Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-23163 State: PUBLISHED Published: 2022-07-06T09:45:12 Last Updated: 2024-08-03T19:05:54.566Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: JFrog Products: JFrog Artifactory Problem Types: CWE-352 Description: JFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request Forgery) for specific endpoints. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.33.6 versions prior to 7.x; JFrog Artifactory versions before 6.23.38 versions prior to 6.x. Additional Analyst Notes: - CVE Program Container: References: - https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories
t Notes: - CVE Program Container: References: - https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories - https://www.jfrog.com/confluence/display/JFROG/CVE-2021-23163%3A++Cross-Site+Request+Forgery+on+REST+using+Basic+Auth
CVE ID: CVE-2021-23165 State: PUBLISHED Published: 2022-03-16T14:12:29 Last Updated: 2024-08-03T19:05:55.689Z Vendors: n/a Products: htmldoc Problem Types: CWE-122 Description: A flaw was found in htmldoc before v1.9.12. Heap buffer overflow in pspdf_prepare_outpages(), in ps-pdf.cxx may lead to execute arbitrary code and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/michaelrsweet/htmldoc/issues/413 - https://bugzilla.redhat.com/show_bug.cgi?id=1967014 - https://github.com/michaelrsweet/htmldoc/commit/6e8a95561988500b5b5ae4861b3b0cbf4fba517f - https://github.com/michaelrsweet/htmldoc/commit/6e8a95561988500b5b5ae4861b3b0cbf4fba517f.patc
5b5ae4861b3b0cbf4fba517f - https://github.com/michaelrsweet/htmldoc/commit/6e8a95561988500b5b5ae4861b3b0cbf4fba517f.patch
CVE ID: CVE-2021-23166 State: PUBLISHED Published: 2023-04-25T18:33:35.417Z Last Updated: 2025-02-03T17:19:21.242Z Severity: HIGH (CVSS 8.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-267 Description: A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and write local files on the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/odoo/odoo/issues/107687 - https://www.debian.org/security/2023/dsa-5399
CVE ID: CVE-2021-23167 State: PUBLISHED Published: 2021-11-18T18:00:40.281044Z Last Updated: 2024-09-17T02:05:57.659Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:L) Vendors: Gallagher Products: Command Centre Problem Types: CWE-295 Description: Improper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to retrieve sensitive information from the Command Centre Server. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 (MR3); 8.40 versions prior to 8.40.2063 (MR4); 8.30 versions prior to 8.30.1454 (MR4) ; version 8.20 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://
.1454 (MR4) ; version 8.20 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://security.gallagher.com/Security-Advisories/CVE-2021-23167
CVE ID: CVE-2021-23168 State: PUBLISHED Published: 2022-08-18T00:00:00.000Z Last Updated: 2025-05-05T16:54:42.053Z Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products Problem Types: denial of service Description: Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html - https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
CVE ID: CVE-2021-23169 State: PUBLISHED Published: 2021-06-08T00:00:00 Last Updated: 2024-08-03T19:05:53.909Z Vendors: n/a Products: OpenEXR Problem Types: CWE-787 Description: A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR. Additional Analyst Notes: - CVE Program Container: References: - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KYNJSMVA6YJY5NMKDZ5SAISKZG2KCKC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap
ssage/4KYNJSMVA6YJY5NMKDZ5SAISKZG2KCKC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BXFLD4ZAXKAIWO6ZPBCQEEDZB5IG676K/ - https://bugzilla.redhat.com/show_bug.cgi?id=1947612 - https://security.gentoo.org/glsa/202210-31
CVE ID: CVE-2021-23172 State: PUBLISHED Published: 2022-08-25T19:36:27 Last Updated: 2024-08-03T19:05:54.449Z Vendors: n/a Products: SoX (Sound eXchange) Problem Types: CWE-120 Description: A vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in hcom.c file. The vulnerability is exploitable with a crafted hcomn file, that could cause an application to crash. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1975666 - https://access.redhat.com/security/cve/CVE-2021-23172 - https://sourceforge.net/p/sox/bugs/350/ - https://security.archlinux.org/CVE-2021-23172
CVE ID: CVE-2021-23173 State: PUBLISHED Published: 2022-01-07T22:39:52.978Z Last Updated: 2025-04-16T16:48:14.120Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Philips Products: Engage Software Problem Types: CWE-284 Description: The affected product is vulnerable to an improper access control, which may allow an authenticated user to gain unauthorized access to sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-22-006-01
