Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-32581 State: PUBLISHED Published: 2021-08-05T19:19:41 Last Updated: 2024-08-03T23:25:30.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5 for Mac, Acronis Agent prior to build 26653, Acronis Cyber Protect prior to build 27009 did not implement SSL certificate validation. Additional Analyst Notes: - CVE Program Container: References: - https://kb.acronis.com/content/68419 - https://kb.acronis.com/content/68413 - https://kb.acronis.com/content/68648
CVE ID: CVE-2021-32582 State: PUBLISHED Published: 2021-06-17T11:36:47 Last Updated: 2024-08-03T23:25:30.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses. Additional Analyst Notes: - CVE Program Container: References: - https://www.connectwise.com/platform/unified-management/automate - https://www.connectwise.com/company/trust/security-bulletins - https://home.connectwise.com/securityBulletin/6
utomate - https://www.connectwise.com/company/trust/security-bulletins - https://home.connectwise.com/securityBulletin/609a9dd75cb8450001e85369
CVE ID: CVE-2021-32584 State: PUBLISHED Published: 2025-03-17T13:05:44.978Z Last Updated: 2025-03-17T13:37:26.791Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: Fortinet Products: FortiWLC Problem Types: CWE-284 Description: An improper access control (CWE-284) vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below, version 8.2.7 to 8.2.4, version 8.1.3 may allow an unauthenticated and remote attacker to access certain areas of the web management CGI functionality by just specifying the correct URL. The vulnerability applies only to limited CGI resources and might allow the unauthori
y just specifying the correct URL. The vulnerability applies only to limited CGI resources and might allow the unauthorized party to access configuration details. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-20-138
CVE ID: CVE-2021-32585 State: PUBLISHED Published: 2022-04-06T16:00:40 Last Updated: 2024-10-25T13:32:41.907Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N/E:P/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiWAN Problem Types: Execute unauthorized code or commands Description: An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN before 4.5.9 may allow an attacker to perform a stored cross-site scripting attack via specifically crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-21-078
CVE ID: CVE-2021-32586 State: PUBLISHED Published: 2022-03-01T18:20:10 Last Updated: 2024-10-25T13:35:06.205Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L/E:P/RL:X/RC:X) Vendors: Fortinet Products: Fortinet FortiMail Problem Types: Execute unauthorized code or commands Description: An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-21-008
CVE ID: CVE-2021-32587 State: PUBLISHED Published: 2021-08-06T10:51:07 Last Updated: 2024-10-25T13:51:28.751Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiAnalyzer, FortiManager Problem Types: Improper Access Control Description: An improper access control vulnerability in FortiManager and FortiAnalyzer GUI interface 7.0.0, 6.4.5 and below, 6.2.8 and below, 6.0.11 and below, 5.6.11 and below may allow a remote and authenticated attacker with restricted user profile to retrieve the list of administrative users of other ADOMs and their related configuration. Additional Analyst Notes: - CVE Program Container: -
ministrative users of other ADOMs and their related configuration. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-059
CVE ID: CVE-2021-32588 State: PUBLISHED Published: 2021-08-18T21:30:12 Last Updated: 2024-10-25T13:51:18.114Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C) Vendors: Fortinet Products: Fortinet FortiPortal Problem Types: Authentication bypass, Improper command execution as root Description: A use of hard-coded credentials (CWE-798) vulnerability in FortiPortal versions 5.2.5 and below, 5.3.5 and below, 6.0.4 and below, versions 5.1.x and 5.0.x may allow a remote and unauthenticated attacker to execute unauthorized commands as root by uploading and deploying malicious web application archive files using the default hard-coded Tomcat Manager username a
y uploading and deploying malicious web application archive files using the default hard-coded Tomcat Manager username and password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-077
CVE ID: CVE-2021-32589 State: PUBLISHED Published: 2024-12-19T12:22:32.543Z Last Updated: 2024-12-20T21:55:26.925Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:W/RC:C) Vendors: Fortinet Products: FortiManager, FortiAnalyzer Problem Types: CWE-416 Description: A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.2.10 and below, version 5.0.12 and below and FortiAnalyzer version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below
on 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below, version 5.4.7 and below, version 5.3.11, version 5.2.10 to 5.2.4 fgfmsd daemon may allow a remote, non-authenticated attacker to execute unauthorized code as root via sending a specifically crafted request to the fgfm port of the targeted device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-21-067
CVE ID: CVE-2021-32590 State: PUBLISHED Published: 2021-08-04T13:31:30 Last Updated: 2024-10-25T13:54:01.791Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiPortal Problem Types: Execute unauthorized code or commands Description: Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earlier may allow an attacker with regular user's privileges to execute arbitrary commands on the underlying SQL database via specifically crafted HTTP requests. Additional Analyst Notes: - CVE Program
