Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-33124 State: PUBLISHED Published: 2022-05-12T16:36:11.000Z Last Updated: 2025-05-05T16:48:56.864Z Vendors: n/a Products: Intel(R) Processors Problem Types: escalation of privilege Description: Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html - https://security.netapp.com/advisory/ntap-20220818-0003/
CVE ID: CVE-2021-33125 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:09.109Z Description: No description available.
CVE ID: CVE-2021-33126 State: PUBLISHED Published: 2022-08-18T19:34:49.000Z Last Updated: 2025-05-05T16:48:48.023Z Vendors: n/a Products: Intel(R) 700 and 722 Series Ethernet Controllers and Adapters Problem Types: denial of service Description: Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html
CVE ID: CVE-2021-33127 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:09.626Z Description: No description available.
CVE ID: CVE-2021-33128 State: PUBLISHED Published: 2022-08-18T19:35:20.000Z Last Updated: 2025-05-05T16:48:37.966Z Vendors: n/a Products: Intel(R) E810 Ethernet Controllers Problem Types: denial of service Description: Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.0.6 may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html
CVE ID: CVE-2021-33129 State: PUBLISHED Published: 2022-02-09T22:04:45.000Z Last Updated: 2025-05-05T16:48:29.075Z Vendors: n/a Products: Intel(R) Advisor Problem Types: escalation of privilege Description: Incorrect default permissions in the software installer for the Intel(R) Advisor before version 2021.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00594.html
CVE ID: CVE-2021-33130 State: PUBLISHED Published: 2022-05-12T16:35:43.000Z Last Updated: 2025-05-05T16:48:19.158Z Vendors: n/a Products: Intel(R) RealSense(TM) ID Solution F450 Problem Types: information disclosure Description: Insecure default variable initialization of Intel(R) RealSense(TM) ID Solution F450 before version 2.6.0.74 may allow an unauthenticated user to potentially enable information disclosure via physical access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00595.html
CVE ID: CVE-2021-33131 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:10.158Z Description: No description available.
CVE ID: CVE-2021-33132 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:10.708Z Description: No description available.
CVE ID: CVE-2021-33133 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:11.250Z Description: No description available.
CVE ID: CVE-2021-33134 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:11.772Z Description: No description available.
CVE ID: CVE-2021-33135 State: PUBLISHED Published: 2022-05-12T16:35:46.000Z Last Updated: 2025-05-05T16:48:09.235Z Vendors: n/a Products: Intel(R) SGX Problem Types: denial of service Description: Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00603.html
CVE ID: CVE-2021-33136 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:12.314Z Description: No description available.
CVE ID: CVE-2021-33137 State: PUBLISHED Published: 2022-02-09T22:04:43.000Z Last Updated: 2025-05-05T16:47:59.913Z Vendors: n/a Products: Intel(R) Kernelflinger project Problem Types: escalation of privilege Description: Out-of-bounds write in the Intel(R) Kernelflinger project may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00591.html
CVE ID: CVE-2021-33138 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:12.963Z Description: No description available.
CVE ID: CVE-2021-33139 State: PUBLISHED Published: 2022-02-09T22:04:44.000Z Last Updated: 2025-05-05T16:47:49.805Z Vendors: n/a Products: Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products Problem Types: denial of service Description: Improper conditions check in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00604.html
CVE ID: CVE-2021-33140 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:13.476Z Description: No description available.
CVE ID: CVE-2021-33141 State: PUBLISHED Published: 2024-05-16T20:47:49.565Z Last Updated: 2024-08-03T23:42:20.023Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware Problem Types: denial of service, CWE-20 Description: Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an unauthenticated user to potentially enable denial of service via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/sec
alyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00756.html
CVE ID: CVE-2021-33142 State: PUBLISHED Published: 2024-05-16T20:47:54.832Z Last Updated: 2024-08-03T23:42:20.013Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware Problem Types: denial of service, CWE-20 Description: Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-ce
tes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00756.html
CVE ID: CVE-2021-33143 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:14.031Z Description: No description available.
CVE ID: CVE-2021-33144 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:14.528Z Description: No description available.
