Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-27550 State: PUBLISHED Published: 2021-02-23T14:35:31 Last Updated: 2024-08-03T21:26:09.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Polaris Office v9.102.66 is affected by a divide-by-zero error in PolarisOffice.exe and EngineDLL.dll that may cause a local denial of service. To exploit the vulnerability, someone must open a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/sqrtrev/1f9986d4bdd1393832c60a97b56e170a
CVE ID: CVE-2021-27556 State: PUBLISHED Published: 2021-08-31T02:38:28 Last Updated: 2024-08-03T21:26:09.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cron job tab in EasyCorp ZenTao 12.5.3 allows remote attackers (who have admin access) to execute arbitrary code by setting the type parameter to System. Additional Analyst Notes: - CVE Program Container: References: - https://privasec.com/blog/zentao-cms-a-monkeys-journey-to-priv-esc-remote-code-execution/
CVE ID: CVE-2021-27557 State: PUBLISHED Published: 2021-08-31T02:41:15 Last Updated: 2024-08-03T21:26:09.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site request forgery (CSRF) vulnerability in the Cron job tab in EasyCorp ZenTao 12.5.3 allows attackers to update the fields of a Cron job. Additional Analyst Notes: - CVE Program Container: References: - https://privasec.com/blog/zentao-cms-a-monkeys-journey-to-priv-esc-remote-code-execution/
CVE ID: CVE-2021-27558 State: PUBLISHED Published: 2021-08-31T02:44:27 Last Updated: 2024-08-03T21:26:09.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross site scripting (XSS) issue in EasyCorp ZenTao 12.5.3 allows remote attackers to execute arbitrary web script via various areas such as data-link-creator. Additional Analyst Notes: - CVE Program Container: References: - https://privasec.com/blog/zentao-cms-a-monkeys-journey-to-priv-esc-remote-code-execution/
CVE ID: CVE-2021-27559 State: PUBLISHED Published: 2021-02-22T14:37:46 Last Updated: 2024-08-03T21:26:09.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/monicahq/monica/issues/4888 - https://github.com/monicahq/monica/pull/4543
CVE ID: CVE-2021-27561 State: PUBLISHED Published: 2021-10-15T17:11:45.000Z Last Updated: 2025-10-21T23:25:28.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ssd-disclosure.com/?p=4688
CVE ID: CVE-2021-27562 State: PUBLISHED Published: 2021-05-25T18:27:20.000Z Last Updated: 2025-10-21T23:25:45.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mode. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://developer.arm.com/support/arm-security-updates - https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/tree/docs/security/security_advisories/svc_caller_sp_fetching_vulnerability.rst
CVE ID: CVE-2021-27564 State: PUBLISHED Published: 2021-02-22T16:01:53 Last Updated: 2024-08-03T21:26:10.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored as the group name. Whenever another member visits that group, this payload executes. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/viperbluff/Appspace-Ver-6.2.4-Stored-Xss
CVE ID: CVE-2021-27565 State: PUBLISHED Published: 2021-08-19T11:04:23 Last Updated: 2024-08-03T21:26:09.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server in InterNiche NicheStack through 4.0.1 allows remote attackers to cause a denial of service (infinite loop and networking outage) via an unexpected valid HTTP request such as OPTIONS. This occurs because the HTTP request handler enters a miscoded wbs_loop() debugger hook. Additional Analyst Notes: - CVE Program Container: References: - https://www.hcc-embedded.com/ - https://www.hcc-embedded.com/about/about-interniche - https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-
om/about/about-interniche - https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/ - https://www.kb.cert.org/vuls/id/608209
CVE ID: CVE-2021-27568 State: PUBLISHED Published: 2021-02-23T01:32:14 Last Updated: 2024-08-03T21:26:09.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/netplex/json-smart-v1/issues/7 - https://github.com/netplex/json-smart-v2/issues/60 - https://lists.apache.org/thread.html/rf70210b4d63191c
