Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ferences: - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1030 - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1031 - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1032 - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1033 - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1034 - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1035 - https://gitee.com/src-openeuler/kernel/pulls/1389 - https://gitee.com/src-openeuler/kernel/pulls/1396 - https://git.kernel.org/pub
tee.com/src-openeuler/kernel/pulls/1389 - https://gitee.com/src-openeuler/kernel/pulls/1396 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5c099c4fdc438014d5893629e70a8ba934433ee8 - http://www.openwall.com/lists/oss-security/2024/01/30/3 - http://www.openwall.com/lists/oss-security/2024/01/30/4 - http://www.openwall.com/lists/oss-security/2024/01/30/5 - http://www.openwall.com/lists/oss-security/2024/01/30/9 - http://www.openwall.com/lists/oss-security/2024/01/30/10 - http://www.openwall.com/lists/oss-security/2024/01/31/3 - http://www.openwall.com/lists/oss-security/2024/01/31/2 - http://www.openwall.com/lists/oss-security/2024/02/02/6 - http://www.openwall.
all.com/lists/oss-security/2024/01/31/2 - http://www.openwall.com/lists/oss-security/2024/02/02/6 - http://www.openwall.com/lists/oss-security/2024/02/02/9 - http://www.openwall.com/lists/oss-security/2024/02/03/1
CVE ID: CVE-2021-33632 State: PUBLISHED Published: 2024-03-25T06:59:42.307Z Last Updated: 2024-08-03T23:58:21.422Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: openEuler Products: iSulad Problem Types: CWE-367 Description: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. This vulnerability is associated with program files https://gitee.Com/openeuler/iSulad/blob/master/src/cmd/isulad/main.C. This issue affects iSulad: 2.0.18-13, from 2.1.4-1 through 2.1.4-2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References:
3, from 2.1.4-1 through 2.1.4-2. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1307 - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1287 - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1290 - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1289 - https://gitee.com/src-openeuler/iSulad/pulls/645 - https://gitee.com/src-openeuler/iSulad/pulls/640 - https://gitee.com/src-openeuler/iSulad/pulls/639
CVE ID: CVE-2021-33633 State: PUBLISHED Published: 2024-03-23T11:29:44.343Z Last Updated: 2024-08-12T18:42:35.811Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: openEuler Products: aops-ceres Problem Types: CWE-78 Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler aops-ceres on Linux allows Command Injection. This vulnerability is associated with program files ceres/function/util.Py. This issue affects aops-ceres: from 1.3.0 through 1.4.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openeuler.org/zh/security/security-bulle
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1159 - https://gitee.com/src-openeuler/aops-ceres/pulls/159 - https://gitee.com/src-openeuler/aops-ceres/pulls/158
CVE ID: CVE-2021-33634 State: PUBLISHED Published: 2023-10-29T07:51:49.342Z Last Updated: 2024-09-09T14:22:28.992Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H) Vendors: openEuler Products: lcr Problem Types: CWE-665 Description: iSulad uses the lcr+lxc runtime (default) to run malicious images, which can cause DOS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/src-openeuler/lcr/pulls/251/files - https://gitee.com/src-openeuler/lcr/pulls/257/files - https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1692
CVE ID: CVE-2021-33635 State: PUBLISHED Published: 2023-10-29T07:56:44.304Z Last Updated: 2024-09-09T14:20:16.034Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: openEuler Products: iSulad Problem Types: CWE-665 Description: When malicious images are pulled by isula pull, attackers can execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686 - https://gitee.com/src-openeuler/iSulad/pulls/627/files - https://gitee.com/src-openeuler/iSulad/pulls/600/files