commands on the underlying SQL database via specifically crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-084
CVE ID: CVE-2021-32591 State: PUBLISHED Published: 2021-12-08T11:56:06 Last Updated: 2024-10-25T13:41:32.379Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:X/RC:X) Vendors: Fortinet Products: Fortinet FortiSandbox Problem Types: <Insert impact here> Description: A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1, FortiWeb before 6.3.12, FortiADC before 6.2.1, FortiMail 7.0.1 and earlier may allow an attacker in possession of the password store to compromise the confidentiality of the encrypted secrets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichme
e the confidentiality of the encrypted secrets. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-20-222
CVE ID: CVE-2021-32592 State: PUBLISHED Published: 2021-12-01T11:27:11 Last Updated: 2024-10-25T13:42:58.082Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiClientWindows, FortiClientEMS Problem Types: Execute unauthorized code or commands Description: An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
engine library in the search path. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-088
CVE ID: CVE-2021-32593 State: PUBLISHED Published: 2022-04-06T09:15:31 Last Updated: 2024-10-25T13:33:43.236Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiWAN Problem Types: Information disclosure Description: A use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow an unauthenticated remote attacker to decrypt and forge protocol communication messages. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-21-070
CVE ID: CVE-2021-32594 State: PUBLISHED Published: 2021-08-04T13:26:46 Last Updated: 2024-10-25T13:54:17.136Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiPortal Problem Types: Unrestricted file upload Description: An unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earlier may allow a low-privileged user to potentially tamper with the underlying system's files via the upload of specifically crafted files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://forti
y crafted files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-092
CVE ID: CVE-2021-32595 State: PUBLISHED Published: 2021-11-02T18:04:20 Last Updated: 2024-10-25T13:47:19.560Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiPortal Problem Types: Denial of service Description: Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a single low-privileged user to induce a denial of service via multiple HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-096
CVE ID: CVE-2021-32596 State: PUBLISHED Published: 2021-08-04T15:35:29 Last Updated: 2024-10-25T13:53:01.640Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N/E:P/RL:W/RC:C) Vendors: Fortinet Products: Fortinet FortiPortal Problem Types: Information disclosure Description: A use of one-way hash with a predictable salt vulnerability in the password storing mechanism of FortiPortal 6.0.0 through 6.04 may allow an attacker already in possession of the password store to decrypt the passwords by means of precomputed tables. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-094
CVE ID: CVE-2021-32597 State: PUBLISHED Published: 2021-08-06T10:48:20 Last Updated: 2024-10-25T13:51:39.369Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:P/RL:X/RC:C) Vendors: Fortinet Products: Fortinet FortiAnalyzer, FortiManager Problem Types: Execute unauthorized code or commands Description: Multiple improper neutralization of input during web page generation (CWE-79) in FortiManager and FortiAnalyzer versions 7.0.0, 6.4.5 and below, 6.2.7 and below user interface, may allow a remote authenticated attacker to perform a Stored Cross Site Scripting attack (XSS) by injecting malicious payload in GET parameters. Additional Analyst Notes: - CVE Program Container
ripting attack (XSS) by injecting malicious payload in GET parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-054
CVE ID: CVE-2021-32598 State: PUBLISHED Published: 2021-08-05T10:35:45 Last Updated: 2024-10-25T13:52:01.552Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:U/RC:R) Vendors: Fortinet Products: Fortinet FortiAnalyzer, FortiManager Problem Types: Execute unauthorized code or commands Description: An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability In FortiManager and FortiAnalyzer GUI 7.0.0, 6.4.6 and below, 6.2.8 and below, 6.0.11 and below, 5.6.11 and below may allow an authenticated and remote attacker to perform an HTTP request splitting attack which gives attackers control of the remaining headers and body
te attacker to perform an HTTP request splitting attack which gives attackers control of the remaining headers and body of the response. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-063
CVE ID: CVE-2021-32600 State: PUBLISHED Published: 2021-11-17T11:36:23 Last Updated: 2024-10-25T13:43:09.416Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N/E:F/RL:X/RC:X) Vendors: Fortinet Products: Fortinet FortiOS Problem Types: Information disclosure Description: An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x and 5.6.x may allow a local and authenticated user assigned to a specific VDOM to retrieve other VDOMs information such as the admin account list and the network interface list. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Reference
st and the network interface list. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-20-243
CVE ID: CVE-2021-32601 State: REJECTED Published: N/A Last Updated: 2025-04-25T15:26:55.786Z Description: No description available.