v1/issues/7 - https://github.com/netplex/json-smart-v2/issues/60 - https://lists.apache.org/thread.html/rf70210b4d63191c0bfb2a0d5745e104484e71703bf5ad9cb01c980c6%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/re237267da268c690df5e1c6ea6a38a7fc11617725e8049490f58a6fa%40%3Ccommits.druid.apache.org%3E - https://lists.apache.org/thread.html/rb6287f5aa628c8d9af52b5401ec6cc51b6fc28ab20d318943453e396%40%3Ccommits.druid.apache.org%3E - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2021-27569 State: PUBLISHED Published: 2021-05-07T16:31:21 Last Updated: 2024-08-03T21:26:09.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Emote Remote Mouse through 4.0.0.0. Attackers can maximize or minimize the window of a running process by sending the process name in a crafted packet. This information is sent in cleartext and is not protected by any authentication logic. Additional Analyst Notes: - CVE Program Container: References: - https://remotemouse.net/blog/ - https://axelp.io/MouseTrap
CVE ID: CVE-2021-27570 State: PUBLISHED Published: 2021-05-07T16:31:28 Last Updated: 2024-08-03T21:26:10.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Emote Remote Mouse through 3.015. Attackers can close any running process by sending the process name in a specially crafted packet. This information is sent in cleartext and is not protected by any authentication logic. Additional Analyst Notes: - CVE Program Container: References: - https://remotemouse.net/blog/ - https://axelp.io/MouseTrap
CVE ID: CVE-2021-27571 State: PUBLISHED Published: 2021-05-07T16:31:34 Last Updated: 2024-08-03T21:26:09.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Emote Remote Mouse through 4.0.0.0. Attackers can retrieve recently used and running applications, their icons, and their file paths. This information is sent in cleartext and is not protected by any authentication logic. Additional Analyst Notes: - CVE Program Container: References: - https://remotemouse.net/blog/ - https://axelp.io/MouseTrap
CVE ID: CVE-2021-27572 State: PUBLISHED Published: 2021-05-07T16:32:29 Last Updated: 2024-08-03T21:26:09.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Emote Remote Mouse through 4.0.0.0. Authentication Bypass can occur via Packet Replay. Remote unauthenticated users can execute arbitrary code via crafted UDP packets even when passwords are set. Additional Analyst Notes: - CVE Program Container: References: - https://remotemouse.net/blog/ - https://axelp.io/MouseTrap
CVE ID: CVE-2021-27573 State: PUBLISHED Published: 2021-05-07T16:32:35 Last Updated: 2024-08-03T21:26:09.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Emote Remote Mouse through 4.0.0.0. Remote unauthenticated users can execute arbitrary code via crafted UDP packets with no prior authorization or authentication. Additional Analyst Notes: - CVE Program Container: References: - https://remotemouse.net/blog/ - https://axelp.io/MouseTrap
CVE ID: CVE-2021-27574 State: PUBLISHED Published: 2021-05-07T16:32:41 Last Updated: 2024-08-03T21:26:09.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Emote Remote Mouse through 4.0.0.0. It uses cleartext HTTP to check, and request, updates. Thus, attackers can machine-in-the-middle a victim to download a malicious binary in place of the real update, with no SSL errors or warnings. Additional Analyst Notes: - CVE Program Container: References: - https://remotemouse.net/blog/ - https://axelp.io/MouseTrap
CVE ID: CVE-2021-27576 State: PUBLISHED Published: 2021-03-15T09:05:17.000Z Last Updated: 2025-02-13T16:27:56.370Z Vendors: Apache Software Foundation Products: Apache OpenMeetings Problem Types: Server bandwidth overload Description: If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server. This issue was addressed in Apache OpenMeetings 6.0.0 Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r9bb615bd70a0197368f5f3ffc887162686caeb0b5fc30592a7a871e9%40%3Cuser.openmeetings.apache.org%3E
