Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-46104 State: PUBLISHED Published: 2022-01-19T12:26:31 Last Updated: 2024-08-04T05:02:10.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in webp_server_go 0.4.0. There is a directory traversal vulnerability that can read arbitrary file information on the server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/webp-sh/webp_server_go/issues/92
CVE ID: CVE-2021-46107 State: PUBLISHED Published: 2022-03-17T20:33:09 Last Updated: 2024-08-04T05:02:10.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ligeo Archives Ligeo Basics as of 02_01-2022 is vulnerable to Server Side Request Forgery (SSRF) which allows an attacker to read any documents via the download features. Additional Analyst Notes: - CVE Program Container: References: - https://owasp.org/Top10/A10_2021-Server-Side_Request_Forgery_%28SSRF%29/ - https://raw.githubusercontent.com/Orange-Cyberdefense/CVE-repository/master/PoCs/POC_CVE-2021-46107.py
CVE ID: CVE-2021-46108 State: PUBLISHED Published: 2022-02-18T03:58:41 Last Updated: 2024-08-04T05:02:11.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/g-rubert/CVE-2021-46108
CVE ID: CVE-2021-46109 State: PUBLISHED Published: 2022-01-03T14:34:16 Last Updated: 2024-08-04T05:02:11.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invalid input sanitizing leads to reflected Cross Site Scripting (XSS) in ASUS RT-AC52U_B1 3.0.0.4.380.10931 can lead to a user session hijack. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/drive/folders/1GAOuZwPB-upkpjPgjB8qLIKl9Mh3IVfl?usp=sharing
CVE ID: CVE-2021-46110 State: PUBLISHED Published: 2022-02-18T20:10:04 Last Updated: 2024-08-04T05:02:10.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno parameters. Additional Analyst Notes: - CVE Program Container: References: - https://giant-falcon-36d.notion.site/Online-Shopping-Portal-2924d0ad55e94c4cb2359b0d098c4db6
CVE ID: CVE-2021-46113 State: PUBLISHED Published: 2022-01-25T12:56:52 Last Updated: 2024-08-04T05:02:10.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: In MartDevelopers KEA-Hotel-ERP open source as of 12-31-2021, a remote code execution vulnerability can be exploited by uploading PHP files using the file upload vulnerability in this service. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=gnSMrvV5e9w - https://blog.pocas.kr/posts/rce-KEA-Hotel-ERP/ - https://gist.github.com/P0cas/5aa55f62781364a750ac4a4d47f319fa#cve-2021-46113
CVE ID: CVE-2021-46114 State: PUBLISHED Published: 2022-01-26T18:50:02 Last Updated: 2024-08-04T05:02:10.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: jpress v 4.2.0 is vulnerable to RCE via io.jpress.module.product.ProductNotifyKit#doSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code. Additional Analyst Notes: - CVE Program Container: References: - http://jpress.com - https://github.com/JPressProjects/jpress - https://github.com/JPressProjects/jpress/issues/172
CVE ID: CVE-2021-46115 State: PUBLISHED Published: 2022-01-26T16:31:28 Last Updated: 2024-08-04T05:02:10.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: jpress 4.2.0 is vulnerable to RCE via io.jpress.web.admin._TemplateController#doUploadFile. The admin panel provides a function through which attackers can upload templates and inject some malicious code. Additional Analyst Notes: - CVE Program Container: References: - http://jpress.com - https://github.com/JPressProjects/jpress - https://github.com/JPressProjects/jpress/issues/169
CVE ID: CVE-2021-46116 State: PUBLISHED Published: 2022-01-26T16:23:43 Last Updated: 2024-08-04T05:02:10.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: jpress 4.2.0 is vulnerable to remote code execution via io.jpress.web.admin._TemplateController#doInstall. The admin panel provides a function through which attackers can install templates and inject some malicious code. Additional Analyst Notes: - CVE Program Container: References: - http://jpress.com - https://github.com/JPressProjects/jpress - https://github.com/JPressProjects/jpress/issues/168
CVE ID: CVE-2021-46117 State: PUBLISHED Published: 2022-01-26T15:15:27 Last Updated: 2024-08-04T05:02:11.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.page.PageNotifyKit#doSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code. Additional Analyst Notes: - CVE Program Container: References: - http://jpress.com - https://github.com/JPressProjects/jpress - https://github.com/JPressProjects/jpress/issues/171
