Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-3314 State: PUBLISHED Published: 2021-06-25T15:16:11 Last Updated: 2024-08-03T16:53:17.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle GlassFish Server 3.1.2.18 and below allows /common/logViewer/logViewer.jsf XSS. A malicious user can cause an administrator user to supply dangerous content to the vulnerable page, which is then reflected back to the user and executed by the web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that is posted publicly or e-mailed directly to victims. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst
ctims. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.gruppotim.it/redteam - https://n4nj0.github.io/advisories/oracle-glassfish-reflected-xss/
CVE ID: CVE-2021-3315 State: PUBLISHED Published: 2021-05-11T11:57:32 Last Updated: 2024-08-03T16:53:17.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains TeamCity before 2020.2.2, stored XSS on a tests page was possible. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-3317 State: PUBLISHED Published: 2021-01-26T22:33:58 Last Updated: 2024-08-03T16:53:17.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of the source parameter. Additional Analyst Notes: - CVE Program Container: References: - https://docs.unsafe-inline.com/0day/klog-server-authenticated-command-injection - http://packetstormsecurity.com/files/161208/Klog-Server-2.4.1-Command-Injection.html
CVE ID: CVE-2021-3318 State: PUBLISHED Published: 2021-01-27T17:13:04 Last Updated: 2024-08-03T16:53:17.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zyx0814/dzzoffice/issues/173 - http://packetstormsecurity.com/files/162314/DzzOffice-2.02.1-Cross-Site-Scripting.html
CVE ID: CVE-2021-3319 State: PUBLISHED Published: 2021-10-05T20:50:14.254605Z Last Updated: 2024-09-16T22:14:56.366Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-476, CWE-588 Description: DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses. Zephyr versions >= > v2.4.0 contain NULL Pointer Dereference (CWE-476), Attempt to Access Child of a Non-structure Pointer (CWE-588). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94jg-2p6q-5364 Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rt
/GHSA-94jg-2p6q-5364 Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94jg-2p6q-5364
CVE ID: CVE-2021-3320 State: PUBLISHED Published: 2021-05-24T21:40:30.745441Z Last Updated: 2024-09-16T22:25:53.010Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-476 Description: Type Confusion in 802154 ACK Frames Handling. Zephyr versions >= v2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7 Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7
CVE ID: CVE-2021-3321 State: PUBLISHED Published: 2021-10-12T21:50:13.151605Z Last Updated: 2024-09-16T22:51:00.317Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-680 Description: Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal. Zephyr versions >= >=2.4.0 contain Integer Overflow to Buffer Overflow (CWE-680). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-w44j-66g7-xw99 Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-w44j-66g7-xw99
CVE ID: CVE-2021-3322 State: PUBLISHED Published: 2021-10-12T21:50:14.638805Z Last Updated: 2024-09-16T18:45:16.535Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-476 Description: Unexpected Pointer Aliasing in IEEE 802154 Fragment Reassembly in Zephyr. Zephyr versions >= >=2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p86r-gc4r-4mq3 Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p86r-gc4r-4mq3
CVE ID: CVE-2021-3323 State: PUBLISHED Published: 2021-10-12T21:50:16.135206Z Last Updated: 2024-09-16T17:07:54.201Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-191 Description: Integer Underflow in 6LoWPAN IPHC Header Uncompression in Zephyr. Zephyr versions >= >=2.4.0 contain Integer Underflow (Wrap or Wraparound) (CWE-191). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-89j6-qpxf-pfpc Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-89j6-qpxf-pfpc
CVE ID: CVE-2021-3325 State: PUBLISHED Published: 2021-01-27T18:56:59 Last Updated: 2024-08-03T16:53:17.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation (i.e., an installation without a hosts_deny option). This issue occurred because a new access-control feature was introduced without considering that some exiting installations became unsafe, upon an update to 3.13.0, unless the new feature was immediately configured. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mikaku/Monitorix/issues/309 - https://github.com/mikaku/Monitorix/commit/d6816e20