CVE ID: CVE-2021-27577 State: PUBLISHED Published: 2021-06-29T11:45:19 Last Updated: 2024-08-03T21:26:09.764Z Vendors: Apache Software Foundation Products: Apache Traffic Server Problem Types: CWE-444 Description: Incorrect handling of url fragment vulnerability of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/ra1a41ff92a70d25bf576d7da2590575e8ff430393a3f4a0c34de4277%40%3Cusers.trafficserver.apache.org%3E - https://www.debian.org/security/2021/dsa-4957
CVE ID: CVE-2021-27578 State: PUBLISHED Published: 2021-09-02T00:00:00 Last Updated: 2024-08-03T21:26:09.867Z Vendors: Apache Software Foundation Products: Apache Zeppelin Problem Types: Cross Site Scripting Description: Cross Site Scripting vulnerability in markdown interpreter of Apache Zeppelin allows an attacker to inject malicious scripts. This issue affects Apache Zeppelin Apache Zeppelin versions prior to 0.9.0. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r90590aa5ea788128ecc2e822e1e64d5200b4cb92b06707b38da4cb3d%40%3Cusers.zeppelin.apache.org%3E - https://lists.apache.org/thread.html/r90590aa5ea788128ecc2e822e1e64d5200b4cb92b06
3d%40%3Cusers.zeppelin.apache.org%3E - https://lists.apache.org/thread.html/r90590aa5ea788128ecc2e822e1e64d5200b4cb92b06707b38da4cb3d%40%3Cusers.zeppelin.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/09/02/3 - https://lists.apache.org/thread.html/r90590aa5ea788128ecc2e822e1e64d5200b4cb92b06707b38da4cb3d%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/r31012f2c8e39a5e12e14c1de030012cb8b51c037d953d73b291b7b50%40%3Cusers.zeppelin.apache.org%3E - https://security.gentoo.org/glsa/202311-04
CVE ID: CVE-2021-27579 State: PUBLISHED Published: 2021-02-23T17:03:46 Last Updated: 2024-08-03T21:26:09.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed and in use across an IT environment. A privilege-escalation vulnerability exists if CPUID is enabled, and thus it should be disabled via configuration settings. Additional Analyst Notes: - CVE Program Container: References: - https://community.snowsoftware.com/s/feed/0D56900009cfHLDCA2
CVE ID: CVE-2021-27581 State: PUBLISHED Published: 2021-03-05T22:29:02 Last Updated: 2024-08-03T21:26:09.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter. Additional Analyst Notes: - CVE Program Container: References: - https://kontent.ai - https://gist.github.com/stasinopoulos/673ae3c31d703b4d67449f4d8888c686 - https://www.obrela.com/kentico-cms-critical-vulnerability/
CVE ID: CVE-2021-27582 State: PUBLISHED Published: 2021-02-23T17:58:39 Last Updated: 2024-08-03T21:26:09.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: org/mitre/oauth2/web/OAuthConfirmationController.java in the OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Mass Assignment (aka Autobinding) vulnerability. This arises due to unsafe usage of the @ModelAttribute annotation during the OAuth authorization flow, in which HTTP request parameters affect an authorizationRequest. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/commit/7eba3c12fed82388f917e8dd9b73e8
References: - https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/commit/7eba3c12fed82388f917e8dd9b73e86e3a311e4c - http://agrrrdog.blogspot.com/2017/03/autobinding-vulns-and-spring-mvc.html - https://portswigger.net/research/hidden-oauth-attack-vectors
CVE ID: CVE-2021-27583 State: PUBLISHED Published: 2021-02-23T18:54:20 Last Updated: 2024-08-03T21:26:10.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Directus 8.x through 8.8.1, an attacker can discover whether a user is present in the database through the password reset feature. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/sgranel/directusv8
CVE ID: CVE-2021-27584 State: PUBLISHED Published: 2021-03-09T14:13:10 Last Updated: 2024-08-03T21:26:10.338Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: When a user opens manipulated PhotoShop Document (.PSD) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpa
Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpad.support.sap.com/#/notes/3027758
CVE ID: CVE-2021-27585 State: PUBLISHED Published: 2021-03-09T14:11:55 Last Updated: 2024-08-03T21:26:09.850Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: When a user opens manipulated Computer Graphics Metafile (.CGM) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://