CVE ID: CVE-2021-32602 State: PUBLISHED Published: 2021-08-18T23:40:25 Last Updated: 2024-10-25T13:51:06.466Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiPortal Problem Types: Cross-site scripting Description: An improper neutralization of input during web page generation vulnerability (CWE-79) in FortiPortal GUI 6.0.4 and below, 5.3.6 and below, 5.2.6 and below, 5.1.2 and below, 5.0.3 and below, 4.2.2 and below, 4.1.2 and below, 4.0.4 and below may allow a remote and unauthenticated attacker to perform an XSS attack via sending a crafted request with an invalid lang parameter or with an invalid org.springfr
er to perform an XSS attack via sending a crafted request with an invalid lang parameter or with an invalid org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE value. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-20-066
CVE ID: CVE-2021-32603 State: PUBLISHED Published: 2021-08-05T10:41:00 Last Updated: 2024-10-25T13:51:51.308Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C) Vendors: Fortinet Products: Fortinet FortiAnalyzer, FortiManager Problem Types: Execute unauthorized code or commands Description: A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and below, 6.2.7 and below, 6.0.11 and below, 5.6.11 and below may allow a remote and authenticated attacker to access unauthorized files and services on the system via specifically crafted web requests. Additional Analyst Notes: - CVE Program Container: - CISA
services on the system via specifically crafted web requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-050
CVE ID: CVE-2021-32604 State: PUBLISHED Published: 2021-05-11T22:16:43 Last Updated: 2024-08-03T23:25:30.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Share/IncomingWizard.htm in SolarWinds Serv-U before 15.2.3 mishandles the user-supplied SenderEmail parameter, aka "Share URL XSS." Additional Analyst Notes: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-3_release_notes.htm - https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/solarwinds-serv-u-1523-share-url-xss-cve-2021-32604/ - https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=29000
CVE ID: CVE-2021-32605 State: PUBLISHED Published: 2021-05-11T22:25:03 Last Updated: 2024-08-03T23:25:30.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: zzzcms zzzphp before 2.0.4 allows remote attackers to execute arbitrary OS commands by placing them in the keys parameter of a ?location=search URI, as demonstrated by an OS command within an "if" "end if" block. Additional Analyst Notes: - CVE Program Container: References: - https://srcincite.io/advisories/src-2021-0015/ - http://www.zzzcms.com/a/news/31_282_1.html
CVE ID: CVE-2021-32606 State: PUBLISHED Published: 2021-05-11T00:00:00 Last Updated: 2024-08-03T23:25:30.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. (This does not affect earlier versions that lack CAN ISOTP SF_BROADCAST support.) Additional Analyst Notes: - CVE Program Container: References: - https://www.openwall.com/lists/oss-security/2021/05/11/16 - http://www.openwall.com/lists/oss-security/2021/05/12/1 - http://www.openwall.com/lists/oss-security/2021/05/13/2 - http://www.openwall.com/lists/oss-security/2021/05/14/1 - https
ttp://www.openwall.com/lists/oss-security/2021/05/13/2 - http://www.openwall.com/lists/oss-security/2021/05/14/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HD3NJBG25AADVGPRC63RX2JOQBMPSWK4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GI7Z7UBWBGD3ABNIL2DC7RQDCGA4UVQW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/73D53S4IZFPFQMRABMXXLW4AJK3EULDX/ - http://www.openwall.com/lists/oss-security/2021/05/28/1 - https://security.netapp.com/advisory/ntap-20210625-0001/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commi
security.netapp.com/advisory/ntap-20210625-0001/ - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2b17c400aeb44daf041627722581ade527bb3c1d
