Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
l/rd85f87e559ee27e9c69795e3ad93a77621895e0328ea3df41d711d72%40%3Coak-commits.jackrabbit.apache.org%3E - https://lists.apache.org/thread.html/ref84e60192f4bdc3206b247f260513e8d4e71f3e200792f75386d07a%40%3Cdev.jackrabbit.apache.org%3E - https://lists.apache.org/thread.html/r7151081abab92a827a607205c4260b0a3d22280b52d15bc909177608%40%3Coak-issues.jackrabbit.apache.org%3E - https://lists.apache.org/thread.html/r8d35eeb9a470d2682b5bcf3be0b8942faa7e28f9ca5861c058d17fff%40%3Coak-issues.jackrabbit.apache.org%3E
CVE ID: CVE-2021-29263 State: PUBLISHED Published: 2021-05-11T11:30:48 Last Updated: 2024-08-03T22:02:51.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains IntelliJ IDEA 2020.3.3, local code execution was possible because of insufficient checks when getting the project from VCS. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-29264 State: PUBLISHED Published: 2021-03-26T21:35:57 Last Updated: 2024-08-03T22:02:51.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is enabled, aka CID-d8861bab48b6. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=d8861bab48b6c1fc3cdbcab8ff9d1eaea43afe7f - h
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=d8861bab48b6c1fc3cdbcab8ff9d1eaea43afe7f - https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
CVE ID: CVE-2021-29265 State: PUBLISHED Published: 2021-03-26T21:35:37 Last Updated: 2024-08-03T22:02:51.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.11.7. usbip_sockfd_store in drivers/usb/usbip/stub_dev.c allows attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status, aka CID-9380afd6df70. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=9380afd6df70e24eacbdbde33afc6a3950965d22 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.7 - h
/commit/?id=9380afd6df70e24eacbdbde33afc6a3950965d22 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.7 - https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
CVE ID: CVE-2021-29266 State: PUBLISHED Published: 2021-03-26T21:35:17 Last Updated: 2024-08-03T22:02:51.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after-free because v->config_ctx has an invalid value upon re-opening a character device, aka CID-f6bbf0010ba0. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f6bbf0010ba004f5e90c7aefdebc0ee4bd3283b9 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.9 - https://security.netapp.com/advisory/ntap-20210513-0005/
CVE ID: CVE-2021-29267 State: PUBLISHED Published: 2021-03-29T15:05:05 Last Updated: 2024-08-03T22:02:51.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature. Additional Analyst Notes: - CVE Program Container: References: - https://sherlockim.ae - https://github.com/Security-AVS/CVE-2021-29267
CVE ID: CVE-2021-29271 State: PUBLISHED Published: 2021-03-27T17:57:06 Last Updated: 2024-08-03T22:02:51.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: remark42 before 1.6.1 allows XSS, as demonstrated by "Locator: Locator{URL:" followed by an XSS payload. This is related to backend/app/store/comment.go and backend/app/store/service/service.go. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/umputun/remark42/compare/v1.6.0...v1.6.1 - https://vuln.ryotak.me/advisories/19
CVE ID: CVE-2021-29272 State: PUBLISHED Published: 2021-03-27T17:57:28 Last Updated: 2024-08-03T22:02:51.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: bluemonday before 1.0.5 allows XSS because certain Go lowercasing converts an uppercase Cyrillic character, defeating a protection mechanism against the "script" string. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/microcosm-cc/bluemonday/releases/tag/v1.0.5 - https://vuln.ryotak.me/advisories/4
CVE ID: CVE-2021-29274 State: PUBLISHED Published: 2021-03-29T03:46:59 Last Updated: 2024-08-03T22:02:51.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip. Additional Analyst Notes: - CVE Program Container: References: - https://www.redmine.org/projects/redmine/wiki/Security_Advisories - https://www.redmine.org/issues/33846
CVE ID: CVE-2021-29279 State: PUBLISHED Published: 2021-04-19T19:34:08 Last Updated: 2024-08-03T22:02:51.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: There is a integer overflow in function filter_core/filter_props.c:gf_props_assign_value in GPAC 1.0.1. In which, the arg const GF_PropertyValue *value,maybe value->value.data.size is a negative number. In result, memcpy in gf_props_assign_value failed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1718 - https://github.com/gpac/gpac/commit/da69ad1f970a7e17c865eaec9af98cc84df10d5b
