Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-44221 State: PUBLISHED Published: 2022-07-12T10:06:29 Last Updated: 2024-08-04T04:17:24.552Z Vendors: Siemens Products: SIMATIC eaSie Core Package Problem Types: CWE-20 Description: A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The affected systems do not properly validate input that is sent to the underlying message passing framework. This could allow an remote attacker to trigger a denial of service of the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-580125.pdf
CVE ID: CVE-2021-44222 State: PUBLISHED Published: 2022-07-12T10:06:30 Last Updated: 2024-08-04T04:17:24.864Z Vendors: Siemens Products: SIMATIC eaSie Core Package Problem Types: CWE-306 Description: A vulnerability has been identified in SIMATIC eaSie Core Package (All versions < V22.00). The underlying MQTT service of affected systems does not perform authentication in the default configuration. This could allow an unauthenticated remote attacker to send arbitrary messages to the service and thereby issue arbitrary requests in the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-580125.pdf
CVE ID: CVE-2021-44223 State: PUBLISHED Published: 2021-11-25T14:51:19 Last Updated: 2024-08-04T04:17:24.569Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress before 5.8 lacks support for the Update URI plugin header. This makes it easier for remote attackers to execute arbitrary code via a supply-chain attack against WordPress installations that use any plugin for which the slug satisfies the naming constraints of the WordPress.org Plugin Directory but is not yet present in that directory. Additional Analyst Notes: - CVE Program Container: References: - https://vavkamil.cz/2021/11/25/wordpress-plugin-
ctory. Additional Analyst Notes: - CVE Program Container: References: - https://vavkamil.cz/2021/11/25/wordpress-plugin-confusion-update-can-get-you-pwned/ - https://make.wordpress.org/core/2021/06/29/introducing-update-uri-plugin-header-in-wordpress-5-8/
CVE ID: CVE-2021-44224 State: PUBLISHED Published: 2021-12-20T11:20:13 Last Updated: 2024-08-04T04:17:24.919Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-476 Description: A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). Additional Analyst Notes: - CVE Program Container: References: - http://httpd.apache.org/security/vulnerabilities_24.
). Additional Analyst Notes: - CVE Program Container: References: - http://httpd.apache.org/security/vulnerabilities_24.html - http://www.openwall.com/lists/oss-security/2021/12/20/3 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFSWOH4X77CV7AH7C4RMHUBDWKQDL4YH/ - https://www.debian.org/security/2022/dsa-5035 - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.netapp.com/advisory/ntap-20211224-0001/ - https://www.tenable.com/security/tns-2022-01 - https://www.tenable.com/security/tns-2022-03 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGC
s://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGWILBORT67SHMSLYSQZG2NMXGCMPUZO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7H26WJ6TPKNWV3QKY4BHKUKQVUTZJTD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X73C35MMMZGBVPQQCH7LQZUMYZNQA5FO/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://support.apple.com/kb/HT213257 - https://support.apple.com/kb/HT213256 - https://support.apple.com/kb/HT213255 - http://seclists.org/fulldisclosure/2022/May/33 - http://seclists.org/fulldisclosure/2022/May/35 - http://seclists.org/fulldisclo
eclists.org/fulldisclosure/2022/May/33 - http://seclists.org/fulldisclosure/2022/May/35 - http://seclists.org/fulldisclosure/2022/May/38 - https://security.gentoo.org/glsa/202208-20
CVE ID: CVE-2021-44225 State: PUBLISHED Published: 2021-11-26T00:00:00 Last Updated: 2024-08-04T04:17:24.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property. This leads to access-control bypass in some situations in which an unrelated D-Bus system service has a settable (writable) property Additional Analyst Notes: - CVE Program Container: References: - https://github.com/acassen/keepalived/pull/2063 - https://github.com/acassen/keepalived/commit/7977fec0be89ae6fe87405b3f8da2f0b5e415e3d - https://lists.fedoraproject.org/arc
ps://github.com/acassen/keepalived/commit/7977fec0be89ae6fe87405b3f8da2f0b5e415e3d - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6O2R6EXURJQFPFPYFWRCZLUYVWQCLSZM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5226RYNMNB7FL4MSJDIBBGPUWH6LMRYV/ - https://lists.debian.org/debian-lts-announce/2023/04/msg00012.html
