Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-23266 State: PUBLISHED Published: 2022-05-16T17:05:24.567886Z Last Updated: 2024-09-16T17:14:27.358Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Crafter Software Products: Crafter CMS Problem Types: CWE-117 Description: An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the administrator. Additional Analyst Notes: - CVE Program Container: References: - https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2022051602
CVE ID: CVE-2021-23267 State: PUBLISHED Published: 2022-05-16T17:05:25.974285Z Last Updated: 2024-09-16T23:20:45.598Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Crafter Software Products: Crafter CMS Problem Types: CWE-913 Description: Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker static methods. Additional Analyst Notes: - CVE Program Container: References: - https://docs.craftercms.org/en/3.1/security/advisory.html#cv-2022051603
CVE ID: CVE-2021-23270 State: PUBLISHED Published: 2021-04-12T17:40:59 Last Updated: 2024-08-03T19:05:55.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Gargoyle OS 1.12.0, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ericpaulbis
the on-link flag is set. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ericpaulbishop/gargoyle/commit/24afe944a6ffff53d84a748384e276a4e95912ec
CVE ID: CVE-2021-23271 State: PUBLISHED Published: 2021-02-02T18:30:14.500092Z Last Updated: 2024-09-16T20:07:21.003Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO EBX Problem Types: The impact of these vulnerabilities include the possibility that an attacker would gain full administrative access to the web interface of the affected component. Description: The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Stored Cross Site Scripting (XSS) attack on the affected system. Affected releases are TIBCO
etwork access to execute a Stored Cross Site Scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.9.12 and below. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2021/02/tibco-security-advisory-february-2-2021-tibco-ebx
CVE ID: CVE-2021-23272 State: PUBLISHED Published: 2021-01-26T18:15:13.846513Z Last Updated: 2024-09-16T17:38:34.192Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: TIBCO Software Inc. Products: TIBCO BPM Enterprise, TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric Problem Types: Successful execution of this vulnerability can result in unauthorized read access, as well as unauthorized update, insert or delete access to a subset of AMX-BPM data on the affected system. Description: The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulner
BCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BPM Enterprise: versions 4.3.0 and below and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric: versions 4.3.0 and below. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories
CVE ID: CVE-2021-23273 State: PUBLISHED Published: 2021-03-09T20:35:16.543095Z Last Updated: 2024-09-16T23:15:56.138Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, TIBCO Spotfire Server Problem Types: The impact of this vulnerability includes the theoretical possibility that an attacker gains access, including potentially administrative access, to the affected system. Description: The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire De
f TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Server contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a stored Cross Site Scripting (XSS) attack on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions 10.3.3 and below, versions 10.10.0, 10.10.1, and 10.10.2, versions 10.7.0, 10.8.0, 10.9.0, 11.0.0, and 11.1.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions 11.1.0 an
ns 10.7.0, 10.8.0, 10.9.0, 11.0.0, and 11.1.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions 11.1.0 and below, TIBCO Spotfire Desktop: versions 10.3.3 and below, versions 10.10.0, 10.10.1, and 10.10.2, versions 10.7.0, 10.8.0, 10.9.0, 11.0.0, and 11.1.0, and TIBCO Spotfire Server: versions 10.3.11 and below, versions 10.10.0, 10.10.1, 10.10.2, and 10.10.3, versions 10.7.0, 10.8.0, 10.8.1, 10.9.0, 11.0.0, and 11.1.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2021/03/tibco-security-advisory-march-9-2021-tibco-spotfire
CVE ID: CVE-2021-23274 State: PUBLISHED Published: 2021-03-23T16:55:12.144724Z Last Updated: 2024-09-16T21:58:25.614Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO API Exchange Gateway, TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric Problem Types: The impact of this vulnerability includes the theoretical possibility that an attacker gains full administrative access to the affected system. Description: The Config UI component of TIBCO Software Inc.'s TIBCO API Exchange Gateway and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows an unauth
O API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A successful attack using this vulnerability does not require human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO API Exchange Gateway: versions 2.3.3 and below and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric: versions 2.3.3 and below. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2021/03/tibco-se
ferences: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2021/03/tibco-security-advisory-march-23-2021-tibco-api-exchange-gateway
CVE ID: CVE-2021-23275 State: PUBLISHED Published: 2021-06-29T17:15:10.796514Z Last Updated: 2024-09-16T20:53:10.445Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: TIBCO Software Inc. Products: TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server, TIBCO Spotfire Statistics Services Problem Types: The impact of this vulnerability includes the possibility of an attacker gaining full access to the Windows operating system at the privilege level of the affected component. Description: The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition
Description: The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server, TIBCO Spotfire Server, TIBCO Spotfire Server, TIBCO Spotfire Statistics Services, TIBCO Spotfire Statistics Services, and TIBCO Spotfire Statistics Services contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software
s operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from a lack of access restrictions on certain files and/or folders in the installation. Affected releases are TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition: versions 1.2.4 and below, TIBCO Enterprise Runtime for R - Server Edition: versions 1.3.0 and 1.3.1, TIBCO Enterprise Runtime for R - Server Edition: versions 1.4.0, 1.5.0, and 1.6.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions 11.3.0 and below, TIBCO Spotfire Server: versions 10
.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions 11.3.0 and below, TIBCO Spotfire Server: versions 10.3.12 and below, TIBCO Spotfire Server: versions 10.4.0, 10.5.0, 10.6.0, 10.6.1, 10.7.0, 10.8.0, 10.8.1, 10.9.0, 10.10.0, 10.10.1, 10.10.2, 10.10.3, and 10.10.4, TIBCO Spotfire Server: versions 11.0.0, 11.1.0, 11.2.0, and 11.3.0, TIBCO Spotfire Statistics Services: versions 10.3.0 and below, TIBCO Spotfire Statistics Services: versions 10.10.0, 10.10.1, and 10.10.2, and TIBCO Spotfire Statistics Services: versions 11.1.0, 11.2.0, and 11.3.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.
