Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-33394 State: PUBLISHED Published: 2021-05-27T18:23:19 Last Updated: 2024-08-03T23:50:42.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cubecart 6.4.2 allows Session Fixation. The application does not generate a new session cookie after the user is logged in. A malicious user is able to create a new session cookie value and inject it to a victim. After the victim logs in, the injected cookie becomes valid, giving the attacker access to the user's account through the active session. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xoffense/POC/blob/main/Session%20Fixation%20in%20Cubecart%206.4.2.md - https://github.com/cubeca
s: - https://github.com/xoffense/POC/blob/main/Session%20Fixation%20in%20Cubecart%206.4.2.md - https://github.com/cubecart/v6/commit/aac7b3a13a43e302d91f94a120417b2fda737d0f
CVE ID: CVE-2021-33396 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-20T14:05:05.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/baijiacms/baijiacmsV4/issues/7
CVE ID: CVE-2021-33403 State: PUBLISHED Published: 2021-08-03T21:24:53 Last Updated: 2024-08-03T23:50:42.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in the transfer function of a smart contract implementation for Lancer Token, an Ethereum ERC20 token, allows the owner to cause unexpected financial losses between two large accounts during a transaction. Additional Analyst Notes: - CVE Program Container: References: - https://cn.etherscan.com/address/0x63e634330a20150dbb61b15648bc73855d6ccf07#code - https://github.com/MRdoulestar/SC-RCVD/blob/main/Vulnerabilities/LNCToken.md
CVE ID: CVE-2021-33408 State: PUBLISHED Published: 2021-05-27T21:46:02 Last Updated: 2024-08-03T23:50:42.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Local File Inclusion vulnerability in Ab Initio Control>Center before 4.0.2.6 allows remote attackers to retrieve arbitrary files. Fixed in v4.0.2.6 and v4.0.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.abinitio.com/en/security-advisories/ab-2021-001/
CVE ID: CVE-2021-33420 State: PUBLISHED Published: 2022-12-15T00:00:00.000Z Last Updated: 2025-04-21T19:17:57.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/inikulin/replicator/issues/16 - https://github.com/inikulin/replicator/pull/17 - https://github.com/inikulin/replicator/commit/2c626242fb4a118855262c64b5731b2ce98e521b - https://advisory.checkmarx.net/advisory/CX-2021-4787
CVE ID: CVE-2021-33425 State: PUBLISHED Published: 2021-05-25T13:41:35 Last Updated: 2024-08-03T23:50:42.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability was discovered in the Web Interface for OpenWRT LuCI version 19.07 which allows attackers to inject arbitrary Javascript in the OpenWRT Hostname via the Hostname Change operation. Additional Analyst Notes: - CVE Program Container: References: - http://openwrt.com - http://www.openwall.com/lists/oss-security/2021/11/09/1
CVE ID: CVE-2021-33430 State: PUBLISHED Published: 2021-12-17T18:36:51 Last Updated: 2024-08-03T23:50:42.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a malicious user cause a Denial of Service. NOTE: The vendor does not agree this is a vulneraility; In (very limited) circumstances a user may be able provoke the buffer overflow, the user is most likely already privileged to at least provoke denial of service by exhausting memory. Triggering this further requires the use of uncommon AP
eged to at least provoke denial of service by exhausting memory. Triggering this further requires the use of uncommon API (complicated structured dtypes), which is very unlikely to be available to an unprivileged user Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/numpy/numpy/issues/18939
CVE ID: CVE-2021-33436 State: PUBLISHED Published: 2022-04-28T10:57:43 Last Updated: 2024-08-03T23:50:42.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe DLL loading. This vulnerability allows local non-privileged users to perform DLL Hijacking via any writable directory listed under the system path and ultimately execute code as NT AUTHORITY\SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/active-labs/Advisories/blob/master/2021/ACTIVE-2021-001.md - https://knowledgebase.nomachine.com/TR05S10236 - https://knowledgeba
bs/Advisories/blob/master/2021/ACTIVE-2021-001.md - https://knowledgebase.nomachine.com/TR05S10236 - https://knowledgebase.nomachine.com/SU05S00224 - https://knowledgebase.nomachine.com/SU05S00223
CVE ID: CVE-2021-33437 State: PUBLISHED Published: 2022-07-26T12:09:00 Last Updated: 2024-08-03T23:50:42.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There are memory leaks in frozen_cb() in mjs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/160 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33438 State: PUBLISHED Published: 2022-07-26T12:09:09 Last Updated: 2024-08-03T23:50:42.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in json_parse_array() in mjs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/158 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33439 State: PUBLISHED Published: 2022-07-26T12:09:10 Last Updated: 2024-08-03T23:50:42.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is Integer overflow in gc_compact_strings() in mjs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/159 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33440 State: PUBLISHED Published: 2022-07-26T12:09:15 Last Updated: 2024-08-03T23:50:42.