Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-32856 State: PUBLISHED Published: 2023-02-20T00:00:00.000Z Last Updated: 2025-03-10T21:08:39.870Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: microweber Products: microweber Problem Types: CWE-79 Description: Microweber is a drag and drop website builder and content management system. Versions 1.2.12 and prior are vulnerable to copy-paste cross-site scripting (XSS). For this particular type of XSS, the victim needs to be fooled into copying a malicious payload into the text editor. A fix was attempted in versions 1.2.9 and 1.2.12, but it is incomplete. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References
and 1.2.12, but it is incomplete. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2021-1005-Microweber/ - https://github.com/microweber/microweber/commit/f3b86d59ab674dbf514f9f9948ddfa091739ab75
CVE ID: CVE-2021-32857 State: PUBLISHED Published: 2023-02-20T00:00:00.000Z Last Updated: 2025-03-10T21:08:33.571Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: microweber Products: microweber Problem Types: CWE-79 Description: Cockpit is a content management system that allows addition of content management functionality to any site. In versions 0.12.2 and prior, bad HTML sanitization in `htmleditor.js` may lead to cross-site scripting (XSS) issues. There are no known patches for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2021-1035_Cockpit_Next/ - htt
ner: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2021-1035_Cockpit_Next/ - https://github.com/agentejo/cockpit/commit/0c6628cbff3e49bc317c97b03a4666b3a75f76cc - https://github.com/agentejo/cockpit/blob/f7cd602bcc6134657ccfeb4e400b0050943dd243/assets/lib/uikit/js/components/htmleditor.js
CVE ID: CVE-2021-32858 State: PUBLISHED Published: 2023-02-20T00:00:00.000Z Last Updated: 2025-03-10T21:08:26.636Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: esdoc Products: esdoc-publish-html-plugin Problem Types: CWE-79 Description: esdoc-publish-html-plugin is a plugin for the document maintenance software ESDoc. TheHTML sanitizer in esdoc-publish-html-plugin 1.1.2 and prior can be bypassed which may lead to cross-site scripting (XSS) issues. There are no known patches for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2021-1034_esdoc-publish-html-pl
r: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2021-1034_esdoc-publish-html-plugin/ - https://github.com/esdoc/esdoc-plugins/blob/2de5022baa569785a189056a99acd1d7ca8284b7/esdoc-publish-html-plugin/src/Builder/util.js#L80
CVE ID: CVE-2021-32859 State: PUBLISHED Published: 2023-02-20T00:00:00.000Z Last Updated: 2025-03-10T21:08:19.969Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Baremetrics Products: baremetrics-calendar Problem Types: CWE-79 Description: The Baremetrics date range picker is a solution for selecting both date ranges and single dates from a single calender view. Versions 1.0.14 and prior are prone to cross-site scripting (XSS) when handling untrusted `placeholder` entries. An attacker who is able to influence the field `placeholder` when creating a `Calendar` instance is able to supply arbitrary `html` or `javascript` that will be rendered in the context of
reating a `Calendar` instance is able to supply arbitrary `html` or `javascript` that will be rendered in the context of a user leading to XSS. There are no known patches for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2021-1042_Baremetrics_Date_Range_Picker/ - https://github.com/Baremetrics/calendar/blob/240c20134ffbf0f0f246a50feff2be1ff19cf349/public/js/Calendar.js#L724
CVE ID: CVE-2021-32860 State: PUBLISHED Published: 2023-02-20T00:00:00.000Z Last Updated: 2025-03-10T21:08:13.362Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: npm Products: iziModal Problem Types: CWE-79 Description: iziModal is a modal plugin with jQuery. Versions prior to 1.6.1 are vulnerable to cross-site scripting (XSS) when handling untrusted modal titles. An attacker who is able to influence the field `title` when creating a `iziModal` instance is able to supply arbitrary `html` or `javascript` code that will be rendered in the context of a user, potentially leading to `XSS`. Version 1.6.1 contains a patch for this issue Additional Analyst Notes: -
ntext of a user, potentially leading to `XSS`. Version 1.6.1 contains a patch for this issue Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://securitylab.github.com/advisories/GHSL-2021-1044_iziModal/ - https://github.com/marcelodolza/iziModal/issues/249 - https://github.com/marcelodolza/iziModal/commit/01728ac52bac5c1b4512087dafe0ad8b091fdc9e
CVE ID: CVE-2021-32861 State: REJECTED Published: N/A Last Updated: 2023-02-21T00:00:00 Description: No description available.
