Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-31240 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T14:45:49.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the parseSWF_IMPORTASSETS function in the parser.c file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/218
CVE ID: CVE-2021-31245 State: PUBLISHED Published: 2021-05-06T11:45:16 Last Updated: 2024-08-03T22:55:53.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Ysurac/openmptcprouter-vps-admin - https://www.openmptcprouter.com/ - https://medium.com/d3crypt/timing-attack-on-openmptcprouter-vps-admin-authentication-cve-2021-31245-12dd92303e1 - https://github.com/Ysurac/openmptcpr
ing-attack-on-openmptcprouter-vps-admin-authentication-cve-2021-31245-12dd92303e1 - https://github.com/Ysurac/openmptcprouter-vps-admin/commit/a01cbc8c3d3b8bb7720bf3ff234671b4c0e1859c#diff-b89ee68e63302a732d4bde35eb04a205b06f1611147e139642356f173195ab80
CVE ID: CVE-2021-31249 State: PUBLISHED Published: 2021-06-04T20:29:58 Last Updated: 2024-08-03T22:55:52.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CRLF injection vulnerability was found on BF-430, BF-431, and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of validation on the parameter redirect= available on multiple CGI components. Additional Analyst Notes: - CVE Program Container: References: - https://seguranca-informatica.pt/dancing-in-the-iot-chiyu-devices-vulnerable-to-remote-attacks/ - https://www.chiyu-tech.com/msg/message-Firmware-update-87.html - https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-20
essage-Firmware-update-87.html - https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-2021-31249
CVE ID: CVE-2021-31250 State: PUBLISHED Published: 2021-06-04T20:28:06 Last Updated: 2024-08-03T22:55:53.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, ppp.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://seguranca-informatica.pt/dancing-in-the-iot-chiyu-devices-vulnerable-to-remote-attacks/ - https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-2021-31250 - https://www.chiyu-tech.com/msg/message
seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-2021-31250 - https://www.chiyu-tech.com/msg/message-Firmware-update-87.htm
CVE ID: CVE-2021-31251 State: PUBLISHED Published: 2021-06-04T20:25:52 Last Updated: 2024-08-03T22:55:53.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication bypass in telnet server in BF-430 and BF431 232/422 TCP/IP Converter, BF-450M and SEMAC from CHIYU Technology Inc allows obtaining a privileged connection with the target device by supplying a specially malformed request and an attacker may force the remote telnet server to believe that the user has already authenticated. Additional Analyst Notes: - CVE Program Container: References: - https://www.chiyu-tech.com/msg/message-Firmware-update-87.html - https://gitbook.seguranca-informatica.pt/cve-and-exploits/c
s://www.chiyu-tech.com/msg/message-Firmware-update-87.html - https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-2021-31251 - https://seguranca-informatica.pt/dancing-in-the-iot-chiyu-devices-vulnerable-to-remote-attacks/#.YLqK1KhKguU
CVE ID: CVE-2021-31252 State: PUBLISHED Published: 2021-06-04T20:21:47 Last Updated: 2024-08-03T22:55:53.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology that can be exploited by sending a link that has a specially crafted URL to convince the user to click on it. Additional Analyst Notes: - CVE Program Container: References: - https://seguranca-informatica.pt/dancing-in-the-iot-chiyu-devices-vulnerable-to-remote-attacks/ - https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-2021-31252 - https://www.chiyu-t
- https://gitbook.seguranca-informatica.pt/cve-and-exploits/cves/chiyu-iot-devices#cve-2021-31252 - https://www.chiyu-tech.com/msg/message-Firmware-update-87.html
CVE ID: CVE-2021-31254 State: PUBLISHED Published: 2021-04-19T18:29:10 Last Updated: 2024-08-03T22:55:53.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the tenc_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file, related invalid IV sizes. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1703 - https://github.com/gpac/gpac/commit/8986422c21fbd9a7bf6561cae65aae42077447e8
CVE ID: CVE-2021-31255 State: PUBLISHED Published: 2021-04-19T18:29:10 Last Updated: 2024-08-03T22:55:53.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the abst_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1733 - https://github.com/gpac/gpac/commit/758135e91e623d7dfe7f6aaad7aeb3f791b7a4e5
CVE ID: CVE-2021-31256 State: PUBLISHED Published: 2021-04-19T18:29:10 Last Updated: 2024-08-03T22:55:53.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1705 - https://github.com/gpac/gpac/commit/2da2f68bffd51d89b1d272d22aa8cc023c1c066e
CVE ID: CVE-2021-31257 State: PUBLISHED Published: 2021-04-19T18:29:10 Last Updated: 2024-08-03T22:55:53.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1734 - https://github.com/gpac/gpac/commit/87afe070cd6866df7fe80f11b26ef75161de85e0
CVE ID: CVE-2021-31258 State: PUBLISHED Published: 2021-04-19T18:29:10 Last Updated: 2024-08-03T22:55:53.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gf_isom_set_extraction_slc function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1706 - https://github.com/gpac/gpac/commit/ebfa346eff05049718f7b80041093b4c5581c24e
CVE ID: CVE-2021-31259 State: PUBLISHED Published: 2021-04-19T18:29:10 Last Updated: 2024-08-03T22:55:53.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gf_isom_cenc_get_default_info_internal function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1735 - https://github.com/gpac/gpac/commit/3b84ffcbacf144ce35650df958432f472b6483f8
CVE ID: CVE-2021-31260 State: PUBLISHED Published: 2021-04-19T18:29:10 Last Updated: 2024-08-03T22:55:53.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1736 - https://github.com/gpac/gpac/commit/df8fffd839fe5ae9acd82d26fd48280a397411d9
CVE ID: CVE-2021-31261 State: PUBLISHED Published: 2021-04-19T18:29:10 Last Updated: 2024-08-03T22:55:52.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gf_hinter_track_new function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1737 - https://github.com/gpac/gpac/commit/cd3738dea038dbd12e603ad48cd7373ae0440f65
CVE ID: CVE-2021-31262 State: PUBLISHED Published: 2021-04-19T18:29:10 Last Updated: 2024-08-03T22:55:53.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AV1_DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1738 - https://github.com/gpac/gpac/commit/b2eab95e07cb5819375a50358d4806a8813b6e50
CVE ID: CVE-2021-31272 State: PUBLISHED Published: 2021-06-18T21:50:00 Last Updated: 2024-08-03T22:55:53.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: SerenityOS before commit 3844e8569689dd476064a0759d704bc64fb3ca2c contains a directory traversal vulnerability in tar/unzip that may lead to command execution or privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/SerenityOS/serenity/issues/3991 - https://github.com/SerenityOS/serenity/issues/3992 - https://github.com/SerenityOS/serenity/pull/5713/commits/3844e8569689dd476064a0759d704bc64fb3ca2c - https://github.com/SerenityOS/serenity/pull/5713
CVE ID: CVE-2021-31274 State: PUBLISHED Published: 2021-09-08T17:12:29 Last Updated: 2024-08-03T22:55:53.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: In LibreNMS < 21.3.0, a stored XSS vulnerability was identified in the API Access page due to insufficient sanitization of the $api->description variable. As a result, arbitrary Javascript code can get executed. Additional Analyst Notes: - CVE Program Container: References: - https://community.librenms.org/t/vulnerability-report-cross-site-scripting-xss-in-the-api-access-page/15431 - https://github.com/librenms/librenms - https://github.com/librenms/librenms/pull/12739
CVE ID: CVE-2021-31280 State: PUBLISHED Published: 2023-06-14T00:00:00 Last Updated: 2025-01-03T17:06:02.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the keywords parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fmsdwifull/tp5cms/issues/8
CVE ID: CVE-2021-31291 State: REJECTED Published: 2021-07-26T16:27:00 Last Updated: 2021-08-06T13:15:53 Description: No description available.
