Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-3642 State: PUBLISHED Published: 2021-08-05T20:48:01 Last Updated: 2024-08-03T17:01:07.598Z Vendors: n/a Products: wildfly-elytron Problem Types: CWE-203 Description: A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1981407
CVE ID: CVE-2021-3643 State: PUBLISHED Published: 2022-05-02T18:46:26 Last Updated: 2024-08-03T17:01:08.189Z Vendors: n/a Products: sox Problem Types: CWE-125 Description: A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a malicious file, leading to the disclosure of sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1980626
CVE ID: CVE-2021-3644 State: PUBLISHED Published: 2022-08-26T15:25:40 Last Updated: 2024-08-03T17:01:08.319Z Vendors: n/a Products: wildfly-core Problem Types: CWE-200 Description: A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly retrieve the item which was stored in the vault. The highest threat from this vulnerability is data confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/sho
ntiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1976052 - https://access.redhat.com/security/cve/CVE-2021-3644 - https://issues.redhat.com/browse/WFCORE-5511 - https://github.com/wildfly/wildfly-core/pull/4668 - https://github.com/wildfly/wildfly-core/commit/6d8db43cd43b5994b7a14003db978064e086090b - https://github.com/wildfly/wildfly-core/commit/06dd9884f6ba50470b1fb5a35198a8784f037714
CVE ID: CVE-2021-3645 State: PUBLISHED Published: 2021-09-10T11:04:25 Last Updated: 2024-08-03T17:01:07.653Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: viking04 Products: viking04/merge Problem Types: CWE-1321 Description: merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ef387a9e-ca3c-4c21-80e3-d34a6a896262 - https://github.com/viking04/merge/commit/baba40332080b38b33840d2614df6d4142dedaf6
CVE ID: CVE-2021-3646 State: PUBLISHED Published: 2021-09-10T18:02:50 Last Updated: 2024-08-03T17:01:07.963Z Severity: MEDIUM (CVSS 4.9 CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: btcpayserver Products: btcpayserver/btcpayserver Problem Types: CWE-79 Description: btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/32e30ecf-31fa-45f6-8552-47250ef0e613 - https://github.com/btcpayserver/btcpayserver/commit/fc4e47cec608cc3dba24b19d0145ac69320b975e
CVE ID: CVE-2021-3647 State: PUBLISHED Published: 2021-07-16T10:11:17 Last Updated: 2024-08-03T17:01:08.296Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: medialize Products: medialize/URI.js Problem Types: CWE-601 Description: URI.js is vulnerable to URL Redirection to Untrusted Site Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/1625558772840-medialize/URI.js - https://github.com/medialize/URI.js/commit/ac43ca8f80c042f0256fb551ea5203863dec4481
CVE ID: CVE-2021-3648 State: REJECTED Published: N/A Last Updated: 2023-02-12T00:00:00 Description: No description available.
CVE ID: CVE-2021-3649 State: PUBLISHED Published: 2021-07-16T13:33:25 Last Updated: 2024-08-03T17:01:07.709Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: chatwoot Products: chatwoot/chatwoot Problem Types: CWE-1333 Description: chatwoot is vulnerable to Inefficient Regular Expression Complexity Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/1625088985607-chatwoot/chatwoot - https://github.com/chatwoot/chatwoot/commit/aa7db90cd2d23dbcf22a94f1e4c100dd909e2172
CVE ID: CVE-2021-3651 State: REJECTED Published: 2022-08-26T15:25:42 Last Updated: 2022-08-26T15:25:42 Description: No description available.