CVE ID: CVE-2021-29280 State: PUBLISHED Published: 2021-08-19T15:31:55 Last Updated: 2024-08-03T22:02:51.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow Additional Analyst Notes: - CVE Program Container: References: - https://github.com/deadlysnowman3308/upgraded-ARP-Poisoning - https://hackingvila.wordpress.com/2021/04/28/upgraded-arp-poisoning-tool/
CVE ID: CVE-2021-29281 State: PUBLISHED Published: 2022-07-07T19:38:54 Last Updated: 2024-08-03T22:02:51.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317. Additional Analyst Notes: - CVE Program Container: References: - https://cwe.mitre.org/data/definitions/434.html - https://owasp.org/www-community/vulnerabilities/Unrestricted_File_Upload - https://www.gfi.com/products-and-solutions/network-security-solutions/gfi-archiver - https://aminbohio.com/gfi-mail-archiver-15-1-telerik-ui-component-
d-solutions/network-security-solutions/gfi-archiver - https://aminbohio.com/gfi-mail-archiver-15-1-telerik-ui-component-arbitrary-file-upload-unauthenticated-exploit/ - https://www.exploit-db.com/exploits/50181
CVE ID: CVE-2021-29294 State: PUBLISHED Published: 2021-08-10T19:32:49 Last Updated: 2024-08-03T22:02:51.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference vulnerability exists in D-Link DSL-2740R UK_1.01, which could let a remove malicious user cause a denial of service via the send_hnap_unauthorized function. It could be triggered by sending crafted POST request to /HNAP1/. NOTE: The DSL-2740R and all hardware revisions are considered End of Life and as such this issue will not be patched Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/announcement/p
ner: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10213
CVE ID: CVE-2021-29295 State: PUBLISHED Published: 2021-08-10T19:38:00 Last Updated: 2024-08-03T22:02:51.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL in the start line directly to the device. NOTE: The DSP-W215 and all hardware revisions is considered End of Life and as such this issue will not be patched Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/ann
gram Container: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10211
CVE ID: CVE-2021-29296 State: PUBLISHED Published: 2021-08-10T19:52:06 Last Updated: 2024-08-03T22:02:51.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerability could be triggered by sending an HTTP request with URL /vct_wan; the sbin/httpd would invoke the strchr function and take NULL as a first argument, which finally leads to the segmentation fault. NOTE: The DIR-825 and all hardware revisions is considered End of Life and as such this issue will not be patched Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contai
Life and as such this issue will not be patched Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10212
CVE ID: CVE-2021-29297 State: PUBLISHED Published: 2021-07-30T18:20:50 Last Updated: 2024-08-03T22:02:51.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack to the component "FrameworX.exe" in the module "MSVCR100.dll". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/boofish/GE_Proficy_Machine_Edition_vul - https://github.com/boofish/GE_Proficy_Machine_Edition_vul/blob/main/vul1/vul1_steps.pdf
CVE ID: CVE-2021-29298 State: PUBLISHED Published: 2021-07-30T18:20:59 Last Updated: 2024-08-03T22:02:51.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack to the component "FrameworX.exe"in the module "fxVPStatcTcp.dll". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/boofish/GE_Proficy_Machine_Edition_vul - https://github.com/boofish/GE_Proficy_Machine_Edition_vul/blob/main/vul2/vul2_steps.pdf
CVE ID: CVE-2021-29300 State: PUBLISHED Published: 2021-05-24T15:42:01 Last Updated: 2024-08-03T22:02:51.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: The @ronomon/opened library before 1.5.2 is vulnerable to a command injection vulnerability which would allow a remote attacker to execute commands on the system if the library was used with untrusted input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ronomon/opened/commit/7effe011d4fea8fac7f78c00615e0a6e69af68ec - https://advisory.checkmarx.net/advisory/CX-2021-4775