iner: References: - https://github.com/mikaku/Monitorix/issues/309 - https://github.com/mikaku/Monitorix/commit/d6816e20da1a98bcdc6372d9c36a093df5238f4a - https://github.com/mikaku/Monitorix/compare/v3.13.0...v3.13.1 - https://www.monitorix.org/news.html?n=20210127 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGG6WK44CYY6GEFRTCUEDANVNSX5NDH7/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67DDUU56LP76AJ2K7WJ733QPL2FHKKNG/
CVE ID: CVE-2021-3326 State: PUBLISHED Published: 2021-01-27T00:00:00.000Z Last Updated: 2025-06-09T15:18:04.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=27256 - https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=7d88c6142c6efc160c0ee5e4f85cde382c072888 - http://www.openwall.com/lis
://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=7d88c6142c6efc160c0ee5e4f85cde382c072888 - http://www.openwall.com/lists/oss-security/2021/01/28/2 - https://security.gentoo.org/glsa/202107-07 - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.netapp.com/advisory/ntap-20210304-0007/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html
CVE ID: CVE-2021-3327 State: PUBLISHED Published: 2021-03-19T02:52:24 Last Updated: 2024-08-03T16:53:17.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the post_title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dynamic.ooo/changelog/ - https://gist.github.com/IthacaLabs/e69e90e1d0d9cb37bb3746b6a4274d29
CVE ID: CVE-2021-3328 State: PUBLISHED Published: 2021-04-08T17:07:08 Last Updated: 2024-08-03T16:53:17.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Aprelium Abyss Web Server X1 2.12.1 and 2.14. A crafted HTTP request can lead to an out-of-bounds read that crashes the application. Additional Analyst Notes: - CVE Program Container: References: - https://jankopecky.net/index.php/2021/04/08/cve-2021-3328-abyss-web-server-remote-dos/
CVE ID: CVE-2021-3329 State: PUBLISHED Published: 2023-02-26T00:00:00.000Z Last Updated: 2025-03-11T15:25:38.906Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-703 Description: Lack of proper validation in HCI Host stack initialization can cause a crash of the bluetooth stack Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://zephyrprojectsec.atlassian.net/browse/ZEPSEC-117
CVE ID: CVE-2021-3330 State: PUBLISHED Published: 2021-10-12T21:50:17.624934Z Last Updated: 2024-09-17T01:00:47.273Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: zephyrproject-rtos Products: zephyr Problem Types: CWE-787 Description: RCE/DOS: Linked-list corruption leading to large out-of-bounds write while sorting for forged fragment list in Zephyr. Zephyr versions >= >=2.4.0 contain Out-of-bounds Write (CWE-787). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fj4r-373f-9456 Additional Analyst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-f
yst Notes: - CVE Program Container: References: - http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fj4r-373f-9456
CVE ID: CVE-2021-3331 State: PUBLISHED Published: 2021-01-27T20:22:25 Last Updated: 2024-08-03T16:53:17.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session settings. (For example, this is exploitable in a default installation in which WinSCP is the handler for sftp:// URLs.) Additional Analyst Notes: - CVE Program Container: References: - https://winscp.net/eng/docs/history#5.17.10 - https://winscp.net/tracker/1943 - https://github.com/winscp/winscp/commit/faa96e8144e6925a380f94a97aa382c9427f688d - https://winscp.net/eng/docs/rawsettings
CVE ID: CVE-2021-3332 State: PUBLISHED Published: 2021-03-01T20:22:58 Last Updated: 2024-08-03T16:53:17.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via post_password. Additional Analyst Notes: - CVE Program Container: References: - https://blog.sebastianschmitt.eu/security/wps-hide-login-1-6-1-protection-bypass-cve-2021-3332
CVE ID: CVE-2021-3333 State: PUBLISHED Published: 2021-02-05T13:01:25 Last Updated: 2024-08-03T16:53:17.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting (XSS). When outputting SQL statements for debugging, a maliciously crafted query can trigger an XSS attack. This attack only succeeds if the user is already logged in to Open-AudIT before they click the malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://community.opmantek.com/display/OA/Errata+-+4.0.1+XSS+in+SQL+debugging+output
CVE ID: CVE-2021-3336 State: PUBLISHED Published: 2021-01-29T04:58:39 Last Updated: 2024-08-03T16:53:17.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: DoTls13CertificateVerify in tls13.c in wolfSSL before 4.7.0 does not cease processing for certain anomalous peer behavior (sending an ED22519, ED448, ECC, or RSA signature without the corresponding certificate). The client side is affected because man-in-the-middle attackers can impersonate TLS 1.3 servers. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wolfSSL/wolfssl/pull/3676 - https://www.wolfssl.com/docs/security-vulnerabilities