CVE ID: CVE-2021-23174 State: PUBLISHED Published: 2022-01-28T19:09:52.936Z Last Updated: 2025-02-20T20:32:18.863Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N) Vendors: WPChill Products: Download Monitor Problem Types: CWE-79 Description: Authenticated (admin+) Persistent Cross-Site Scripting (XSS) vulnerability discovered in Download Monitor WordPress plugin (versions <= 4.4.6) Vulnerable parameters: &post_title, &downloadable_file_version[0]. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/vulnerability/download-monitor/wordpress-download-monitor-plugin-4-4-6-authenticated-persistent-cross-si
ck.com/database/vulnerability/download-monitor/wordpress-download-monitor-plugin-4-4-6-authenticated-persistent-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2021-23175 State: PUBLISHED Published: 2021-12-23T16:05:10 Last Updated: 2024-08-03T19:05:55.554Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA GeForce Experience Software Problem Types: CWE:285 Improper Authorization Description: NVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply individual user access controls for users on the same device, which, with user intervention, may lead to escalation of privileges, information disclosure, data tampering, and denial of service, affecting other resources beyond the intended security authority of GameStream. Additiona
pering, and denial of service, affecting other resources beyond the intended security authority of GameStream. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5295
CVE ID: CVE-2021-23176 State: PUBLISHED Published: 2023-04-25T18:32:31.407Z Last Updated: 2024-08-03T19:05:54.464Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-284 Description: Improper access control in reporting engine of l10n_fr_fec module in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to extract accounting information via crafted RPC packets. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/107682 - https://www.debian.org/security/2023/dsa-5399
CVE ID: CVE-2021-23177 State: PUBLISHED Published: 2022-08-23T00:00:00 Last Updated: 2024-08-03T19:05:55.631Z Vendors: n/a Products: libarchive Problem Types: CWE-59 Description: An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link. An attacker may provide a malicious archive to a victim user, who would trigger this flaw when trying to extract the archive. A local attacker may use this flaw to change the ACL of a file on the system and gain more privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libarchive/libarchive/issues/1565 - https://github.com/libarchive/lib
rogram Container: References: - https://github.com/libarchive/libarchive/issues/1565 - https://github.com/libarchive/libarchive/commit/fba4f123cc456d2b2538f811bb831483bf336bad - https://bugzilla.redhat.com/show_bug.cgi?id=2024245 - https://access.redhat.com/security/cve/CVE-2021-23177 - https://lists.debian.org/debian-lts-announce/2022/11/msg00030.html
CVE ID: CVE-2021-23178 State: PUBLISHED Published: 2023-04-25T18:33:37.875Z Last Updated: 2024-08-03T19:05:53.926Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-284 Description: Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows attackers to validate online payments with a tokenized payment method that belongs to another user, causing the victim's payment method to be charged instead. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/107690 - https://www.debian.org/se
nrichment: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/107690 - https://www.debian.org/security/2023/dsa-5399
CVE ID: CVE-2021-23179 State: PUBLISHED Published: 2022-08-18T19:44:27.000Z Last Updated: 2025-05-05T16:54:32.006Z Vendors: n/a Products: Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products Problem Types: information disclosure Description: Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00628.html
CVE ID: CVE-2021-23180 State: PUBLISHED Published: 2022-03-02T22:29:49 Last Updated: 2024-08-03T19:05:55.251Z Vendors: n/a Products: htmldoc Problem Types: CWE-476 Description: A flaw was found in htmldoc in v1.9.12 and before. Null pointer dereference in file_extension(),in file.c may lead to execute arbitrary code and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/michaelrsweet/htmldoc/issues/418 - https://bugzilla.redhat.com/show_bug.cgi?id=1967041 - https://ubuntu.com/security/CVE-2021-23180 - https://github.com/michaelrsweet/htmldoc/commit/19c582fb32eac74b57e155cffbb529377a9e751a
CVE ID: CVE-2021-23182 State: PUBLISHED Published: 2021-06-11T15:46:01 Last Updated: 2024-08-03T19:05:55.917Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Gallagher Products: Command Centre Problem Types: CWE-316 Description: Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows OSDP reader master keys to be discoverable in server memory dumps. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); All versions of 8.30. Additional Analyst Notes: - CVE Program Container: References: - https://security.gallagher.com/Security-Advisories/CVE-2021-23182
CVE ID: CVE-2021-23185 State: REJECTED Published: N/A Last Updated: 2023-03-07T21:49:46.987Z Description: No description available.
