Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-45897 State: PUBLISHED Published: 2022-01-28T16:21:31 Last Updated: 2024-08-04T04:54:30.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://docs.suitecrm.com/8.x/admin/releases/8.0/ - https://docs.suitecrm.com/admin/releases/7.12.x/ - https://github.com/manuelz120/CVE-2021-45897
CVE ID: CVE-2021-45898 State: PUBLISHED Published: 2022-01-28T16:23:34 Last Updated: 2024-08-04T04:54:31.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows local file inclusion. Additional Analyst Notes: - CVE Program Container: References: - https://docs.suitecrm.com/8.x/admin/releases/8.0/ - https://docs.suitecrm.com/admin/releases/7.12.x/
CVE ID: CVE-2021-45899 State: PUBLISHED Published: 2022-01-28T16:25:21 Last Updated: 2024-08-04T04:54:30.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: SuiteCRM before 7.12.3 and 8.x before 8.0.2 allows PHAR deserialization that can lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://docs.suitecrm.com/8.x/admin/releases/8.0/ - https://docs.suitecrm.com/admin/releases/7.12.x/
CVE ID: CVE-2021-45900 State: PUBLISHED Published: 2022-03-30T21:38:55 Last Updated: 2024-08-04T04:54:31.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vivoh Webinar Manager before 3.6.3.0 has improper API authentication. When a user logs in to the administration configuration web portlet, a VIVOH_AUTH cookie is assigned so that they can be uniquely identified. Certain APIs can be successfully executed without proper authentication. This can let an attacker impersonate as victim and make state changing requests on their behalf. Additional Analyst Notes: - CVE Program Container: References: - https://vivoh.com/wp-content/uploads/2021/11/Vivoh-Webinar-Manager-for-Zoom-Installa
VE Program Container: References: - https://vivoh.com/wp-content/uploads/2021/11/Vivoh-Webinar-Manager-for-Zoom-Installation-and-Administration-Guide.pdf - https://vivoh.com/blog/finra-remediation/
CVE ID: CVE-2021-45901 State: PUBLISHED Published: 2022-02-10T13:59:20 Last Updated: 2024-08-04T04:54:31.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/ - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/servicenow-username-enumeration-vulnerability-cve-2021-45901/ - http://packetstormsecurity.com/files/165989/ServiceNow-Orlando-Username-Enumeration.html
CVE ID: CVE-2021-45903 State: PUBLISHED Published: 2021-12-28T13:15:39 Last Updated: 2024-08-04T04:54:30.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: A persistent cross-site scripting (XSS) issue in the web interface of SuiteCRM before 7.10.35, and 7.11.x and 7.12.x before 7.12.2, allows a remote attacker to introduce arbitrary JavaScript via attachments upload, a different vulnerability than CVE-2021-39267 and CVE-2021-39268. Additional Analyst Notes: - CVE Program Container: References: - https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_35 - https://docs.suitecrm.com/admin/releases/7.12.x/#_7_12_2 - https://github.com/ach-ing/cves/blob/main/CVE-2021-45903.md
CVE ID: CVE-2021-45904 State: PUBLISHED Published: 2021-12-27T22:32:56 Last Updated: 2024-08-04T04:54:31.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.openwrt.org/index.php?do=details&task_id=4199
CVE ID: CVE-2021-45905 State: PUBLISHED Published: 2021-12-27T22:32:48 Last Updated: 2024-08-04T04:54:31.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.openwrt.org/index.php?do=details&task_id=4199
CVE ID: CVE-2021-45906 State: PUBLISHED Published: 2021-12-27T22:32:39 Last Updated: 2024-08-04T04:54:31.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.openwrt.org/index.php?do=details&task_id=4199
CVE ID: CVE-2021-45907 State: PUBLISHED Published: 2021-12-28T00:01:40 Last Updated: 2024-08-04T04:54:31.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a for loop. An attacker has little influence over the data written to the stack, making it unlikely that the flow of control can be subverted. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002669
CVE ID: CVE-2021-45908 State: PUBLISHED Published: 2021-12-28T00:02:28 Last Updated: 2024-08-04T04:54:31.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a while loop. An attacker has little influence over the data written to the stack, making it unlikely that the flow of control can be subverted. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002669
CVE ID: CVE-2021-45909 State: PUBLISHED Published: 2021-12-28T00:02:17 Last Updated: 2024-08-04T04:54:31.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in the DecodeLZW function. It allows an attacker to write a large amount of arbitrary data outside the boundaries of a buffer. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002668 - https://lists.debian.org/debian-lts-announce/2022/03/msg00008.html
