Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ub.com/candlepin/candlepin/pull/3199 - https://github.com/candlepin/candlepin/pull/3197 - https://github.com/candlepin/candlepin/pull/3198
CVE ID: CVE-2021-4143 State: PUBLISHED Published: 2022-01-19T22:20:09 Last Updated: 2024-08-03T17:16:04.257Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: bigbluebutton Products: bigbluebutton/bigbluebutton Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Generic in GitHub repository bigbluebutton/bigbluebutton prior to 2.4.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/e67603e6-8497-4ab6-b93a-02c26407d443 - https://github.com/bigbluebutton/bigbluebutton/commit/62040bdcb3c2f993ba72ab89f4db2015e18d1706
CVE ID: CVE-2021-4144 State: PUBLISHED Published: 2021-12-23T06:30:10 Last Updated: 2024-08-03T17:16:04.225Z Vendors: TP-LINK Products: TL-WR802N V4(JP) Problem Types: CWE-78 Description: TP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS command injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.tp-link.com/jp/support/download/tl-wr802n/#Firmware - https://jvn.jp/en/vu/JVNVU94883311/
CVE ID: CVE-2021-4145 State: PUBLISHED Published: 2022-01-25T19:11:14 Last Updated: 2024-08-03T17:16:04.234Z Vendors: n/a Products: QEMU Problem Types: CWE-476 Description: A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The `self` pointer is dereferenced in mirror_wait_on_conflicts() without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on the host when writing data reaches the threshold of mirroring node. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2034602 - https://gitlab.com/qemu-project/qemu/
ram Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2034602 - https://gitlab.com/qemu-project/qemu/-/commit/66fed30c9cd11854fc878a4eceb507e915d7c9cd - https://security.netapp.com/advisory/ntap-20220311-0004/ - https://security.gentoo.org/glsa/202208-27
CVE ID: CVE-2021-4146 State: PUBLISHED Published: 2022-01-18T15:30:12 Last Updated: 2024-08-03T17:16:04.270Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-840 Description: Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/47b37054-cafe-4f48-8b40-c86efc7fb760 - https://github.com/pimcore/pimcore/commit/7011922f7f0f97a82d8c378559b91fcdb34604a6
CVE ID: CVE-2021-4147 State: PUBLISHED Published: 2022-03-25T00:00:00 Last Updated: 2024-08-03T17:16:04.272Z Vendors: n/a Products: libvirt Problem Types: CWE-667 Description: A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2034195 - https://security.netapp.com/advisory/ntap-20220513-0004/ - https://lists.debian.org/debian-lts-announce/2024/04/msg00000.html
CVE ID: CVE-2021-4148 State: PUBLISHED Published: 2022-03-23T19:46:44 Last Updated: 2024-08-03T17:16:04.195Z Vendors: n/a Products: kernel Problem Types: CWE-354 Description: A vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the filesystem. A missing sanity check may allow a local attacker with user privilege to cause a denial of service (DOS) problem. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2026487 - https://lkml.org/lkml/2021/9/12/323 - https://lkml.org/lkml/2021/9/17/1037
CVE ID: CVE-2021-4149 State: PUBLISHED Published: 2022-03-23T19:46:44 Last Updated: 2024-08-03T17:16:04.260Z Vendors: n/a Products: kernel Problem Types: CWE-667 Description: A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2026485 - https://lkml.org/lkml/2021/10/18/885 - https://lkml.org/lkml/2021/9/13/2565 - https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html
CVE ID: CVE-2021-4150 State: PUBLISHED Published: 2022-03-23T19:46:46 Last Updated: 2024-08-03T17:16:04.268Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A use-after-free flaw was found in the add_partition in block/partitions/core.c in the Linux kernel. A local attacker with user privileges could cause a denial of service on the system. The issue results from the lack of code cleanup when device_add call fails when adding a partition to the disk. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2025938 - https://lkml.org/lkml/2021/10/18/485 - https://lkml.org/lkml/2021/9/6/781