CVE ID: CVE-2021-32607 State: PUBLISHED Published: 2021-05-12T14:43:27 Last Updated: 2024-08-03T23:25:30.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/PrivateMessages/View.cshtml does not call HtmlUtils.SanitizeHtml on a private message. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/smartstore/SmartStoreNET/commit/5b4e60ae7124df0898975cb8f994f9f23db1fae3 - https://blog.sonarsource.com/smartstorenet-malicious-message-leading-to-e-commerce-takeover/
CVE ID: CVE-2021-32608 State: PUBLISHED Published: 2021-05-12T14:43:16 Last Updated: 2024-08-03T23:25:30.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/Boards/Partials/_ForumPost.cshtml does not call HtmlUtils.SanitizeHtml on certain text for a forum post. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/smartstore/SmartStoreNET/commit/ae03d45e23734555a2aef0b0c3d33c21e076c20f - https://blog.sonarsource.com/smartstorenet-malicious-message-leading-to-e-commerce-takeover/
CVE ID: CVE-2021-32609 State: PUBLISHED Published: 2021-10-18T14:30:12 Last Updated: 2024-08-03T23:25:30.488Z Vendors: Apache Software Foundation Products: Apache Superset Problem Types: CWE-79 Description: Apache Superset up to and including 1.1 does not sanitize titles correctly on the Explore page. This allows an attacker with Explore access to save a chart with a malicious title, injecting html (including scripts) into the page. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r2c09254e98b4f8b3deb422762bd0e2aa6d743b72d96c2f90cbaae31a%40%3Cdev.superset.apache.org%3E
CVE ID: CVE-2021-32610 State: PUBLISHED Published: 2021-07-27T05:21:47 Last Updated: 2024-08-03T23:25:30.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193. Additional Analyst Notes: - CVE Program Container: References: - https://www.drupal.org/sa-core-2021-004 - https://lists.debian.org/debian-lts-announce/2021/07/msg00023.html - https://github.com/pear/Archive_Tar/releases/tag/1.4.14 - https://github.com/pear/Archive_Tar/commit/b5832439b1f37331fb4f87e67fe4f - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproj
commit/b5832439b1f37331fb4f87e67fe4f - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G5LTY6COQYNMMHQJ3QIOJHEWCKD4XDFH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CAODVMHGL5MHQWQAQTXQ7G7OE3VQZ7LS/ - https://github.com/pear/Archive_Tar/commit/7789ebb2f34f9e4adb3a4152ad0d1548930a9755 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VJQQYDAOWHD6RDITDRPHFW7WY6BS3V5N/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42GPGVVFTLJYAKRI75IVB5R45NYQGEUR/
CVE ID: CVE-2021-32611 State: PUBLISHED Published: 2021-05-12T15:15:53 Last Updated: 2024-08-03T23:25:30.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: A NULL pointer dereference vulnerability exists in eXcall_api.c in Antisip eXosip2 through 5.2.0 when handling certain 3xx redirect responses. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.nongnu.org/cgit/exosip.git/commit/?id=f2ed389fe84613512cc560127883e51e6cf8c054
CVE ID: CVE-2021-32612 State: PUBLISHED Published: 2021-06-16T11:53:54 Last Updated: 2024-08-03T23:25:30.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VeryFitPro (com.veryfit2hr.second) application 3.2.8 for Android does all communication with the backend API over cleartext HTTP. This includes logins, registrations, and password change requests. This allows information theft and account takeover via network sniffing. Additional Analyst Notes: - CVE Program Container: References: - https://trovent.io/security-advisory-2105-01 - https://trovent.github.io/security-advisories/TRSA-2105-01/TRSA-2105-01.txt - https://play.google.com/store/apps/details?id=com.veryfit2hr.second
/security-advisories/TRSA-2105-01/TRSA-2105-01.txt - https://play.google.com/store/apps/details?id=com.veryfit2hr.second&hl=en_US&gl=US - http://seclists.org/fulldisclosure/2021/Jun/45