CVE ID: CVE-2021-45910 State: PUBLISHED Published: 2021-12-28T00:02:03 Last Updated: 2024-08-04T04:54:31.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main function. It allows an attacker to write data outside of the allocated buffer. The attacker has control over a part of the address that data is written to, control over the written data, and (to some extent) control over the amount of data that is written. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002667 - https://lists.debian.org/debian-lts-announce/2022/03/m
es: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002667 - https://lists.debian.org/debian-lts-announce/2022/03/msg00008.html
CVE ID: CVE-2021-45911 State: PUBLISHED Published: 2021-12-28T00:01:52 Last Updated: 2024-08-04T04:54:31.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow in the main function. It allows an attacker to write 2 bytes outside the boundaries of the buffer. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002687 - https://lists.debian.org/debian-lts-announce/2022/03/msg00008.html
CVE ID: CVE-2021-45912 State: PUBLISHED Published: 2022-01-04T15:10:37 Last Updated: 2024-08-04T04:54:30.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated Named Pipe channel in Controlup Real-Time Agent (cuAgent.exe) before 8.5 potentially allows an attacker to run OS commands via the ProcessActionRequest WCF method. Additional Analyst Notes: - CVE Program Container: References: - https://controlup.com - https://www.controlup.com/security/security-advisory-local-privilege-escalation/
CVE ID: CVE-2021-45913 State: PUBLISHED Published: 2022-01-04T14:29:44 Last Updated: 2024-08-04T04:54:31.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: A hardcoded key in ControlUp Real-Time Agent (cuAgent.exe) before 8.2.5 may allow a potential attacker to run OS commands via a WCF channel. Additional Analyst Notes: - CVE Program Container: References: - https://controlup.com - https://www.controlup.com/security/security-advisory-hardcoded-key/
CVE ID: CVE-2021-45914 State: PUBLISHED Published: 2022-05-24T14:32:59 Last Updated: 2024-08-04T04:54:30.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/h1pmnh - https://twitter.com/h1pmnh - https://www.luxsoft.eu/index.php?pge=dload - https://h1pmnh.github.io/post/cve-luxcal-2021/
CVE ID: CVE-2021-45915 State: PUBLISHED Published: 2022-05-24T14:32:44 Last Updated: 2024-08-04T04:54:31.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value. This allows the attacker's session to be authenticated as any registered LuxCal user, including the site administrator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/h1pmnh - https://twitter.com/h1pmnh - https://www.luxsoft.eu/index.php?pge=dload - https://h1pmnh.github.io/post/cve-luxcal-2021/
CVE ID: CVE-2021-45916 State: PUBLISHED Published: 2022-01-03T10:10:20.373259Z Last Updated: 2024-09-16T16:38:51.598Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: SUN & MOON RISE CO., LTD. Products: Shockwall Problem Types: CWE-20 Description: The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5432-b9074-1.html
CVE ID: CVE-2021-45917 State: PUBLISHED Published: 2022-01-03T10:10:21.764261Z Last Updated: 2024-09-16T20:32:34.721Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: SUN & MOON RISE CO., LTD. Products: Shockwall Problem Types: CWE-287 Description: The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery (SSRF) attack on another agent computer, resulting in arbitrary code execution for controlling the system or disrupting service. Additional Analyst Notes: - CVE Prog
lting in arbitrary code execution for controlling the system or disrupting service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-5433-77f6f-1.html
CVE ID: CVE-2021-45918 State: PUBLISHED Published: 2022-06-20T05:30:26.758725Z Last Updated: 2024-09-17T04:04:01.665Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: NHI Products: health insurance web service component Problem Types: CWE-122 Description: NHI’s health insurance web service component has insufficient validation for input string length, which can result in heap-based buffer overflow attack. A remote attacker can exploit this vulnerability to flood the memory space reserved for the program, in order to terminate service without authentication, which requires a system restart to recover service. Additional Analyst Notes: - CVE Program Container: Re
uthentication, which requires a system restart to recover service. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-6227-eaf49-1.html
