Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-47658 State: PUBLISHED Published: 2025-02-26T02:01:24.578Z Last Updated: 2025-05-04T07:15:45.359Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix a potential gpu_metrics_table memory leak Memory is allocated for gpu_metrics_table in renoir_init_smc_tables(), but not freed in int smu_v12_0_fini_smc_tables(). Free it! References: - https://git.kernel.org/stable/c/583637d66a70fc7090e12fb0ebbacc33d39e2214
CVE ID: CVE-2021-47659 State: PUBLISHED Published: 2025-02-26T02:05:56.954Z Last Updated: 2025-05-16T07:23:06.514Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for format_count earlier While the check for format_count > 64 in __drm_universal_plane_init() shouldn't be hit (it's a WARN_ON), in its current position it will then leak the plane->format_types array and fail to call drm_mode_object_unregister() leaking the modeset identifier. Move it to the start of the function to avoid allocating those resources in the first place. References: - https://git.kernel.org/stable/c/4ab7e453a3ee88c274cf97bee9
allocating those resources in the first place. References: - https://git.kernel.org/stable/c/4ab7e453a3ee88c274cf97bee9487ab92a66d313 - https://git.kernel.org/stable/c/1e29d829ad51d1472dd035487953a6724b56fc33 - https://git.kernel.org/stable/c/b5cd108143513e4498027b96ec4710702d186f11 - https://git.kernel.org/stable/c/978e3d023256bfaf34a0033d40c94e8a8e70cf3c - https://git.kernel.org/stable/c/787163d19bc3cdc6ca4b96223f62208534d1cf6b - https://git.kernel.org/stable/c/ad6dd7a2bac86118985c7b3426e175b9d3c1ec4f - https://git.kernel.org/stable/c/4b674dd69701c2e22e8e7770c1706a69f3b17269
CVE ID: CVE-2021-47660 State: PUBLISHED Published: 2025-02-26T02:05:57.461Z Last Updated: 2025-10-01T19:46:59.435Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()' All error handling paths lead to 'out' where many resources are freed. Do it as well here instead of a direct return, otherwise 'log', 'ra' and 'log->one_page_buf' (at least) will leak. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/d8be98ab88250dc12a98efdb703792a537b0eac3 - https://git.kernel.org/stable/c/bc4a1d384a04c6dba9312e1421a9f9f7c03339a
ble/c/d8be98ab88250dc12a98efdb703792a537b0eac3 - https://git.kernel.org/stable/c/bc4a1d384a04c6dba9312e1421a9f9f7c03339a4 - https://git.kernel.org/stable/c/2c97519ed6b4239594c58ddacf3d0d576cf070cc - https://git.kernel.org/stable/c/e589f9b7078e1c0191613cd736f598e81d2390de
CVE ID: CVE-2021-47662 State: PUBLISHED Published: 2025-04-24T09:25:08.719Z Last Updated: 2025-04-24T15:22:29.456Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Franka Robotics Products: Franka Emika Robot Problem Types: CWE-862 Description: Due to missing authorization an unauthenticated remote attacker can cause a DoS attack by connecting via HTTPS and triggering the shutdown button. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sciencedirect.com/science/article/pii/S2351978921001657
CVE ID: CVE-2021-47663 State: PUBLISHED Published: 2025-04-24T09:25:23.807Z Last Updated: 2025-04-24T15:22:23.071Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Franka Robotics Products: Franka Emika Robot Problem Types: CWE-613 Description: Due to improper JSON Web Tokens implementation an unauthenticated remote attacker can guess a valid session ID and therefore impersonate a user to gain full access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sciencedirect.com/science/article/pii/S2351978921001657
CVE ID: CVE-2021-47664 State: PUBLISHED Published: 2025-04-24T09:25:39.181Z Last Updated: 2025-04-24T15:22:17.000Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Franka Robotics Products: Franka Emika Robot Problem Types: CWE-203 Description: Due to improper authentication mechanism an unauthenticated remote attacker can enumerate valid usernames. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sciencedirect.com/science/article/pii/S2351978921001657
CVE ID: CVE-2021-47667 State: PUBLISHED Published: 2025-04-05T00:00:00.000Z Last Updated: 2025-04-07T16:22:26.249Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Zend Products: ZendTo Problem Types: CWE-78 Description: An OS command injection vulnerability in lib/NSSDropoff.php in ZendTo 5.24-3 through 6.x before 6.10-7 allows unauthenticated remote attackers to execute arbitrary commands via shell metacharacters in the tmp_name parameter when dropping off a file via a POST /dropoff request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://projectblack.io/blog/zendto-nday-vulnerabilities/