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_commit() in mjs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/163 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33441 State: PUBLISHED Published: 2022-07-26T12:09:20 Last Updated: 2024-08-03T23:50:42.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in exec_expr() in mjs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/165 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33442 State: PUBLISHED Published: 2022-07-26T12:09:26 Last Updated: 2024-08-03T23:50:42.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in json_printf() in mjs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/161 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33443 State: PUBLISHED Published: 2022-07-26T12:27:13 Last Updated: 2024-08-03T23:50:42.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in mjs_execute() in mjs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/167 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33444 State: PUBLISHED Published: 2022-07-26T12:27:06 Last Updated: 2024-08-03T23:50:42.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in getprop_builtin_foreign() in mjs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/166 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33445 State: PUBLISHED Published: 2022-07-26T12:27:00 Last Updated: 2024-08-03T23:50:42.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_string_char_code_at() in mjs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/169 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33446 State: PUBLISHED Published: 2022-07-26T12:26:54 Last Updated: 2024-08-03T23:50:42.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_next() in mjs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/168 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33447 State: PUBLISHED Published: 2022-07-26T12:26:48 Last Updated: 2024-08-03T23:50:42.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_print() in mjs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/164 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33448 State: PUBLISHED Published: 2022-07-26T12:26:42 Last Updated: 2024-08-03T23:50:42.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mjs(mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow at 0x7fffe9049390. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/170 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33449 State: PUBLISHED Published: 2022-07-26T12:26:37 Last Updated: 2024-08-03T23:50:42.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_part_get_by_offset() in mjs.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cesanta/mjs/issues/162 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33450 State: PUBLISHED Published: 2022-07-26T12:26:31 Last Updated: 2024-08-03T23:50:42.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_calloc() in nasmlib/alloc.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392758 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33451 State: PUBLISHED Published: 2022-07-26T12:36:13 Last Updated: 2024-08-03T23:50:42.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in lrzip version 0.641. There are memory leaks in fill_buffer() in stream.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ckolivas/lrzip/issues/198 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33452 State: PUBLISHED Published: 2022-07-26T12:36:18 Last Updated: 2024-08-03T23:50:42.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasm_malloc() in nasmlib/alloc.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.nasm.us/show_bug.cgi?id=3392757 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33453 State: PUBLISHED Published: 2022-07-26T12:36:24 Last Updated: 2024-08-03T23:50:42.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in lrzip version 0.641. There is a use-after-free in ucompthread() in stream.c:1538. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ckolivas/lrzip/issues/199 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33454 State: PUBLISHED Published: 2022-07-26T12:36:29 Last Updated: 2024-08-03T23:50:42.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr_get_intnum() in libyasm/expr.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/166 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33455 State: PUBLISHED Published: 2022-07-26T12:36:34 Last Updated: 2024-08-03T23:50:42.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in do_directive() in modules/preprocs/nasm/nasm-pp.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/169 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33456 State: PUBLISHED Published: 2022-07-26T12:36:40 Last Updated: 2024-08-03T23:50:42.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in hash() in modules/preprocs/nasm/nasm-pp.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/175 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33457 State: PUBLISHED Published: 2022-07-26T12:36:45 Last Updated: 2024-08-03T23:50:42.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmac_params() in modules/preprocs/nasm/nasm-pp.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/171 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33458 State: PUBLISHED Published: 2022-07-26T12:36:51 Last Updated: 2024-08-03T23:50:42.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in find_cc() in modules/preprocs/nasm/nasm-pp.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/170 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33459 State: PUBLISHED Published: 2022-07-26T12:36:56 Last Updated: 2024-08-03T23:50:42.