lyst Notes: - CVE Program Container: References: - http://www.tibco.com/services/support/advisories - https://www.tibco.com/support/advisories/2021/06/tibco-security-advisory-june-29-2021-tibco-spotfire-2021-23275
CVE ID: CVE-2021-23276 State: PUBLISHED Published: 2021-04-13T18:03:08.524940Z Last Updated: 2024-09-17T02:22:03.243Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Eaton Products: Intelligent Power manager (IPM) Problem Types: CWE-89 Description: Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to exploit the vulnerability. Successful exploitation of this vulnerability can allow attackers to add users in the data base. Additional Analyst Notes: - CVE Program Container: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/
tes: - CVE Program Container: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf
CVE ID: CVE-2021-23277 State: PUBLISHED Published: 2021-04-13T18:04:16.126158Z Last Updated: 2024-09-16T18:38:30.132Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Eaton Products: Intelligent Power manager (IPM) Problem Types: CWE-95 Description: Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The software does not neutralize code syntax from users before using in the dynamic evaluation call in loadUserFile function under scripts/libs/utils.js. Successful exploitation can allow attackers to control the input to the function and execute attacker controlled commands. Additional Analyst Notes: -
low attackers to control the input to the function and execute attacker controlled commands. Additional Analyst Notes: - CVE Program Container: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf
CVE ID: CVE-2021-23278 State: PUBLISHED Published: 2021-04-13T18:02:51.932357Z Last Updated: 2024-09-16T20:11:36.112Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: Eaton Products: Intelligent Power manager (IPM) Problem Types: CWE-20 Description: Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at server/maps_srv.js with action removeBackground and server/node_upgrade_srv.js with action removeFirmware. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed. Additional Analyst Notes: - CVE Pro
y crafted packets to delete the files on the system where IPM software is installed. Additional Analyst Notes: - CVE Program Container: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf
CVE ID: CVE-2021-23279 State: PUBLISHED Published: 2021-04-13T18:03:26.395946Z Last Updated: 2024-09-16T17:18:54.414Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: Eaton Products: Intelligent Power manager (IPM) Problem Types: CWE-20 Description: Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in meta_driver_srv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed. Additional Analyst Notes: - CVE Program Container: References:
the files on the system where IPM software is installed. Additional Analyst Notes: - CVE Program Container: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf
CVE ID: CVE-2021-23280 State: PUBLISHED Published: 2021-04-13T18:04:34.985878Z Last Updated: 2024-09-16T17:24:07.762Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Eaton Products: Intelligent Power manager (IPM) Problem Types: CWE-434 Description: Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js allows an attacker to upload a malicious NodeJS file using uploadBackgroud action. An attacker can upload a malicious code or execute any command using a specially crafted packet to exploit the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://
y crafted packet to exploit the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf
CVE ID: CVE-2021-23281 State: PUBLISHED Published: 2021-04-13T18:03:54.932478Z Last Updated: 2024-09-17T02:41:57.724Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Eaton Products: Intelligent Power manager (IPM) Problem Types: CWE-94 Description: Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action in meta_driver_srv.js class. Attackers can send a specially crafted packet to make IPM connect to rouge SNMP server and execute attacker-controlled code. Additional Analyst Notes: - CVE Program Container: References:
o rouge SNMP server and execute attacker-controlled code. Additional Analyst Notes: - CVE Program Container: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf
CVE ID: CVE-2021-23282 State: PUBLISHED Published: 2024-11-25T08:36:19.141Z Last Updated: 2024-11-25T13:57:58.441Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H) Vendors: Eaton Products: Intelligent Power Manager (IPM) Problem Types: CWE-79 Description: Eaton Intelligent Power Manager (IPM) prior to 1.70 is vulnerable to stored Cross site scripting. The vulnerability exists due to insufficient validation of input from certain resources by the IPM software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.eaton.com/content/dam/eaton
mise the system Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-Vulnerability-Advisory_1001a_V1.0.pdf