CVE ID: CVE-2021-3652 State: PUBLISHED Published: 2022-04-18T00:00:00.000Z Last Updated: 2025-11-03T20:33:48.435Z Vendors: n/a Products: 389-ds-base Problem Types: CWE-287 Description: A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1982782 - https://github.com/389ds/389-ds-base/issues/4817 - https://lists.debian.org/debian-lts-anno
om/show_bug.cgi?id=1982782 - https://github.com/389ds/389-ds-base/issues/4817 - https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html
CVE ID: CVE-2021-3653 State: PUBLISHED Published: 2021-09-29T19:41:01 Last Updated: 2024-08-03T17:01:08.316Z Vendors: n/a Products: kernel Problem Types: CWE-862 Description: A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sen
guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1983686 - https://www.openwall.com/lists/oss-security/2021/08/16/1 - https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html - https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html - http://packetstormsecurity.com/files/165477/Kernel-Live-Patch-Security-Notice-LSN-0083-1.html
CVE ID: CVE-2021-3654 State: PUBLISHED Published: 2022-03-02T00:00:00 Last Updated: 2024-08-03T17:01:07.959Z Vendors: n/a Products: openstack-nova Problem Types: CWE-601 Description: A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL. Additional Analyst Notes: - CVE Program Container: References: - https://security.openstack.org/ossa/OSSA-2021-002.html - https://bugs.launchpad.net/nova/+bug/1927677 - https://www.openwall.com/lists/oss-security/2021/07/29/2 - https://bugs.python.org/issue32084 - https://opendev.org/openstack/nova/commit/04d48527b62a35d912f93bc75613a6cca606df66 - https://opendev.or
org/issue32084 - https://opendev.org/openstack/nova/commit/04d48527b62a35d912f93bc75613a6cca606df66 - https://opendev.org/openstack/nova/commit/8906552cfc2525a44251d4cf313ece61e57251eb - https://bugzilla.redhat.com/show_bug.cgi?id=1961439 - https://security.gentoo.org/glsa/202305-02
CVE ID: CVE-2021-3655 State: PUBLISHED Published: 2021-08-05T20:48:04 Last Updated: 2024-08-03T17:01:07.956Z Vendors: n/a Products: kernel Problem Types: CWE-909 Description: A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1984024 - https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html - https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html
CVE ID: CVE-2021-3656 State: PUBLISHED Published: 2022-03-04T18:41:26 Last Updated: 2024-08-03T17:01:07.792Z Vendors: n/a Products: KVM Problem Types: CWE-862 Description: A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, lea
, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2021/08/16/1 - https://git.kernel.org/pub/scm/virt/kvm/kvm.git/commit/?id=c7dfa4009965a9b2d7b329ee970eb8da0d32f0bc - https://github.com/torvalds/linux/commit/c7dfa4009965a9b2d7b329ee970eb8da0d32f0bc - https://bugzilla.redhat.com/show_bug.cgi?id=1983988
CVE ID: CVE-2021-3657 State: PUBLISHED Published: 2022-02-18T17:50:56 Last Updated: 2024-08-03T17:01:08.007Z Vendors: n/a Products: isync Problem Types: CWE-119 Description: A flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large (>=2GiB) IMAP literals, malicious or compromised IMAP servers, and hypothetically even external email senders, could cause several different buffer overflows, which could conceivably be exploited for remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2028932 - https://www.openwall.com/lists/oss-security/2021/12/03/1 - https://lists.debian.org/de
hat.com/show_bug.cgi?id=2028932 - https://www.openwall.com/lists/oss-security/2021/12/03/1 - https://lists.debian.org/debian-lts-announce/2022/07/msg00001.html - https://security.gentoo.org/glsa/202208-15
CVE ID: CVE-2021-3658 State: PUBLISHED Published: 2022-03-02T22:11:05.000Z Last Updated: 2025-11-04T16:09:16.080Z Vendors: n/a Products: bluez Problem Types: CWE-863 Description: bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/gnome-bluetooth/-/issues/89 - https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=b497b5942
ab.gnome.org/GNOME/gnome-bluetooth/-/issues/89 - https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=b497b5942a8beb8f89ca1c359c54ad67ec843055 - https://github.com/bluez/bluez/commit/b497b5942a8beb8f89ca1c359c54ad67ec843055 - https://bugzilla.redhat.com/show_bug.cgi?id=1984728 - https://security.netapp.com/advisory/ntap-20220407-0002/