CVE ID: CVE-2021-33636 State: PUBLISHED Published: 2023-10-29T07:58:05.033Z Last Updated: 2024-09-09T14:15:38.166Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: openEuler Products: iSulad Problem Types: CWE-665 Description: When the isula load command is used to load malicious images, attackers can execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686 - https://gitee.com/src-openeuler/iSulad/pulls/627/files - https://gitee.com/src-openeuler/iSulad/pulls/600/files
CVE ID: CVE-2021-33637 State: PUBLISHED Published: 2023-10-29T07:58:55.220Z Last Updated: 2024-09-09T14:10:35.837Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: openEuler Products: iSulad Problem Types: CWE-665 Description: When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686 - https://gitee.com/src-openeuler/iSulad/pulls/627/files - https://gitee.com/src-openeuler/iSulad/pull
uler-SA-2023-1686 - https://gitee.com/src-openeuler/iSulad/pulls/627/files - https://gitee.com/src-openeuler/iSulad/pulls/600/files
CVE ID: CVE-2021-33638 State: PUBLISHED Published: 2023-10-29T07:59:45.026Z Last Updated: 2024-09-09T14:09:44.635Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: openEuler Products: iSulad Problem Types: CWE-665 Description: When the isula cp command is used to copy files from a container to a host machine and the container is controlled by an attacker, the attacker can escape the container. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1686 - https://gitee.com/src-openeuler/iSulad/pulls/627/files - https://gitee.com/src-openeuler/
l/?id=openEuler-SA-2023-1686 - https://gitee.com/src-openeuler/iSulad/pulls/627/files - https://gitee.com/src-openeuler/iSulad/pulls/600/files
CVE ID: CVE-2021-33639 State: PUBLISHED Published: 2023-03-08T00:00:00.000Z Last Updated: 2025-03-04T20:24:10.590Z Vendors: n/a Products: kernel Problem Types: CWE-749 Description: REMAP cmd of SVM driver can be used to remap read only memory as read-write, then cause read only memory/file modified. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/openeuler/kernel/commit/e4d0684a3ce68e7f8e11408121e791cd80312b27
CVE ID: CVE-2021-33640 State: PUBLISHED Published: 2022-12-19T00:00:00.000Z Last Updated: 2025-04-17T14:58:03.494Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: openEuler Products: openEuler 22.03 LTS, openEuler 20.03 LTS SP1, openEuler 20.03 LTS SP3 Problem Types: CWE-416 Description: After tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is called in the list() function, it continues to use pointer t: free_longlink_longname(t->th_buf) . As a result, the released memory is used (use-after-free). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openeuler.org/en/securit
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2021-33640&packageName=libtar - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4S4PJRCJLEAWN2EKXGLSOBTL7O57V7NC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WX5YE66CT7Y5C2HTHXSFDKQWYWYWJ2T/
CVE ID: CVE-2021-33641 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-03T20:03:08.779Z Vendors: n/a Products: byacc Problem Types: CWE-416 Description: When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/src-openeuler/byacc/commit/50225f48c6b53e9d7c936681a06682404cb8ec4d
CVE ID: CVE-2021-33642 State: PUBLISHED Published: 2023-01-20T00:00:00.000Z Last Updated: 2025-04-02T14:47:37.730Z Vendors: n/a Products: byacc Problem Types: CWE-835 Description: When a file is processed, an infinite loop occurs in next_inline() of the more_curly() function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitee.com/src-openeuler/byacc/commit/50225f48c6b53e9d7c936681a06682404cb8ec4d
CVE ID: CVE-2021-33643 State: PUBLISHED Published: 2022-08-09T00:00:00.000Z Last Updated: 2025-11-03T20:33:35.833Z Vendors: n/a Products: libtar Problem Types: CWE-125 Description: An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longlink, causing an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1807 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5YSHZY753R7XW6CIKJVAWI373WW3YRRJ/ - https://lists.fedoraproject.org/archives/l
nnounce%40lists.fedoraproject.org/message/5YSHZY753R7XW6CIKJVAWI373WW3YRRJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OD4HEBSTI22FNYKOKK7W3X6ZQE6FV3XC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7Q26QDNOJDOFYWMJWEIK5XR62M2FF6IJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4S4PJRCJLEAWN2EKXGLSOBTL7O57V7NC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WX5YE66CT7Y5C2HTHXSFDKQWYWYWJ2T/
