Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-44480 State: PUBLISHED Published: 2021-12-01T15:38:28 Last Updated: 2024-08-04T04:25:16.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wokka Lokka Q50 devices through 2021-11-30 allow remote attackers (who know the SIM phone number and password) to listen to a device's surroundings via a callback in an SMS command, as demonstrated by the 123456 and 523681 default passwords. Additional Analyst Notes: - CVE Program Container: References: - https://news.drweb.com/show/?i=14350
CVE ID: CVE-2021-44481 State: PUBLISHED Published: 2022-04-15T17:17:03 Last Updated: 2024-08-04T04:25:16.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in check_and_set_timeout in sr_unix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE ID: CVE-2021-44482 State: PUBLISHED Published: 2022-04-15T17:17:35 Last Updated: 2024-08-04T04:25:16.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to do_verify in sr_unix/do_verify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE ID: CVE-2021-44483 State: PUBLISHED Published: 2022-04-15T17:19:24 Last Updated: 2024-08-04T04:25:16.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash the application by performing a divide by zero. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE ID: CVE-2021-44484 State: PUBLISHED Published: 2022-04-15T17:19:54 Last Updated: 2024-08-04T04:25:16.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to emit_trip in sr_port/emit_code.c allows attackers to crash the application by dereferencing a NULL pointer. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE ID: CVE-2021-44485 State: PUBLISHED Published: 2022-04-15T17:21:45 Last Updated: 2024-08-04T04:25:16.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in trip_gen in sr_port/emit_code.c allows attackers to crash the application by dereferencing a NULL pointer. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE ID: CVE-2021-44486 State: PUBLISHED Published: 2022-04-15T17:22:10 Last Updated: 2024-08-04T04:25:16.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in op_write in sr_port/op_write.c in order to gain control of the flow of execution. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE ID: CVE-2021-44487 State: PUBLISHED Published: 2022-04-15T17:22:44 Last Updated: 2024-08-04T04:25:16.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c allows attackers to crash the application by dereferencing a NULL pointer. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE ID: CVE-2021-44488 State: PUBLISHED Published: 2022-04-15T17:23:27 Last Updated: 2024-08-04T04:25:16.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in op_fnfnumber in sr_port/op_fnfnumber.c in order to corrupt memory or crash the application. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE ID: CVE-2021-44489 State: PUBLISHED Published: 2022-04-15T17:24:10 Last Updated: 2024-08-04T04:25:16.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c in order to cause a segmentation fault and crash the application. This is a "- digs" subtraction. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE ID: CVE-2021-44490 State: PUBLISHED Published: 2022-04-15T17:24:34 Last Updated: 2024-08-04T04:25:16.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application. This is a "- (digs < 1 ? 1 : digs)" subtraction. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE ID: CVE-2021-44491 State: PUBLISHED Published: 2022-04-15T17:24:59 Last Updated: 2024-08-04T04:25:16.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application. This is a digs-- calculation. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/YottaDB/DB/YDB/-/issues/828
CVE ID: CVE-2021-44492 State: PUBLISHED Published: 2022-04-15T17:27:38 Last Updated: 2024-08-04T04:25:16.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44493 State: PUBLISHED Published: 2022-04-15T17:36:02 Last Updated: 2024-08-04T04:25:16.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that occurs on the stack, causing a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair
: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44494 State: PUBLISHED Published: 2022-04-15T17:37:33 Last Updated: 2024-08-04T04:25:16.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44495 State: PUBLISHED Published: 2022-04-15T17:38:16 Last Updated: 2024-08-04T04:25:16.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44496 State: PUBLISHED Published: 2022-04-15T17:42:18 Last Updated: 2024-08-04T04:25:16.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size variable and buffer that is passed to a call to memcpy. An attacker can use this to overwrite key data structures and gain control of the flow of execution. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release
/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44497 State: PUBLISHED Published: 2022-04-15T17:43:25 Last Updated: 2024-08-04T04:25:16.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, can cause the bounds of a for loop to be miscalculated, which leads to a use after free condition a pointer is pushed into previously free memory by the loop. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44498 State: PUBLISHED Published: 2022-04-15T17:44:24 Last Updated: 2024-08-04T04:25:16.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44499 State: PUBLISHED Published: 2022-04-15T17:45:29 Last Updated: 2024-08-04T04:25:16.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that occurs on the stack, causing a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com