CVE ID: CVE-2021-33145 State: PUBLISHED Published: 2024-05-16T20:47:53.215Z Last Updated: 2024-10-25T19:08:52.277Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware Problem Types: escalation of privilege, CWE-248 Description: Uncaught exception in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/secur
yst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00756.html
CVE ID: CVE-2021-33146 State: PUBLISHED Published: 2024-05-16T20:47:55.627Z Last Updated: 2024-08-03T23:42:19.917Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware Problem Types: information disclosure, CWE-20 Description: Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an unauthenticated user to potentially enable information disclosure via network access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/w
dditional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00756.html
CVE ID: CVE-2021-33147 State: PUBLISHED Published: 2022-02-09T22:04:42.000Z Last Updated: 2025-05-05T16:47:40.441Z Vendors: n/a Products: Intel(R) IPP Crypto library Problem Types: information disclosure Description: Improper conditions check in the Intel(R) IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00600.html
CVE ID: CVE-2021-33148 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:15.089Z Description: No description available.
CVE ID: CVE-2021-33149 State: PUBLISHED Published: 2022-05-12T16:36:05.000Z Last Updated: 2025-05-05T16:47:30.822Z Vendors: n/a Products: Intel(R) Processors Problem Types: information disclosure Description: Observable behavioral discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00648.html - https://security.netapp.com/advisory/ntap-20220818-0002/
CVE ID: CVE-2021-33150 State: PUBLISHED Published: 2022-03-11T17:54:37.000Z Last Updated: 2025-05-05T16:47:21.311Z Vendors: n/a Products: Intel(R) Trace Hub instances which Problem Types: escalation of privilege Description: Hardware allows activation of test or debug logic at runtime for some Intel(R) Trace Hub instances which may allow an unauthenticated user to potentially enable escalation of privilege via physical access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00609.html
CVE ID: CVE-2021-33151 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:15.627Z Description: No description available.
CVE ID: CVE-2021-33152 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:16.145Z Description: No description available.
CVE ID: CVE-2021-33153 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:16.669Z Description: No description available.
CVE ID: CVE-2021-33154 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:17.188Z Description: No description available.
CVE ID: CVE-2021-33155 State: PUBLISHED Published: 2022-02-09T22:04:47.000Z Last Updated: 2025-05-05T16:47:12.297Z Vendors: n/a Products: Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products Problem Types: denial of service Description: Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may allow an authenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00604.html
CVE ID: CVE-2021-33156 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:17.699Z Description: No description available.
CVE ID: CVE-2021-33157 State: PUBLISHED Published: 2024-05-16T20:47:51.150Z Last Updated: 2024-08-03T23:42:19.971Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware Problem Types: escalation of privilege, CWE-691 Description: Insufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/conte
s. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00756.html
CVE ID: CVE-2021-33158 State: PUBLISHED Published: 2024-05-16T20:47:53.987Z Last Updated: 2024-08-03T23:42:20.015Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware Problem Types: escalation of privilege, CWE-86 Description: Improper neutralization in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/s
Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00756.html
CVE ID: CVE-2021-33159 State: PUBLISHED Published: 2022-11-11T15:48:36.704Z Last Updated: 2025-02-05T20:54:08.124Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) AMT Problem Types: escalation of privilege Description: Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html
CVE ID: CVE-2021-33160 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:18.257Z Description: No description available.
CVE ID: CVE-2021-33161 State: PUBLISHED Published: 2024-05-16T20:47:51.901Z Last Updated: 2024-08-03T23:42:19.908Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware Problem Types: escalation of privilege, CWE-20 Description: Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en
l Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00756.html
CVE ID: CVE-2021-33162 State: PUBLISHED Published: 2024-05-16T20:47:50.397Z Last Updated: 2024-08-03T23:42:19.974Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us
onal Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00756.html
CVE ID: CVE-2021-33163 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:18.781Z Description: No description available.
CVE ID: CVE-2021-33164 State: PUBLISHED Published: 2022-11-11T15:48:49.297Z Last Updated: 2024-08-03T23:42:20.052Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) NUCs Problem Types: escalation of privilege Description: Improper access control in BIOS firmware for some Intel(R) NUCs before version INWHL357.0046 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html
CVE ID: CVE-2021-33165 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:19.342Z Description: No description available.