CVE ID: CVE-2021-3659 State: PUBLISHED Published: 2022-08-22T14:49:43 Last Updated: 2024-08-03T17:01:08.363Z Vendors: n/a Products: Kernel Problem Types: CWE-252 Description: A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1165affd484889d4986cf3b724318935a0b120d8 - https://bugzilla.redhat.com/show_bug.cgi?id=1975949 - https
ux.git/commit/?id=1165affd484889d4986cf3b724318935a0b120d8 - https://bugzilla.redhat.com/show_bug.cgi?id=1975949 - https://access.redhat.com/security/cve/CVE-2021-3659
CVE ID: CVE-2021-3660 State: PUBLISHED Published: 2022-03-07T13:59:18 Last Updated: 2024-08-03T17:01:08.335Z Vendors: n/a Products: cockpit Problem Types: CWE-1021 Description: Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an <iFrame> HTML entry. This may be used by a malicious website in clickjacking or similar attacks. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1980688 - https://github.com/cockpit-project/cockpit/issues/16122 - https://github.com/cockpit-project/cockpit/commit/8d9bc10d8128aae03dfde62fd00075fe492e
it-project/cockpit/issues/16122 - https://github.com/cockpit-project/cockpit/commit/8d9bc10d8128aae03dfde62fd00075fe492ead10
CVE ID: CVE-2021-3661 State: PUBLISHED Published: 2022-11-21T21:19:42.950Z Last Updated: 2025-04-29T04:44:48.739Z Vendors: HP Inc. Products: HP Workstation BIOS Problem Types: n/a Description: A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_5670997-5671021-16/hpsbhf03770
CVE ID: CVE-2021-3662 State: PUBLISHED Published: 2021-10-29T11:32:07 Last Updated: 2024-08-03T17:01:08.437Z Vendors: n/a Products: HP Enterprise LaserJet MFP; HP Enterprise PageWide MFPs; HP Digital Sender Problem Types: Stored cross site scripting (XSS) Description: Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://support.hp.com/us-en/document/ish_4577473-4577502-16/hpsbpi03744
CVE ID: CVE-2021-3663 State: PUBLISHED Published: 2021-07-25T13:25:12 Last Updated: 2024-08-03T17:01:08.317Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: firefly-iii Products: firefly-iii/firefly-iii Problem Types: CWE-307 Description: firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/497bdf6d-7dba-49c3-8011-1c64dfbb3380 - https://github.com/firefly-iii/firefly-iii/commit/afc9f4b7ebc8a240c85864a6e1abda62bfeefae8
CVE ID: CVE-2021-3664 State: PUBLISHED Published: 2021-07-26T00:00:00 Last Updated: 2024-08-03T17:01:07.943Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: unshiftio Products: unshiftio/url-parse Problem Types: CWE-601 Description: url-parse is vulnerable to URL Redirection to Untrusted Site Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/1625557993985-unshiftio/url-parse - https://github.com/unshiftio/url-parse/commit/81ab967889b08112d3356e451bf03e6aa0cbb7e0 - https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html
CVE ID: CVE-2021-3666 State: PUBLISHED Published: 2021-09-13T17:56:50 Last Updated: 2024-08-03T17:01:08.323Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: fiznool Products: fiznool/body-parser-xml Problem Types: CWE-1321 Description: body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/1-other-fiznool/body-parser-xml - https://github.com/fiznool/body-parser-xml/commit/d46ca622560f7c9a033cd9321c61e92558150d63
CVE ID: CVE-2021-3667 State: PUBLISHED Published: 2022-03-02T00:00:00.000Z Last Updated: 2025-02-13T16:28:25.782Z Vendors: n/a Products: libvirt Problem Types: CWE-667 Description: An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited ACL permissions could use this flaw to acquire the lock and prevent other users from accessing storage pool/volume APIs, resulting in a denial of service condition. The highest threat from this vulnerability is to system a
pool/volume APIs, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1986094 - https://libvirt.org/git/?p=libvirt.git%3Ba=commit%3Bh=447f69dec47e1b0bd15ecd7cd49a9fd3b050fb87 - https://gitlab.com/libvirt/libvirt/-/commit/447f69dec47e1b0bd15ecd7cd49a9fd3b050fb87 - https://security.netapp.com/advisory/ntap-20220331-0005/ - https://security.gentoo.org/glsa/202210-06 - https://lists.debian.org/debian-lts-announce/2024/04/msg00000.html