CVE ID: CVE-2021-47668 State: PUBLISHED Published: 2025-04-17T18:01:29.315Z Last Updated: 2025-05-04T07:15:48.822Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: can: dev: can_restart: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after the netif_rx_ni() in: stats->rx_bytes += cf->len; Reordering the lines solves the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/260925a0b7d2da5449f8ecfd02c1405e0c8a45b8 - https://git.kernel.org/stable/c/bbc6847b9b8978b520f62fbc7c68c54ef
rg/stable/c/260925a0b7d2da5449f8ecfd02c1405e0c8a45b8 - https://git.kernel.org/stable/c/bbc6847b9b8978b520f62fbc7c68c54ef0f8d282 - https://git.kernel.org/stable/c/92668d28c7e6a7a2ba07df287669ffcdf650c421 - https://git.kernel.org/stable/c/08ab951787098ae0b6c0364aeea7a8138226f234 - https://git.kernel.org/stable/c/ac48ef15826e83f4206c47add61072e8fc76d328 - https://git.kernel.org/stable/c/593c072b7b3c4d7044416eb039d9ad706bedd67a - https://git.kernel.org/stable/c/03f16c5075b22c8902d2af739969e878b0879c94
CVE ID: CVE-2021-47669 State: PUBLISHED Published: 2025-04-17T18:01:29.979Z Last Updated: 2025-05-04T07:15:49.993Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: can: vxcan: vxcan_xmit: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the canfd_frame cfd which aliases skb memory is accessed after the netif_rx_ni(). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/6d6dcf2399cdd26f7f5426ca8dd8366b7f2ca105 - https://git.kernel.org/stable/c/9b820875a32a3443d67bfd368e93038354e98052 - https://git.kernel.org/stable/c/a24476b37167816e6352ca1a
.kernel.org/stable/c/9b820875a32a3443d67bfd368e93038354e98052 - https://git.kernel.org/stable/c/a24476b37167816e6352ca1a2cf3769847774f70 - https://git.kernel.org/stable/c/e771a874076115df8bff27d325edfd2340e4ec69 - https://git.kernel.org/stable/c/75854cad5d80976f6ea0f0431f8cedd3bcc475cb
CVE ID: CVE-2021-47670 State: PUBLISHED Published: 2025-04-17T18:01:30.722Z Last Updated: 2025-05-04T07:15:51.038Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix use after free bugs After calling peak_usb_netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after the peak_usb_netif_rx_ni(). Reordering the lines solves the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/5408824636fa0dfedb9ecb0d94abd573131bfbbe - https://git.kernel.org/stable/c/ddd1416f44130377798c1430b76503513b7497c2 - https://gi
36fa0dfedb9ecb0d94abd573131bfbbe - https://git.kernel.org/stable/c/ddd1416f44130377798c1430b76503513b7497c2 - https://git.kernel.org/stable/c/ec939c13c3fff2114479769c8380b7f1a54feca9 - https://git.kernel.org/stable/c/50aca891d7a554db0901b245167cd653d73aaa71
CVE ID: CVE-2021-47671 State: PUBLISHED Published: 2025-04-17T18:01:31.459Z Last Updated: 2025-05-04T07:15:52.076Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: es58x_rx_err_msg(): fix memory leak in error path In es58x_rx_err_msg(), if can->do_set_mode() fails, the function directly returns without calling netif_rx(skb). This means that the skb previously allocated by alloc_can_err_skb() is not freed. In other terms, this is a memory leak. This patch simply removes the return statement in the error branch and let the function continue. Issue was found with GCC -fanalyzer, please follow the link below for deta
e error branch and let the function continue. Issue was found with GCC -fanalyzer, please follow the link below for details. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/4f389e1276a5389c92cef860c9fde8e1c802a871 - https://git.kernel.org/stable/c/7eb0881aec26099089f12ae850aebd93190b1dfe - https://git.kernel.org/stable/c/d9447f768bc8c60623e4bb3ce65b8f4654d33a50
CVE ID: CVE-2021-47672 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:18:39.941Z Description: No description available.
CVE ID: CVE-2021-47673 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:20:13.026Z Description: No description available.
CVE ID: CVE-2021-47674 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:28:04.576Z Description: No description available.
CVE ID: CVE-2021-47675 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:20:35.228Z Description: No description available.