CVE ID: CVE-2021-32862 State: PUBLISHED Published: 2022-08-18T00:00:00 Last Updated: 2024-09-02T21:02:59.728Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: jupyter Products: nbconvert Problem Types: CWE-79 Description: The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-site scripting (XSS) vulnerabilities if these HTML notebooks are served by a web server (eg: nbviewer). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jup
by a web server (eg: nbviewer). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jupyter/nbconvert/security/advisories/GHSA-9jmq-rx5f-8jwq - https://github.com/jupyter/nbviewer/security/advisories/GHSA-h274-fcvj-h2wm - https://lists.debian.org/debian-lts-announce/2023/06/msg00003.html
CVE ID: CVE-2021-32863 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32864 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32865 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32866 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32867 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32868 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32869 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32870 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32871 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32872 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32873 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32874 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32875 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32876 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32877 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32878 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32879 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32880 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32881 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32882 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32883 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32884 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32885 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32886 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32887 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32888 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32889 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32890 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32891 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32892 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32893 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32894 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32895 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32896 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32897 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32898 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32899 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32900 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32901 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32902 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32903 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32904 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32905 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32906 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32907 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32908 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32909 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32910 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32911 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32912 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32913 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32914 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32915 State: REJECTED Published: N/A Last Updated: 2022-12-02T00:00:00 Description: No description available.
CVE ID: CVE-2021-32917 State: PUBLISHED Published: 2021-05-13T15:10:56 Last Updated: 2024-08-03T23:33:55.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by default, even if neither of the users has an XMPP account on the local server, allowing unrestricted use of the server's bandwidth. Additional Analyst Notes: - CVE Program Container: References: - https://blog.prosody.im/prosody-0.11.9-released/ - http://www.openwall.com/lists/oss-security/2021/05/13/1 - http://www.openwall.com/lists/oss-security/2021/05/14/2 - https://www.debian.org/security/2021/dsa-4916 - https://lists.fedoraproje
openwall.com/lists/oss-security/2021/05/14/2 - https://www.debian.org/security/2021/dsa-4916 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MFFBZWXKPZEVZNQSVJNCUE7WRF3T7DG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWJ2DG2DFJOEFEWOUN26IMYYWGSA2ZEE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GUN63AHEWB2WRROJHU3BVJRWLONCT2B7/ - https://security.gentoo.org/glsa/202105-15 - https://lists.debian.org/debian-lts-announce/2021/06/msg00016.html
CVE ID: CVE-2021-32918 State: PUBLISHED Published: 2021-05-13T15:11:50 Last Updated: 2024-08-03T23:33:55.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Prosody before 0.11.9. Default settings are susceptible to remote unauthenticated denial-of-service (DoS) attacks via memory exhaustion when running under Lua 5.2 or Lua 5.3. Additional Analyst Notes: - CVE Program Container: References: - https://blog.prosody.im/prosody-0.11.9-released/ - http://www.openwall.com/lists/oss-security/2021/05/13/1 - http://www.openwall.com/lists/oss-security/2021/05/14/2 - https://www.debian.org/security/2021/dsa-4916 - https://lists.fedoraproject.org/archives/list/pac
ecurity/2021/05/14/2 - https://www.debian.org/security/2021/dsa-4916 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MFFBZWXKPZEVZNQSVJNCUE7WRF3T7DG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWJ2DG2DFJOEFEWOUN26IMYYWGSA2ZEE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GUN63AHEWB2WRROJHU3BVJRWLONCT2B7/ - https://security.gentoo.org/glsa/202105-15
CVE ID: CVE-2021-32919 State: PUBLISHED Published: 2021-05-13T15:12:19 Last Updated: 2024-08-03T23:33:55.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback option in mod_dialback enables an experimental feature for server-to-server authentication. It does not correctly authenticate remote server certificates, allowing a remote server to impersonate another server (when this option is enabled). Additional Analyst Notes: - CVE Program Container: References: - https://blog.prosody.im/prosody-0.11.9-released/ - http://www.openwall.com/lists/oss-security/2021/05/13/1 - http://www.openwall.com
