Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-4303 State: PUBLISHED Published: 2023-01-05T08:44:52.943Z Last Updated: 2024-08-03T17:23:10.457Z Severity: LOW (CVSS 2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N) Vendors: shannah Products: Xataface Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in shannah Xataface up to 2.x. Affected by this issue is the function testftp of the file install/install_form.js.php of the component Installer. The manipulation leads to cross site scripting. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 3.0.0 is able to address this issue. Th
is rather high. The exploitation is known to be difficult. Upgrading to version 3.0.0 is able to address this issue. The patch is identified as 94143a4299e386f33bf582139cd4702571d93bde. It is recommended to upgrade the affected component. VDB-217442 is the identifier assigned to this vulnerability. NOTE: Installer is disabled by default. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.217442 - https://vuldb.com/?ctiid.217442 - https://github.com/shannah/xataface/commit/94143a4299e386f33bf582139cd4702571d93bde - https://github.com/shannah/xataface/releases/tag/3.0.0
CVE ID: CVE-2021-4304 State: PUBLISHED Published: 2023-01-05T09:59:07.712Z Last Updated: 2025-05-28T13:37:39.719Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: eprintsug Products: ulcc-core Problem Types: CWE-77 Description: A vulnerability was found in eprintsug ulcc-core. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file cgi/toolbox/toolbox. The manipulation of the argument password leads to command injection. The attack can be launched remotely. The patch is named 811edaae81eb044891594f00062a828f51b22cb1. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217447.
b1. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217447. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217447 - https://vuldb.com/?ctiid.217447 - https://github.com/eprintsug/ulcc-core/commit/811edaae81eb044891594f00062a828f51b22cb1
CVE ID: CVE-2021-4305 State: PUBLISHED Published: 2023-01-05T10:03:09.193Z Last Updated: 2024-11-25T17:49:33.996Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Woorank Products: robots-txt-guard Problem Types: CWE-1333 Description: A vulnerability was found in Woorank robots-txt-guard. It has been rated as problematic. Affected by this issue is the function makePathPattern of the file lib/patterns.js. The manipulation of the argument pattern leads to inefficient regular expression complexity. The exploit has been disclosed to the public and may be used. The name of the patch is c03827cd2f9933619c23894ce7c98401ea824020. It is recommended to apply a patch to fi
may be used. The name of the patch is c03827cd2f9933619c23894ce7c98401ea824020. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217448. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217448 - https://vuldb.com/?ctiid.217448 - https://github.com/Woorank/robots-txt-guard/pull/4 - https://github.com/Woorank/robots-txt-guard/commit/c03827cd2f9933619c23894ce7c98401ea824020
CVE ID: CVE-2021-4306 State: PUBLISHED Published: 2023-01-07T16:29:08.062Z Last Updated: 2024-08-03T17:23:10.279Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: cronvel Products: terminal-kit Problem Types: CWE-1333 Description: A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is a2e446cc3927b559d0281683feb9b821e83b758c. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217620. Additional An
. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217620. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217620 - https://vuldb.com/?ctiid.217620 - https://github.com/cronvel/terminal-kit/commit/a2e446cc3927b559d0281683feb9b821e83b758c - https://github.com/cronvel/terminal-kit/releases/tag/v2.1.8
CVE ID: CVE-2021-4307 State: PUBLISHED Published: 2023-01-07T19:28:32.443Z Last Updated: 2024-11-25T17:08:35.395Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Yomguithereal Products: Baobab Problem Types: CWE-1321 Description: A vulnerability was found in Yomguithereal Baobab up to 2.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The attack can be launched remotely. Upgrading to version 2.6.1 is able to address this issue. The patch is named c56639532a923d9a1600fb863ec7551b188b5d19. It is recommended to upgrad