CVE ID: CVE-2021-46118 State: PUBLISHED Published: 2022-01-26T16:03:26 Last Updated: 2024-08-04T05:02:11.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: jpress 4.2.0 is vulnerable to remote code execution via io.jpress.module.article.kit.ArticleNotifyKit#doSendEmail. The admin panel provides a function through which attackers can edit the email templates and inject some malicious code. Additional Analyst Notes: - CVE Program Container: References: - http://jpress.com - https://github.com/JPressProjects/jpress - https://github.com/JPressProjects/jpress/issues/170
CVE ID: CVE-2021-46122 State: PUBLISHED Published: 2022-04-18T15:27:20 Last Updated: 2024-08-04T05:02:10.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tp-Link TL-WR840N (EU) v6.20 Firmware (0.9.1 4.17 v0001.0 Build 201124 Rel.64328n) is vulnerable to Buffer Overflow via the Password reset feature. Additional Analyst Notes: - CVE Program Container: References: - https://k4m1ll0.com/cve-tplink-tlwr840n-euV620-password-reset.html
CVE ID: CVE-2021-46141 State: PUBLISHED Published: 2022-01-06T03:48:45 Last Updated: 2024-08-04T05:02:10.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uriparser/uriparser/issues/121 - https://github.com/uriparser/uriparser/pull/124 - https://blog.hartwork.org/posts/uriparser-096-with-security-fixes-released/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO6T7WA27H7K3WI2AXUAGPWBGK4HM65D/ - https://lists.fedoraproject
/list/package-announce%40lists.fedoraproject.org/message/MO6T7WA27H7K3WI2AXUAGPWBGK4HM65D/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGIJTDNEMU2V4H3JJBQVKBRHU5GBQKG2/ - https://lists.debian.org/debian-lts-announce/2022/01/msg00029.html - https://www.debian.org/security/2022/dsa-5063
CVE ID: CVE-2021-46142 State: PUBLISHED Published: 2022-01-06T03:48:36 Last Updated: 2024-08-04T05:02:10.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/uriparser/uriparser/pull/124 - https://github.com/uriparser/uriparser/issues/122 - https://blog.hartwork.org/posts/uriparser-096-with-security-fixes-released/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO6T7WA27H7K3WI2AXUAGPWBGK4HM65D/ - https://lists.fedoraproject.org/archives/li
nounce%40lists.fedoraproject.org/message/MO6T7WA27H7K3WI2AXUAGPWBGK4HM65D/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YGIJTDNEMU2V4H3JJBQVKBRHU5GBQKG2/ - https://www.debian.org/security/2022/dsa-5063
CVE ID: CVE-2021-46143 State: PUBLISHED Published: 2022-01-06T03:48:26.000Z Last Updated: 2025-05-05T16:44:58.649Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libexpat/libexpat/issues/532 - https://github.com/libexpat/libexpat/pull/538 - http://www.openwall.com/lists/oss-security/2022/01/17/3 - https://security.netapp.com/advisory/ntap-20220121-0006/ - https://www.tenable.com/security/tns-2022-
ity/2022/01/17/3 - https://security.netapp.com/advisory/ntap-20220121-0006/ - https://www.tenable.com/security/tns-2022-05 - https://www.debian.org/security/2022/dsa-5073 - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://security.gentoo.org/glsa/202209-24
CVE ID: CVE-2021-46144 State: PUBLISHED Published: 2022-01-06T04:08:32 Last Updated: 2024-08-04T05:02:10.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets (CSS) token sequences. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/roundcube/roundcubemail/commit/8894fddd59b770399eed4ef8d4da5773913b5bf0 - https://roundcube.net/news/2021/12/30/update-1.5.2-released - https://github.com/roundcube/roundcubemail/commit/b2400a4b592e3094b6c84e6000d512f99ae0eed8 - https://roundcube.net/news/2021/12/30/security-update-1.4.13-released - ht
it/b2400a4b592e3094b6c84e6000d512f99ae0eed8 - https://roundcube.net/news/2021/12/30/security-update-1.4.13-released - https://bugs.debian.org/1003027 - https://www.debian.org/security/2022/dsa-5037 - https://lists.debian.org/debian-lts-announce/2022/01/msg00005.html