CVE ID: CVE-2021-31292 State: PUBLISHED Published: 2021-07-26T00:00:00 Last Updated: 2024-08-03T22:55:53.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Exiv2/exiv2/issues/1530 - https://www.debian.org/security/2021/dsa-4958 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FMDT4PJB7P43WSOM3TRQIY3J33BAFVVE/ - https://lists.fedoraproject.org/archives/list/package-announce%40
roject.org/message/FMDT4PJB7P43WSOM3TRQIY3J33BAFVVE/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UYGDELIFFJWKUU7SO3QATCIXCZJERGAC/ - https://lists.debian.org/debian-lts-announce/2021/08/msg00028.html - https://security.gentoo.org/glsa/202312-06
CVE ID: CVE-2021-31294 State: PUBLISHED Published: 2023-07-15T00:00:00 Last Updated: 2024-10-30T18:29:51.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command). NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have safety guarantees related to this. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/redis/redis/issues/8712 - https://github.com/redis/redis/commit/6cbea7d29b5285692843bc1c351abba1a7ef326f - https://github.com/re
dis/issues/8712 - https://github.com/redis/redis/commit/6cbea7d29b5285692843bc1c351abba1a7ef326f - https://github.com/redis/redis/commit/46f4ebbe842620f0976a36741a72482620aa4b48 - https://security.netapp.com/advisory/ntap-20230814-0007/
CVE ID: CVE-2021-31314 State: PUBLISHED Published: 2024-01-20T00:00:00.000Z Last Updated: 2025-06-20T18:29:19.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: File upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload arbitrary files to arbitrary locations on the server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/huahaiYa/jinshansoft/blob/main/Kingsoft%20Security%20Arbitrary%20File%20Upload%20%2B%20File%20Contains%20Vulnerabilities.md
CVE ID: CVE-2021-31315 State: PUBLISHED Published: 2021-05-18T19:45:09 Last Updated: 2024-08-03T22:55:53.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the blit function of their custom fork of the rlottie library. A remote attacker might be able to access Telegram's stack memory out-of-bounds on a victim device via a malicious animated sticker. Additional Analyst Notes: - CVE Program Container: References: - https://www.shielder.it/advisories/telegram-rlottie-blit-stack-buffer-overflow/ - https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-anim
s/telegram-rlottie-blit-stack-buffer-overflow/ - https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/
CVE ID: CVE-2021-31316 State: PUBLISHED Published: 2021-05-18T19:44:58 Last Updated: 2024-08-03T22:55:53.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unprivileged user portal part of CentOS Web Panel is affected by a SQL Injection via the 'idsession' HTTP POST parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.shielder.it/advisories/centos-web-panel-idsession-root-rce/
CVE ID: CVE-2021-31317 State: PUBLISHED Published: 2021-05-18T19:44:46 Last Updated: 2024-08-03T22:55:53.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type Confusion in the VDasher constructor of their custom fork of the rlottie library. A remote attacker might be able to access Telegram's heap memory out-of-bounds on a victim device via a malicious animated sticker. Additional Analyst Notes: - CVE Program Container: References: - https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ - https://www.shielder.it/advisories/telegram-
02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ - https://www.shielder.it/advisories/telegram-rlottie-vdasher-vdasher-type-confusion/
CVE ID: CVE-2021-31318 State: PUBLISHED Published: 2021-05-18T19:44:37 Last Updated: 2024-08-03T22:55:53.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type Confusion in the LOTCompLayerItem::LOTCompLayerItem function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious animated sticker. Additional Analyst Notes: - CVE Program Container: References: - https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ - https://www.shielder.it/advisor
it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ - https://www.shielder.it/advisories/telegram-rlottie-lotcomplayeritem-lotcomplayeritem-type-confusion/
CVE ID: CVE-2021-31319 State: PUBLISHED Published: 2021-05-18T19:44:26 Last Updated: 2024-08-03T22:55:53.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by an Integer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious animated sticker. Additional Analyst Notes: - CVE Program Container: References: - https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ - https://www.shielder.it/advisories/telegr
