Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-44400 State: PUBLISHED Published: 2022-01-28T21:42:43.000Z Last Updated: 2025-04-15T19:14:52.071Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetPtzPatrol param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44401 State: PUBLISHED Published: 2022-01-28T21:42:44.000Z Last Updated: 2025-04-15T19:14:44.864Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. PtzCtrl param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44402 State: PUBLISHED Published: 2022-01-28T21:42:44.000Z Last Updated: 2025-04-15T19:14:37.722Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetPtzSerial param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44403 State: PUBLISHED Published: 2022-01-28T21:42:45.000Z Last Updated: 2025-04-15T19:14:31.333Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetPtzTattern param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44404 State: PUBLISHED Published: 2022-01-28T21:42:49.000Z Last Updated: 2025-04-15T19:13:52.638Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetZoomFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44405 State: PUBLISHED Published: 2022-01-28T21:42:50.000Z Last Updated: 2025-04-15T19:13:44.666Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. StartZoomFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-142
CVE ID: CVE-2021-44406 State: PUBLISHED Published: 2022-01-28T21:42:50.000Z Last Updated: 2025-04-15T19:13:35.397Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetAutoFocus param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44407 State: PUBLISHED Published: 2022-01-28T21:42:51.000Z Last Updated: 2025-04-15T19:13:24.554Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. TestEmail param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44408 State: PUBLISHED Published: 2022-01-28T21:42:46.000Z Last Updated: 2025-04-15T19:14:24.460Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. TestFtp param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44409 State: PUBLISHED Published: 2022-01-28T21:42:47.000Z Last Updated: 2025-04-15T19:14:17.336Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. TestWifi param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44410 State: PUBLISHED Published: 2022-01-28T21:42:48.000Z Last Updated: 2025-04-15T19:14:08.804Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. UpgradePrepare param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-142
CVE ID: CVE-2021-44411 State: PUBLISHED Published: 2022-01-28T21:42:48.000Z Last Updated: 2025-04-15T19:13:59.586Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. Search param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44412 State: PUBLISHED Published: 2022-01-28T21:42:52.000Z Last Updated: 2025-04-15T19:13:16.689Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetRec param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44413 State: PUBLISHED Published: 2022-01-28T21:42:53.000Z Last Updated: 2025-04-15T19:13:08.993Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. AddUser param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44414 State: PUBLISHED Published: 2022-01-28T21:42:53.000Z Last Updated: 2025-04-15T19:12:55.221Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. DelUser param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44415 State: PUBLISHED Published: 2022-01-28T21:42:54.000Z Last Updated: 2025-04-15T19:12:43.088Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. ModifyUser param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44416 State: PUBLISHED Published: 2022-01-28T21:42:55.000Z Last Updated: 2025-04-15T19:12:36.029Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. Disconnect param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44417 State: PUBLISHED Published: 2022-01-28T21:42:56.000Z Last Updated: 2025-04-15T19:12:28.645Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetAlarm param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44418 State: PUBLISHED Published: 2022-01-28T21:42:56.000Z Last Updated: 2025-04-15T19:12:21.413Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetMdState param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44419 State: PUBLISHED Published: 2022-01-28T21:42:57.000Z Last Updated: 2025-04-15T19:12:13.839Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. GetMdAlarm param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44420 State: PUBLISHED Published: 2021-12-07T22:55:40 Last Updated: 2024-08-04T04:17:25.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21forum/django-announce - https://docs.djangoproject.com/en/3.2/releases/security/ - https://www.openwall.com/lists/oss-security/2021/12/07/1 - https://www.djangoproject.com/weblog/2021/dec/07/security-releases/ - https://security.netapp.com/advisory/ntap-20
7/1 - https://www.djangoproject.com/weblog/2021/dec/07/security-releases/ - https://security.netapp.com/advisory/ntap-20211229-0006/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
CVE ID: CVE-2021-44421 State: PUBLISHED Published: 2022-03-06T20:03:40 Last Updated: 2024-08-04T04:25:15.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pointer-validation logic in util/mem_util.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacker to access unauthorized information via side-channel analysis. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/occlum/occlum/blob/821ea843ae21037e6cff5268306d2da1fb131552/src/libos/src/util/mem_util.rs#L130 - https://github.com/occlum/occlum/blob/821ea843ae21037e6cff5268306d2da1fb131552/src/libos/src/util/mem_util.rs#L51 - https://github.com/occlum/occ