CVE ID: CVE-2021-45919 State: PUBLISHED Published: 2022-02-08T22:27:21 Last Updated: 2024-08-04T04:54:31.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Studio 42 elFinder through 2.1.31 allows XSS via an SVG document. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/from-stored-xss-to-rce-using-beef-and-elfinder-cve-2021-45919/
CVE ID: CVE-2021-45925 State: PUBLISHED Published: 2022-10-24T00:00:00.000Z Last Updated: 2025-05-07T13:51:47.591Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Lanner Inc Products: IAC-AST2500A Problem Types: CWE-203 Description: Observable discrepancies in the login process allow an attacker to guess legitimate user names registered in the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.nozominetworks.com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ - https://www.nozominetworks.com/labs/vul
com/blog/vulnerabilities-in-bmc-firmware-affect-ot-iot-device-security-part-1/ - https://www.nozominetworks.com/labs/vulnerability-advisories/cve-2021-45925/
CVE ID: CVE-2021-45926 State: PUBLISHED Published: 2021-12-31T23:59:25 Last Updated: 2024-08-04T04:54:31.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd0c689be0) in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt_bind). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/mdbtools/OSV-2021-958.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35972 - https://github.com/mdbtools/mdbtools/commit/373b7ff4c4daf887269c078407cb1338942c4ea6 - https://security.gentoo.org/glsa/202208-12
CVE ID: CVE-2021-45927 State: PUBLISHED Published: 2021-12-31T23:59:16 Last Updated: 2024-08-04T04:54:31.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: MDB Tools (aka mdbtools) 0.9.2 has a stack-based buffer overflow (at 0x7ffd6e029ee0) in mdb_numeric_to_string (called from mdb_xfer_bound_data and _mdb_attempt_bind). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mdbtools/mdbtools/commit/373b7ff4c4daf887269c078407cb1338942c4ea6 - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/mdbtools/OSV-2021-1003.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36187 - https://security.gentoo.org/glsa/202208-12
CVE ID: CVE-2021-45928 State: PUBLISHED Published: 2021-12-31T23:59:08 Last Updated: 2024-08-04T04:54:31.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: libjxl b02d6b9, as used in libvips 8.11 through 8.11.2 and other products, has an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup (called from jxl::FrameDecoder::ProcessACGroup and jxl::ThreadPool::RunCallState<jxl::FrameDecoder::ProcessSections). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libvips/OSV-2021-1055.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36456 - https://github.com/libjxl/libjxl/issues/360 - https://git
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36456 - https://github.com/libjxl/libjxl/issues/360 - https://github.com/libjxl/libjxl/pull/365 - https://github.com/libjxl/libjxl/compare/v0.5...v0.6
CVE ID: CVE-2021-45929 State: PUBLISHED Published: 2021-12-31T23:51:45 Last Updated: 2024-08-04T04:54:31.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from CompileElseBlock and Compile_If). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wasm3/OSV-2021-1061.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36551
CVE ID: CVE-2021-45930 State: PUBLISHED Published: 2021-12-31T00:00:00 Last Updated: 2024-08-04T04:54:31.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qt SVG in Qt 5.0.0 through 5.15.2 and 6.0.0 through 6.2.1 has an out-of-bounds write in QtPrivate::QCommonArrayOps<QPainterPath::Element>::growAppend (called from QPainterPath::addPath and QPathClipper::intersect). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qt/OSV-2021-1121.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37025 - https://github.com/qt/qtsvg/commit/a3b753c2d077313fc9eb93af547051b956e383fc - https://github.com/qt/qtsvg/co
?id=37025 - https://github.com/qt/qtsvg/commit/a3b753c2d077313fc9eb93af547051b956e383fc - https://github.com/qt/qtsvg/commit/79bb9f51fa374106a612d17c9d98d35d807be670 - https://github.com/qt/qtsvg/commit/36cfd9efb9b22b891adee9c48d30202289cfa620 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37306 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V75XNX4GDB64N5BSOAN474RUXXS5OHRU/ - https://lists.debian.org/debian-lts-announce/2022/01/msg00020.html - https://lists.debian.org/debian-lts-announce/2022/01/msg00022.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GKOKVCSDZSOWWR3HOW5XUIU
ttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GKOKVCSDZSOWWR3HOW5XUIUJC4MKQY5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GZIXNSX7FV733TWTTLY6FHSH3SCNQKKD/ - https://lists.debian.org/debian-lts-announce/2023/08/msg00028.html