CVE ID: CVE-2021-47676 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:28:05.947Z Description: No description available.
CVE ID: CVE-2021-47677 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:28:07.350Z Description: No description available.
CVE ID: CVE-2021-47678 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:28:08.876Z Description: No description available.
CVE ID: CVE-2021-47679 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:28:10.198Z Description: No description available.
CVE ID: CVE-2021-47680 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:28:11.506Z Description: No description available.
CVE ID: CVE-2021-47681 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:28:12.815Z Description: No description available.
CVE ID: CVE-2021-47682 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:28:14.120Z Description: No description available.
CVE ID: CVE-2021-47683 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:28:15.476Z Description: No description available.
CVE ID: CVE-2021-47684 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:28:17.014Z Description: No description available.
CVE ID: CVE-2021-47685 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:28:18.347Z Description: No description available.
CVE ID: CVE-2021-47686 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:28:19.661Z Description: No description available.
CVE ID: CVE-2021-47687 State: REJECTED Published: N/A Last Updated: 2025-09-16T15:28:21.198Z Description: No description available.
CVE ID: CVE-2021-47688 State: PUBLISHED Published: 2025-06-23T00:00:00.000Z Last Updated: 2025-06-24T18:07:21.177Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L) Vendors: WhiteBeam Products: WhiteBeam Problem Types: CWE-696 Description: In WhiteBeam 0.2.0 through 0.2.1 before 0.2.2, a user with local access to a server can bypass the allow-list functionality because a file can be truncated in the OpenFileDescriptor action before the VerifyCanWrite action is performed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/WhiteBeamSec/WhiteBeam/security/advisories/GHSA-3f8r-9483-pfxj - https://github.com/WhiteBeamSec/WhiteBeam/security/p
om/WhiteBeamSec/WhiteBeam/security/advisories/GHSA-3f8r-9483-pfxj - https://github.com/WhiteBeamSec/WhiteBeam/security/policy - https://github.com/WhiteBeamSec/WhiteBeam/pull/22
CVE ID: CVE-2021-47689 State: PUBLISHED Published: 2025-10-30T21:36:50.105Z Last Updated: 2025-11-17T18:21:41.799Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.0 / Nagios XI 5.8.0 contais a cross-site scripting (XSS) vulnerability in the Templates pages, specifically in the UI logic that renders and handles the Active/Actions buttons. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https:
r. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-ccm-xss-via-templates-pages
CVE ID: CVE-2021-47690 State: PUBLISHED Published: 2025-10-30T21:35:22.207Z Last Updated: 2025-11-17T18:21:41.967Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.1 / Nagios XI 5.8.2 contains multiple cross-site scripting (XSS) vulnerabilities in Overlay modals. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-ccm-xss-via-overlay-modals
CVE ID: CVE-2021-47691 State: PUBLISHED Published: 2025-10-30T21:36:28.131Z Last Updated: 2025-11-17T18:21:42.163Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.1 / Nagios XI 5.8.2 contains multiple cross-site scripting (XSS) vulnerabilities via the Services page affecting the config_name and service_description fields. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.
alyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-ccm-xss-via-services-page
CVE ID: CVE-2021-47692 State: REJECTED Published: 2025-10-30T21:34:27.631Z Last Updated: 2025-10-31T13:48:07.570Z Description: No description available.