CVE ID: CVE-2021-4154 State: PUBLISHED Published: 2022-02-04T22:29:17 Last Updated: 2024-08-03T17:16:04.485Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2034514 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b0462726e7ef2
m/show_bug.cgi?id=2034514 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b0462726e7ef281c35a7a4ae33e93ee2bc9975b - https://cloud.google.com/anthos/clusters/docs/security-bulletins#gcp-2022-002 - https://security.netapp.com/advisory/ntap-20220225-0004/
CVE ID: CVE-2021-4155 State: PUBLISHED Published: 2022-08-24T15:10:19 Last Updated: 2024-08-03T17:16:04.255Z Vendors: n/a Products: kernel Problem Types: CWE-131 Description: A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2022/01/10/1 - https://bugzilla.redhat.com/show_bug.cgi?id=2034813 - https://access.redhat.com/security/cve/CVE-2021-4155 - https://security-tracker.debian.org/tracker/CVE-
cgi?id=2034813 - https://access.redhat.com/security/cve/CVE-2021-4155 - https://security-tracker.debian.org/tracker/CVE-2021-4155 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=983d8e60f50806f90534cc5373d0ce867e5aaf79
CVE ID: CVE-2021-4156 State: PUBLISHED Published: 2022-03-23T00:00:00 Last Updated: 2024-08-03T17:16:04.230Z Vendors: n/a Products: libsndfile Problem Types: CWE-125 Description: An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/sh
oitation of other flaws. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2027690 - https://github.com/libsndfile/libsndfile/pull/732/commits/4c30646abf7834e406f7e2429c70bc254e18beab - https://github.com/libsndfile/libsndfile/issues/731 - https://lists.debian.org/debian-lts-announce/2022/06/msg00020.html - https://lists.debian.org/debian-lts-announce/2022/09/msg00036.html - https://security.gentoo.org/glsa/202309-11
CVE ID: CVE-2021-4157 State: PUBLISHED Published: 2022-03-25T18:02:43 Last Updated: 2024-08-03T17:16:04.290Z Vendors: n/a Products: kernel Problem Types: CWE-119 Description: An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication of files with NFS). A user, having access to the NFS mount, could potentially use this flaw to crash the system or escalate privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2034342 - https://lore.kernel.org/lkml/20210517140244.822185482%40linuxfoundation.org/ - https://www.oracle.com/securi
d=2034342 - https://lore.kernel.org/lkml/20210517140244.822185482%40linuxfoundation.org/ - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20220602-0007/
CVE ID: CVE-2021-4158 State: PUBLISHED Published: 2022-08-24T15:10:39 Last Updated: 2024-08-03T17:16:04.257Z Vendors: n/a Products: QEMU Problem Types: CWE-476 Description: A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/qemu-project/qemu/-/issues/770 - https://bugzilla.redhat.com/show_bug.cgi?id=2035002 - https://access.redhat.com/security/cve/CVE-2021-4158 - https://www.mail-archive.com/qemu-devel%40nongnu.org/msg857944.html - https://gitla
hat.com/security/cve/CVE-2021-4158 - https://www.mail-archive.com/qemu-devel%40nongnu.org/msg857944.html - https://gitlab.com/qemu-project/qemu/-/commit/9bd6565ccee68f72d5012e24646e12a1c662827e
CVE ID: CVE-2021-4159 State: PUBLISHED Published: 2022-08-24T15:10:57 Last Updated: 2024-08-03T17:16:04.247Z Vendors: n/a Products: kernel Problem Types: CWE-202 Description: A vulnerability was found in the Linux kernel's EBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2036024 - https://access.redhat.com/security/cve/CVE-2021-4159 -
erences: - https://bugzilla.redhat.com/show_bug.cgi?id=2036024 - https://access.redhat.com/security/cve/CVE-2021-4159 - https://security-tracker.debian.org/tracker/CVE-2021-4159 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=294f2fc6da27620a506e6c050241655459ccd6bd - https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
CVE ID: CVE-2021-4160 State: PUBLISHED Published: 2022-01-28T21:28:41.076292Z Last Updated: 2024-09-16T23:51:52.869Z Vendors: OpenSSL Products: OpenSSL Problem Types: carry-propagating bug Description: There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis suggests that attacks against RSA and DSA as a result of this defect would be very difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very diffi
y difficult to perform and are not believed likely. Attacks against DH are considered just feasible (although very difficult) because most of the work necessary to deduce information about a private key may be performed offline. The amount of resources required for such an attack would be significant. However, for an attack on TLS to be meaningful, the server would have to share the DH private key among multiple clients, which is no longer an option since CVE-2016-0701. This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0.0. It was addressed in the releases of 1.1.1m and 3.0.1 on the 15th of December 2021. For the 1.0.2 release it is addressed in git commit 6fc1aaaf3 that is available to
d 3.0.1 on the 15th of December 2021. For the 1.0.2 release it is addressed in git commit 6fc1aaaf3 that is available to premium support customers only. It will be made available in 1.0.2zc when it is released. The issue only affects OpenSSL on MIPS platforms. Fixed in OpenSSL 3.0.1 (Affected 3.0.0). Fixed in OpenSSL 1.1.1m (Affected 1.1.1-1.1.1l). Fixed in OpenSSL 1.0.2zc-dev (Affected 1.0.2-1.0.2zb). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.openssl.org/news/secadv/20220128.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=3bf7b73ea7123045b8f972badc67ed6878e6c37f - https://git.openssl.org/gitweb/?p=openssl.git
=openssl.git%3Ba=commitdiff%3Bh=3bf7b73ea7123045b8f972badc67ed6878e6c37f - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e9e726506cd2a3fd9c0f12daf8cc1fe934c7dddb - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6fc1aaaf303185aa5e483e06bdfae16daa9193a7 - https://www.debian.org/security/2022/dsa-5103 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf - https://security.gentoo.org/glsa/202210-02 - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2021-4161 State: PUBLISHED Published: 2021-12-27T18:48:19.982800Z Last Updated: 2024-09-16T19:24:13.483Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Moxa Products: MGate MB3180 Series, MGate MB3280 Series, MGate MB3480 Series Problem Types: CWE-319 Description: The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server. Additional Analyst Notes: - CVE Program Container: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01
CVE ID: CVE-2021-4162 State: PUBLISHED Published: 2021-12-25T11:20:09 Last Updated: 2024-08-03T17:16:04.299Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: archivy Products: archivy/archivy Problem Types: CWE-352 Description: archivy is vulnerable to Cross-Site Request Forgery (CSRF) Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/e204a768-2129-4b6f-abad-e436309c7c32 - https://github.com/archivy/archivy/commit/796c3ae318eea183fc88c87ec5a27355b0f6a99d
CVE ID: CVE-2021-4164 State: PUBLISHED Published: 2022-01-17T12:35:10 Last Updated: 2024-08-03T17:16:04.257Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H) Vendors: janeczku Products: janeczku/calibre-web Problem Types: CWE-352 Description: calibre-web is vulnerable to Cross-Site Request Forgery (CSRF) Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/2debace1-a0f3-45c1-95fa-9d0512680758 - https://github.com/janeczku/calibre-web/commit/785726deee13b4d56f6c3503dd57c1e3eb7d6f30
CVE ID: CVE-2021-4166 State: PUBLISHED Published: 2021-12-25T18:15:09 Last Updated: 2024-08-03T17:16:04.277Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-125 Description: vim is vulnerable to Out-of-bounds Read Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/229df5dd-5507-44e9-832c-c70364bdf035 - https://github.com/vim/vim/commit/6f98371532fcff911b462d51bc64f2ce8a6ae682 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/ - http://www.openwall.com/lists/oss-security/2022/01/15/1 - https://lists.
