Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-38734 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T16:13:24.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sem-cms.cn/wenda/view-56.html - https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-2.md
CVE ID: CVE-2021-38736 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T15:37:57.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: SEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant_Global.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sem-cms.cn/wenda/view-56.html - https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-1.md
CVE ID: CVE-2021-38737 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T15:37:24.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: SEMCMS v 1.1 is vulnerable to SQL Injection via Ant_Pro.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sem-cms.cn/wenda/view-56.html - https://github.com/BigTiger2020/SCSHOP/blob/main/semcms-6.md
CVE ID: CVE-2021-38745 State: PUBLISHED Published: 2022-03-21T20:39:45 Last Updated: 2024-08-04T01:51:20.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execute arbitrary code via a crafted plugin. This vulnerability is triggered through user interaction with the attacker's profile page. Additional Analyst Notes: - CVE Program Container: References: - https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-81-2021-07-26-High-impact-Low-risk-Zero-Code-RCE-in-admin
CVE ID: CVE-2021-38751 State: PUBLISHED Published: 2021-08-16T13:53:19 Last Updated: 2024-08-04T01:51:20.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: A HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponent_constants.php. A modified HTTP header can change links on the webpage to an arbitrary value, leading to a possible attack vector for MITM. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/exponentcms/exponent-cms/issues/1544
CVE ID: CVE-2021-38752 State: PUBLISHED Published: 2021-08-16T13:53:26 Last Updated: 2024-08-04T01:51:20.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Online Catering Reservation System using PHP on Sourcecodester allows an attacker to arbitrarily inject code in the search bar. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dumpling-soup/Online-Catering-Reservation/blob/main/README.md
CVE ID: CVE-2021-38753 State: PUBLISHED Published: 2021-08-16T13:53:32 Last Updated: 2024-08-04T01:51:20.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unrestricted file upload on Simple Image Gallery Web App can be exploited to upload a web shell and executed to gain unauthorized access to the server hosting the web app. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dumpling-soup/Simple-Image-Gallery-Web-App/blob/main/README.md
CVE ID: CVE-2021-38754 State: PUBLISHED Published: 2021-08-16T13:53:38 Last Updated: 2024-08-04T01:51:19.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kishan0725/Hospital-Management-System/issues/7 - https://streamable.com/y9qy4m - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38754
CVE ID: CVE-2021-38755 State: PUBLISHED Published: 2021-08-16T13:53:43 Last Updated: 2024-08-04T01:51:20.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unauthenticated doctor entry deletion in Hospital Management System in admin-panel1.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kishan0725/Hospital-Management-System/issues/5
CVE ID: CVE-2021-38756 State: PUBLISHED Published: 2021-08-16T13:53:49 Last Updated: 2024-08-04T01:51:20.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through prescribe.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kishan0725/Hospital-Management-System/issues/4
CVE ID: CVE-2021-38757 State: PUBLISHED Published: 2021-08-16T13:53:55 Last Updated: 2024-08-04T01:51:20.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent cross-site scripting (XSS) in Hospital Management System targeted towards web admin through contact.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kishan0725/Hospital-Management-System/issues/6 - http://packetstormsecurity.com/files/163869/Hospital-Management-System-Cross-Site-Scripting.html
CVE ID: CVE-2021-38758 State: PUBLISHED Published: 2021-08-16T13:54:03 Last Updated: 2024-08-04T01:51:20.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dumpling-soup/Online-Catering-Reservation-DT/blob/main/README.md - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38758 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/Online-Catering-Reservation-DT-Food-Catering - https://github.com/nu11secur1ty/CVE-mitre/blob/main/CVE-2021-38758/README.MD - https://at
