Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-31643 State: PUBLISHED Published: 2021-06-01T14:16:12 Last Updated: 2024-08-03T23:03:33.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS vulnerability exists in several IoT devices from CHIYU Technology, including SEMAC, Biosense, BF-630, BF-631, and Webpass due to a lack of sanitization on the component if.cgi - username parameter. Additional Analyst Notes: - CVE Program Container: References: - https://seguranca-informatica.pt/dancing-in-the-iot-chiyu-devices-vulnerable-to-remote-attacks/ - https://www.chiyu-tech.com/msg/message-Firmware-update-87.html - https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-2021-31643 -
ware-update-87.html - https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-2021-31643 - http://packetstormsecurity.com/files/162887/CHIYU-IoT-Cross-Site-Scripting.html
CVE ID: CVE-2021-31645 State: PUBLISHED Published: 2022-07-07T18:42:40 Last Updated: 2024-08-03T23:03:33.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in glFTPd 2.11a that allows remote attackers to cause a denial of service via exceeding the connection limit. Additional Analyst Notes: - CVE Program Container: References: - https://glftpd.io/ - https://www.exploit-db.com/exploits/49773
CVE ID: CVE-2021-31646 State: PUBLISHED Published: 2021-04-26T18:07:19 Last Updated: 2024-08-03T23:03:33.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gestsup before 3.2.10 allows account takeover through the password recovery functionality (remote). The affected component is the file forgot_pwd.php - it uses a weak algorithm for the generation of password recovery tokens (the PHP uniqueid function), allowing a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - https://gestsup.fr/index.php?page=download - https://dojo.maltem.ca/public/advisories/CVE-2021-31646.html - https://gestsup.fr/index.php?page=download&channel=beta&version=3.2.10&typ
em.ca/public/advisories/CVE-2021-31646.html - https://gestsup.fr/index.php?page=download&channel=beta&version=3.2.10&type=patch
CVE ID: CVE-2021-31649 State: PUBLISHED Published: 2021-06-24T15:07:26 Last Updated: 2024-08-03T23:03:33.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: In applications using jfinal 4.9.08 and below, there is a deserialization vulnerability when using redis,may be vulnerable to remote code execute Additional Analyst Notes: - CVE Program Container: References: - http://note.youdao.com/noteshare?id=787ccbb8345dbd4a905aebe35f1d8aa8&sub=6C5C072C901949429EFD978405212FA4 - https://note.youdao.com/ynoteshare1/index.html?id=787ccbb8345dbd4a905aebe35f1d8aa8&type=note
CVE ID: CVE-2021-31650 State: PUBLISHED Published: 2022-12-16T00:00:00.000Z Last Updated: 2025-04-21T14:16:22.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability in Sourcecodester Online Grading System 1.0 allows remote attackers to execute arbitrary SQL commands via the uname parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/49493
CVE ID: CVE-2021-31651 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-22T14:39:40.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in neofarg-cms 0.2.3 allows remoate attacker to run arbitrary code via the copyright field in copyright settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/NeoFrag/NeoFrag/issues/92
CVE ID: CVE-2021-31655 State: PUBLISHED Published: 2021-08-10T12:54:13 Last Updated: 2024-08-03T23:03:33.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in TRENDnet TV-IP110WN V1.2.2.64 V1.2.2.65 V1.2.2.68 via the profile parameter. in a GET request in view.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://trendnet.com - http://tv-ip110wn.com - https://github.com/yinfeidi/Vuls/blob/main/TRENDnet%20TV-IP110WN/CVE-2021-31655.md
CVE ID: CVE-2021-31658 State: PUBLISHED Published: 2021-06-10T14:24:19 Last Updated: 2024-08-03T23:03:33.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index error. The interface that provides the "device description" function only judges the length of the received data, and does not filter special characters. This vulnerability will cause the application to crash, and all device configuration information will be erased. Additional Analyst Notes: - CVE Program Container: References: - http://tp-link.com - https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-31658
CVE ID: CVE-2021-31659 State: PUBLISHED Published: 2021-06-10T14:27:07 Last Updated: 2024-08-03T23:03:33.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery (CSRF). All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the password of the switch to be modified and the configuration file to be tampered with. Additional Analyst Notes: - CVE Program Container: References: - http://tp-link.com - https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-31659