21/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ - https://www.shielder.it/advisories/telegram-rlottie-lotgradient-populate-integer-overflow/
CVE ID: CVE-2021-31320 State: PUBLISHED Published: 2021-05-18T19:44:14 Last Updated: 2024-08-03T22:55:53.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the VGradientCache::generateGradientColorTable function of their custom fork of the rlottie library. A remote attacker might be able to overwrite heap memory out-of-bounds on a victim device via a malicious animated sticker. Additional Analyst Notes: - CVE Program Container: References: - https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ - https://www.sh
s://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ - https://www.shielder.it/advisories/telegram-rlottie-vgradientcache-generategradientcolortable-heap-buffer-overflow/
CVE ID: CVE-2021-31321 State: PUBLISHED Published: 2021-05-18T19:43:44 Last Updated: 2024-08-03T22:55:53.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the gray_split_cubic function of their custom fork of the rlottie library. A remote attacker might be able to overwrite Telegram's stack memory out-of-bounds on a victim device via a malicious animated sticker. Additional Analyst Notes: - CVE Program Container: References: - https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ - https://www.shielder.it/advi
er.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ - https://www.shielder.it/advisories/telegram-rlottie-gray_split_cubic-stack-buffer-overflow/
CVE ID: CVE-2021-31322 State: PUBLISHED Published: 2021-05-18T19:43:37 Last Updated: 2024-08-03T22:55:53.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious animated sticker. Additional Analyst Notes: - CVE Program Container: References: - https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ - https://www.shielder.it/advisories/tel
/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ - https://www.shielder.it/advisories/telegram-rlottie-lotgradient-populate-heap-buffer-overflow/
CVE ID: CVE-2021-31323 State: PUBLISHED Published: 2021-05-18T19:43:27 Last Updated: 2024-08-03T22:55:53.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LottieParserImpl::parseDashProperty function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious animated sticker. Additional Analyst Notes: - CVE Program Container: References: - https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ - https://www.shielder.it/
ielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ - https://www.shielder.it/advisories/telegram-rlottie-lottieparserimpl-parsedashproperty-heap-buffer-overflow/
CVE ID: CVE-2021-31324 State: PUBLISHED Published: 2021-05-18T19:43:15 Last Updated: 2024-08-03T22:55:53.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution. Additional Analyst Notes: - CVE Program Container: References: - https://www.shielder.it/advisories/centos-web-panel-idsession-root-rce/
CVE ID: CVE-2021-31326 State: PUBLISHED Published: 2022-03-23T23:24:55 Last Updated: 2024-08-03T22:55:53.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a crafted tokenid parameter to /goform/form2Reboot.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/GD008/vuln/blob/main/DIR-816_reset.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10240
CVE ID: CVE-2021-31327 State: PUBLISHED Published: 2021-04-21T15:49:21 Last Updated: 2024-08-03T22:55:53.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored XSS in Remote Clinic v2.0 in /medicines due to Medicine Name Field. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/remoteclinic/RemoteClinic/issues/14
CVE ID: CVE-2021-31329 State: PUBLISHED Published: 2021-04-21T15:25:02 Last Updated: 2024-08-03T22:55:53.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php Additional Analyst Notes: - CVE Program Container: References: - https://github.com/remoteclinic/RemoteClinic/issues/16
CVE ID: CVE-2021-31330 State: PUBLISHED Published: 2022-05-11T17:34:27 Last Updated: 2024-08-03T22:55:53.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3.0.20 and 4.0 RC1 and earlier. An authenticated attacker may inject malicious Javascript code when using Markdown editing within the application which remains persistent. Additional Analyst Notes: - CVE Program Container: References: - https://mattschmidt.net/2021/04/14/review-board-xss-discovered/ - https://www.reviewboard.org/news/2021/04/14/review-board-3-0-21-and-4-0-rc-2-security-bug-fixes-and-docker/ - https://www.reviewboard.org/docs/releas
ews/2021/04/14/review-board-3-0-21-and-4-0-rc-2-security-bug-fixes-and-docker/ - https://www.reviewboard.org/docs/releasenotes/reviewboard/3.0.21/ - https://www.reviewboard.org/docs/releasenotes/reviewboard/4.0-rc-2/