Reservation-DT-Food-Catering - https://github.com/nu11secur1ty/CVE-mitre/blob/main/CVE-2021-38758/README.MD - https://attackerkb.com/topics/XuEb81tsid/online-catering-reservation-dt-food-catering-by-oretnom23-v1-0-sql-injection---login
CVE ID: CVE-2021-38759 State: PUBLISHED Published: 2021-12-07T20:51:04 Last Updated: 2024-08-04T01:51:20.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.raspberrypi.com/documentation/computers/configuration.html#change-the-default-password - https://www.cnvd.org.cn/flaw/show/CNVD-2021-43968 - http://packetstormsecurity.com/files/165211/Raspberry-Pi-5.10-Default-Credentials.html - https://arstechnica.com/gadgets/2022/04/raspberry-pi-os-axes-longstanding-defau
berry-Pi-5.10-Default-Credentials.html - https://arstechnica.com/gadgets/2022/04/raspberry-pi-os-axes-longstanding-default-user-account-in-the-name-of-security/
CVE ID: CVE-2021-38772 State: PUBLISHED Published: 2022-03-23T18:57:11 Last Updated: 2024-08-04T01:51:20.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function. Additional Analyst Notes: - CVE Program Container: References: - https://noob3xploiter.medium.com/hacking-the-tenda-ac10-1200-router-part-3-yet-another-buffer-overflow-4eb322f64823
CVE ID: CVE-2021-38783 State: PUBLISHED Published: 2022-01-18T12:43:46 Last Updated: 2024-08-04T01:51:20.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a Out-of-Bound Write in the Allwinner R818 SoC Android Q SDK V1.0 camera driver "/dev/cedar_dev" through iotcl cmd IOCTL_SET_PROC_INFO and IOCTL_COPY_PROC_INFO, which could cause a system crash or EoP. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/Allwinner%20R818%20SoC%EF%BC%9ACamera%20Driver%20has%20Out-Of-Bound%20Write%20Vulnerability.md - https://www.cnvd.org.cn/flaw/show/CNVD-2021-49168 - https://vul.wangan.com/a/CNVD-2021-49168 - https:
Vulnerability.md - https://www.cnvd.org.cn/flaw/show/CNVD-2021-49168 - https://vul.wangan.com/a/CNVD-2021-49168 - https://www.allwinnertech.com/index.php?c=product&a=index&id=92
CVE ID: CVE-2021-38784 State: PUBLISHED Published: 2022-01-18T13:10:09 Last Updated: 2024-08-04T01:51:20.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a NULL pointer dereference in the syscall open_exec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause a system crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.allwinnertech.com/index.php?c=product&a=index&id=92 - https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/Allwinner%20R818%20SoC%EF%BC%9ASyscall%20open_exec%20has%20Null%20Pointer%20Dereference%20Vulnerability.md - https://www.cnvd.org.cn/flaw/show/CNVD-2021-49172 - https:/
ec%20has%20Null%20Pointer%20Dereference%20Vulnerability.md - https://www.cnvd.org.cn/flaw/show/CNVD-2021-49172 - https://vul.wangan.com/a/CNVD-2021-49172
CVE ID: CVE-2021-38785 State: PUBLISHED Published: 2022-01-18T13:46:23 Last Updated: 2024-08-04T01:51:20.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedar_dev that could use the ioctl cmd IOCTL_GET_IOMMU_ADDR to cause a system crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.allwinnertech.com/index.php?c=product&a=index&id=92 - https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/Allwinner%20R818%20SoC%EF%BC%9ACamera%20Driver%20has%20Null%20Pointer%20Dereference%20Vulnerability.md - https://www.cnvd.org.cn/flaw/show/CNVD-2021-49170 - htt
Driver%20has%20Null%20Pointer%20Dereference%20Vulnerability.md - https://www.cnvd.org.cn/flaw/show/CNVD-2021-49170 - https://vul.wangan.com/a/CNVD-2021-49170
CVE ID: CVE-2021-38786 State: PUBLISHED Published: 2022-01-19T11:53:31 Last Updated: 2024-08-04T01:51:20.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash (denial of service). Additional Analyst Notes: - CVE Program Container: References: - https://www.allwinnertech.com/index.php?c=product&a=index&id=92 - https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/Allwinner%20R818%20SoC%EF%BC%9AMedia%20vdecoder%20has%20Null%20Pointer%20Dereference%20Vulnerability.md - https://www.cnvd.org.cn/flaw/show/CNVD-2021-49173 - https://vul.wangan.com/a/C
ointer%20Dereference%20Vulnerability.md - https://www.cnvd.org.cn/flaw/show/CNVD-2021-49173 - https://vul.wangan.com/a/CNVD-2021-49173
CVE ID: CVE-2021-38787 State: PUBLISHED Published: 2022-01-19T12:46:44 Last Updated: 2024-08-04T01:51:20.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd "COMPAT_ION_IOC_SUNXI_FLUSH_RANGE" to cause a system crash (denial of service). Additional Analyst Notes: - CVE Program Container: References: - https://www.allwinnertech.com/index.php?c=product&a=index&id=92 - https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/Allwinner%20R818%20SoC%EF%BC%9AION%20Driver%20Integer%20Overflow.md - https://www.cnvd.org.cn/flaw/show/CNVD-2021-49171 - https://vul.w