CVE ID: CVE-2021-23283 State: PUBLISHED Published: 2022-04-19T20:26:41.123099Z Last Updated: 2024-09-17T02:46:39.591Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H) Vendors: Eaton Products: Eaton Intelligent Power Protector (IPP) Problem Types: CWE-79 Description: Eaton Intelligent Power Protector (IPP) prior to version 1.69 is vulnerable to stored Cross Site Scripting. The vulnerability exists due to insufficient validation of user input and improper encoding of the output for certain resources within the IPP software. Additional Analyst Notes: - CVE Program Container: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/securit
CVE Program Container: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Protector-Vulnerability-Advisory_1001b_V1.0.pdf
CVE ID: CVE-2021-23284 State: PUBLISHED Published: 2022-04-18T16:20:32.573926Z Last Updated: 2024-09-17T01:31:40.742Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H) Vendors: Eaton Products: Intelligent Power Manager Infrastructure (IPM Infrastructure) Problem Types: CWE-79 Description: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to Stored Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0plus205 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.eato
rsion 1.5.0plus205 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-%28IPM%29-Infrastructure-Vulnerability-Advisory_1001c_V1.0.pdf - https://www.eaton.com/content/dam/eaton/products/backup-power-ups-surge-it-power-distribution/power-management-software-connectivity/eaton-intelligent-power-manager/software/ipm-understand-edition-emea/eaton-ipminfra-eolmemo-en-us.pdf.
CVE ID: CVE-2021-23285 State: PUBLISHED Published: 2022-04-18T16:20:31.667003Z Last Updated: 2024-09-16T22:41:39.422Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N) Vendors: Eaton Products: Intelligent Power Manager Infrastructure (IPM Infrastructure) Problem Types: CWE-79 Description: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to reflected Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0plus205 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.eato
CVE ID: CVE-2021-23286 State: PUBLISHED Published: 2022-04-18T16:20:33.351388Z Last Updated: 2024-09-17T00:41:59.713Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H) Vendors: Eaton Products: Intelligent Power Manager Infrastructure (IPM Infrastructure) Problem Types: CWE-1236 Description: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection. This issue affects: Eaton Intelligent Power Manager Infrastructure (IPM Infrastructure) all version 1.5.0plus205 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.eaton.com/content/dam/
and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-%28IPM%29-Infrastructure-Vulnerability-Advisory_1001c_V1.0.pdf - https://www.eaton.com/content/dam/eaton/products/backup-power-ups-surge-it-power-distribution/power-management-software-connectivity/eaton-intelligent-power-manager/software/ipm-understand-edition-emea/eaton-ipminfra-eolmemo-en-us.pdf.
CVE ID: CVE-2021-23287 State: PUBLISHED Published: 2022-04-01T22:17:33.721749Z Last Updated: 2024-09-16T20:59:12.709Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H) Vendors: Eaton Products: Intelligent Power Manager (IPM 1) Problem Types: CWE-79 Description: The vulnerability exists due to insufficient validation of input of certain resources within the IPM software. This issue affects: Intelligent Power Manager (IPM 1) versions prior to 1.70. Additional Analyst Notes: - CVE Program Container: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-Vulnerability-Advisory_1002a_V1.0.
ompany/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Manager-Vulnerability-Advisory_1002a_V1.0.pdf
CVE ID: CVE-2021-23288 State: PUBLISHED Published: 2022-04-01T22:17:34.614203Z Last Updated: 2024-09-16T19:14:44.585Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:H) Vendors: Eaton Products: Intelligent Power Protector Problem Types: CWE-79 Description: The vulnerability exists due to insufficient validation of input from certain resources by the IPP software. The attacker would need access to the local Subnet and an administrator interaction to compromise the system. This issue affects: Intelligent Power Protector versions prior to 1.69. Additional Analyst Notes: - CVE Program Container: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cyb
Analyst Notes: - CVE Program Container: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton-Intelligent-Power-Protector-Vulnerability-Advisory_1002b_V1.0.pdf
CVE ID: CVE-2021-23326 State: PUBLISHED Published: 2021-01-20T12:30:15.626791Z Last Updated: 2024-09-17T02:15:33.530Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: n/a Products: @graphql-tools/git-loader Problem Types: Command Injection Description: This affects the package @graphql-tools/git-loader before 6.2.6. The use of exec and execSync in packages/loaders/git/src/load-git.ts allows arbitrary command injection. Additional Analyst Notes: - CVE Program Container: References: - https://snyk.io/vuln/SNYK-JS-GRAPHQLTOOLSGITLOADER-1062543 - https://github.com/ardatan/graphql-tools/commit/6a966beee8ca8b2f4adfe93318b96e4a5c501eac - https://github.com/ardatan/