CVE ID: CVE-2021-29302 State: PUBLISHED Published: 2021-04-12T17:47:02 Last Updated: 2024-08-03T22:02:51.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-WR802N(US), Archer_C50v5_US v4_200 <= 2020.06 contains a buffer overflow vulnerability in the httpd process in the body message. The attack vector is: The attacker can get shell of the router by sending a message through the network, which may lead to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-29302 - https://static.tp-link.com/beta/2021/202103/20210319/TL-WR802Nv4_US_0.9.1_3.17_up_boot%5B210317-rel64474%5D.zip
-29302 - https://static.tp-link.com/beta/2021/202103/20210319/TL-WR802Nv4_US_0.9.1_3.17_up_boot%5B210317-rel64474%5D.zip - https://www.tp-link.com/us/support/download/tl-wr802n/#Firmware
CVE ID: CVE-2021-29313 State: PUBLISHED Published: 2021-08-17T18:11:57 Last Updated: 2024-08-03T22:02:51.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability exists in SeaCMS 12.6 via the (1) v_company and (2) v_tvs parameters in /admin_video.php, Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ciweiin/seacms/issues/14
CVE ID: CVE-2021-29323 State: PUBLISHED Published: 2021-11-19T16:39:34 Last Updated: 2024-08-03T22:02:51.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow via the component /modules/network/wifi/esp/modwifi.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Moddable-OpenSource/moddable/issues/5
CVE ID: CVE-2021-29324 State: PUBLISHED Published: 2021-11-19T16:39:34 Last Updated: 2024-08-03T22:02:51.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSource Moddable v10.5.0 was discovered to contain a stack overflow via the component /moddable/xs/sources/xsScript.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Moddable-OpenSource/moddable/issues/586
CVE ID: CVE-2021-29325 State: PUBLISHED Published: 2021-11-19T16:39:36 Last Updated: 2024-08-03T22:02:51.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_String_prototype_repeat function at /moddable/xs/sources/xsString.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Moddable-OpenSource/moddable/issues/582
CVE ID: CVE-2021-29326 State: PUBLISHED Published: 2021-11-19T16:39:37 Last Updated: 2024-08-03T22:02:51.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxIDToString function at /moddable/xs/sources/xsSymbol.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Moddable-OpenSource/moddable/issues/583
CVE ID: CVE-2021-29327 State: PUBLISHED Published: 2021-11-19T16:39:38 Last Updated: 2024-08-03T22:02:51.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_ArrayBuffer function at /moddable/xs/sources/xsDataView.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Moddable-OpenSource/moddable/issues/580
CVE ID: CVE-2021-29328 State: PUBLISHED Published: 2021-11-19T16:39:39 Last Updated: 2024-08-03T22:02:51.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Moddable-OpenSource/moddable/issues/585
CVE ID: CVE-2021-29329 State: PUBLISHED Published: 2021-11-19T16:39:40 Last Updated: 2024-08-03T22:02:51.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSource Moddable v10.5.0 was discovered to contain a stack overflow in the fxBinaryExpressionNodeDistribute function at /moddable/xs/sources/xsTree.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Moddable-OpenSource/moddable/issues/587
CVE ID: CVE-2021-29334 State: PUBLISHED Published: 2022-11-23T00:00:00.000Z Last Updated: 2025-04-29T16:01:18.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JIZHI CMS 1.9.4. There is a CSRF vulnerability that can add an admin account via index, /admin.php/Admin/adminadd.html Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gist.github.com/yinfei6/17bbeece7cf5a8f9c31f7a517d85b247
CVE ID: CVE-2021-29337 State: PUBLISHED Published: 2021-06-21T11:44:12 Last Updated: 2024-08-03T22:02:51.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access kernel memory and potentially escalate privileges via a crafted IOCTL 0x9c406104 call. This IOCTL provides the MmMapIoSpace feature for mapping physical memory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/rjt-gupta/CVE-2021-29337
CVE ID: CVE-2021-29338 State: PUBLISHED Published: 2021-04-14T13:52:26.000Z Last Updated: 2025-11-03T19:25:43.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occurs when the attacker uses the command line option "-ImgDir" on a directory that contains 1048576 files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uclouvain/openjpeg/issues/1338 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/ - https://lists.fedoraproject.org/archives/l