CVE ID: CVE-2021-44226 State: PUBLISHED Published: 2022-03-23T00:00:00 Last Updated: 2024-08-04T04:17:24.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\Razer\Synapse3\Service\bin even if %PROGRAMDATA%\Razer has been created by any unprivileged user before Synapse is installed. The unprivileged user may have placed Trojan horse DLLs there. Additional Analyst Notes: - CVE Program Container: References: - https://www.razer.com/community - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-058.txt - http://seclists.org/fulldisclosure/2022/Mar/51 - http://pa
eadmin/dokumente/Publikationen/Advisories/SYSS-2021-058.txt - http://seclists.org/fulldisclosure/2022/Mar/51 - http://packetstormsecurity.com/files/166485/Razer-Synapse-3.6.x-DLL-Hijacking.html - http://seclists.org/fulldisclosure/2023/Jan/26 - http://packetstormsecurity.com/files/170772/Razer-Synapse-3.7.0731.072516-Local-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2023/Sep/6 - http://packetstormsecurity.com/files/174696/Razer-Synapse-Race-Condition-DLL-Hijacking.html
CVE ID: CVE-2021-44227 State: PUBLISHED Published: 2021-12-02T02:52:31 Last Updated: 2024-08-04T04:17:24.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/mailman/+bug/1952384 - https://lists.debian.org/debian-lts-announce/2022/06/msg00011.html
CVE ID: CVE-2021-44228 State: PUBLISHED Published: 2021-12-10T00:00:00.000Z Last Updated: 2025-10-21T23:25:23.121Z Vendors: Apache Software Foundation Products: Apache Log4j2 Problem Types: CWE-502, CWE-400, CWE-20 Description: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. Fr
P servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://logging.apache.org/log4j/2.x/security.html - http://www.openwall.com/lists/oss-security/2021/12/10/1 - http://www.openwall.com/lists/oss-security/2021/12/10/2 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-
ll.com/lists/oss-security/2021/12/10/2 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd - http://www.openwall.com/lists/oss-security/2021/12/10/3 - https://security.netapp.com/advisory/ntap-20211210-0007/ - http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032 - https://www.oracle.com/security-alerts/alert-cve-2021-44228.html - https://www.debian.org/security/2021/dsa-5020 - https://lists.debian.org/debian-lts-announce/2021/12/msg00007.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messag
/2021/12/msg00007.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VU57UJDCFIASIO35GC55JMKSRXJMCDFM/ - https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/ - http://www.openwall.com/lists/oss-security/2021/12/13/2 - http://www.openwall.com/lists/oss-security/2021/12/13/1 - http://www.openwall.com/lists/oss-security/2021/12/14/4 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd - https://www.kb.cert.org/vuls/id/930724 - https://twitter.com/kurtseifried/status/1469345530182455296 - https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf -
//twitter.com/kurtseifried/status/1469345530182455296 - https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf - http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.html - http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-Execution.html - http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00646.html - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd - http://www.openwall.com/lists/oss-security/2021/12/15/3 - http://packetstormsecurity.com/files/165282/Log4j-Payloa
Ebd - http://www.openwall.com/lists/oss-security/2021/12/15/3 - http://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.html - http://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.html - http://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Execution-Word-Bypassing.html - http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.html - http://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Execution.html - https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB/ - http://packetstormsecurity.co
ist/package-announce%40lists.fedoraproject.org/message/M5CSVUNV4HWZZXGOKNSK6L7RPM7BOKIB/ - http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-0028.4.html - https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf - https://www.oracle.com/security-alerts/cpujan2022.html - http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html - https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md - http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html - http://packetstormsecurity.com/files/1
