Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-36336 State: PUBLISHED Published: 2021-12-21T17:05:26.467437Z Last Updated: 2024-09-16T19:24:32.413Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-502 Description: Wyse Management Suite 3.3.1 and below versions contain a deserialization vulnerability that could allow an unauthenticated attacker to execute code on the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000193079
CVE ID: CVE-2021-36337 State: PUBLISHED Published: 2021-12-21T17:05:27.861830Z Last Updated: 2024-09-17T00:32:21.587Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-326 Description: Dell Wyse Management Suite version 3.3.1 and prior support insecure Transport Security Protocols TLS 1.0 and TLS 1.1 which are susceptible to Man-In-The-Middle attacks thereby compromising Confidentiality and Integrity of data. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000193079
CVE ID: CVE-2021-36338 State: PUBLISHED Published: 2022-01-21T20:15:17.003707Z Last Updated: 2024-09-16T22:01:34.577Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N) Vendors: Dell Products: Unisphere for PowerMax Problem Types: CWE-602 Description: Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000194640
CVE ID: CVE-2021-36339 State: PUBLISHED Published: 2022-01-21T20:15:18.596269Z Last Updated: 2024-09-17T01:56:29.302Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Solutions Enabler vApp Problem Types: CWE-250 Description: The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this vulnerability to get privileged access to the virtual appliance. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000194640
CVE ID: CVE-2021-36340 State: PUBLISHED Published: 2021-11-20T01:40:28.638289Z Last Updated: 2024-09-16T22:41:07.450Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Secure Connect Gateway (SCG) 5.0 Application Problem Types: CWE-532 Description: Dell EMC SCG 5.00.00.10 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and use it. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193601/dsa-2021-245-dell-emc-secure-connect-gateway-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2021-36341 State: PUBLISHED Published: 2021-12-21T17:05:29.215137Z Last Updated: 2024-09-16T16:22:44.734Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Dell Wyse Device Agent Problem Types: CWE-200 Description: Dell Wyse Device Agent version 14.5.4.1 and below contain a sensitive data exposure vulnerability. A local authenticated user with low privileges could potentially exploit this vulnerability in order to access sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193151
CVE ID: CVE-2021-36342 State: PUBLISHED Published: 2022-01-24T20:10:18.115935Z Last Updated: 2024-09-16T18:34:09.570Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-119 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240
CVE ID: CVE-2021-36343 State: PUBLISHED Published: 2022-01-24T20:10:19.520370Z Last Updated: 2024-09-16T16:44:04.277Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-119 Description: Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193321/dsa-2021-240
CVE ID: CVE-2021-36346 State: PUBLISHED Published: 2022-01-25T22:15:25.190440Z Last Updated: 2024-09-16T22:25:50.686Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-287 Description: Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to deny access to the iDRAC webserver. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000194038/dsa-2021-259
CVE ID: CVE-2021-36347 State: PUBLISHED Published: 2022-01-25T22:15:26.543038Z Last Updated: 2024-09-16T19:45:40.208Z Severity: MEDIUM (CVSS 6.2 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-121 Description: iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated remote attacker with high privileges could potentially exploit this vulnerability to control process execution and gain access to the iDRAC operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kb
iDRAC operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000194038
CVE ID: CVE-2021-36348 State: PUBLISHED Published: 2022-01-25T22:15:27.980239Z Last Updated: 2024-09-17T02:21:22.197Z Severity: MEDIUM (CVSS 5.9 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-89 Description: iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to iDRAC. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000194038