is able to address this issue. The patch is named c56639532a923d9a1600fb863ec7551b188b5d19. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217627. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217627 - https://vuldb.com/?ctiid.217627 - https://github.com/Yomguithereal/baobab/pull/511 - https://github.com/Yomguithereal/baobab/commit/c56639532a923d9a1600fb863ec7551b188b5d19 - https://github.com/Yomguithereal/baobab/releases/tag/2.6.1
CVE ID: CVE-2021-4308 State: PUBLISHED Published: 2023-01-08T09:04:32.925Z Last Updated: 2025-04-09T14:44:54.878Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: WebPA Problem Types: CWE-89 Description: A vulnerability was found in WebPA up to 3.1.1. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. Upgrading to version 3.1.2 is able to address this issue. The identifier of the patch is 8836c4f549181e885a68e0e7ca561fdbcbd04bf0. It is recommended to upgrade the affected component. The identifier VDB-217637 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program
ffected component. The identifier VDB-217637 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217637 - https://vuldb.com/?ctiid.217637 - https://github.com/WebPA/WebPA/pull/87 - https://github.com/WebPA/WebPA/commit/8836c4f549181e885a68e0e7ca561fdbcbd04bf0 - https://github.com/WebPA/WebPA/releases/tag/v3.1.2
CVE ID: CVE-2021-4309 State: PUBLISHED Published: 2023-01-08T16:59:19.824Z Last Updated: 2025-04-09T14:40:46.029Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: 01-Scripts Products: 01ACP Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in 01-Scripts 01ACP. This issue affects some unknown processing. The manipulation of the argument $_SERVER['SCRIPT_NAME'] leads to cross site scripting. The attack may be initiated remotely. The identifier of the patch is a16eb7da46ed22bc61067c212635394f2571d3c4. It is recommended to apply a patch to fix this issue. The identifier VDB-217649 was assigned to this vulnerability. Additional Analy
ended to apply a patch to fix this issue. The identifier VDB-217649 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217649 - https://vuldb.com/?ctiid.217649 - https://github.com/01-Scripts/01ACP/commit/a16eb7da46ed22bc61067c212635394f2571d3c4
CVE ID: CVE-2021-4310 State: PUBLISHED Published: 2023-01-09T08:40:15.717Z Last Updated: 2024-08-03T17:23:10.260Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: 01-Scripts Products: 01-Artikelsystem Problem Types: CWE-79 Description: A vulnerability was found in 01-Scripts 01-Artikelsystem. It has been classified as problematic. Affected is an unknown function of the file 01article.php. The manipulation of the argument $_SERVER['PHP_SELF'] leads to cross site scripting. It is possible to launch the attack remotely. The patch is identified as ae849b347a58c2cb1be38d04bbe56fc883d5d84a. It is recommended to apply a patch to fix this issue. VDB-217662 is the identifier assigned to thi
8d04bbe56fc883d5d84a. It is recommended to apply a patch to fix this issue. VDB-217662 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217662 - https://vuldb.com/?ctiid.217662 - https://github.com/01-Scripts/01-Artikelsystem/commit/ae849b347a58c2cb1be38d04bbe56fc883d5d84a
CVE ID: CVE-2021-4311 State: PUBLISHED Published: 2023-01-09T11:20:22.017Z Last Updated: 2025-04-09T19:25:57.677Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Talend Products: Open Studio for MDM Problem Types: CWE-611 Description: A vulnerability classified as problematic was found in Talend Open Studio for MDM. This vulnerability affects unknown code of the component XML Handler. The manipulation leads to xml external entity reference. The patch is identified as 31d442b9fb1d518128fd18f6e4d54e06c3d67793. It is recommended to apply a patch to fix this issue. VDB-217666 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Progr
ch to fix this issue. VDB-217666 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217666 - https://vuldb.com/?ctiid.217666 - https://github.com/Talend/tmdm-server-se/pull/1420 - https://github.com/Talend/tmdm-server-se/commit/31d442b9fb1d518128fd18f6e4d54e06c3d67793
CVE ID: CVE-2021-4312 State: PUBLISHED Published: 2023-01-13T17:06:37.617Z Last Updated: 2024-08-03T17:23:10.299Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Th3-822 Products: Rapidleech Problem Types: CWE-79 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in Th3-822 Rapidleech. This affects the function zip_go of the file classes/options/zip.php. The manipulation of the argument archive leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named 885a87ea4ee5e14fa95801eca255604fb2e138c6. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerabilit
eca255604fb2e138c6. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218295. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218295 - https://vuldb.com/?ctiid.218295 - https://github.com/Th3-822/rapidleech/commit/885a87ea4ee5e14fa95801eca255604fb2e138c6
CVE ID: CVE-2021-4313 State: PUBLISHED Published: 2023-01-16T11:58:05.080Z Last Updated: 2024-08-03T17:23:10.518Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: NethServer Products: phonenehome Problem Types: CWE-89 Description: A vulnerability was found in NethServer phonenehome. It has been rated as critical. This issue affects the function get_info/get_country_coor of the file server/index.php. The manipulation leads to sql injection. The identifier of the patch is 759c30b0ddd7d493836bbdf695cf71624b377391. It is recommended to apply a patch to fix this issue. The identifier VDB-218393 was assigned to this vulnerability. Additional Analyst Notes: - CVE Pr
atch to fix this issue. The identifier VDB-218393 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.218393 - https://vuldb.com/?ctiid.218393 - https://github.com/NethServer/nethserver-phonehome/pull/10 - https://github.com/NethServer/nethserver-phonehome/commit/759c30b0ddd7d493836bbdf695cf71624b377391
CVE ID: CVE-2021-4314 State: PUBLISHED Published: 2023-01-18T15:23:42.797Z Last Updated: 2025-04-03T19:48:49.004Z Vendors: Open Mainframe Project Products: Zowe Problem Types: CWE-269 Description: It is possible to manipulate the JWT token without the knowledge of the JWT secret and authenticate without valid JWT token as any user. This is happening only in the situation when zOSMF doesn’t have the APAR PH12143 applied. This issue affects: 1.16 versions to 1.19. What happens is that the services using the ZAAS client or the API ML API to query will be deceived into believing the information in the JWT token is valid when it isn’t. It’s possible to use this to persuade the southbound service
g the information in the JWT token is valid when it isn’t. It’s possible to use this to persuade the southbound service that different user is authenticated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/zowe/api-layer/
CVE ID: CVE-2021-4315 State: PUBLISHED Published: 2023-01-28T22:58:03.669Z Last Updated: 2024-08-03T17:23:10.546Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: NYUCCL Products: psiTurk Problem Types: CWE-1336 Description: A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. This vulnerability affects unknown code of the file psiturk/experiment.py. The manipulation of the argument mode leads to improper neutralization of special elements used in a template engine. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.1 is able to address this issue. The name of the patch is 47787e15cecd66f
blic and may be used. Upgrading to version 3.2.1 is able to address this issue. The name of the patch is 47787e15cecd66f2aa87687bf852ae0194a4335f. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-219676. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.219676 - https://vuldb.com/?ctiid.219676 - https://github.com/NYUCCL/psiTurk/pull/517 - https://github.com/NYUCCL/psiTurk/commit/47787e15cecd66f2aa87687bf852ae0194a4335f - https://github.com/NYUCCL/psiTurk/releases/tag/v3.2.1
CVE ID: CVE-2021-4316 State: PUBLISHED Published: 2023-07-28T23:26:53.101Z Last Updated: 2025-02-13T16:28:38.173Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Cast UI in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to spoof browser UI via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html - https://crbug.com/1152952 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE ID: CVE-2021-4317 State: PUBLISHED Published: 2023-07-28T23:26:53.326Z Last Updated: 2025-02-13T16:28:38.717Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://crbug.com/1260783 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE ID: CVE-2021-4318 State: PUBLISHED Published: 2023-07-28T23:26:53.533Z Last Updated: 2025-02-13T16:28:39.244Z Vendors: Google Products: Chrome Problem Types: Object corruption Description: Object corruption in Blink in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1237730 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE ID: CVE-2021-4319 State: PUBLISHED Published: 2023-07-28T23:26:53.696Z Last Updated: 2025-02-13T16:28:39.778Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.html - https://crbug.com/1214199 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE ID: CVE-2021-4320 State: PUBLISHED Published: 2023-07-28T23:26:53.844Z Last Updated: 2025-02-13T16:28:40.329Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Blink in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html - https://crbug.com/1224238 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD
g.com/1224238 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE ID: CVE-2021-4321 State: PUBLISHED Published: 2023-07-28T23:26:53.981Z Last Updated: 2025-02-13T16:28:40.942Z Vendors: Google Products: Chrome Problem Types: Policy bypass Description: Policy bypass in Blink in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low) Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop_25.html - https://crbug.com/1161891 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE ID: CVE-2021-4322 State: PUBLISHED Published: 2023-07-28T23:26:54.140Z Last Updated: 2025-02-13T16:28:41.447Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in DevTools in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop_25.html - https://crbug.com/1190550 - https://lists.fedoraproject.org/archives/list/package-announce@list
te-for-desktop_25.html - https://crbug.com/1190550 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE ID: CVE-2021-4323 State: PUBLISHED Published: 2023-07-28T23:26:54.321Z Last Updated: 2025-02-13T16:28:42.024Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of untrusted input in Extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to access local files via a crafted Chrome Extension. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html - https://crbug.com/1176031 - https://lists
omereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html - https://crbug.com/1176031 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE ID: CVE-2021-4324 State: PUBLISHED Published: 2023-07-28T23:26:54.459Z Last Updated: 2025-02-13T16:28:42.563Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Google Update in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to read arbitrary files via a malicious file. (Chromium security severity: Medium) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html - https://crbug.com/1193233 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/m
l - https://crbug.com/1193233 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
CVE ID: CVE-2021-4325 State: PUBLISHED Published: 2023-02-22T00:00:04.826Z Last Updated: 2025-03-12T15:55:23.475Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: NHN Products: TOAST UI Chart Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in NHN TOAST UI Chart 4.1.4. This issue affects some unknown processing of the component Legend Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 4.2.0 is able to address this issue. The identifier of the patch is 1a3f455d17df379e11b501bb5ba1dd1bcc41d63e. It is recommended to upgrade the affected component. The identifier VDB-
ch is 1a3f455d17df379e11b501bb5ba1dd1bcc41d63e. It is recommended to upgrade the affected component. The identifier VDB-221501 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.221501 - https://vuldb.com/?ctiid.221501 - https://github.com/nhn/tui.chart/pull/604 - https://github.com/nhn/tui.chart/commit/1a3f455d17df379e11b501bb5ba1dd1bcc41d63e - https://github.com/nhn/tui.chart/releases/tag/v4.2.0
CVE ID: CVE-2021-4326 State: PUBLISHED Published: 2023-02-22T15:21:06.657Z Last Updated: 2024-08-03T17:23:10.539Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:U/RC:C/CR:L/IR:X/AR:X/MAV:L/MAC:L/MPR:L/MUI:N/MS:U/MC:L/MI:X/MA:X) Vendors: Open Mainframe Project Products: Zowe Problem Types: n/a Description: A vulnerability in Imperative framework which allows already-privileged local actors to execute arbitrary shell commands via plugin install/update commands, or maliciously formed environment variables. Impacts Zowe CLI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zowe/imperative/
CVE ID: CVE-2021-4327 State: PUBLISHED Published: 2023-03-01T10:05:37.010Z Last Updated: 2024-08-03T17:23:10.473Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: SerenityOS Problem Types: CWE-190 Description: A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initialize_typed_array_from_array_buffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated