Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-20681 State: PUBLISHED Published: 2021-03-26T08:50:27 Last Updated: 2024-08-03T17:45:45.212Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://basercms.net/security/JVN64869876 - https://jvn.jp/en/jp/JVN64869876/index.html
CVE ID: CVE-2021-20682 State: PUBLISHED Published: 2021-03-26T08:50:28 Last Updated: 2024-08-03T17:45:45.157Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: OS Command Injection Description: baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://basercms.net/security/JVN64869876 - https://jvn.jp/en/jp/JVN64869876/index.html
CVE ID: CVE-2021-20683 State: PUBLISHED Published: 2021-03-26T08:50:29 Last Updated: 2024-08-03T17:45:45.450Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://basercms.net/security/JVN64869876 - https://jvn.jp/en/jp/JVN64869876/index.html
CVE ID: CVE-2021-20684 State: PUBLISHED Published: 2021-04-07T07:15:29 Last Updated: 2024-08-03T17:45:45.430Z Vendors: CGI Script Market Products: MagazinegerZ Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in MagazinegerZ v.1.01 allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN97370614/index.html
CVE ID: CVE-2021-20685 State: PUBLISHED Published: 2021-04-07T07:15:29 Last Updated: 2024-08-03T17:45:45.460Z Vendors: daifukuya.com Products: Kagemai Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN12559271/index.html
CVE ID: CVE-2021-20686 State: PUBLISHED Published: 2021-04-07T07:15:30 Last Updated: 2024-08-03T17:45:45.509Z Vendors: daifukuya.com Products: Kagemai Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN42220311/index.html
CVE ID: CVE-2021-20687 State: PUBLISHED Published: 2021-04-07T07:15:31 Last Updated: 2024-08-03T17:45:45.372Z Vendors: daifukuya.com Products: Kagemai Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Kagemai 0.8.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN11438679/index.html
CVE ID: CVE-2021-20688 State: PUBLISHED Published: 2021-04-07T07:15:31 Last Updated: 2024-08-03T17:45:45.444Z Vendors: GoPlace! Products: Click Ranker Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Click Ranker Ver.3.5 allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN93207949/index.html
CVE ID: CVE-2021-20689 State: PUBLISHED Published: 2021-04-07T07:15:32 Last Updated: 2024-08-03T17:45:45.530Z Vendors: WonderLink Products: Yomi-Search Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN37179202/index.html
CVE ID: CVE-2021-20690 State: PUBLISHED Published: 2021-04-07T07:15:33 Last Updated: 2024-08-03T17:45:45.533Z Vendors: WonderLink Products: Yomi-Search Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN83042295/index.html
CVE ID: CVE-2021-20691 State: PUBLISHED Published: 2021-04-07T07:15:33 Last Updated: 2024-08-03T17:45:45.517Z Vendors: WonderLink Products: Yomi-Search Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN94705238/index.html
CVE ID: CVE-2021-20692 State: PUBLISHED Published: 2021-04-07T07:15:34 Last Updated: 2024-08-03T17:45:45.501Z Vendors: EikiSoft Products: Archive collectively operation utility Problem Types: Directory traversal Description: Directory traversal vulnerability in Archive collectively operation utility Ver.2.10.1.0 and earlier allows an attacker to create or overwrite files by leading a user to expand a malicious ZIP archives. Additional Analyst Notes: - CVE Program Container: References: - http://www.eikisoft.com/release01.html - https://jvn.jp/en/jp/JVN73236007/index.html
CVE ID: CVE-2021-20693 State: PUBLISHED Published: 2021-04-26T00:20:40 Last Updated: 2024-08-03T17:45:45.534Z Vendors: Gurunavi, Inc. Products: Gurunavi App Problem Types: Improper Access Control Description: Improper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for iOS ver.11.1.2 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN54025691/index.html
CVE ID: CVE-2021-20694 State: PUBLISHED Published: 2021-04-26T00:20:41 Last Updated: 2024-08-03T17:45:45.459Z Vendors: D-Link Japan K.K. Products: DAP-1880AC Problem Types: Improper Access Control Description: Improper access control vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to bypass access restriction and to start a telnet service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink-jp.com/support/release/jvnvu92898656_dap-1880ac.html - https://jvn.jp/en/vu/JVNVU92898656/index.html
CVE ID: CVE-2021-20695 State: PUBLISHED Published: 2021-04-26T00:20:41 Last Updated: 2024-08-03T17:45:45.536Z Vendors: D-Link Japan K.K. Products: DAP-1880AC Problem Types: Improper following of a certificate's chain of trust Description: Improper following of a certificate's chain of trust vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to gain root privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink-jp.com/support/release/jvnvu92898656_dap-1880ac.html - https://jvn.jp/en/vu/JVNVU92898656/index.html
CVE ID: CVE-2021-20696 State: PUBLISHED Published: 2021-04-26T00:20:42 Last Updated: 2024-08-03T17:45:45.503Z Vendors: D-Link Japan K.K. Products: DAP-1880AC Problem Types: OS Command Injection Description: DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to execute arbitrary OS commands by sending a specially crafted request to a specific CGI program. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink-jp.com/support/release/jvnvu92898656_dap-1880ac.html - https://jvn.jp/en/vu/JVNVU92898656/index.html
CVE ID: CVE-2021-20697 State: PUBLISHED Published: 2021-04-26T00:20:43 Last Updated: 2024-08-03T17:45:45.532Z Vendors: D-Link Japan K.K. Products: DAP-1880AC Problem Types: Missing authentication for critical function Description: Missing authentication for critical function in DAP-1880AC firmware version 1.21 and earlier allows a remote attacker to login to the device as an authenticated user without the access privilege via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink-jp.com/support/release/jvnvu92898656_dap-1880ac.html - https://jvn.jp/en/vu/JVNVU92898656/index.html
CVE ID: CVE-2021-20698 State: PUBLISHED Published: 2021-06-07T13:25:26 Last Updated: 2024-08-03T17:45:45.519Z Vendors: Sharp NEC Display Solutions, Ltd. Products: Sharp NEC Displays Problem Types: Improper certificate validation Description: Sharp NEC Displays (UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and prior to it, UN552VS R1.300 and prior to it, UN552 R1.300 and prior to it, UN552V R1.300 and prior to it, UX552S R1.300 and prior to it, UX552 R1.300 and prior to it, V864Q R2.000 and prior to it, C861Q R2.000 and prior to it, P754Q R2.000 and prior to it, V754Q
R1.300 and prior to it, V864Q R2.000 and prior to it, C861Q R2.000 and prior to it, P754Q R2.000 and prior to it, V754Q R2.000 and prior to it, C751Q R2.000 and prior to it, V984Q R2.000 and prior to it, C981Q R2.000 and prior to it, P654Q R2.000 and prior to it, V654Q R2.000 and prior to it, C651Q R2.000 and prior to it, V554Q R2.000 and prior to it, P404 R3.200 and prior to it, P484 R3.200 and prior to it, P554 R3.200 and prior to it, V404 R3.200 and prior to it, V484 R3.200 and prior to it, V554 R3.200 and prior to it, V404-T R3.200 and prior to it, V484-T R3.200 and prior to it, V554-T R3.200 and prior to it, C501 R2.000 and prior to it, C551 R2.000 and prior to it, C431 R2.000 and prior
or to it, V554-T R3.200 and prior to it, C501 R2.000 and prior to it, C551 R2.000 and prior to it, C431 R2.000 and prior to it) allows an attacker to obtain root privileges and execute remote code by sending unintended parameters that contain specific characters in http request. Additional Analyst Notes: - CVE Program Container: References: - https://www.sharp-nec-displays.com/global/support/info/A5-1_vulnerability.html
CVE ID: CVE-2021-20699 State: PUBLISHED Published: 2021-06-07T13:25:33 Last Updated: 2024-08-03T17:45:45.532Z Vendors: Sharp NEC Display Solutions, Ltd. Products: Sharp NEC Displays Problem Types: Improper certificate validation Description: Sharp NEC Displays ((UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and prior to it, UN552VS R1.300 and prior to it, UN552 R1.300 and prior to it, UN552V R1.300 and prior to it, UX552S R1.300 and prior to it, UX552 R1.300 and prior to it, V864Q R2.000 and prior to it, C861Q R2.000 and prior to it, P754Q R2.000 and prior to it, V754Q
R1.300 and prior to it, V864Q R2.000 and prior to it, C861Q R2.000 and prior to it, P754Q R2.000 and prior to it, V754Q R2.000 and prior to it, C751Q R2.000 and prior to it, V984Q R2.000 and prior to it, C981Q R2.000 and prior to it, P654Q R2.000 and prior to it, V654Q R2.000 and prior to it, C651Q R2.000 and prior to it, V554Q R2.000 and prior to it, P404 R3.200 and prior to it, P484 R3.200 and prior to it, P554 R3.200 and prior to it, V404 R3.200 and prior to it, V484 R3.200 and prior to it, V554 R3.200 and prior to it, V404-T R3.200 and prior to it, V484-T R3.200 and prior to it, V554-T R3.200 and prior to it, C501 R2.000 and prior to it, C551 R2.000 and prior to it, C431 R2.000 and prio
ior to it, V554-T R3.200 and prior to it, C501 R2.000 and prior to it, C551 R2.000 and prior to it, C431 R2.000 and prior to it) allows an attacker a buffer overflow and to execute remote code by sending long parameters that contains specific characters in http request. Additional Analyst Notes: - CVE Program Container: References: - https://www.sharp-nec-displays.com/global/support/info/A5-1_vulnerability.html
CVE ID: CVE-2021-20700 State: PUBLISHED Published: 2021-11-02T23:29:46 Last Updated: 2024-08-03T17:45:45.518Z Vendors: NEC Corporation Products: CLUSTERPRO X Problem Types: Buffer overflow Description: Buffer overflow vulnerability in the Disk Agent CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote code execution via a network. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-015_en.html
CVE ID: CVE-2021-20701 State: PUBLISHED Published: 2021-11-02T23:30:21 Last Updated: 2024-08-03T17:45:45.444Z Vendors: NEC Corporation Products: CLUSTERPRO X Problem Types: Buffer overflow Description: Buffer overflow vulnerability in the Disk Agent CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote code execution via a network. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-015_en.html
CVE ID: CVE-2021-20702 State: PUBLISHED Published: 2021-11-02T23:30:03 Last Updated: 2024-08-03T17:45:45.531Z Vendors: NEC Corporation Products: CLUSTERPRO X Problem Types: Buffer overflow Description: Buffer overflow vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote code execution via a network. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-015_en.html
CVE ID: CVE-2021-20703 State: PUBLISHED Published: 2021-11-02T23:30:28 Last Updated: 2024-08-03T17:53:21.206Z Vendors: NEC Corporation Products: CLUSTERPRO X Problem Types: Buffer overflow Description: Buffer overflow vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote code execution via a network. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-015_en.html
CVE ID: CVE-2021-20704 State: PUBLISHED Published: 2021-11-02T23:30:09 Last Updated: 2024-08-03T17:53:21.190Z Vendors: NEC Corporation Products: CLUSTERPRO X Problem Types: Buffer overflow Description: Buffer overflow vulnerability in the compatible API with previous versions CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote code execution via a network. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-015_en.html
CVE ID: CVE-2021-20705 State: PUBLISHED Published: 2021-11-02T23:30:43 Last Updated: 2024-08-03T17:53:21.196Z Vendors: NEC Corporation Products: CLUSTERPRO X Problem Types: Improper input Validation Description: Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote file upload via network. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-015_en.html
CVE ID: CVE-2021-20706 State: PUBLISHED Published: 2021-11-02T23:30:15 Last Updated: 2024-08-03T17:53:21.184Z Vendors: NEC Corporation Products: CLUSTERPRO X Problem Types: Improper input Validation Description: Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote file upload via network. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-015_en.html
CVE ID: CVE-2021-20707 State: PUBLISHED Published: 2021-11-02T23:30:35 Last Updated: 2024-08-03T17:53:21.206Z Vendors: NEC Corporation Products: CLUSTERPRO X Problem Types: Improper input Validation Description: Improper input validation vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to read files upload via network.. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-015_en.html
CVE ID: CVE-2021-20708 State: PUBLISHED Published: 2021-04-26T00:20:44 Last Updated: 2024-08-03T17:53:21.266Z Vendors: NEC Corporation Products: NEC Aterm devices Problem Types: OS Command Injection Description: NEC Aterm devices (Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier) allow authenticated attackers to execute arbitrary OS commands by sending a specially crafted request to a specific URL. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-010.html - https://jvn.jp/en/jp/JVN29739718/index.html
CVE ID: CVE-2021-20709 State: PUBLISHED Published: 2021-04-26T00:20:44 Last Updated: 2024-08-03T17:53:21.222Z Vendors: NEC Corporation Products: NEC Aterm devices Problem Types: Improper Validation of Integrity Check Value Description: Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to a specific URL. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-01