https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44500 State: PUBLISHED Published: 2022-04-15T17:47:16 Last Updated: 2024-08-04T04:25:16.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash the application by performing a divide by zero. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44501 State: PUBLISHED Published: 2022-04-15T17:49:40 Last Updated: 2024-08-04T04:25:16.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44502 State: PUBLISHED Published: 2022-04-15T17:50:52 Last Updated: 2024-08-04T04:25:16.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size of a memset that occurs in calls to util_format in sr_unix/util_output.c. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44503 State: PUBLISHED Published: 2022-04-15T17:51:55 Last Updated: 2024-08-04T04:25:16.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to va_arg on an empty variadic parameter list, most likely causing a memory segmentation fault. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44504 State: PUBLISHED Published: 2022-04-15T17:53:06 Last Updated: 2024-08-04T04:25:16.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a size variable, stored as an signed int, to equal an extremely large value, which is interpreted as a negative value during a check. This value is then used in a memcpy call on the stack, causing a memory segmentation fault. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://ti
ferences: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44505 State: PUBLISHED Published: 2022-04-15T17:54:02 Last Updated: 2024-08-04T04:25:16.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44506 State: PUBLISHED Published: 2022-04-15T17:55:04 Last Updated: 2024-08-04T04:25:16.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to do_verify in sr_unix/do_verify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44507 State: PUBLISHED Published: 2022-04-15T18:02:00 Last Updated: 2024-08-04T04:25:16.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of parameter validation in calls to memcpy in str_tok in sr_unix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44508 State: PUBLISHED Published: 2022-04-15T17:56:55 Last Updated: 2024-08-04T04:25:16.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c allows attackers to crash the application by dereferencing a NULL pointer. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44509 State: PUBLISHED Published: 2022-04-15T17:57:54 Last Updated: 2024-08-04T04:25:16.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause an integer underflow of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c in order to cause a segmentation fault and crash the application. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44510 State: PUBLISHED Published: 2022-04-15T17:58:56 Last Updated: 2024-08-04T04:25:16.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/fis-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-
s-gtm/files/ - https://gitlab.com/YottaDB/DB/YDB/-/issues/828 - http://tinco.pair.com/bhaskar/gtm/doc/articles/GTM_V7.0-002_Release_Notes.html
CVE ID: CVE-2021-44512 State: PUBLISHED Published: 2021-12-07T02:07:50 Last Updated: 2024-08-04T04:25:16.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: World-writable permissions on the /tmp/tmate/sessions directory in tmate-ssh-server 2.3.0 allow a local attacker to compromise the integrity of session handling, or obtain the read-write session ID from a read-only session symlink in this directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tmate-io/tmate-ssh-server/commit/1c020d1f5ca462f5b150b46a027aaa1bbe3c9596 - https://www.openwall.com/lists/oss-security/2021/12/06/2
CVE ID: CVE-2021-44513 State: PUBLISHED Published: 2021-12-07T02:09:15 Last Updated: 2024-08-04T04:25:16.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure creation of temporary directories in tmate-ssh-server 2.3.0 allows a local attacker to compromise the integrity of session handling. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/tmate-io/tmate-ssh-server/commit/1c020d1f5ca462f5b150b46a027aaa1bbe3c9596 - https://www.openwall.com/lists/oss-security/2021/12/06/2
CVE ID: CVE-2021-44514 State: PUBLISHED Published: 2021-12-09T19:15:27 Last Updated: 2024-08-04T04:25:16.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/network-monitoring/help/read-me-complete.html#build_125490
CVE ID: CVE-2021-44515 State: PUBLISHED Published: 2021-12-12T04:04:55.000Z Last Updated: 2025-10-21T23:25:22.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For Enterprise builds 10.1.2128.0 through 10.1.2137.2, upgrade to 10.1.2137.3. For MSP builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. For MSP builds 10.1.2128.0 through 10.1.2137.2, upgrade to 10.1.2137.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
8.0 through 10.1.2137.2, upgrade to 10.1.2137.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://pitstop.manageengine.com/portal/en/community/topic/an-authentication-bypass-vulnerability-identified-and-fixed-in-desktop-central-and-desktop-central-msp - https://www.manageengine.com/products/desktop-central/cve-2021-44515-authentication-bypass-filter-configuration.html - https://www.cisa.gov/uscert/ncas/current-activity/2021/12/10/cisa-adds-thirteen-known-exploited-vulnerabilities-catalog
CVE ID: CVE-2021-44518 State: PUBLISHED Published: 2021-12-02T17:00:11 Last Updated: 2024-08-04T04:25:16.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the eGeeTouch 3rd Generation Travel Padlock application for Android. The lock sends a pairing code before each operation (lock or unlock) activated via the companion app. The code is sent unencrypted, allowing any attacker with the same app (either Android or iOS) to add the lock and take complete control. For successful exploitation, the attacker must be able to touch the lock's power button, and must be able to capture BLE network communication. Additional Analyst Notes: - CVE Program Container: R
ower button, and must be able to capture BLE network communication. Additional Analyst Notes: - CVE Program Container: References: - https://ashallen.net/the-egeetouch-tsa-smart-lock-is-anything-but
CVE ID: CVE-2021-44519 State: PUBLISHED Published: 2022-04-19T15:26:27 Last Updated: 2024-08-04T04:25:16.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/tree-chtsec/30932b9c94b8c7e4209d22b8b52d597f - https://docs.citrix.com/en-us/xenmobile/server/document-history.html - https://support.citrix.com/article/CTX370551 - https://www.chtsecurity.com/news/09be10ae-b50e-46c9-8ce7-2e995fd988fe