CVE ID: CVE-2021-46145 State: PUBLISHED Published: 2022-01-06T05:30:37 Last Updated: 2024-08-04T05:02:11.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: The keyfob subsystem in Honda Civic 2012 vehicles allows a replay attack for unlocking. This is related to a non-expiring rolling code and counter resynchronization. Additional Analyst Notes: - CVE Program Container: References: - http://starvlab.qianxin.com/?p=409 - https://twitter.com/Kevin2600/status/1475482656871571459?s=20 - https://twitter.com/Kevin2600/status/1472070749208780804?s=20 - https://tiger-team-1337.blogspot.com/2022/01/honda-civic-keyfob-system-affected-by.html
CVE ID: CVE-2021-46146 State: PUBLISHED Published: 2022-01-07T05:53:16 Last Updated: 2024-08-04T05:02:10.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. The WikibaseMediaInfo component is vulnerable to XSS via the caption fields for a given media file. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T293556 - https://gerrit.wikimedia.org/r/q/I58d37fb59f998f5bec4a018bf9da96a777f8ff78
CVE ID: CVE-2021-46147 State: PUBLISHED Published: 2022-01-07T05:54:25 Last Updated: 2024-08-04T05:02:10.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. MassEditRegex allows CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T293341 - https://gerrit.wikimedia.org/r/q/I5980de35b0a01b5242b68b7b0bdc08adf5d968d8
CVE ID: CVE-2021-46148 State: PUBLISHED Published: 2022-01-07T05:54:13 Last Updated: 2024-08-04T05:02:10.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. Some unprivileged users can view confidential information (e.g., IP addresses and User-Agent headers for election traffic) on a testwiki SecurePoll instance. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T290808 - https://phabricator.wikimedia.org/T290856 - https://gerrit.wikimedia.org/r/q/Ib2715adb281f8892b586dcb1895e87ac0eb548b0
CVE ID: CVE-2021-46149 State: PUBLISHED Published: 2022-01-07T05:53:47 Last Updated: 2024-08-04T05:02:10.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. A denial of service (resource consumption) can be accomplished by searching for a very long key in a Language Name Search. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T293749 - https://gerrit.wikimedia.org/r/q/Ide32704cca578b9aecbce34bdcc0ac25c2a09a4d
CVE ID: CVE-2021-46150 State: PUBLISHED Published: 2022-01-07T05:53:30 Last Updated: 2024-08-04T05:02:10.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. Special:CheckUserLog allows CheckUser XSS because of date mishandling, as demonstrated by an XSS payload in MediaWiki:October. Additional Analyst Notes: - CVE Program Container: References: - https://phabricator.wikimedia.org/T292795 - https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/extensions/CheckUser/+/79c2c49a18f96b159258958feca90fce964c350a
CVE ID: CVE-2021-46151 State: PUBLISHED Published: 2022-02-09T15:17:13 Last Updated: 2024-08-04T05:02:11.308Z Vendors: Siemens Products: Simcenter Femap V2020.2, Simcenter Femap V2021.1 Problem Types: CWE-787 Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14754, ZDI-CAN-15082) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/
CAN-15082) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-292/ - https://www.zerodayinitiative.com/advisories/ZDI-22-291/
CVE ID: CVE-2021-46152 State: PUBLISHED Published: 2022-02-09T15:17:15 Last Updated: 2024-08-04T05:02:10.852Z Vendors: Siemens Products: Simcenter Femap V2020.2, Simcenter Femap V2021.1 Problem Types: CWE-843 Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a type confusion vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14643, ZDI-CAN-14644, ZDI-CAN-14755, ZDI-CAN-15183) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf
al Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-296/ - https://www.zerodayinitiative.com/advisories/ZDI-22-293/ - https://www.zerodayinitiative.com/advisories/ZDI-22-294/ - https://www.zerodayinitiative.com/advisories/ZDI-22-295/
CVE ID: CVE-2021-46153 State: PUBLISHED Published: 2022-02-09T15:17:16 Last Updated: 2024-08-04T05:02:11.274Z Vendors: Siemens Products: Simcenter Femap V2020.2, Simcenter Femap V2021.1 Problem Types: CWE-119 Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a memory corruption vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14645, ZDI-CAN-15305, ZDI-CAN-15589, ZDI-CAN-15599) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.p