CVE ID: CVE-2021-47693 State: PUBLISHED Published: 2025-10-30T21:33:18.775Z Last Updated: 2025-11-17T18:21:42.360Z Vendors: Nagios Products: XI Problem Types: CWE-89 Description: The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.3 / Nagios XI 5.8.5 contains a SQL injection vulnerability in the search text handling. Unsanitized user-supplied input was incorporated into SQL queries used by configuration object editors, allowing authenticated users to inject SQL fragments. Successful exploitation could lead to unauthorized disclosure or modification of configuration and application data, and in some environments could allow further compromise of the application or backend dat
guration and application data, and in some environments could allow further compromise of the application or backend database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-ccm-sqli-via-improper-escaping-in-search-text
CVE ID: CVE-2021-47694 State: PUBLISHED Published: 2025-10-30T21:32:43.970Z Last Updated: 2025-11-17T18:21:42.541Z Vendors: Nagios Products: XI Problem Types: CWE-79, CWE-116 Description: The Core Config Manager (CCM) in Nagios XI versions prior to CCM 3.1.4 / Nagios XI 5.8.6 contains a reflected cross-site scripting (XSS) vulnerability via the Test Command functionality. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-ccm-refle
nt: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-ccm-reflected-xss-via-test-command
CVE ID: CVE-2021-47695 State: PUBLISHED Published: 2025-10-30T21:54:48.701Z Last Updated: 2025-11-17T18:21:42.710Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 5.8.0 are vulnerable to stored cross-site scripting (XSS) via the My Tools page. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-my-tools-page
CVE ID: CVE-2021-47696 State: PUBLISHED Published: 2025-10-30T21:49:49.447Z Last Updated: 2025-11-17T18:21:42.882Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting (XSS) via BPI config ID handling. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-bpi-config-id-handling
CVE ID: CVE-2021-47697 State: PUBLISHED Published: 2025-10-30T21:57:03.111Z Last Updated: 2025-11-17T18:21:43.156Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 5.8.0 are vulnerable to cross-site scripting (XSS) via the Views feature URL handling. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-via-views-url-handling
CVE ID: CVE-2021-47698 State: PUBLISHED Published: 2025-11-03T21:56:10.803Z Last Updated: 2025-11-17T18:21:43.378Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 5.8.7 using embedded Nagios Core are vulnerable to cross-site scripting (XSS) via the Core UI’s Views URL handling (escape_string()). Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-in-core-ui-views-url-handling
CVE ID: CVE-2021-47699 State: PUBLISHED Published: 2025-10-30T21:48:05.631Z Last Updated: 2025-11-17T18:21:43.598Z Vendors: Nagios Products: XI Problem Types: CWE-79 Description: Nagios XI versions prior to 5.8.7 are vulnerable to cross-site scripting (XSS) via the Audit Log page’s Send to NLS form. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-xss-in-audit-log-via-send-to-nls-form
CVE ID: CVE-2021-47700 State: PUBLISHED Published: 2025-10-30T21:39:02.693Z Last Updated: 2025-11-17T18:21:43.914Z Vendors: Nagios Products: XI Problem Types: CWE-250 Description: Nagios XI versions prior to 5.8.7 used a temporary directory for Highcharts exports with overly permissive ownership/permissions under the Apache user. Local or co-hosted processes could read/overwrite export artifacts or manipulate paths, risking disclosure or tampering and potential code execution depending on deployment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-insecure-permissions-on-highcharts-t
ww.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-insecure-permissions-on-highcharts-temporary-directory
CVE ID: CVE-2021-4000 State: PUBLISHED Published: 2021-12-03T10:45:11 Last Updated: 2024-08-03T17:16:02.907Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-601 Description: showdoc is vulnerable to URL Redirection to Untrusted Site Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/e4d803e0-3104-432c-80b3-34bc453c8962 - https://github.com/star7th/showdoc/commit/c7f10033eba5f2b5a537f9af9ba2379138e67138
CVE ID: CVE-2021-4001 State: PUBLISHED Published: 2022-01-21T00:00:00 Last Updated: 2024-08-03T17:16:03.566Z Vendors: n/a Products: kernel Problem Types: CWE-367 Description: A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special privilege (cap_sys_admin or cap_bpf) can modify the frozen mapped address space. This flaw affects kernel versions prior to 5.16 rc2. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2025645 - https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=35
/bugzilla.redhat.com/show_bug.cgi?id=2025645 - https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git/commit/?id=353050be4c19e102178ccc05988101887c25ae53
CVE ID: CVE-2021-4002 State: PUBLISHED Published: 2022-03-03T21:42:47 Last Updated: 2024-08-03T17:16:03.279Z Vendors: n/a Products: kernel Problem Types: CWE-459 Description: A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2025726 - https://www.openwall.com/lists/oss-security/2021/11/25/1 - https://git.kernel.org/pub/scm/linux/kernel/git/tor
2025726 - https://www.openwall.com/lists/oss-security/2021/11/25/1 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13e4ad2ce8df6e058ef482a31fdd81c725b0f7ea - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a4a118f2eead1d6c49e00765de89878288d4b890 - https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html - https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html - https://www.debian.org/security/2022/dsa-5096 - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-4005 State: PUBLISHED Published: 2021-12-04T12:00:11 Last Updated: 2024-08-03T17:16:03.273Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: firefly-iii Products: firefly-iii/firefly-iii Problem Types: CWE-352 Description: firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/bf4ef581-325a-492d-a710-14fcb53f00ff - https://github.com/firefly-iii/firefly-iii/commit/03a1601bf343181df9f405dd2109aec483cb7053