CVE ID: CVE-2021-31660 State: PUBLISHED Published: 2021-06-18T21:50:06 Last Updated: 2024-08-03T23:03:33.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: RIOT-OS 2021.01 before commit 85da504d2dc30188b89f44c3276fc5a25b31251f contains a buffer overflow which could allow attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RIOT-OS/RIOT/pull/15947 - https://github.com/RIOT-OS/RIOT/commit/85da504d2dc30188b89f44c3276fc5a25b31251f
CVE ID: CVE-2021-31661 State: PUBLISHED Published: 2021-06-18T21:49:53 Last Updated: 2024-08-03T23:03:33.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: RIOT-OS 2021.01 before commit 609c9ada34da5546cffb632a98b7ba157c112658 contains a buffer overflow that could allow attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RIOT-OS/RIOT/pull/15945 - https://github.com/RIOT-OS/RIOT/commit/609c9ada34da5546cffb632a98b7ba157c112658
CVE ID: CVE-2021-31662 State: PUBLISHED Published: 2021-06-18T21:49:46 Last Updated: 2024-08-03T23:03:33.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: RIOT-OS 2021.01 before commit 07f1254d8537497552e7dce80364aaead9266bbe contains a buffer overflow which could allow attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RIOT-OS/RIOT/pull/15930 - https://github.com/RIOT-OS/RIOT/commit/07f1254d8537497552e7dce80364aaead9266bbe
CVE ID: CVE-2021-31663 State: PUBLISHED Published: 2021-06-18T21:49:35 Last Updated: 2024-08-03T23:03:33.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: RIOT-OS 2021.01 before commit bc59d60be60dfc0a05def57d74985371e4f22d79 contains a buffer overflow which could allow attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RIOT-OS/RIOT/issues/15927 - https://github.com/RIOT-OS/RIOT/pull/15929 - https://github.com/RIOT-OS/RIOT/commit/bc59d60be60dfc0a05def57d74985371e4f22d79
CVE ID: CVE-2021-31664 State: PUBLISHED Published: 2021-06-18T21:49:27 Last Updated: 2024-08-03T23:03:33.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: RIOT-OS 2021.01 before commit 44741ff99f7a71df45420635b238b9c22093647a contains a buffer overflow which could allow attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/RIOT-OS/RIOT/pull/15345 - https://github.com/RIOT-OS/RIOT/commit/44741ff99f7a71df45420635b238b9c22093647a
CVE ID: CVE-2021-31671 State: PUBLISHED Published: 2021-04-27T02:43:32 Last Updated: 2024-08-03T23:03:33.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ankane/pgsync/issues/121
CVE ID: CVE-2021-31673 State: PUBLISHED Published: 2022-05-01T23:08:58 Last Updated: 2024-08-03T23:03:33.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Dom-based Cross-site scripting (XSS) vulnerability at registration account in Cyclos 4 PRO.14.7 and before allows remote attackers to inject arbitrary web script or HTML via the groupId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://cyclos.com - https://tf1t.gitbook.io/mycve/cylos/cyclos-4.14.7-dom-based-cross-site-scripting-cve-2021-31673 - http://packetstormsecurity.com/files/167040/Cyclos-4.14.7-Cross-Site-Scripting.html
CVE ID: CVE-2021-31674 State: PUBLISHED Published: 2022-05-01T23:06:02 Last Updated: 2024-08-03T23:03:33.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote unauthenticated attacker to execute javascript code via undefine enum constant. Additional Analyst Notes: - CVE Program Container: References: - http://cyclos.com - https://tf1t.gitbook.io/mycve/cylos/cyclos-4.14.7-dom-based-cross-site-scripting-in-undefined-enum-cve-2021-31674 - https://www.exploit-db.com/exploits/50908
CVE ID: CVE-2021-31676 State: PUBLISHED Published: 2022-07-06T12:16:10 Last Updated: 2024-08-03T23:03:33.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruction. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/two-kisses/pescms_vulnerability%2C - https://github.com/lazyphp/PESCMS-TEAM/issues/7 - https://github.com/RO6OTXX/pescms_vulnerability
CVE ID: CVE-2021-31677 State: PUBLISHED Published: 2022-07-06T12:16:15 Last Updated: 2024-08-03T23:03:33.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/two-kisses/pescms_vulnerability%2C - https://github.com/lazyphp/PESCMS-TEAM/issues/7%2C - https://github.com/RO6OTXX/pescms_vulnerability
CVE ID: CVE-2021-31678 State: PUBLISHED Published: 2022-07-06T12:17:51 Last Updated: 2024-08-03T23:03:33.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import information about a user's company. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/lazyphp/PESCMS-TEAM/issues/7 - https://github.com/two-kisses/pescms_vulnerability - https://github.com/RO6OTXX/pescms_vulnerability
CVE ID: CVE-2021-31679 State: PUBLISHED Published: 2022-07-06T12:16:20 Last Updated: 2024-08-03T23:03:33.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other members' account numbers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/two-kisses/pescms_vulnerability%2C - https://github.com/lazyphp/PESCMS-TEAM/issues/7 - https://github.com/RO6OTXX/pescms_vulnerability
CVE ID: CVE-2021-31680 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-22T14:38:36.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary code via crafted yaml file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/1-other-yolov5/
CVE ID: CVE-2021-31681 State: PUBLISHED Published: 2023-07-31T00:00:00 Last Updated: 2024-10-22T14:37:58.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/1-other-yolov3/
CVE ID: CVE-2021-31682 State: PUBLISHED Published: 2021-10-22T11:24:40 Last Updated: 2024-08-03T23:03:33.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. This issue impacts versions 6.5 and below. This issue works by passing in a basic XSS payload to a vulnerable GET parameter that is reflected in the output without sanitization. Additional Analyst Notes: - CVE Program Container: References: - https://www.automatedlogic.com/en/products-services/webctrl-building-automation-system/
Program Container: References: - https://www.automatedlogic.com/en/products-services/webctrl-building-automation-system/ - https://github.com/3ndG4me/WebCTRL-OperatorLocale-Parameter-Reflected-XSS - http://packetstormsecurity.com/files/164707/WebCTRL-OEM-6.5-Cross-Site-Scripting.html
CVE ID: CVE-2021-31684 State: PUBLISHED Published: 2021-06-01T00:00:00 Last Updated: 2024-08-03T23:03:33.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/netplex/json-smart-v1/issues/10 - https://github.com/netplex/json-smart-v1/pull/11 - https://github.com/netplex/json-smart-v2/issues/67 - https://github.com/netplex/json-smart-v2/pull/68 - https://www.oracle.com/security-alerts/cpujan2022.html
v2/issues/67 - https://github.com/netplex/json-smart-v2/pull/68 - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpujul2022.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00030.html - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2021-31693 State: PUBLISHED Published: 2022-11-29T00:00:00.000Z Last Updated: 2025-02-13T16:28:01.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 10Web Photo Gallery plugin through 1.5.68 for WordPress allows XSS via album_gallery_id_0, bwg_album_search_0, and type_0 for bwg_frontend_data. NOTE: other parameters are covered by CVE-2021-24291, CVE-2021-25041, and CVE-2021-46889. NOTE: VMware information, previously connected to this CVE ID because of a typo, is at CVE-2022-31693. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/162227/WordPress-Photo-Gallery-1.5.69-Cross-Site-Scripting.html
CVE ID: CVE-2021-31698 State: PUBLISHED Published: 2021-08-12T21:33:51 Last Updated: 2024-08-03T23:03:33.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an AT command to place shell metacharacters in quectel_handle_fumo_cfg input in atfwd_daemon. Additional Analyst Notes: - CVE Program Container: References: - https://nns.ee/blog/2021/04/03/modem-rce.html
CVE ID: CVE-2021-31701 State: PUBLISHED Published: 2021-06-06T11:41:54 Last Updated: 2024-08-03T23:03:33.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mintty before 3.4.7 mishandles Bracketed Paste Mode. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mintty/mintty/releases/tag/3.4.7
CVE ID: CVE-2021-31702 State: PUBLISHED Published: 2021-05-29T13:10:08 Last Updated: 2024-08-03T23:03:33.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Frontier ichris through 5.18 mishandles making a DNS request for the hostname in the HTTP Host header, as demonstrated by submitting 127.0.0.1 multiple times for DoS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/l00neyhacker/CVE-2021-31702
CVE ID: CVE-2021-31703 State: PUBLISHED Published: 2021-05-29T13:11:08 Last Updated: 2024-08-03T23:03:33.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Frontier ichris through 5.18 allows users to upload malicious executable files that might later be downloaded and run by any client user. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/l00neyhacker/CVE-2021-31703
CVE ID: CVE-2021-31707 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-18T17:10:22.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Permissions vulnerability found in KiteCMS allows a remote attacker to execute arbitrary code via the upload file type. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Kitesky/KiteCMS/issues/8
CVE ID: CVE-2021-31711 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T14:58:59.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in Trippo ResponsiveFilemanager v.9.14.0 and before allows a remote attacker to execute arbitrary code via the sort_by parameter in the dialog.php file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/trippo/ResponsiveFilemanager/issues/661
CVE ID: CVE-2021-31712 State: PUBLISHED Published: 2021-04-24T20:56:59 Last Updated: 2024-08-03T23:03:33.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: react-draft-wysiwyg (aka React Draft Wysiwyg) before 1.14.6 allows a javascript: URi in a Link Target of the link decorator in decorators/Link/index.js when a draft is shared across users, leading to XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jpuri/react-draft-wysiwyg/issues/1102 - https://github.com/jpuri/react-draft-wysiwyg/pull/1104 - https://github.com/jpuri/react-draft-wysiwyg/commit/d2faeb612b53f10dff048de7dc57e1f4044b5380
CVE ID: CVE-2021-31718 State: PUBLISHED Published: 2021-04-25T18:35:34 Last Updated: 2024-08-03T23:03:33.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading to remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://framagit.org/medoc92/npupnp - https://www.lesbonscomptes.com/upmpdcli/npupnp-doc/libnpupnp.html - http://www.openwall.com/lists/oss-security/2021/04/25/2
CVE ID: CVE-2021-31721 State: PUBLISHED Published: 2021-06-30T10:55:15 Last Updated: 2024-08-03T23:03:33.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage. Additional Analyst Notes: - CVE Program Container: References: - http://chevereto.com - https://www.exploit-db.com/exploits/49859 - http://packetstormsecurity.com/files/164183/Cloudron-6.2-Cross-Site-Scripting.html
CVE ID: CVE-2021-31726 State: PUBLISHED Published: 2021-04-25T18:16:51 Last Updated: 2024-08-03T23:03:33.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Akuvox C315 115.116.2613 allows remote command Injection via the cfgd_server service. The attack vector is sending a payload to port 189 (default root 0.0.0.0). Additional Analyst Notes: - CVE Program Container: References: - https://www.akuvox.com/ProductsDisp.aspx?pid=21 - https://pastebin.com/yv4ajFjD
CVE ID: CVE-2021-31727 State: PUBLISHED Published: 2021-05-17T12:05:50 Last Updated: 2024-08-03T23:03:33.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 where IOCTL's 0x80002014, 0x80002018 expose unrestricted disk read/write capabilities respectively. A non-privileged process can open a handle to \.\ZemanaAntiMalware, register with the driver using IOCTL 0x80002010 and send these IOCTL's to escalate privileges by overwriting the boot sector or overwriting critical code in the pagefile. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/irql0/CVE-2021-31728/b
the pagefile. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/irql0/CVE-2021-31728/blob/master/CVE-2021-31727.md
CVE ID: CVE-2021-31728 State: PUBLISHED Published: 2021-05-17T12:06:57 Last Updated: 2024-08-03T23:03:33.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 allows a non-privileged process to open a handle to \.\ZemanaAntiMalware, register itself with the driver by sending IOCTL 0x80002010, allocate executable memory using a flaw in IOCTL 0x80002040, install a hook with IOCTL 0x80002044 and execute the executable memory using this hook with IOCTL 0x80002014 or 0x80002018, this exposes ring 0 code execution in the context of the driver allowing the non-privileged process to elevate privileges. Ad
exposes ring 0 code execution in the context of the driver allowing the non-privileged process to elevate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/irql0/CVE-2021-31728/blob/master/CVE-2021-31728.md
CVE ID: CVE-2021-31731 State: PUBLISHED Published: 2021-08-12T21:27:02 Last Updated: 2024-08-03T23:03:33.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via ../ in the path parameter to index.php/admin/Template/fileedit, with PHP code in the html parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Kitesky/KiteCMS/issues/9
CVE ID: CVE-2021-31737 State: PUBLISHED Published: 2021-05-06T20:15:31 Last Updated: 2024-08-03T23:03:33.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/emlog/emlog/issues/82
CVE ID: CVE-2021-31738 State: PUBLISHED Published: 2021-06-08T10:50:47 Last Updated: 2024-08-03T23:03:33.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adiscon LogAnalyzer 4.1.10 and 4.1.11 allow login.php XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-024.txt
CVE ID: CVE-2021-31739 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-29T19:17:51.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SEPPmail solution is vulnerable to a Cross-Site Scripting vulnerability (XSS), because user input is not correctly encoded in HTML attributes when returned by the server.SEPPmail 11.1.10 allows XSS via a recipient address. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.pentagrid.ch/en/blog/multiple-vulnerabilities-in-seppmail/