nter-Server-Unauthenticated-Log4Shell-JNDI-Injection-Remote-Code-Execution.html - http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthenticated-Log4Shell-Remote-Code-Execution.html - http://seclists.org/fulldisclosure/2022/Mar/23 - https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0001 - https://github.com/cisagov/log4j-affected-db - https://support.apple.com/kb/HT213189 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228 - https://www.nu11secur1ty.com/2021/12/cve-2021-44228.html - http://seclists.org/fulldisclosure/2022/Jul/11 - http://packetstormsecurity.com/files/167794/Open-Xc
e-2021-44228.html - http://seclists.org/fulldisclosure/2022/Jul/11 - http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.html - http://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Command-Execution.html - http://seclists.org/fulldisclosure/2022/Dec/2 - http://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remote-Code-Execution.html
CVE ID: CVE-2021-44230 State: PUBLISHED Published: 2021-11-30T18:17:35 Last Updated: 2024-08-04T04:17:24.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: PortSwigger Burp Suite Enterprise Edition before 2021.11 on Windows has weak file permissions for the embedded H2 database, which might lead to privilege escalation. This issue can be exploited by an adversary who has already compromised a valid Windows account on the server via separate means. In this scenario, the compromised account may have inherited read access to sensitive configuration, database, and log files. Additional Analyst Notes: - CVE Program Container: References: - https://portswigger.net/burp/releases/enterp
log files. Additional Analyst Notes: - CVE Program Container: References: - https://portswigger.net/burp/releases/enterprise-edition-2021-11?requestededition=enterprise
CVE ID: CVE-2021-44231 State: PUBLISHED Published: 2021-12-14T15:44:08 Last Updated: 2024-08-04T04:17:24.557Z Vendors: SAP SE Products: SAP ABAP Server & ABAP Platform (Translation Tools) Problem Types: Code injection Description: Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021 - https://launchpad.support.sap.com/#/notes/3119365
CVE ID: CVE-2021-44232 State: PUBLISHED Published: 2021-12-14T15:44:10 Last Updated: 2024-08-04T04:17:24.925Z Vendors: SAP SE Products: SAF-T Framework Problem Types: Path Traversal Description: SAF-T Framework Transaction SAFTN_G allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The attacker can see the whole filesystem structure but cannot overwrite, delete, or corrupt arbitrary files on the server. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021 - https://launchpad.support.sap.com/#/notes/3124094
CVE ID: CVE-2021-44233 State: PUBLISHED Published: 2021-12-14T15:44:08 Last Updated: 2024-08-04T04:17:24.884Z Vendors: SAP SE Products: SAP GRC Access Control Problem Types: CWE-862 Description: SAP GRC Access Control - versions V1100_700, V1100_731, V1200_750, does not perform necessary authorization checks for an authenticated user, which could lead to escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021 - https://launchpad.support.sap.com/#/notes/3080816
CVE ID: CVE-2021-44234 State: PUBLISHED Published: 2022-01-14T19:11:27 Last Updated: 2024-08-04T04:17:24.598Z Vendors: SAP SE Products: SAP Business One Problem Types: CWE-532 Description: SAP Business One - version 10.0, extended log stores information that can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3106528 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035
CVE ID: CVE-2021-44235 State: PUBLISHED Published: 2021-12-14T15:44:09 Last Updated: 2024-08-04T04:17:24.558Z Vendors: SAP SE Products: SAP NetWeaver AS ABAP Problem Types: Code Injection Description: Two methods of a utility class in SAP NetWeaver AS ABAP - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allow an attacker with high privileges and has direct access to SAP System, to inject code when executing with a certain transaction class builder. This could allow execution of arbitrary commands on the operating system, that could highly impact the Confidentiality, Integrity and Availability of the system. Additional Analyst Notes: - CVE Program Contain