nnounce%40lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/ - https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html - https://security.gentoo.org/glsa/202209-04
CVE ID: CVE-2021-29343 State: PUBLISHED Published: 2021-03-30T11:26:08 Last Updated: 2024-08-03T22:02:51.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ovidentia CMS 6.x contains a SQL injection vulnerability in the "id" parameter of index.php. The "checkbox" property into "text" data can be extracted and displayed in the text region or in source code. Additional Analyst Notes: - CVE Program Container: References: - http://ovidentia.org - https://www.exploit-db.com/exploits/49707
CVE ID: CVE-2021-29349 State: PUBLISHED Published: 2021-03-31T22:31:41 Last Updated: 2024-08-03T22:02:51.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mahara 20.10 is affected by Cross Site Request Forgery (CSRF) that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. An attacker can craft a module/multirecipientnotification/inbox.php pieform_delete_all_notifications request, which leads to removing all messages from a mailbox. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/0xBaz/CVE-2021-29349/issues/1
CVE ID: CVE-2021-29350 State: PUBLISHED Published: 2021-04-29T15:12:04 Last Updated: 2024-08-03T22:02:51.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection in the getip function in conn/function.php in 发货100-设计素材下载系统 1.1 allows remote attackers to inject arbitrary SQL commands via the X-Forwarded-For header to admin/product_add.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/XD-519/Doc/blob/main/sql%20injection.md
CVE ID: CVE-2021-29357 State: PUBLISHED Published: 2021-04-12T18:59:08 Last Updated: 2024-08-03T22:02:51.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 (and LifeTime management console before 11.7.0) allows SSRF for arbitrary outbound HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://success.outsystems.com/Support/Security/Vulnerabilities/Vulnerability_RTAF-2226 - https://labs.integrity.pt/advisories/cve-2021-29357/
CVE ID: CVE-2021-29358 State: PUBLISHED Published: 2021-09-28T15:27:29 Last Updated: 2024-08-03T22:02:51.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in FORMATS!ReadPVR_W+0xfa of Irfanview 4.57 allows attackers to cause a denial of service (DOS) via a crafted PVR file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE ID: CVE-2021-29360 State: PUBLISHED Published: 2021-09-28T15:27:30 Last Updated: 2024-08-03T22:02:51.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x37a of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE ID: CVE-2021-29361 State: PUBLISHED Published: 2021-09-28T15:27:31 Last Updated: 2024-08-03T22:02:51.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x340 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE ID: CVE-2021-29362 State: PUBLISHED Published: 2021-09-28T15:27:32 Last Updated: 2024-08-03T22:02:51.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa30 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE ID: CVE-2021-29363 State: PUBLISHED Published: 2021-09-28T15:27:33 Last Updated: 2024-08-03T22:02:51.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa74 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.0xa74 Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE ID: CVE-2021-29364 State: PUBLISHED Published: 2021-09-28T15:27:34 Last Updated: 2024-08-03T22:02:51.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in Formats!ReadRAS_W+0x1001 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE ID: CVE-2021-29365 State: PUBLISHED Published: 2021-09-28T15:27:36 Last Updated: 2024-08-03T22:02:51.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCrop_W component. This can cause a denial of service (DOS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE ID: CVE-2021-29366 State: PUBLISHED Published: 2021-09-28T15:27:35 Last Updated: 2024-08-03T22:02:51.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in FORMATS!GetPlugInInfo+0x2de9 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE ID: CVE-2021-29367 State: PUBLISHED Published: 2021-09-28T15:27:40 Last Updated: 2024-08-03T22:02:51.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in WPG+0x1dda of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted WPG file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moshekaplan/Research/tree/main/IrfanView