CVE ID: CVE-2021-36349 State: PUBLISHED Published: 2022-01-24T20:10:20.884923Z Last Updated: 2024-09-17T03:33:00.547Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: Data Protection Central Problem Types: CWE-918 Description: Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the DPC DNS client processing. A remote malicious user could potentially exploit this vulnerability, allowing port scanning of external hosts. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000195103
CVE ID: CVE-2021-36350 State: PUBLISHED Published: 2021-12-21T17:05:30.703143Z Last Updated: 2024-09-17T02:27:29.534Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Dell Products: PowerScale OneFS Problem Types: Other Description: Dell PowerScale OneFS, versions 8.2.2-9.3.0.x, contain an authentication bypass by primary weakness in one of the authentication factors. A remote unauthenticated attacker may potentially exploit this vulnerability and bypass one of the factors of authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000194157
CVE ID: CVE-2021-36351 State: PUBLISHED Published: 2021-08-06T13:08:23 Last Updated: 2024-08-04T00:54:51.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection Vulnerability in Care2x Open Source Hospital Information Management 2.7 Alpha via the (1) pday, (2) pmonth, and (3) pyear parameters in GET requests sent to /modules/nursing/nursing-station.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50165 - https://securityforeveryone.com/blog/care2x-hospital-information-management-system-0-day-vulnerability-cve-2021-36351
CVE ID: CVE-2021-36352 State: PUBLISHED Published: 2021-08-26T13:23:16 Last Updated: 2024-08-04T00:54:51.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored cross-site scripting (XSS) vulnerability in Care2x Hospital Information Management 2.7 Alpha. The vulnerability has found POST requests in /modules/registration_admission/patient_register.php page with "name_middle", "addr_str", "station", "name_maiden", "name_2", "name_3" parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50197 - https://securityforeveryone.com/blog/care2x-hospital-information-management-system-0-day-vulnerability-cve-2021-36352
CVE ID: CVE-2021-36356 State: PUBLISHED Published: 2021-08-31T03:45:11 Last Updated: 2024-08-04T00:54:51.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePathAjax.php accepts arbitrary executable pathnames (even though browseSystemFiles.php is no longer reachable via the GUI). NOTE: this issue exists because of an incomplete fix for CVE-2019-17124. Additional Analyst Notes: - CVE Program Container: References: - https://write-up.github.io/kramerav/ - http://packetstormsecurity.com/files/166623/Kramer-VIAware-Remote-Code-Execution.html
CVE ID: CVE-2021-36357 State: PUBLISHED Published: 2021-10-22T11:14:43 Last Updated: 2024-08-04T00:54:51.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenPOWER 2.6 firmware. unpack_timestamp() calls le32_to_cpu() for endian conversion of a uint16_t "year" value, resulting in a type mismatch that can truncate a higher integer value to a smaller one, and bypass a timestamp check. The fix is to use the right endian conversion function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/open-power/skiboot/commit/5be38b672c1410e2f10acd3ad2eecfdc81d5daf7
CVE ID: CVE-2021-36359 State: PUBLISHED Published: 2021-08-30T04:42:27 Last Updated: 2024-08-04T00:54:51.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: OrbiTeam BSCW Classic before 7.4.3 allows exportpdf authenticated remote code execution (RCE) via XML tag injection because reportlab\platypus\paraparser.py (reached via bscw.cgi op=_editfolder.EditFolder) calls eval on attacker-supplied Python code. This is fixed in 5.0.12, 5.1.10, 5.2.4, 7.3.3, and 7.4.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.bscw.de/en/company/ - http://seclists.org/fulldisclosure/2021/Aug/23 - http://packetstormsecurity.com/files/163988/BSCW-Server-XML-Injection.html
CVE ID: CVE-2021-36363 State: PUBLISHED Published: 2021-09-28T16:50:25 Last Updated: 2024-08-04T00:54:51.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI before 5.8.5 has Incorrect Permission Assignment for migrate.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT
CVE ID: CVE-2021-36364 State: PUBLISHED Published: 2021-09-28T16:52:09 Last Updated: 2024-08-04T00:54:51.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI before 5.8.5 incorrectly allows backup_xi.sh wildcards. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT
CVE ID: CVE-2021-36365 State: PUBLISHED Published: 2021-09-28T16:53:34 Last Updated: 2024-08-04T00:54:51.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI before 5.8.5 has Incorrect Permission Assignment for repairmysql.sh. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT
CVE ID: CVE-2021-36366 State: PUBLISHED Published: 2021-09-28T16:54:31 Last Updated: 2024-08-04T00:54:51.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI before 5.8.5 incorrectly allows manage_services.sh wildcards. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://assets.nagios.com/downloads/nagiosxi/CHANGES-5.TXT
CVE ID: CVE-2021-36367 State: PUBLISHED Published: 2021-07-09T00:00:00 Last Updated: 2024-08-04T00:54:51.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response. This makes it easier for an attacker-controlled SSH server to present a later spoofed authentication prompt (that the attacker can use to capture credential data, and use that data for purposes that are undesired by the client user). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html - https://git.tar
- CVE Program Container: References: - https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html - https://git.tartarus.org/?p=simon/putty.git%3Ba=commit%3Bh=1dc5659aa62848f0aeb5de7bd3839fecc7debefa - https://www.debian.org/security/2023/dsa-5588 - https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html
CVE ID: CVE-2021-36368 State: PUBLISHED Published: 2022-03-12T23:24:35 Last Updated: 2024-08-04T00:54:51.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option, then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server, or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is "this is not an authentication by
to connect to a different server on the user's behalf. NOTE: the vendor's position is "this is not an authentication bypass, since nothing is being bypassed. Additional Analyst Notes: - CVE Program Container: References: - https://www.openssh.com/security.html - https://github.com/openssh/openssh-portable/pull/258 - https://bugzilla.mindrot.org/show_bug.cgi?id=3316 - https://docs.ssh-mitm.at/trivialauth.html - https://security-tracker.debian.org/tracker/CVE-2021-36368
CVE ID: CVE-2021-36369 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-15T18:45:40.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2 tokens or SSH-Askpass. Thus, it allows an attacker to abuse a forwarded agent for logging on to another server unnoticed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com
unnoticed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/mkj/dropbear/pull/128 - https://github.com/mkj/dropbear/releases - https://github.com/mkj/dropbear/releases/tag/DROPBEAR_2022.82 - https://lists.debian.org/debian-lts-announce/2022/11/msg00015.html
CVE ID: CVE-2021-36370 State: PUBLISHED Published: 2021-08-30T18:37:23 Last Updated: 2024-08-04T00:54:51.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify its authenticity. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MidnightCommander/mc/blob/master/src/vfs/sftpfs/connection.c - https://github.com/MidnightCommander/mc/blob/5c1d3c55dd15356ec7d079084d904b7b0fd58d3e/src/vfs/sftpfs/connection.c#L484 - https://
ithub.com/MidnightCommander/mc/blob/5c1d3c55dd15356ec7d079084d904b7b0fd58d3e/src/vfs/sftpfs/connection.c#L484 - https://sourceforge.net/projects/mcwin32/files/ - https://midnight-commander.org/ - https://docs.ssh-mitm.at/CVE-2021-36370.html - https://mail.gnome.org/archives/mc-devel/2021-August/msg00008.html
CVE ID: CVE-2021-36371 State: PUBLISHED Published: 2021-07-09T20:19:45 Last Updated: 2024-08-04T00:54:51.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emissary-Ingress (formerly Ambassador API Gateway) through 1.13.9 allows attackers to bypass client certificate requirements (i.e., mTLS cert_required) on backend upstreams when more than one TLSContext is defined and at least one configuration exists that does not require client certificate authentication. The attacker must send an SNI specifying an unprotected backend and an HTTP Host header specifying a protected backend. (2.x versions are unaffected. 1.x versions are unaffected with certain configuration settings involvin
rotected backend. (2.x versions are unaffected. 1.x versions are unaffected with certain configuration settings involving prune_unreachable_routes and a wildcard Host resource.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/emissary-ingress/emissary/issues/3340 - https://github.com/emissary-ingress/emissary/releases/tag/v2.0.0-ea