ly impact the Confidentiality, Integrity and Availability of the system. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021 - https://launchpad.support.sap.com/#/notes/3123196
CVE ID: CVE-2021-44238 State: PUBLISHED Published: 2022-03-01T14:55:53 Last Updated: 2024-08-04T04:17:24.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php, Additional Analyst Notes: - CVE Program Container: References: - https://github.com/loadream/AyaCMS/issues/2
CVE ID: CVE-2021-44244 State: PUBLISHED Published: 2022-01-20T18:12:53 Last Updated: 2024-08-04T04:17:25.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/Simple-Logistic-Hub-Parcels-Management
CVE ID: CVE-2021-44245 State: PUBLISHED Published: 2022-01-20T18:38:04 Last Updated: 2024-08-04T04:17:24.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System (CTMS) 1.0 via the (1) username and (2) contactno parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/unyasoft/CTMS - https://www.nu11secur1ty.com/2021/11/ctms.html
CVE ID: CVE-2021-44246 State: PUBLISHED Published: 2022-02-04T01:34:03 Last Updated: 2024-08-04T04:17:24.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack overflow in the function setNoticeCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the IpTo parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_2/2.md
CVE ID: CVE-2021-44247 State: PUBLISHED Published: 2022-02-04T01:34:03 Last Updated: 2024-08-04T04:17:24.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command injection vulnerability in the function setNoticeCfg. This vulnerability allows attackers to execute arbitrary commands via the IpFrom parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_1/1.md
CVE ID: CVE-2021-44249 State: PUBLISHED Published: 2022-01-28T14:37:40 Last Updated: 2024-08-04T04:17:24.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Motorcycle (Bike) Rental System 1.0 is vulnerable to a Blind Time-Based SQL Injection attack within the login portal. This can lead attackers to remotely dump MySQL database credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50429 - https://doctorzorka.github.io/Exploits/exploit-1.html
CVE ID: CVE-2021-44255 State: PUBLISHED Published: 2022-01-31T11:18:20 Last Updated: 2024-08-04T04:17:25.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authenticated remote code execution in MotionEye <= 0.42.1 and MotioneEyeOS <= 20200606 allows a remote attacker to upload a configuration backup file containing a malicious python pickle file which will execute arbitrary code on the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.pizzapower.me/2021/10/09/self-hosted-security-part-1-motioneye/ - https://github.com/ccrisan/motioneyeos/issues/2843
CVE ID: CVE-2021-44259 State: PUBLISHED Published: 2022-03-17T12:13:55 Last Updated: 2024-08-04T04:17:24.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zer0yu/CVE_Request/blob/master/WAVLINK/WAVLINK_AC1200_unauthorized_access_vulnerability_second.md
CVE ID: CVE-2021-44260 State: PUBLISHED Published: 2022-03-17T12:11:10 Last Updated: 2024-08-04T04:17:24.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability is in the 'live_mfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information of the manager of router. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zer0yu/CVE_Request/blob/master/WAVLINK/WAVLINK_AC1200_unauthorized_access_vulnerability_first.md
CVE ID: CVE-2021-44261 State: PUBLISHED Published: 2022-03-17T12:24:14 Last Updated: 2024-08-04T04:17:24.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes firmware version information for the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.netgear.com/about/security/ - https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_W104_unauthorized_access_vulnerability_first.md
CVE ID: CVE-2021-44262 State: PUBLISHED Published: 2022-03-17T12:21:44 Last Updated: 2024-08-04T04:17:24.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information for the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.netgear.com/about/security/ - https://github.com/zer0yu/CVE_Request/blob/master/netgear/Netgear_W104_unauthorized_access_vulnerability_second.md
CVE ID: CVE-2021-44263 State: PUBLISHED Published: 2021-12-20T08:28:49 Last Updated: 2024-08-04T04:17:24.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gurock TestRail before 7.2.4 mishandles HTML escaping. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/miglen/b09498b4b9fe1be58973bd474af125ab - https://discuss.gurock.com/t/testrail-7-2-4-released-to-cloud/20248