CVE ID: CVE-2021-33644 State: PUBLISHED Published: 2022-08-09T00:00:00.000Z Last Updated: 2025-11-03T20:33:37.233Z Vendors: n/a Products: libtar Problem Types: CWE-125 Description: An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger an calling of malloc(0) for a variable gnu_longname, causing an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1807 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5YSHZY753R7XW6CIKJVAWI373WW3YRRJ/ - https://lists.fedoraproject.org/archives/l
CVE ID: CVE-2021-33645 State: PUBLISHED Published: 2022-08-09T00:00:00.000Z Last Updated: 2025-11-03T20:33:38.619Z Vendors: n/a Products: libtar Problem Types: CWE-401 Description: The th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory, which may cause a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1807 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5YSHZY753R7XW6CIKJVAWI373WW3YRRJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OD4H
JVAWI373WW3YRRJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OD4HEBSTI22FNYKOKK7W3X6ZQE6FV3XC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7Q26QDNOJDOFYWMJWEIK5XR62M2FF6IJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4S4PJRCJLEAWN2EKXGLSOBTL7O57V7NC/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WX5YE66CT7Y5C2HTHXSFDKQWYWYWJ2T/
CVE ID: CVE-2021-33646 State: PUBLISHED Published: 2022-08-09T00:00:00.000Z Last Updated: 2025-11-03T20:33:40.032Z Vendors: n/a Products: libtar Problem Types: CWE-401 Description: The th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory, which may cause a memory leak. Additional Analyst Notes: - CVE Program Container: References: - https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1807 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5YSHZY753R7XW6CIKJVAWI373WW3YRRJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OD4H
CVE ID: CVE-2021-33647 State: PUBLISHED Published: 2022-06-27T16:19:06 Last Updated: 2024-08-03T23:58:21.531Z Vendors: n/a Products: openEuler:mindspore Problem Types: CWE-787 Description: When performing the inference shape operation of the Tile operator, if the input data type is not int or int32, it will access data outside of bounds of heap allocated buffers. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-008_en.md
CVE ID: CVE-2021-33648 State: PUBLISHED Published: 2022-06-27T16:17:35 Last Updated: 2024-08-03T23:58:21.576Z Vendors: n/a Products: openEuler:mindspore Problem Types: CWE-125 Description: When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it will access data outside of bounds of shape which allocated from heap buffers. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-007_en.md
CVE ID: CVE-2021-33649 State: PUBLISHED Published: 2022-06-27T16:20:28 Last Updated: 2024-08-03T23:58:22.077Z Vendors: n/a Products: openEuler:mindspore Problem Types: CWE-125 Description: When performing the inference shape operation of the Transpose operator, if the value in the perm element is greater than or equal to the size of the input_shape, it will access data outside of bounds of input_shape which allocated from heap buffers. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-006_en.md
CVE ID: CVE-2021-33650 State: PUBLISHED Published: 2022-06-27T16:24:12 Last Updated: 2024-08-03T23:58:21.577Z Vendors: n/a Products: openEuler:mindspore Problem Types: CWE-125 Description: When performing the inference shape operation of the SparseToDense operator, if the number of inputs is less than three, it will access data outside of bounds of inputs which allocated from heap buffers. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-005_en.md
CVE ID: CVE-2021-33651 State: PUBLISHED Published: 2022-06-27T16:23:04 Last Updated: 2024-08-03T23:58:22.055Z Vendors: n/a Products: openEuler:mindspore Problem Types: CWE-369 Description: When performing the analytical operation of the DepthwiseConv2D operator, if the attribute depth_multiplier is 0, it will cause a division by 0 exception. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-004_en.md