.prosody.im/prosody-0.11.9-released/ - http://www.openwall.com/lists/oss-security/2021/05/13/1 - http://www.openwall.com/lists/oss-security/2021/05/14/2 - https://www.debian.org/security/2021/dsa-4916 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MFFBZWXKPZEVZNQSVJNCUE7WRF3T7DG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWJ2DG2DFJOEFEWOUN26IMYYWGSA2ZEE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GUN63AHEWB2WRROJHU3BVJRWLONCT2B7/ - https://security.gentoo.org/glsa/202105-15
CVE ID: CVE-2021-32920 State: PUBLISHED Published: 2021-05-13T15:14:14 Last Updated: 2024-08-03T23:33:55.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prosody before 0.11.9 allows Uncontrolled CPU Consumption via a flood of SSL/TLS renegotiation requests. Additional Analyst Notes: - CVE Program Container: References: - https://blog.prosody.im/prosody-0.11.9-released/ - http://www.openwall.com/lists/oss-security/2021/05/13/1 - http://www.openwall.com/lists/oss-security/2021/05/14/2 - https://www.debian.org/security/2021/dsa-4916 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MFFBZWXKPZEVZNQSVJNCUE7WRF3T7DG/ - https://lists
t.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MFFBZWXKPZEVZNQSVJNCUE7WRF3T7DG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWJ2DG2DFJOEFEWOUN26IMYYWGSA2ZEE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GUN63AHEWB2WRROJHU3BVJRWLONCT2B7/ - https://security.gentoo.org/glsa/202105-15
CVE ID: CVE-2021-32921 State: PUBLISHED Published: 2021-05-13T15:14:43 Last Updated: 2024-08-03T23:33:56.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Prosody before 0.11.9. It does not use a constant-time algorithm for comparing certain secret strings when running under Lua 5.2 or later. This can potentially be used in a timing attack to reveal the contents of secret strings to an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://blog.prosody.im/prosody-0.11.9-released/ - http://www.openwall.com/lists/oss-security/2021/05/13/1 - http://www.openwall.com/lists/oss-security/2021/05/14/2 - https://www.debian.org/secur
lists/oss-security/2021/05/13/1 - http://www.openwall.com/lists/oss-security/2021/05/14/2 - https://www.debian.org/security/2021/dsa-4916 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MFFBZWXKPZEVZNQSVJNCUE7WRF3T7DG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LWJ2DG2DFJOEFEWOUN26IMYYWGSA2ZEE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GUN63AHEWB2WRROJHU3BVJRWLONCT2B7/ - https://security.gentoo.org/glsa/202105-15 - https://lists.debian.org/debian-lts-announce/2021/06/msg00016.html - https://lists.debian.org/debian-lts-announce/20
5 - https://lists.debian.org/debian-lts-announce/2021/06/msg00016.html - https://lists.debian.org/debian-lts-announce/2021/06/msg00018.html
CVE ID: CVE-2021-32923 State: PUBLISHED Published: 2021-06-03T10:38:26 Last Updated: 2024-08-03T23:33:56.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Vault and Vault Enterprise allowed the renewal of nearly-expired token leases and dynamic secret leases (specifically, those within 1 second of their maximum TTL), which caused them to be incorrectly treated as non-expiring during subsequent use. Fixed in 1.5.9, 1.6.5, and 1.7.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.hashicorp.com/blog/category/vault/ - https://discuss.hashicorp.com/t/hcsec-2021-15-vault-renewed-nearly-expired-leases-with-incorrect-non-expiring-ttls/24603 - htt
//discuss.hashicorp.com/t/hcsec-2021-15-vault-renewed-nearly-expired-leases-with-incorrect-non-expiring-ttls/24603 - https://security.gentoo.org/glsa/202207-01
CVE ID: CVE-2021-32924 State: PUBLISHED Published: 2021-06-01T17:47:42 Last Updated: 2024-08-03T23:33:56.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Community (aka IPS Community Suite) before 4.6.0 allows eval-based PHP code injection by a moderator because the IPS\cms\modules\front\pages\_builder::previewBlock method interacts unsafely with the IPS\_Theme::runProcessFunction method. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1092574 - https://invisioncommunity.com/features/security/ - http://seclists.org/fulldisclosure/2021/May/80 - http://packetstormsecurity.com/files/162868/IPS-Community-Suite-4.5.4.2-PHP-Cod
eclists.org/fulldisclosure/2021/May/80 - http://packetstormsecurity.com/files/162868/IPS-Community-Suite-4.5.4.2-PHP-Code-Injection.html - http://karmainsecurity.com/KIS-2021-04
CVE ID: CVE-2021-32925 State: PUBLISHED Published: 2021-05-13T17:50:38 Last Updated: 2024-08-03T23:33:55.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/user_import.php in Chamilo 1.11.x reads XML data without disabling the ability to load external entities. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/chamilo/chamilo-lms/commit/e71437c8de809044ba3ae1b181d70857c050a3e9 - https://www.php.net/manual/en/function.libxml-disable-entity-loader.php - https://github.com/andrejspuler/writeups/blob/main/chamilo-lms/README.md#authenticated-rcelfi-in-user-import-via-xml-external-entity---cve-2021-32925 - https://support.chamilo.org/projects/1/
d#authenticated-rcelfi-in-user-import-via-xml-external-entity---cve-2021-32925 - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-58-2021-05-12-High-impact-very-low-risk-LFIRCE-vulnerability-in-users-import
CVE ID: CVE-2021-32926 State: PUBLISHED Published: 2021-06-03T12:35:36 Last Updated: 2024-08-03T23:33:55.972Z Vendors: n/a Products: Micro800, MicroLogix 1400 Problem Types: CWE-300 Description: When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and replace it with an illegitimate hash. The user would no longer be able to authenticate to the controller (Micro800: All versions, MicroLogix 1400: Version 21 and later) causing a denial-of-service condition Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-145-0
n Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-145-02
CVE ID: CVE-2021-32927 State: PUBLISHED Published: 2022-04-22T15:01:26.000Z Last Updated: 2025-04-16T16:27:59.873Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Uffizio Products: GPS Tracker Problem Types: CWE-79 Description: An attacker may be able to inject client-side JavaScript code on multiple instances within all versions of Uffizio GPS Tracker. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsa-21-287-02
CVE ID: CVE-2021-32928 State: PUBLISHED Published: 2021-06-16T12:38:49 Last Updated: 2024-08-03T23:33:56.107Z Vendors: n/a Products: Sentinel LDK Run-Time Environment Problem Types: CWE-459 Description: The Sentinel LDK Run-Time Environment installer (Versions 7.6 and prior) adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/advisories/icsa-21-159-06