CVE ID: CVE-2021-23186 State: PUBLISHED Published: 2023-04-25T18:33:36.536Z Last Updated: 2024-08-03T19:05:53.896Z Severity: HIGH (CVSS 8.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-267 Description: A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and modify database contents of other tenants, in a multi-tenant system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/107688 - https://www.debian.org/security/2023/dsa-5399
CVE ID: CVE-2021-23188 State: PUBLISHED Published: 2022-08-18T19:43:19.000Z Last Updated: 2025-05-05T16:54:21.891Z Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products Problem Types: information disclosure Description: Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE ID: CVE-2021-23191 State: PUBLISHED Published: 2022-03-02T22:28:10 Last Updated: 2024-08-03T19:05:54.542Z Vendors: n/a Products: htmldoc Problem Types: CWE-476 Description: A security issue was found in htmldoc v1.9.12 and before. A NULL pointer dereference in the function image_load_jpeg() in image.cxx may result in denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/michaelrsweet/htmldoc/issues/415 - https://github.com/michaelrsweet/htmldoc/commit/369b2ea1fd0d0537ba707f20a2f047b6afd2fbdc - https://bugzilla.redhat.com/show_bug.cgi?id=1967022 - https://ubuntu.com/security/CVE-2021-23191
CVE ID: CVE-2021-23192 State: PUBLISHED Published: 2022-03-02T00:00:00 Last Updated: 2024-08-03T19:05:55.765Z Vendors: n/a Products: samba Problem Types: CWE-20 Description: A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2019666 - https://www.samba.org/samba/security/CVE-2021-23192.html - https://ubuntu.com/security/CVE-2021-23192 - https://security.gentoo.org/glsa/202309-06
CVE ID: CVE-2021-23193 State: PUBLISHED Published: 2021-11-18T18:02:43.319367Z Last Updated: 2024-09-17T02:46:48.552Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Gallagher Products: Command Centre Problem Types: CWE-200 Description: Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve sensitive information from the Command Centre Server. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 (MR3) ; 8.40 versions prior to 8.40.2063 (MR4); 8.30 versions prior to 8.30.1454 (MR4) ; 8.20 versions prior to 8.20.1291 (MR6); version 8.10 and p
to 8.40.2063 (MR4); 8.30 versions prior to 8.30.1454 (MR4) ; 8.20 versions prior to 8.20.1291 (MR6); version 8.10 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://security.gallagher.com/Security-Advisories/CVE-2021-23193
CVE ID: CVE-2021-23195 State: PUBLISHED Published: 2022-01-21T18:17:38.000Z Last Updated: 2025-04-16T16:47:42.124Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Fresenius Kabi Products: Vigilant Software Suite (Mastermed Dashboard) Problem Types: CWE-548 Description: Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 has the option for automated indexing (directory listing) activated. When accessing a directory, a web server delivers its entire content in HTML form. If an index file does not exist and directory listing is enabled, all content of the directory will be displayed, allowing an attacker to identify and access files on
isting is enabled, all content of the directory will be displayed, allowing an attacker to identify and access files on the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
CVE ID: CVE-2021-23196 State: PUBLISHED Published: 2022-01-21T18:17:36.000Z Last Updated: 2025-04-16T16:47:57.851Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Fresenius Kabi Products: Agilia Link+ Problem Types: CWE-522 Description: The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01
CVE ID: CVE-2021-23197 State: PUBLISHED Published: 2021-11-18T18:01:52.750598Z Last Updated: 2024-09-16T18:17:45.291Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Gallagher Products: Command Centre Problem Types: CWE-428 Description: Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the account that runs the Controller Service. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 (MR3) ; Additional Analyst Notes: - CVE Program Container: References: - https://security.gallagher.com/Security-Advisories/CVE-2021-23197
CVE ID: CVE-2021-23198 State: PUBLISHED Published: 2021-12-23T19:48:35.400986Z Last Updated: 2024-09-16T16:23:34.792Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: mySCADA Products: myPRO Problem Types: CWE-78 Description: mySCADA myPRO: Versions 8.20.0 and prior has a feature where the password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-355-01
CVE ID: CVE-2021-23199 State: REJECTED Published: N/A Last Updated: 2023-03-07T21:50:29.596Z Description: No description available.