ional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-299/ - https://www.zerodayinitiative.com/advisories/ZDI-22-300/ - https://www.zerodayinitiative.com/advisories/ZDI-22-297/ - https://www.zerodayinitiative.com/advisories/ZDI-22-298/
CVE ID: CVE-2021-46154 State: PUBLISHED Published: 2022-02-09T15:17:18 Last Updated: 2024-08-04T05:02:11.293Z Vendors: Siemens Products: Simcenter Femap V2020.2, Simcenter Femap V2021.1 Problem Types: CWE-121 Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a stack based buffer overflow vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14646, ZDI-CAN-14679, ZDI-CAN-15084, ZDI-CAN-15304) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ss
304) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-301/ - https://www.zerodayinitiative.com/advisories/ZDI-22-302/ - https://www.zerodayinitiative.com/advisories/ZDI-22-303/ - https://www.zerodayinitiative.com/advisories/ZDI-22-304/
CVE ID: CVE-2021-46155 State: PUBLISHED Published: 2022-02-09T15:17:19 Last Updated: 2024-08-04T05:02:11.039Z Vendors: Siemens Products: Simcenter Femap V2020.2, Simcenter Femap V2021.1 Problem Types: CWE-121 Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a stack based buffer overflow vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14683, ZDI-CAN-15283, ZDI-CAN-15303, ZDI-CAN-15593) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ss
593) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-306/ - https://www.zerodayinitiative.com/advisories/ZDI-22-307/ - https://www.zerodayinitiative.com/advisories/ZDI-22-305/ - https://www.zerodayinitiative.com/advisories/ZDI-22-308/
CVE ID: CVE-2021-46156 State: PUBLISHED Published: 2022-02-09T15:17:20 Last Updated: 2024-08-04T05:02:11.281Z Vendors: Siemens Products: Simcenter Femap V2020.2, Simcenter Femap V2021.1 Problem Types: CWE-787 Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14684) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.
tional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-309/
CVE ID: CVE-2021-46157 State: PUBLISHED Published: 2022-02-09T15:17:22 Last Updated: 2024-08-04T05:02:10.822Z Vendors: Siemens Products: Simcenter Femap V2020.2, Simcenter Femap V2021.1 Problem Types: CWE-119 Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a memory corruption vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14757) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf - https://www.zerodayinitiative.com/adviso
References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-310/
CVE ID: CVE-2021-46158 State: PUBLISHED Published: 2022-02-09T15:17:23 Last Updated: 2024-08-04T05:02:10.856Z Vendors: Siemens Products: Simcenter Femap V2020.2, Simcenter Femap V2021.1 Problem Types: CWE-121 Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a stack based buffer overflow vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15085, ZDI-CAN-15289, ZDI-CAN-15602) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf -
Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-311/ - https://www.zerodayinitiative.com/advisories/ZDI-22-312/ - https://www.zerodayinitiative.com/advisories/ZDI-22-313/
CVE ID: CVE-2021-46159 State: PUBLISHED Published: 2022-02-09T15:17:25 Last Updated: 2024-08-04T05:02:11.384Z Vendors: Siemens Products: Simcenter Femap V2020.2, Simcenter Femap V2021.1 Problem Types: CWE-787 Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15050) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.
tional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-314/
CVE ID: CVE-2021-46160 State: PUBLISHED Published: 2022-02-09T15:17:26 Last Updated: 2024-08-04T05:02:11.061Z Vendors: Siemens Products: Simcenter Femap V2020.2, Simcenter Femap V2021.1 Problem Types: CWE-787 Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15286) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.
tional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-315/
CVE ID: CVE-2021-46161 State: PUBLISHED Published: 2022-02-09T15:17:27 Last Updated: 2024-08-04T05:02:11.478Z Vendors: Siemens Products: Simcenter Femap V2020.2, Simcenter Femap V2021.1 Problem Types: CWE-787 Description: A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15302) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.
tional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-609880.pdf - https://www.zerodayinitiative.com/advisories/ZDI-22-316/