URL. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-010.html - https://jvn.jp/en/jp/JVN29739718/index.html
CVE ID: CVE-2021-20710 State: PUBLISHED Published: 2021-04-26T00:20:45 Last Updated: 2024-08-03T17:53:21.266Z Vendors: NEC Corporation Products: Aterm WG2600HS Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.5.1 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-010.html - https://jvn.jp/en/jp/JVN29739718/index.html
CVE ID: CVE-2021-20711 State: PUBLISHED Published: 2021-04-26T00:20:46 Last Updated: 2024-08-03T17:53:21.236Z Vendors: NEC Corporation Products: Aterm WG2600HS Problem Types: OS Command Injection Description: Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-010.html - https://jvn.jp/en/jp/JVN29739718/index.html
CVE ID: CVE-2021-20712 State: PUBLISHED Published: 2021-04-26T00:20:46 Last Updated: 2024-08-03T17:53:21.234Z Vendors: NEC Corporation Products: NEC Aterm devices Problem Types: Improper Access Control Description: Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier allows a device connected to the LAN side to be accessed from the WAN side due to the defect in the IPv6 firewall function. Additional Analyst Notes: - CVE Program Container: References: - https://jpn.nec.com/security-info/secinfo/nv21-010.html - https://jvn.jp/en/jp/JVN29739718/index.html
CVE ID: CVE-2021-20713 State: PUBLISHED Published: 2021-05-24T03:20:28 Last Updated: 2024-08-03T17:53:21.240Z Vendors: QualitySoft Corporation Products: QND Advance/Premium/Standard Problem Types: Privilege escalation Description: Privilege escalation vulnerability in QND Advance/Premium/Standard Ver.11.0.4i and earlier allows an attacker who can log in to the PC where the product's Windows client is installed to gain administrative privileges via unspecified vectors. As a result, sensitive information may be altered/obtained or unintended operations may be performed. Additional Analyst Notes: - CVE Program Container: References: - https://www.qualitysoft.com/product/qnd_vulnerabilities_2021
ional Analyst Notes: - CVE Program Container: References: - https://www.qualitysoft.com/product/qnd_vulnerabilities_2021/ - https://jvn.jp/en/jp/JVN74686032/index.html
CVE ID: CVE-2021-20714 State: PUBLISHED Published: 2021-04-27T05:42:33 Last Updated: 2024-08-03T17:53:21.259Z Vendors: Emre Vona Products: WP Fastest Cache Problem Types: Directory traversal Description: Directory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote attacker with administrator privileges to delete arbitrary files on the server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.wpfastestcache.com/ - https://wordpress.org/plugins/wp-fastest-cache/ - https://jvn.jp/en/jp/JVN35240327/index.html
CVE ID: CVE-2021-20715 State: PUBLISHED Published: 2021-04-27T05:42:33 Last Updated: 2024-08-03T17:53:21.814Z Vendors: Recruit Co., Ltd. Products: Hot Pepper Gourmet App Problem Types: Improper Access Control Description: Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN97434260/index.html
CVE ID: CVE-2021-20716 State: PUBLISHED Published: 2021-04-28T00:45:25 Last Updated: 2024-08-03T17:53:21.257Z Vendors: BUFFALO INC. Products: Buffalo network devices Problem Types: Hidden Functionality Description: Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and prior, WBR2-G54-KD firmware Ver.2.32 and prior, WBR-B11 firmware Ver.2.23 and prior, WBR-G54 firmware Ver.2.23 and prior, WBR-G54L firmware Ver.2.20 and prior, WHR2-A54G54 firmware Ver.2.25 and prior, WHR2-G54 firmware Ver.2.23 and prior, WHR2-G54V firmware Ver.2.55 and prior, WHR3-AG
A54G54 firmware Ver.2.25 and prior, WHR2-G54 firmware Ver.2.23 and prior, WHR2-G54V firmware Ver.2.55 and prior, WHR3-AG54 firmware Ver.2.23 and prior, WHR-G54 firmware Ver.2.16 and prior, WHR-G54-NF firmware Ver.2.10 and prior, WLA2-G54 firmware Ver.2.24 and prior, WLA2-G54C firmware Ver.2.24 and prior, WLA-B11 firmware Ver.2.20 and prior, WLA-G54 firmware Ver.2.20 and prior, WLA-G54C firmware Ver.2.20 and prior, WLAH-A54G54 firmware Ver.2.54 and prior, WLAH-AM54G54 firmware Ver.2.54 and prior, WLAH-G54 firmware Ver.2.54 and prior, WLI2-TX1-AG54 firmware Ver.2.53 and prior, WLI2-TX1-AMG54 firmware Ver.2.53 and prior, WLI2-TX1-G54 firmware Ver.2.20 and prior, WLI3-TX1-AMG54 firmware Ver.2.53