CVE ID: CVE-2021-33652 State: PUBLISHED Published: 2022-06-27T16:21:47 Last Updated: 2024-08-03T23:58:22.161Z Vendors: n/a Products: openEuler:mindspore Problem Types: CWE-369 Description: When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axis_sizes element, it will cause a division by 0 exception. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-003_en.md
CVE ID: CVE-2021-33653 State: PUBLISHED Published: 2022-06-27T16:25:27 Last Updated: 2024-08-03T23:58:22.103Z Vendors: n/a Products: openEuler:mindspore Problem Types: CWE-369 Description: When performing the derivation shape operation of the SpaceToBatch operator, if there is a value of 0 in the parameter block_shape element, it will cause a division by 0 exception. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-002_en.md
CVE ID: CVE-2021-33654 State: PUBLISHED Published: 2022-06-27T16:26:29 Last Updated: 2024-08-03T23:58:22.488Z Vendors: n/a Products: openEuler:mindspore Problem Types: CWE-369 Description: When performing the initialization operation of the Split operator, if a dimension in the input shape is 0, it will cause a division by 0 exception. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/mindspore/community/blob/master/security/security_advisory_list/mssa-2021-001_en.md
CVE ID: CVE-2021-33655 State: PUBLISHED Published: 2022-07-18T14:45:50 Last Updated: 2024-08-03T23:58:22.899Z Vendors: n/a Products: kernel Problem Types: CWE-787 Description: When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=086ff84617185393a0bbf25830c4f36412a7d3f4 - http://www.openwall.com/lists/oss-security/2022/07/19/2 - https://www.debian.org/security/2022/dsa-5191 - https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
CVE ID: CVE-2021-33656 State: PUBLISHED Published: 2022-07-18T14:44:28 Last Updated: 2024-08-03T23:58:21.558Z Vendors: n/a Products: openEuler:kernel Problem Types: CWE-787 Description: When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/releases/5.10.127/vt-drop-old-font-ioctls.patch - https://www.openeuler.org/en/security/cve/detail.html?id=CVE-2021-33656&packageName=kernel - http://www.openwall.com/lists/oss-security/2022/07/19/3 - https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
CVE ID: CVE-2021-33657 State: PUBLISHED Published: 2022-04-01T00:00:00 Last Updated: 2024-08-03T23:58:22.435Z Vendors: n/a Products: SDL2 Problem Types: heap overflow Description: There is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libsdl-org/SDL/commit/8c91cf7dba5193f5ce12d06db1336515851c9ee9 - https://lists.debian.org/debian-lts-announce/2023/02/msg00008.html - https://security.gentoo.org/glsa/202305-18 - https
https://lists.debian.org/debian-lts-announce/2023/02/msg00008.html - https://security.gentoo.org/glsa/202305-18 - https://security.gentoo.org/glsa/202305-17
CVE ID: CVE-2021-33658 State: PUBLISHED Published: 2022-03-11T17:54:21 Last Updated: 2024-08-03T23:58:22.565Z Vendors: openEuler Products: atune Problem Types: n/a Description: atune before 0.3-0.8 log in as a local user and run the curl command to access the local atune url interface to escalate the local privilege or modify any file. Authentication is not forcibly enabled in the default configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.openeuler.org/zh/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1541
CVE ID: CVE-2021-33659 State: PUBLISHED Published: 2021-06-09T13:33:01 Last Updated: 2024-08-03T23:58:22.396Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.ac
CVE ID: CVE-2021-33660 State: PUBLISHED Published: 2021-06-09T13:32:11 Last Updated: 2024-08-03T23:58:22.930Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.ac
CVE ID: CVE-2021-33661 State: PUBLISHED Published: 2021-06-09T13:32:55 Last Updated: 2024-08-03T23:58:22.248Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.ac
CVE ID: CVE-2021-33662 State: PUBLISHED Published: 2021-06-09T13:32:05 Last Updated: 2024-08-03T23:58:22.965Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: SAP SE Products: SAP Business One Problem Types: Information Disclosure Description: Under certain conditions, the installation of SAP Business One, version - 10.0, discloses sensitive information on the file system allowing an attacker to access information which would otherwise be restricted. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999 - https://launchpad.support.sap.com/#/notes/3058382