: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpad.support.sap.com/#/notes/3027758 - https://www.zerodayinitiative.com/advisories/ZDI-21-299/ - https://www.zerodayinitiative.com/advisories/ZDI-21-288/
CVE ID: CVE-2021-27586 State: PUBLISHED Published: 2021-03-09T14:12:54 Last Updated: 2024-08-03T21:26:09.679Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: When a user opens manipulated Interchange File Format (.IFF) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://lau
CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpad.support.sap.com/#/notes/3027758 - https://www.zerodayinitiative.com/advisories/ZDI-21-315/
CVE ID: CVE-2021-27587 State: PUBLISHED Published: 2021-03-09T14:12:40 Last Updated: 2024-08-03T21:26:09.737Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: When a user opens manipulated Jupiter Tessellation (.JT) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchp
Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpad.support.sap.com/#/notes/3027758 - https://www.zerodayinitiative.com/advisories/ZDI-21-310/ - https://www.zerodayinitiative.com/advisories/ZDI-21-312/
CVE ID: CVE-2021-27588 State: PUBLISHED Published: 2021-03-09T14:13:04 Last Updated: 2024-08-03T21:26:09.905Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: When a user opens manipulated HPGL format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpad.support.sap.com/#/n
ferences: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpad.support.sap.com/#/notes/3027758 - https://www.zerodayinitiative.com/advisories/ZDI-21-292/
CVE ID: CVE-2021-27589 State: PUBLISHED Published: 2021-03-09T14:12:08 Last Updated: 2024-08-03T21:26:09.748Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: When a user opens manipulated Scalable Vector Graphics (.SVG) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://la
- CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpad.support.sap.com/#/notes/3027758 - https://www.zerodayinitiative.com/advisories/ZDI-21-306/
CVE ID: CVE-2021-27590 State: PUBLISHED Published: 2021-03-09T14:13:22 Last Updated: 2024-08-03T21:26:09.887Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: When a user opens manipulated Tag Image File Format (.TIFF) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://laun
CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpad.support.sap.com/#/notes/3027758 - https://www.zerodayinitiative.com/advisories/ZDI-21-294/
CVE ID: CVE-2021-27591 State: PUBLISHED Published: 2021-03-09T14:12:16 Last Updated: 2024-08-03T21:26:09.712Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: When a user opens manipulated Portable Document Format (.PDF) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://la
- CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpad.support.sap.com/#/notes/3027758 - https://www.zerodayinitiative.com/advisories/ZDI-21-298/
CVE ID: CVE-2021-27592 State: PUBLISHED Published: 2021-03-09T14:13:57 Last Updated: 2024-08-03T21:26:09.729Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: When a user opens manipulated Universal 3D (.U3D) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpad.support.sap.com/#/not
rences: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpad.support.sap.com/#/notes/3027767 - https://www.zerodayinitiative.com/advisories/ZDI-21-313/ - https://www.zerodayinitiative.com/advisories/ZDI-21-311/ - https://www.zerodayinitiative.com/advisories/ZDI-21-314/
CVE ID: CVE-2021-27593 State: PUBLISHED Published: 2021-03-22T16:58:10 Last Updated: 2024-08-03T21:26:10.346Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: When a user opens manipulated Graphics Interchange Format (.GIF) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpad.suppor
Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpad.support.sap.com/#/notes/3035472
CVE ID: CVE-2021-27594 State: PUBLISHED Published: 2021-03-22T16:58:38 Last Updated: 2024-08-03T21:26:10.245Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: When a user opens manipulated Windows Bitmap (.BMP) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpad.support.sap.com/#/n