8%20SoC%EF%BC%9AION%20Driver%20Integer%20Overflow.md - https://www.cnvd.org.cn/flaw/show/CNVD-2021-49171 - https://vul.wangan.com/a/CNVD-2021-49171
CVE ID: CVE-2021-38788 State: PUBLISHED Published: 2022-01-19T15:23:02 Last Updated: 2024-08-04T01:51:20.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Background service in Allwinner R818 SoC Android Q SDK V1.0 is used to manage background applications. Malicious apps can use the interface provided by the service to set the number of applications allowed to run in the background to 0 and add themselves to the whitelist, so that once other applications enter the background, they will be forcibly stopped by the system, causing a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.allwinnertech.com/index.php?c=product&a=index&id=
onal Analyst Notes: - CVE Program Container: References: - https://www.allwinnertech.com/index.php?c=product&a=index&id=92 - https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/Allwinner%20R818%20SoC%EF%BC%9Abackground%20service%20has%20EoP%20Vulnerability.md - https://www.cnvd.org.cn/flaw/show/CNVD-2021-46928 - https://vul.wangan.com/a/CNVD-2021-46928
CVE ID: CVE-2021-38789 State: PUBLISHED Published: 2022-01-19T18:40:26 Last Updated: 2024-08-04T01:51:20.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's permission, in which a third-party app could change system settings. Additional Analyst Notes: - CVE Program Container: References: - https://www.allwinnertech.com/index.php?c=product&a=index&id=92 - https://github.com/pokerfacett/MY_CVE_CREDIT/blob/master/Allwinner%20R818%20SoC%EF%BC%9Aaw_display%20service%20has%20EoP%20Vulnerability.md - https://www.cnvd.org.cn/flaw/show/CNVD-2021-46927 - https://v
BC%9Aaw_display%20service%20has%20EoP%20Vulnerability.md - https://www.cnvd.org.cn/flaw/show/CNVD-2021-46927 - https://vul.wangan.com/a/CNVD-2021-46927
CVE ID: CVE-2021-38819 State: PUBLISHED Published: 2022-11-16T00:00:00.000Z Last Updated: 2025-04-30T15:51:37.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability exits on the Simple Image Gallery System 1.0 application through "id" parameter on the album page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/m4sk0ff/CVE-2021-38819/blob/main/CVE-2021-38819.md
CVE ID: CVE-2021-38822 State: PUBLISHED Published: 2021-10-04T13:46:44 Last Updated: 2024-08-04T01:51:20.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of IceHrm 30.0.0.OS that allows for arbitrary execution of JavaScript commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.navidkagalwalla.com/icehrm-vulnerabilities
CVE ID: CVE-2021-38823 State: PUBLISHED Published: 2021-10-04T13:47:24 Last Updated: 2024-08-04T01:51:20.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an admin account does not invalidate an admin session that is opened in a different browser. Additional Analyst Notes: - CVE Program Container: References: - https://www.navidkagalwalla.com/icehrm-vulnerabilities
CVE ID: CVE-2021-38827 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T20:22:12.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to account takeover. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ChandlerChin/XiongmaiCamera/blob/main/Account%20takeover%20with%20traffic%20monitoring%20exploitation%20in%20XM-JPR2-LX%20device.pdf
CVE ID: CVE-2021-38828 State: PUBLISHED Published: 2022-11-14T00:00:00.000Z Last Updated: 2025-04-30T20:20:40.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to plain-text traffic sniffing. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ChandlerChin/XiongmaiCamera/blob/main/Sniffing%20the%20plain-text%20traffic%20in%20Xiongmai%20Camera.pdf
CVE ID: CVE-2021-38833 State: PUBLISHED Published: 2021-09-13T17:09:35 Last Updated: 2024-08-04T01:51:20.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PHPGurukul Apartment Visitors Management System (AVMS) v. 1.0 allows attackers to execute arbitrary SQL statements and to gain RCE. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/apartment-visitors-management-system-using-php-and-mysql/ - https://www.exploit-db.com/exploits/50288 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38833 - https://streamable.com/ojobew
CVE ID: CVE-2021-38834 State: PUBLISHED Published: 2022-04-05T10:13:09 Last Updated: 2024-08-04T01:51:20.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50194
CVE ID: CVE-2021-38840 State: PUBLISHED Published: 2021-09-07T05:12:14 Last Updated: 2024-08-04T01:51:20.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the water_refilling/classes/Login.php username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14906/simple-water-refilling-station-management-system-php-free-source-code.html - https://www.sourcecodester.com/users/tips23 - https://www.exploit-db.com/exploits/50205 - https://www.exploit-db.com/exploits/50204 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-38840