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in nasm_parser_directive() in modules/parsers/nasm/nasm-parse.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/167 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33460 State: PUBLISHED Published: 2022-07-26T12:37:02 Last Updated: 2024-08-03T23:50:42.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in if_condition() in modules/preprocs/nasm/nasm-pp.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/168 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33461 State: PUBLISHED Published: 2022-07-26T12:53:03 Last Updated: 2024-08-03T23:50:42.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in yasm version 1.3.0. There is a use-after-free in yasm_intnum_destroy() in libyasm/intnum.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/161 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33462 State: PUBLISHED Published: 2022-07-26T12:52:54 Last Updated: 2024-08-03T23:50:42.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in yasm version 1.3.0. There is a use-after-free in expr_traverse_nodes_post() in libyasm/expr.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/165 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33463 State: PUBLISHED Published: 2022-07-26T12:52:46 Last Updated: 2024-08-03T23:50:42.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasm_expr__copy_except() in libyasm/expr.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/174 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33464 State: PUBLISHED Published: 2022-07-26T12:52:40 Last Updated: 2024-08-03T23:50:42.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow in inc_fopen() in modules/preprocs/nasm/nasm-pp.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/164 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33465 State: PUBLISHED Published: 2022-07-26T12:52:34 Last Updated: 2024-08-03T23:50:42.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_mmacro() in modules/preprocs/nasm/nasm-pp.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/173 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33466 State: PUBLISHED Published: 2022-07-26T12:52:26 Last Updated: 2024-08-03T23:50:42.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in expand_smacro() in modules/preprocs/nasm/nasm-pp.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/172 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33467 State: PUBLISHED Published: 2022-07-26T12:52:21 Last Updated: 2024-08-03T23:50:42.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in yasm version 1.3.0. There is a use-after-free in pp_getline() in modules/preprocs/nasm/nasm-pp.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/163 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33468 State: PUBLISHED Published: 2022-07-26T12:52:14 Last Updated: 2024-08-03T23:50:42.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in yasm version 1.3.0. There is a use-after-free in error() in modules/preprocs/nasm/nasm-pp.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yasm/yasm/issues/162 - https://gist.github.com/Clingto/bb632c0c463f4b2c97e4f65f751c5e6d
CVE ID: CVE-2021-33469 State: PUBLISHED Published: 2021-05-26T16:36:56 Last Updated: 2024-08-03T23:50:42.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: COVID19 Testing Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the "Admin name" parameter. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/ - https://www.exploit-db.com/exploits/49887
CVE ID: CVE-2021-33470 State: PUBLISHED Published: 2021-05-26T16:39:33 Last Updated: 2024-08-03T23:50:42.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/ - https://www.exploit-db.com/exploits/49886 - http://packetstormsecurity.com/files/163014/COVID-19-Testing-Management-System-1.0-SQL-Injection.html - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-04 - https://www.nu11secur1ty.com/2021/08/covid-19-contact-tracing-system-web-app.html
CVE ID: CVE-2021-33473 State: PUBLISHED Published: 2022-06-02T19:55:57 Last Updated: 2024-08-03T23:50:43.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: An argument injection vulnerability in Dragonfly Ruby Gem v1.3.0 allows attackers to read and write arbitrary files when the verify_url option is disabled. This vulnerability is exploited via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/markevans/dragonfly/issues/513 - https://github.com/markevans/dragonfly/commit/25399297bb457f7fcf8e3f91e85945b255b111b5 - https://security.netapp.com/advisory/ntap-20220715-0004/
CVE ID: CVE-2021-33477 State: PUBLISHED Published: 2021-05-20T19:16:01 Last Updated: 2024-08-03T23:50:42.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline. Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2021/05/17/1 - https://www.openwall.com/lists/oss-security/2017/05/01/20 - http://cvs.schmorp.de/rxvt-unicode/src/command.C?r1=1.582&r2=1.583 - https://packetstormsecurity.com/files/162621/rxvt-2.7.0-rxvt-unicode
p.de/rxvt-unicode/src/command.C?r1=1.582&r2=1.583 - https://packetstormsecurity.com/files/162621/rxvt-2.7.0-rxvt-unicode-9.22-Code-Execution.html - https://sourceforge.net/projects/rxvt/files/rxvt-dev/ - http://cvs.schmorp.de/rxvt-unicode/Changes?view=log - https://sourceforge.net/projects/materm/files/mrxvt%20source/ - https://git.enlightenment.org/apps/eterm.git/log/ - https://security.gentoo.org/glsa/202105-17 - https://lists.debian.org/debian-lts-announce/2021/05/msg00026.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NZWGE2RJONBEHSPCBUAW72NTRTIFKZAX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapr