Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-32462 State: PUBLISHED Published: 2021-07-08T10:54:26 Last Updated: 2024-08-03T23:17:29.455Z Vendors: Trend Micro Products: Trend Micro Password Manager Problem Types: Exposed Hazardous Function RCE Description: Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Exposed Hazardous Function Remote Code Execution vulnerability which could allow an unprivileged client to manipulate the registry and escalate privileges to SYSTEM on affected installations. Authentication is required to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10388 - https:
nalyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/TMKA-10388 - https://www.zerodayinitiative.com/advisories/ZDI-21-774/
CVE ID: CVE-2021-32463 State: PUBLISHED Published: 2021-07-20T11:09:57 Last Updated: 2024-08-03T23:17:29.549Z Vendors: Trend Micro Products: Trend Micro Apex One, Trend Micro Worry-Free Business Security Problem Types: Incorrect Permission Assignment Denial-of-Service Description: An incorrect permission assignment denial-of-service vulnerability in Trend Micro Apex One, Apex One as a Service (SaaS), Worry-Free Business Security 10.0 SP1 and Worry-Free Servgices could allow a local attacker to escalate privileges and delete files with system privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in orde
ions. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000286855 - https://success.trendmicro.com/solution/000286856 - https://www.zerodayinitiative.com/advisories/ZDI-21-786/
CVE ID: CVE-2021-32464 State: PUBLISHED Published: 2021-08-04T18:29:36 Last Updated: 2024-08-03T23:17:29.578Z Vendors: Trend Micro Products: Trend Micro Apex One, Trend Micro Worry-Free Business Security Problem Types: Incorrect Permission Assignment Privilege Escalation Description: An incorrect permission assignment privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security Services could allow an attacker to modify a specific script before it is executed. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Pr
cute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000287819 - https://success.trendmicro.com/jp/solution/000287796 - https://success.trendmicro.com/solution/000286857 - https://www.zerodayinitiative.com/advisories/ZDI-21-910/
CVE ID: CVE-2021-32465 State: PUBLISHED Published: 2021-08-04T18:29:37 Last Updated: 2024-08-03T23:17:29.575Z Vendors: Trend Micro Products: Trend Micro Apex One, Trend Micro OfficeScan Problem Types: Incorrect Permission Preservation Authentication Bypass Description: An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass authentication on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References:
he target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000287819 - https://success.trendmicro.com/jp/solution/000287796 - https://www.zerodayinitiative.com/advisories/ZDI-21-911/
CVE ID: CVE-2021-32466 State: PUBLISHED Published: 2021-09-29T10:21:29 Last Updated: 2024-08-03T23:17:29.531Z Vendors: Trend Micro Products: Trend Micro HouseCall for Home Networks Problem Types: CWE-427 Description: An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attacker to escalate privileges by placing a custom crafted file in a specific directory to load a malicious library. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - ht
on the target system to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/tmka-10626 - https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10621 - https://www.zerodayinitiative.com/advisories/ZDI-21-1112/
CVE ID: CVE-2021-32467 State: PUBLISHED Published: 2021-12-25T23:25:19 Last Updated: 2024-08-03T23:17:29.548Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds read). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Mul
iner: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2021-32468 State: PUBLISHED Published: 2021-12-25T23:25:09 Last Updated: 2024-08-03T23:17:29.572Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 7.4.0.0; Out-of-bounds read). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Mul
CVE ID: CVE-2021-32469 State: PUBLISHED Published: 2021-12-25T23:24:52 Last Updated: 2024-08-03T23:17:29.547Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AC:L/AV:N/A:L/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (Affected Chipsets MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915 Affected Software Versions 7.4.0.0; Out-of-bounds read). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Mult
ner: References: - https://kb.netgear.com/000064368/Security-Advisory-for-WiFi-WPS-and-IEEE-1905-Vulnerabilities-on-Multiple-Products-PSV-2021-0298-PSV-2021-0300 - https://corp.mediatek.com/product-security-bulletin/January-2022
CVE ID: CVE-2021-32470 State: PUBLISHED Published: 2021-05-07T17:02:45 Last Updated: 2024-08-03T23:17:29.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Craft CMS before 3.6.13 has an XSS vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/craftcms/cms/commit/f9378aa154b5f9b64bed3d59cce0c4a8184bf5e6 - https://github.com/craftcms/cms/blob/develop/CHANGELOG.md#3613---2021-05-04
CVE ID: CVE-2021-32471 State: PUBLISHED Published: 2021-05-10T04:49:54 Last Updated: 2024-08-03T23:17:29.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing Machine allows program users to execute arbitrary code via crafted data. For example, a tape head may have an unexpected location after the processing of input composed of As and Bs (instead of 0s and 1s). NOTE: the discoverer states "this vulnerability has no real-world implications." Additional Analyst Notes: - CVE Program Container: References: - https://arxiv.org/abs/2105.02124 - https://github.com/intrinsic-propensity/turing-ma
VE Program Container: References: - https://arxiv.org/abs/2105.02124 - https://github.com/intrinsic-propensity/turing-machine
CVE ID: CVE-2021-32472 State: PUBLISHED Published: 2022-03-11T00:00:00 Last Updated: 2024-08-03T23:17:29.547Z Vendors: n/a Products: moodle Problem Types: CWE-862 Description: Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6 and 3.8 to 3.8.8 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=422305
CVE ID: CVE-2021-32473 State: PUBLISHED Published: 2022-03-11T17:54:25 Last Updated: 2024-08-03T23:17:29.551Z Vendors: n/a Products: moodle Problem Types: CWE-200 Description: It was possible for a student to view their quiz grade before it had been released, using a quiz web service. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=422307
CVE ID: CVE-2021-32474 State: PUBLISHED Published: 2022-03-11T17:54:25 Last Updated: 2024-08-03T23:17:29.565Z Vendors: n/a Products: moodle Problem Types: CWE-89 Description: An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer host. Note that this required site administrator access or access to the keypair. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=422308
CVE ID: CVE-2021-32475 State: PUBLISHED Published: 2022-03-11T17:54:24 Last Updated: 2024-08-03T23:17:29.577Z Vendors: n/a Products: moodle Problem Types: CWE-78 Description: ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=422309
CVE ID: CVE-2021-32476 State: PUBLISHED Published: 2022-03-11T00:00:00 Last Updated: 2024-08-03T23:17:29.588Z Vendors: n/a Products: moodle Problem Types: CWE-770 Description: A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=422310
CVE ID: CVE-2021-32477 State: PUBLISHED Published: 2022-03-11T17:54:22 Last Updated: 2024-08-03T23:17:29.548Z Vendors: n/a Products: moodle Problem Types: CWE-200 Description: The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with the relevant capability (site administrators by default). Moodle versions 3.10 to 3.10.3 are affected. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=422313
CVE ID: CVE-2021-32478 State: PUBLISHED Published: 2022-03-11T00:00:00 Last Updated: 2024-08-03T23:17:29.546Z Vendors: n/a Products: moodle Problem Types: CWE-79 Description: The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected. Additional Analyst Notes: - CVE Program Container: References: - https://moodle.org/mod/forum/discuss.php?d=422314
CVE ID: CVE-2021-32481 State: PUBLISHED Published: 2021-11-08T12:21:35 Last Updated: 2024-08-03T23:17:29.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudera Hue 4.6.0 allows XSS via the type parameter. Additional Analyst Notes: - CVE Program Container: References: - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#hue - https://my.cloudera.com/knowledge/TSB-2021-487-Cloudera-Hue-is-vulnerable-to-Cross-Site?id=324634
CVE ID: CVE-2021-32482 State: PUBLISHED Published: 2021-11-08T12:35:21 Last Updated: 2024-08-03T23:17:29.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#cloudera_manager - https://my.cloudera.com/knowledge/TSB-2021-488-Cloudera-Manager-is-vulnerable-to-Cross-Site?id=322833
CVE ID: CVE-2021-32483 State: PUBLISHED Published: 2021-11-08T13:10:53 Last Updated: 2024-08-03T23:17:29.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cloudera Manager 7.2.4 has Incorrect Access Control, allowing Escalation of Privileges to view the restricted Dashboard. Additional Analyst Notes: - CVE Program Container: References: - https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#cloudera_manager - https://my.cloudera.com/knowledge/TSB-2021-491-Authorization-Bypass-in-Cloudera-Manager?id=314482
CVE ID: CVE-2021-32484 State: PUBLISHED Published: 2021-09-09T15:10:14 Last Updated: 2024-08-03T23:17:29.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964917. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/September-2021
CVE ID: CVE-2021-32485 State: PUBLISHED Published: 2021-09-09T15:10:24 Last Updated: 2024-08-03T23:17:29.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964926. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/September-2021
CVE ID: CVE-2021-32486 State: PUBLISHED Published: 2021-09-09T15:10:29 Last Updated: 2024-08-03T23:17:29.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964928. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/September-2021
CVE ID: CVE-2021-32487 State: PUBLISHED Published: 2021-09-09T15:10:36 Last Updated: 2024-08-03T23:17:29.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500736; Issue ID: ALPS04938456. Additional Analyst Notes: - CVE Program Container: References: - https://corp.mediatek.com/product-security-bulletin/September-2021
CVE ID: CVE-2021-32489 State: PUBLISHED Published: 2021-05-10T21:20:49 Last Updated: 2024-08-03T23:17:29.560Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3. The function does not correctly validate the embedded length field of an authenticated message received from the device because response_msg.st.len=8 can be accepted but triggers an integer overflow, which causes CRYPTO_cbc128_decrypt (in OpenSSL) to encounter an undersized buffer and experience a segmentation fault. The yubihsm-shell project is included in
penSSL) to encounter an undersized buffer and experience a segmentation fault. The yubihsm-shell project is included in the YubiHSM 2 SDK product. Additional Analyst Notes: - CVE Program Container: References: - https://blog.inhq.net/posts/yubico-libyubihsm-vuln2/#second-attack-variant-cve-pending
CVE ID: CVE-2021-32490 State: PUBLISHED Published: 2021-06-24T18:18:00 Last Updated: 2024-08-03T23:17:29.578Z Vendors: n/a Products: djvulibre Problem Types: CWE-119 Description: A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu file may lead to application crash and other consequences. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1943693 - https://www.debian.org/security/2021/dsa-5032
CVE ID: CVE-2021-32491 State: PUBLISHED Published: 2021-06-24T18:11:42 Last Updated: 2024-08-03T23:17:29.524Z Vendors: n/a Products: djvulibre Problem Types: CWE-190 Description: A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in tools/ddjvu via crafted djvu file may lead to application crash and other consequences. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1943684 - https://www.debian.org/security/2021/dsa-5032
CVE ID: CVE-2021-32492 State: PUBLISHED Published: 2021-06-24T18:21:02 Last Updated: 2024-08-03T23:17:29.621Z Vendors: n/a Products: djvulibre Problem Types: CWE-119 Description: A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::has_data() via crafted djvu file may lead to application crash and other consequences. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1943686 - https://www.debian.org/security/2021/dsa-5032
CVE ID: CVE-2021-32493 State: PUBLISHED Published: 2021-06-24T18:24:44 Last Updated: 2024-08-03T23:17:29.514Z Vendors: n/a Products: djvulibre Problem Types: CWE-119 Description: A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application crash and other consequences. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1943690 - https://www.debian.org/security/2021/dsa-5032
CVE ID: CVE-2021-32494 State: PUBLISHED Published: 2023-07-07T18:20:40.510Z Last Updated: 2024-11-12T19:47:21.001Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: radare2 Products: radare2 Problem Types: CWE-369 Description: Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/radareorg/radare2/issues/18667 - https://github.com/radareorg/radare2/commit/a07dedb804a82bc01c07072861942dd80c6b6d62
CVE ID: CVE-2021-32495 State: PUBLISHED Published: 2023-07-07T18:27:29.097Z Last Updated: 2024-11-12T19:46:27.537Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: radare2 Products: radare2 Problem Types: CWE-416 Description: Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/radareorg/radare2/issues/18666 - https://github.com/radareorg/radare2/commit/5e16e2d1c9fe245e4c17005d779fde91ec0b9c05
CVE ID: CVE-2021-32496 State: PUBLISHED Published: 2021-06-28T11:02:32 Last Updated: 2024-08-03T23:17:29.551Z Vendors: n/a Products: SICK Visionary-S CX Problem Types: Inadequate SSH configuration in Visionary-S CX Description: SICK Visionary-S CX up version 5.21.2.29154R are vulnerable to an Inadequate Encryption Strength vulnerability concerning the internal SSH interface solely used by SICK for recovering returned devices. The use of weak ciphers make it easier for an attacker to break the security that protects information transmitted from the client to the SSH server, assuming the attacker has access to the network on which the device is connected. This can increase the risk that encryp
assuming the attacker has access to the network on which the device is connected. This can increase the risk that encryption will be compromised, leading to the exposure of sensitive user information and man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories
CVE ID: CVE-2021-32497 State: PUBLISHED Published: 2021-12-17T16:09:59 Last Updated: 2024-08-03T23:17:29.571Z Vendors: n/a Products: SICK SOPAS ET Problem Types: Inclusion of Functionality from Untrusted Control Sphere Description: SICK SOPAS ET before version 4.8.0 allows attackers to wrap any executable file into an SDD and provide this to a SOPAS ET user. When a user starts the emulator the executable is run without further checks. Additional Analyst Notes: - CVE Program Container: References: - https://sick.com/psirt#advisories
CVE ID: CVE-2021-32498 State: PUBLISHED Published: 2021-12-17T16:10:00 Last Updated: 2024-08-03T23:17:29.563Z Vendors: n/a Products: SICK SOPAS ET Problem Types: Improper Limitation of a Pathname to a Restricted Directory Description: SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to run an arbitrary executable located on the host system. When the user starts the emulator from SOPAS ET the corresponding executable will be started instead of the emulator Additional Analyst Notes: - CVE Program Container: References: - https://sick.com/psirt#advisories
CVE ID: CVE-2021-32499 State: PUBLISHED Published: 2021-12-17T16:10:01 Last Updated: 2024-08-03T23:17:29.576Z Vendors: n/a Products: SICK SOPAS ET Problem Types: Acceptance of Extraneous Untrusted Data With Trusted Data Description: SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the command line arguments to pass in any value to the Emulator executable. Additional Analyst Notes: - CVE Program Container: References: - https://sick.com/psirt#advisories
CVE ID: CVE-2021-32500 State: REJECTED Published: 2022-05-02T14:38:24 Last Updated: 2022-05-02T14:38:24 Description: No description available.
CVE ID: CVE-2021-32501 State: REJECTED Published: 2022-03-09T15:14:19 Last Updated: 2022-03-09T15:14:19 Description: No description available.
CVE ID: CVE-2021-32502 State: REJECTED Published: 2022-03-09T15:15:01 Last Updated: 2022-03-09T15:15:01 Description: No description available.