org/message/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/ - http://www.openwall.com/lists/oss-security/2022/01/15/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/ - https://support.apple.com/kb/HT213183 - http://seclists.org/fulldisclosure/2022/Mar/29 - https://support.apple.com/kb/HT213256 - http://seclists.org/fulldisclosure/2022/May/35 - https://support.apple.com/kb/HT213343 - http://seclists.org/fulldisclosure/2022/Jul/14 - https://security.gentoo.org/glsa/202208-32
CVE ID: CVE-2021-4168 State: PUBLISHED Published: 2021-12-26T13:20:10 Last Updated: 2024-08-03T17:16:04.237Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-352 Description: showdoc is vulnerable to Cross-Site Request Forgery (CSRF) Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/f14431e2-f1f6-4331-ba91-a4ea8b26be0c - https://github.com/star7th/showdoc/commit/3ff0c85d439ccbdfadeb96b5a52acf6318041109
CVE ID: CVE-2021-4169 State: PUBLISHED Published: 2021-12-26T11:35:09 Last Updated: 2024-08-03T17:16:04.241Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-79 Description: livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/91bbb411-6502-4dc1-8b59-b31f7d1c1f72 - https://github.com/livehelperchat/livehelperchat/commit/8f6ddadffcd683c16fbbe622acf374eea1e39c74
CVE ID: CVE-2021-4170 State: PUBLISHED Published: 2022-01-16T20:55:10 Last Updated: 2024-08-03T17:16:04.234Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: janeczku Products: janeczku/calibre-web Problem Types: CWE-79 Description: calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ff395101-e392-401d-ab4f-579c63fbf6a0 - https://github.com/janeczku/calibre-web/commit/7ad419dc8c12180e842a82118f4866ac3d074bc5
CVE ID: CVE-2021-4171 State: PUBLISHED Published: 2022-01-17T09:45:10 Last Updated: 2024-08-03T17:16:04.253Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: janeczku Products: janeczku/calibre-web Problem Types: CWE-840 Description: calibre-web is vulnerable to Business Logic Errors Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/1117f439-133c-4563-afb2-6cd80607bd5c - https://github.com/janeczku/calibre-web/commit/3e0d8763c377d2146462811e3e4ccf13f0d312ce
CVE ID: CVE-2021-4172 State: PUBLISHED Published: 2022-01-22T11:40:10 Last Updated: 2024-08-03T17:16:04.252Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/c041b693-877b-4456-b463-19e4c9456eee - https://github.com/star7th/showdoc/commit/409c8a1208bbb847046a9496303192980f2e6219
CVE ID: CVE-2021-4173 State: PUBLISHED Published: 2021-12-27T12:25:12.000Z Last Updated: 2025-11-03T20:34:01.175Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: vim is vulnerable to Use After Free Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a1b236b9-89fb-4ccf-9689-ba11b471e766 - https://github.com/vim/vim/commit/9c23f9bb5fe435b28245ba8ac65aa0ca6b902c04 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/ - http://www.openwall.com/lists/oss-security/2022/01/15/1 - https://lis
ct.org/message/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/ - http://www.openwall.com/lists/oss-security/2022/01/15/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/ - https://support.apple.com/kb/HT213183 - http://seclists.org/fulldisclosure/2022/Mar/29 - https://support.apple.com/kb/HT213256 - http://seclists.org/fulldisclosure/2022/May/35 - https://support.apple.com/kb/HT213343 - http://seclists.org/fulldisclosure/2022/Jul/14 - https://security.gentoo.org/glsa/202208-32
CVE ID: CVE-2021-4175 State: PUBLISHED Published: 2021-12-29T14:35:17 Last Updated: 2024-08-03T17:16:04.261Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-79 Description: livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/8a7d16e0-9a46-4710-a029-c89c33c01528 - https://github.com/livehelperchat/livehelperchat/commit/162892013eb07b21461ceffe6702140acc0fef57
CVE ID: CVE-2021-4176 State: PUBLISHED Published: 2021-12-29T14:35:12 Last Updated: 2024-08-03T17:16:04.247Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-79 Description: livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/8b531ae9-2d36-43ff-af33-4d81acfb2f27 - https://github.com/livehelperchat/livehelperchat/commit/1f67cf9f251289a5094774307c2c3d638f9f0ba6
CVE ID: CVE-2021-4177 State: PUBLISHED Published: 2021-12-28T06:00:11 Last Updated: 2024-08-03T17:16:04.274Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-209 Description: livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ac641425-1c64-4874-95e7-c7805c72074e - https://github.com/livehelperchat/livehelperchat/commit/b280beae2e0de37b9e998c31c5d1839852724fc1
CVE ID: CVE-2021-4178 State: PUBLISHED Published: 2022-08-24T15:02:11 Last Updated: 2024-08-03T17:16:04.264Z Vendors: n/a Products: kubernetes-client Problem Types: CWE-502 Description: A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2034388 - https://access.redhat.com/security/cve/CVE-2021-4178 - https://github.com/advisories/GHSA-98g7-rxmf-rrxm - https://github.com/fabric8io/kubernetes-client/is
ve/CVE-2021-4178 - https://github.com/advisories/GHSA-98g7-rxmf-rrxm - https://github.com/fabric8io/kubernetes-client/issues/3653
CVE ID: CVE-2021-4179 State: PUBLISHED Published: 2021-12-28T08:35:09 Last Updated: 2024-08-03T17:16:04.269Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-79 Description: livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/8df06513-c57d-4a55-9798-0a1f6c153535 - https://github.com/livehelperchat/livehelperchat/commit/c3881fb528af349bf47f9ccbf83c994087faa3e6