CVE ID: CVE-2021-3669 State: PUBLISHED Published: 2022-08-26T15:25:40.000Z Last Updated: 2025-11-03T21:44:59.899Z Vendors: n/a Products: kernel Problem Types: CWE-400 Description: A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1986473 - https://bugzilla.redhat.com/show_bug.cgi?id=1980619 - https://access.redhat.com/security/cve/CVE-2021-3669 - https://security-tracker.debian.org/tracker/CVE-2021-3669
CVE ID: CVE-2021-3670 State: PUBLISHED Published: 2022-08-23T15:50:25.000Z Last Updated: 2025-02-13T16:28:26.347Z Vendors: n/a Products: samba Problem Types: CWE-400 Description: MaxQueryDuration not honoured in Samba AD DC LDAP Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2077533 - https://bugzilla.samba.org/show_bug.cgi?id=14694 - https://gitlab.com/samba-team/samba/-/commit/1d5b155619bc532c46932965b215bd73a920e56f - https://gitlab.com/samba-team/samba/-/commit/dcfcafdbf756e12d9077ad7920eea25478c29f81 - https://gitlab.com/samba-team/samba/-/commit/86fe9d48883f87c928bf31ccbd275db420386803 - https://gitlab.com/samba-team/samba/-
://gitlab.com/samba-team/samba/-/commit/86fe9d48883f87c928bf31ccbd275db420386803 - https://gitlab.com/samba-team/samba/-/commit/e1ab0c43629686d1d2c0b0b2bcdc90057a792049 - https://gitlab.com/samba-team/samba/-/commit/2b3af3b560c9617a233c131376c870fce146c002 - https://gitlab.com/samba-team/samba/-/commit/5f0590362c5c0c5ee20503a67467f9be2d50e73b - https://gitlab.com/samba-team/samba/-/commit/3507e96b3dcf0c0b8eff7b2c08ffccaf0812a393 - https://security.gentoo.org/glsa/202309-06
CVE ID: CVE-2021-3671 State: PUBLISHED Published: 2021-10-12T00:00:00 Last Updated: 2024-08-03T17:01:07.967Z Vendors: n/a Products: Samba Problem Types: CWE-476 Description: A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2013080%2C - https://bugzilla.samba.org/show_bug.cgi?id=14770%2C - https://github.com/heimdal/heimdal/commit/04171147948d0a3636bc6374181926f0fb2ec83a - https://www.debian.org/security/2022/dsa-5287 - https://
imdal/heimdal/commit/04171147948d0a3636bc6374181926f0fb2ec83a - https://www.debian.org/security/2022/dsa-5287 - https://lists.debian.org/debian-lts-announce/2022/11/msg00034.html - https://security.netapp.com/advisory/ntap-20221215-0002/ - https://security.netapp.com/advisory/ntap-20230216-0008/
CVE ID: CVE-2021-3672 State: PUBLISHED Published: 2021-11-23T00:00:00 Last Updated: 2024-10-15T17:14:27.220Z Vendors: n/a Products: c-ares Problem Types: CWE-79 Description: A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1988342 - https://c-ares.haxx.se/adv_20210810.html - https://cert-
rences: - https://bugzilla.redhat.com/show_bug.cgi?id=1988342 - https://c-ares.haxx.se/adv_20210810.html - https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.gentoo.org/glsa/202401-02
CVE ID: CVE-2021-3673 State: PUBLISHED Published: 2021-08-02T18:09:40 Last Updated: 2024-08-03T17:01:07.781Z Vendors: n/a Products: radare2 Problem Types: CWE-20 Description: A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can lead to resource exhaustion and DoS. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1989130 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIARALLVVY2362AYFSFULTZKIW6QO5R5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NFQPEPMLAOQNGZG5OHSPZ
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NFQPEPMLAOQNGZG5OHSPZBNONGG4DDJO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XGOU2EFE7YK2YDRNFV6QFUWW2SL2GGQA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SKGIB52R4XPCPNEW6GF56EHW7ST24IJU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IQIRJ72UALGMSWH6MYPVJQQLXFGZ23RS/
CVE ID: CVE-2021-3674 State: PUBLISHED Published: 2023-03-24T00:00:00.000Z Last Updated: 2025-02-25T16:41:08.842Z Vendors: n/a Products: rizin Problem Types: CWE-119 Description: A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/rizinorg/rizin/pull/1313 - https://gist.github.com/netspooky/61101e191afee95feda7dbd2f6b061c4
CVE ID: CVE-2021-3675 State: PUBLISHED Published: 2022-06-16T16:15:00.966102Z Last Updated: 2024-09-16T17:38:29.835Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Synaptics Products: Synaptics Fingerprint Driver Problem Types: CWE-20 Description: Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driver 5.1.xxx.26 versions prior to xxx=340 on x86/64; 5.2.xxxx.26 versions prior to xxxx=3541 on x86/64; 5.2.2xx.26 versions prior to xx=29 on x86/64; 5.2.3xx.26 versions