CVE ID: CVE-2021-36372 State: PUBLISHED Published: 2021-11-19T09:20:16 Last Updated: 2024-08-04T00:54:51.493Z Vendors: Apache Software Foundation Products: Apache Ozone Problem Types: CWE-273 Description: In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata database and can be retrieved with authenticated users with permission to the key. Authenticated users may use them even after access is revoked. Additional Analyst Notes: - CVE Program Container: References: - https://mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3C5029c1ac-4685-8492-e3cb-ab48c5c370cf%40apache.org%3E - http://www.openwall.com/lists/oss-security/2021/11/19/1
CVE ID: CVE-2021-36373 State: PUBLISHED Published: 2021-07-14T06:20:11 Last Updated: 2024-08-04T00:54:51.488Z Vendors: Apache Software Foundation Products: Apache Ant Problem Types: CWE-130 Description: When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected. Additional Analyst Notes: - CVE Program Container: References: - https://ant.apache.org/security.html - https://lists.apache.org/thread.html/r54afdab05e01de970649c2d91a993f68a6b00cd73e6e34e16c832d46%40%3Cuser
security.html - https://lists.apache.org/thread.html/r54afdab05e01de970649c2d91a993f68a6b00cd73e6e34e16c832d46%40%3Cuser.ant.apache.org%3E - https://lists.apache.org/thread.html/r27919fd4db07c487239c1d9771f480d89ce5ee2750aa9447309b709a%40%3Ccommits.groovy.apache.org%3E - https://lists.apache.org/thread.html/r544c9e8487431768465b8b2d13982c75123109bd816acf839d46010d%40%3Ccommits.groovy.apache.org%3E - https://lists.apache.org/thread.html/rad36f470647c5a7c02dd78c9973356d2840766d132b597b6444e373a%40%3Cnotifications.groovy.apache.org%3E - https://lists.apache.org/thread.html/rf4bb79751a02889623195715925e4fd8932dd3c97e0ade91395a96c6%40%3Cdev.myfaces.apache.org%3E - https://www.oracle.com/security-
bb79751a02889623195715925e4fd8932dd3c97e0ade91395a96c6%40%3Cdev.myfaces.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2021.html - https://security.netapp.com/advisory/ntap-20210819-0007/ - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-36374 State: PUBLISHED Published: 2021-07-14T06:20:12 Last Updated: 2024-08-04T00:54:51.456Z Vendors: Apache Software Foundation Products: Apache Ant Problem Types: CWE-130 Description: When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected. Additional Analyst Notes: - CVE Program Container: References: - https://ant.apache.org/securit
d 1.10.11 were affected. Additional Analyst Notes: - CVE Program Container: References: - https://ant.apache.org/security.html - https://lists.apache.org/thread.html/rdd5412a5b9a25aed2a02c3317052d38a97128314d50bc1ed36e81d38%40%3Cuser.ant.apache.org%3E - https://lists.apache.org/thread.html/r27919fd4db07c487239c1d9771f480d89ce5ee2750aa9447309b709a%40%3Ccommits.groovy.apache.org%3E - https://lists.apache.org/thread.html/r544c9e8487431768465b8b2d13982c75123109bd816acf839d46010d%40%3Ccommits.groovy.apache.org%3E - https://lists.apache.org/thread.html/rad36f470647c5a7c02dd78c9973356d2840766d132b597b6444e373a%40%3Cnotifications.groovy.apache.org%3E - https://lists.apache.org/thread.html/rf4bb79751
3356d2840766d132b597b6444e373a%40%3Cnotifications.groovy.apache.org%3E - https://lists.apache.org/thread.html/rf4bb79751a02889623195715925e4fd8932dd3c97e0ade91395a96c6%40%3Cdev.myfaces.apache.org%3E - https://www.oracle.com/security-alerts/cpuoct2021.html - https://security.netapp.com/advisory/ntap-20210819-0007/ - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-36376 State: PUBLISHED Published: 2021-07-13T12:27:15 Last Updated: 2024-08-04T00:54:51.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: dandavison delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dandavison/delta/commit/f01846bd443aaf92fdd5ac20f461beac3f6ee3fd - https://vuln.ryotak.me/advisories/54 - https://github.com/dandavison/delta/releases/tag/0.8.3
CVE ID: CVE-2021-36377 State: PUBLISHED Published: 2021-07-12T12:11:49 Last Updated: 2024-08-04T00:54:51.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fossil before 2.14.2 and 2.15.x before 2.15.2 often skips the hostname check during TLS certificate validation. Additional Analyst Notes: - CVE Program Container: References: - https://fossil-scm.org/forum/forumpost/8d367e16f53d93c789d70bd3bf2c9587227bbd5c6a7b8e512cccd79007536036 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JBTRZ5HCOUTIIKJF3T37NORI4P7EVYCY/
CVE ID: CVE-2021-36379 State: REJECTED Published: 2021-08-03T13:34:46 Last Updated: 2021-08-03T13:34:46 Description: No description available.