CVE ID: CVE-2021-45931 State: PUBLISHED Published: 2021-12-31T23:58:49 Last Updated: 2024-08-04T04:54:31.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: HarfBuzz 2.9.0 has an out-of-bounds write in hb_bit_set_invertible_t::set (called from hb_sparseset_t<hb_bit_set_invertible_t>::set and hb_set_copy). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/harfbuzz/OSV-2021-1159.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37425 - https://github.com/harfbuzz/harfbuzz/commit/d3e09bf4654fe5478b6dbf2b26ebab6271317d81 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
09bf4654fe5478b6dbf2b26ebab6271317d81 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5A7TCR2MY46YK3NHQZB3SLESUH354IEA/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DI6247WOAKB46CZZ6SCDSJVWWCW3GMZH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4EAIZKL4O67FN2CWJYHYKZEMNYWNWO3D/ - https://security.gentoo.org/glsa/202209-11
CVE ID: CVE-2021-45932 State: PUBLISHED Published: 2021-12-31T23:58:39 Last Updated: 2024-08-04T04:54:31.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (4 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wolfmqtt/OSV-2021-1188.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37866 - https://github.com/wolfSSL/wolfMQTT/commit/84d4b53122e0fa0280c7872350b89d5777dabbb2
CVE ID: CVE-2021-45933 State: PUBLISHED Published: 2021-12-31T23:58:30 Last Updated: 2024-08-04T04:54:31.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (8 bytes) in MqttDecode_Publish (called from MqttClient_DecodePacket and MqttClient_HandlePacket). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfMQTT/commit/84d4b53122e0fa0280c7872350b89d5777dabbb2 - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wolfmqtt/OSV-2021-1211.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38237
CVE ID: CVE-2021-45934 State: PUBLISHED Published: 2021-12-31T23:58:22 Last Updated: 2024-08-04T04:54:31.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_HandlePacket and MqttClient_WaitType). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfMQTT/commit/84d4b53122e0fa0280c7872350b89d5777dabbb2 - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wolfmqtt/OSV-2021-1204.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38146
CVE ID: CVE-2021-45935 State: PUBLISHED Published: 2021-12-31T23:58:13 Last Updated: 2024-08-04T04:54:31.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grok 9.5.0 has a heap-based buffer overflow in openhtj2k::T1OpenHTJ2K::decompress (called from std::__1::__packaged_task_func<std::__1::__bind<grk::T1DecompressScheduler::deco and std::__1::packaged_task<int). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/grok/OSV-2021-1344.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39021 - https://github.com/osamu620/OpenHTJ2K
CVE ID: CVE-2021-45936 State: PUBLISHED Published: 2021-12-31T23:57:59 Last Updated: 2024-08-04T04:54:31.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode_Disconnect (called from MqttClient_DecodePacket and MqttClient_WaitType). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfMQTT/commit/84d4b53122e0fa0280c7872350b89d5777dabbb2 - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wolfmqtt/OSV-2021-1348.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39053
CVE ID: CVE-2021-45937 State: PUBLISHED Published: 2021-12-31T23:57:49 Last Updated: 2024-08-04T04:54:31.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Connect). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfMQTT/commit/84d4b53122e0fa0280c7872350b89d5777dabbb2 - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wolfmqtt/OSV-2021-1349.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39083
CVE ID: CVE-2021-45938 State: PUBLISHED Published: 2021-12-31T23:57:41 Last Updated: 2024-08-04T04:54:31.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Unsubscribe). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfMQTT/commit/84d4b53122e0fa0280c7872350b89d5777dabbb2 - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wolfmqtt/OSV-2021-1353.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39056
CVE ID: CVE-2021-45939 State: PUBLISHED Published: 2021-12-31T23:57:33 Last Updated: 2024-08-04T04:54:31.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: wolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from MqttClient_WaitType and MqttClient_Subscribe). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfMQTT/commit/84d4b53122e0fa0280c7872350b89d5777dabbb2 - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wolfmqtt/OSV-2021-1361.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39103