CVE ID: CVE-2021-23201 State: PUBLISHED Published: 2021-11-20T14:55:21 Last Updated: 2024-08-03T19:05:55.376Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA GPU and Tegra hardware Problem Types: CWE 1240: Use of a Risky Cryptographic Primitive Description: NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller, which may allow a user with elevated privileges to generate valid microcode by identifying, exploiting, and loading vulnerable microcode. Such an attack could lead to information disclosure, data corruption, or denial of service of the device. The scope may extend to other components. Additional Ana
isclosure, data corruption, or denial of service of the device. The scope may extend to other components. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5263
CVE ID: CVE-2021-23203 State: PUBLISHED Published: 2023-04-25T18:35:38.489Z Last Updated: 2025-02-03T17:14:04.331Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-284 Description: Improper access control in reporting engine of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to download PDF reports for arbitrary documents, via crafted requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/odoo/odoo/issues/107695 - https://www.debian.org/security/2023/dsa-5399
CVE ID: CVE-2021-23204 State: PUBLISHED Published: 2021-06-11T15:46:01 Last Updated: 2024-08-03T19:05:54.483Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Gallagher Products: Command Centre Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gallagher Command Centre Server allows OSDP key material to be exposed to Command Centre Operators. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3). Additional Analyst Notes: - CVE Program Container: References: - https://security.gallagher.com/Security-Advisories/CVE-2021-23204
CVE ID: CVE-2021-23205 State: PUBLISHED Published: 2021-06-11T15:46:01 Last Updated: 2024-08-03T19:05:55.672Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Gallagher Products: Command Centre Problem Types: CWE-116 Description: Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configuration of Controllers and other hardware items beyond their privilege. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); version 8.10 and prior versions. Additional Analyst Notes: - CVE Program Container: R
versions prior to 8.20.1259 (MR5); version 8.10 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://security.gallagher.com/Security-Advisories/CVE-2021-23205
CVE ID: CVE-2021-23206 State: PUBLISHED Published: 2022-03-02T22:25:19 Last Updated: 2024-08-03T19:05:55.305Z Vendors: n/a Products: htmldoc Problem Types: CWE-121 Description: A flaw was found in htmldoc in v1.9.12 and prior. A stack buffer overflow in parse_table() in ps-pdf.cxx may lead to execute arbitrary code and denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/michaelrsweet/htmldoc/issues/416 - https://bugzilla.redhat.com/show_bug.cgi?id=1967028 - https://ubuntu.com/security/CVE-2021-23206 - https://github.com/michaelrsweet/htmldoc/commit/ba61a3ece382389ae4482c7027af8b32e8ab4cc8
CVE ID: CVE-2021-23207 State: PUBLISHED Published: 2022-01-21T18:17:39.000Z Last Updated: 2025-04-16T16:47:32.782Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: Fresenius Kabi Products: Vigilant Software Suite (Mastermed Dashboard), Agilia Partner Problem Types: CWE-256 Description: An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for the Fresenius Kabi Vigilant MasterMed version 2.0.1.3 application and impersonate arbitrary users. An attacker could manipulate RabbitMQ queues and messages by impersonating users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
es and messages by impersonating users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-21-355-01