CVE ID: CVE-2021-33166 State: PUBLISHED Published: 2022-02-09T22:04:46.000Z Last Updated: 2025-05-05T16:47:03.193Z Vendors: n/a Products: version Problem Types: information disclosure Description: Incorrect default permissions for the Intel(R) RXT for Chromebook application, all versions, may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00599.html
CVE ID: CVE-2021-33167 State: REJECTED Published: N/A Last Updated: 2025-02-13T16:28:19.936Z Description: No description available.
CVE ID: CVE-2021-33175 State: PUBLISHED Published: 2021-06-08T14:31:16 Last Updated: 2024-08-03T23:42:20.215Z Vendors: EMQ Technologies Products: EMQ X Broker Problem Types: CWE-502 Description: EMQ X Broker versions prior to 4.2.8 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory, resulting in the application being terminated by the operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.synopsys.com/blogs/software-security/cyrc-advisory-rabbitmq-emqx-vernemq
CVE ID: CVE-2021-33176 State: PUBLISHED Published: 2021-06-08T14:31:23 Last Updated: 2024-08-03T23:42:20.143Z Vendors: VerneMQ Products: vernemq Problem Types: CWE-502 Description: VerneMQ MQTT Broker versions prior to 1.12.0 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory, resulting in the application being terminated by the operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.synopsys.com/blogs/software-security/cyrc-advisory-rabbitmq-emqx-vernemq
CVE ID: CVE-2021-33177 State: PUBLISHED Published: 2021-10-14T14:55:39 Last Updated: 2024-08-03T23:42:20.048Z Vendors: Nagios Products: Nagios XI Problem Types: CWE-89 Description: The Bulk Modifications functionality in Nagios XI versions prior to 5.8.5 is vulnerable to SQL injection. Exploitation requires the malicious actor to be authenticated to the vulnerable system, but once authenticated they would be able to execute arbitrary sql queries. Additional Analyst Notes: - CVE Program Container: References: - https://www.synopsys.com/blogs/software-security/cyrc-advisory-nagios-xi
CVE ID: CVE-2021-33178 State: PUBLISHED Published: 2021-10-14T14:56:00.000Z Last Updated: 2025-11-03T19:25:49.435Z Vendors: NagVis Products: NagVis Problem Types: CWE-22 Description: The Manage Backgrounds functionality within NagVis versions prior to 1.9.29 is vulnerable to an authenticated path traversal vulnerability. Exploitation of this results in a malicious actor having the ability to arbitrarily delete files on the local system. Additional Analyst Notes: - CVE Program Container: References: - https://www.synopsys.com/blogs/software-security/cyrc-advisory-nagios-xi - https://nagvis.org/downloads/changelog/1.9.29
CVE ID: CVE-2021-33179 State: PUBLISHED Published: 2021-10-14T14:57:17 Last Updated: 2024-08-03T23:42:20.281Z Vendors: Nagios Products: Nagios XI Problem Types: CWE-79 Description: The general user interface in Nagios XI versions prior to 5.8.4 is vulnerable to authenticated reflected cross-site scripting. An authenticated victim, who accesses a specially crafted malicious URL, would unknowingly execute the attached payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.synopsys.com/blogs/software-security/cyrc-advisory-nagios-xi
CVE ID: CVE-2021-33180 State: PUBLISHED Published: 2021-06-01T09:45:12.077635Z Last Updated: 2024-09-17T03:34:27.324Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Synology Products: Synology Media Server Problem Types: CWE-89 Description: Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_24
CVE ID: CVE-2021-33181 State: PUBLISHED Published: 2021-06-01T09:50:22.302504Z Last Updated: 2024-09-17T03:34:24.558Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: Synology Products: Synology Video Station Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allows remote authenticated users to send arbitrary request to intranet resources via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_21_04
CVE ID: CVE-2021-33182 State: PUBLISHED Published: 2021-06-01T09:50:17.599911Z Last Updated: 2024-09-16T19:05:32.694Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Synology Products: Synology DiskStation Manager (DSM) Problem Types: CWE-22 Description: Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in PDF Viewer component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows remote authenticated users to read limited files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_21_03