHED Published: 2022-03-16T15:26:46 Last Updated: 2024-08-04T04:54:30.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs because /ajaxchat/sendChatData.php does not properly validate the value of the "n" (POST) parameter. Through this vulnerability, an attacker is capable to execute malicious JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/btiteam/xbtit-3.1 - https://emaragkos.gr/infosec-adventures/xbtit-3-1-xss-stored-amp-reflected/ - https://github.com/btiteam/xbtit-3.1/issues/7
CVE ID: CVE-2021-45829 State: PUBLISHED Published: 2022-01-03T21:22:54 Last Updated: 2024-08-04T04:54:30.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: HDF5 1.13.1-1 is affected by: segmentation fault, which causes a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HDFGroup/hdf5/issues/1317
CVE ID: CVE-2021-45830 State: PUBLISHED Published: 2022-01-05T19:43:21 Last Updated: 2024-08-04T04:54:30.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow vulnerability exists in HDF5 1.13.1-1 via H5F_addr_decode_len in /hdf5/src/H5Fint.c, which could cause a Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HDFGroup/hdf5/issues/1314