CVE ID: CVE-2021-38841 State: PUBLISHED Published: 2021-09-07T05:17:09 Last Updated: 2024-08-04T01:51:20.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the system_info page in classes/SystemSettings.php with an update_settings action. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14906/simple-water-refilling-station-management-system-php-free-source-code.html - https://www.sourcecodester.com/users/tips23 - https://www.exploit-db.com/exploits/50205
CVE ID: CVE-2021-38847 State: PUBLISHED Published: 2021-11-01T14:32:48 Last Updated: 2024-08-04T01:51:20.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted IMG file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bousalman/S-Cart-Arbitrary-File-Upload
CVE ID: CVE-2021-38859 State: PUBLISHED Published: 2023-10-17T01:15:31.784Z Last Updated: 2024-09-13T20:14:21.782Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Security Verify Privilege Problem Types: CWE-200 Description: IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain version number information using a specially crafted HTTP request that could be used in further attacks against the system. IBM X-Force ID: 207899. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7047202 - https://exchange.xforce.ibmcloud.com/vulnerabilities/207899
CVE ID: CVE-2021-38862 State: PUBLISHED Published: 2021-10-12T18:55:11.531810Z Last Updated: 2024-09-16T16:38:55.177Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/S:U/AV:N/C:H/PR:N/AC:H/UI:N/I:N/A:N/RC:C/RL:O/E:U) Vendors: IBM Products: Data Risk Manager Problem Types: Obtain Information Description: IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 207980. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6497499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/207980
CVE ID: CVE-2021-38863 State: PUBLISHED Published: 2021-09-23T16:05:33.818818Z Last Updated: 2024-09-16T17:18:51.632Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/UI:N/S:C/I:N/A:N/C:H/AV:L/PR:L/AC:L/RC:C/E:U/RL:O) Vendors: IBM Products: Security Verify Bridge Problem Types: Obtain Information Description: IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a locally authenticated user. IBM X-Force ID: 208154. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/208154
CVE ID: CVE-2021-38864 State: PUBLISHED Published: 2021-09-23T17:10:38.832759Z Last Updated: 2024-09-16T23:36:02.156Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/PR:N/AV:A/S:C/UI:N/C:H/I:N/A:N/AC:H/RC:C/RL:O/E:U) Vendors: IBM Products: Security Verify Bridge Problem Types: Obtain Information Description: IBM Security Verify Bridge 1.0.5.0 could allow a user to obtain sensitive information due to improper certificate validation. IBM X-Force ID: 208155. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/208155
CVE ID: CVE-2021-38868 State: PUBLISHED Published: 2022-07-18T17:00:34.389786Z Last Updated: 2024-09-17T02:20:50.723Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/S:U/PR:N/I:H/AC:L/A:N/UI:R/AV:N/C:N/RC:C/RL:O/E:U) Vendors: IBM Products: Engineering Requirements Quality Assistant On-Premises Problem Types: Gain Access Description: IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force Id: 208310. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/660400
: 208310. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6604005 - https://exchange.xforce.ibmcloud.com/vulnerabilities/208310
CVE ID: CVE-2021-38869 State: PUBLISHED Published: 2022-04-27T15:20:29.807385Z Last Updated: 2024-09-17T00:16:07.916Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/C:L/AC:L/AV:P/I:L/PR:N/S:U/A:L/UI:N/RC:C/E:U/RL:O) Vendors: IBM Products: QRadar SIEM Problem Types: Gain Access Description: IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle timeout. IBM X-Force ID: 208341. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6574787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/208341
CVE ID: CVE-2021-38870 State: PUBLISHED Published: 2021-09-23T17:40:11.665609Z Last Updated: 2024-09-17T00:11:18.885Z Severity: MEDIUM (CVSS 6.4 CVSS:3.0/C:L/PR:L/I:L/A:N/AV:N/S:C/AC:L/UI:N/RL:O/E:H/RC:C) Vendors: IBM Products: Aspera Problem Types: Cross-Site Scripting Description: IBM Aspera Cloud is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208343. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491603 - https://exchange.xfor
yst Notes: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/6491603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/208343