/occlum/blob/821ea843ae21037e6cff5268306d2da1fb131552/src/libos/src/util/mem_util.rs#L51 - https://github.com/occlum/occlum/commit/36918e42bf6732c4d3996bc99eb013eb6b90b249 - https://github.com/occlum/occlum/compare/0.25.0...v0.26.0
CVE ID: CVE-2021-44422 State: PUBLISHED Published: 2021-12-21T18:25:03 Last Updated: 2024-08-04T04:25:16.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Improper Input Validation Vulnerability exists when reading a BMP file using Open Design Alliance Drawings SDK before 2022.12. Crafted data in a BMP file can trigger a write operation past the end of an allocated buffer, or lead to a heap-based buffer overflow. An attacker can leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.opendesign.com/security-advisories
CVE ID: CVE-2021-44423 State: PUBLISHED Published: 2021-12-21T18:25:25 Last Updated: 2024-08-04T04:25:16.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance (ODA) Drawings Explorer before 2022.12. The specific issue exists after loading BMP files. Unchecked input data from a crafted BMP file leads to an out-of-bounds read. An attacker can leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://www.opendesign.com/security-advisories
CVE ID: CVE-2021-44425 State: PUBLISHED Published: 2022-09-12T20:47:38 Last Updated: 2024-08-04T04:25:16.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.3. An unnecessarily open listening port on a machine in the LAN of an attacker, opened by the Anydesk Windows client when using the tunneling feature, allows the attacker unauthorized access to the local machine's AnyDesk tunneling protocol stack (and also to any remote destination machine software that is listening to the AnyDesk tunneled port). Additional Analyst Notes: - CVE Program Container: References: - https://anydesk.com/en/downloads/windows - https
port). Additional Analyst Notes: - CVE Program Container: References: - https://anydesk.com/en/downloads/windows - https://argus-sec.com/discovering-tunneling-service-security-flaws-in-anydesk-remote-application/
CVE ID: CVE-2021-44426 State: PUBLISHED Published: 2022-09-12T20:47:33 Last Updated: 2024-08-04T04:25:16.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5. An upload of an arbitrary file to a victim's local ~/Downloads/ directory is possible if the victim is using the AnyDesk Windows client to connect to a remote machine, if an attacker is also connected remotely with AnyDesk to the same remote machine. The upload is done without any approval or action taken by the victim. Additional Analyst Notes: - CVE Program Container: References: - https://anydesk.com/en/downloads/windows - https://argus-sec.com/discove
t Notes: - CVE Program Container: References: - https://anydesk.com/en/downloads/windows - https://argus-sec.com/discovering-tunneling-service-security-flaws-in-anydesk-remote-application/
CVE ID: CVE-2021-44427 State: PUBLISHED Published: 2021-11-29T21:34:16 Last Updated: 2024-08-04T04:25:16.300Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated SQL Injection vulnerability in Rosario Student Information System (aka rosariosis) before 8.1.1 allows remote attackers to execute PostgreSQL statements (e.g., SELECT, INSERT, UPDATE, and DELETE) through /Side.php via the syear parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/francoisjacquet/rosariosis/-/issues/328
CVE ID: CVE-2021-44428 State: PUBLISHED Published: 2021-11-29T22:08:45 Last Updated: 2024-08-04T04:25:16.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pinkie 2.15 allows remote attackers to cause a denial of service (daemon crash) via a TFTP read (RRQ) request, aka opcode 1. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50535
CVE ID: CVE-2021-44429 State: PUBLISHED Published: 2021-11-29T22:08:30 Last Updated: 2024-08-04T04:25:16.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Serva 4.4.0 allows remote attackers to cause a denial of service (daemon crash) via a TFTP read (RRQ) request, aka opcode 1, a related issue to CVE-2013-0145. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/165058/Serva-4.4.0-TFTP-Remote-Buffer-Overflow.html
CVE ID: CVE-2021-44430 State: PUBLISHED Published: 2021-12-14T12:06:53 Last Updated: 2024-08-04T04:25:16.425Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-787 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14829) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.pdf
CVE ID: CVE-2021-44431 State: PUBLISHED Published: 2021-12-14T12:06:53 Last Updated: 2024-08-04T04:25:16.853Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-125 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-14841) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.
tional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.pdf
CVE ID: CVE-2021-44432 State: PUBLISHED Published: 2021-12-14T12:06:54 Last Updated: 2024-08-04T04:25:15.103Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-121 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to stack based buffer overflow while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-14845) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.pdf
CVE ID: CVE-2021-44433 State: PUBLISHED Published: 2021-12-14T12:06:55 Last Updated: 2024-08-04T04:25:16.452Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-416 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains a use after free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-14900) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.pdf
CVE ID: CVE-2021-44434 State: PUBLISHED Published: 2021-12-14T12:06:56 Last Updated: 2024-08-04T04:25:16.505Z Vendors: Siemens Products: JT Utilities, JTTK Problem Types: CWE-787 Description: A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14902, ZDI-CAN-14866) Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.p
ional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-802578.pdf