CVE ID: CVE-2021-3337 State: PUBLISHED Published: 2021-01-28T19:32:59 Last Updated: 2024-08-03T16:53:17.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/snlbaral/Hide-Thread-Content/issues/1 - http://packetstormsecurity.com/files/161185/MyBB-Hide-Thread-Content-1.0-Information-Disclosure.html
CVE ID: CVE-2021-3339 State: PUBLISHED Published: 2021-02-19T07:07:35 Last Updated: 2024-08-03T16:53:17.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen. Additional Analyst Notes: - CVE Program Container: References: - https://appsource.microsoft.com/en-us/product/web-apps/acctech-systems-pty-ltd.modernflow-saas?tab=overview - https://4sightwebsite.azurewebsites.net/mf_releaseNotes
CVE ID: CVE-2021-3340 State: PUBLISHED Published: 2021-02-01T21:01:09 Last Updated: 2024-08-03T16:53:17.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in many forms of Wikindx before 5.7.0 and 6.x through 6.4.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php?action=initLogon or modules/admin/DELETEIMAGES.php. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/wikindx/ - https://sourceforge.net/p/wikindx/news/2021/01/wikindx-v641-released/
CVE ID: CVE-2021-3341 State: PUBLISHED Published: 2021-01-29T00:45:35 Last Updated: 2024-08-03T16:53:17.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: A path traversal vulnerability in the DxWebEngine component of DH2i DxEnterprise and DxOdyssey for Windows, version 19.5 through 20.x before 20.0.219.0, allows an attacker to read any file on the host file system via an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://clients.dh2i.com/Support/Article.aspx?ID=2963454
CVE ID: CVE-2021-3342 State: PUBLISHED Published: 2021-03-01T21:01:57 Last Updated: 2024-08-03T16:53:17.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted LaTeX input to a cgi/latex2png?latex= URI. Additional Analyst Notes: - CVE Program Container: References: - https://files.eprints.org/2549/ - https://files.eprints.org/2548/ - https://github.com/grymer/CVE/blob/master/eprints_security_review.pdf
CVE ID: CVE-2021-3344 State: PUBLISHED Published: 2021-03-16T21:09:45 Last Updated: 2024-08-03T16:53:17.422Z Vendors: n/a Products: openshift/builder Problem Types: CWE-522 Description: A privilege escalation flaw was found in OpenShift builder. During build time, credentials outside the build context are automatically mounted into the container image under construction. An OpenShift user, able to execute code during build time inside this container can re-use the credentials to overwrite arbitrary container images in internal registries and/or escalate their privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This a
e highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This affects github.com/openshift/builder v0.0.0-20210125201112-7901cb396121 and before. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1921450
CVE ID: CVE-2021-3345 State: PUBLISHED Published: 2021-01-29T14:20:31 Last Updated: 2024-08-03T16:53:17.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: _gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value. It is recommended to upgrade to 1.9.1 or later. Additional Analyst Notes: - CVE Program Container: References: - https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=512c0c75276949f13b6373b5c04f7065af750b08 - https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000455.html - https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000456.html - ht
g/pipermail/gnupg-announce/2021q1/000455.html - https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000456.html - https://gnupg.org - https://bugs.gentoo.org/show_bug.cgi?id=767814 - https://www.oracle.com//security-alerts/cpujul2021.html
CVE ID: CVE-2021-3346 State: PUBLISHED Published: 2021-01-29T16:38:09 Last Updated: 2024-08-03T16:53:17.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template. Additional Analyst Notes: - CVE Program Container: References: - https://www.turris.com/ - https://gitlab.nic.cz/turris/foris/foris/-/issues/201 - https://gitlab.nic.cz/turris/foris/foris/-/blob/master/CHANGELOG.rst
CVE ID: CVE-2021-3347 State: PUBLISHED Published: 2021-01-29T16:56:16.000Z Last Updated: 2025-07-24T03:55:31.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c64396cc36c6e60704ab06c1fb1c4a46179c9120 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=34b1a1ce1458f50ef27c54e28eb9b19470
c9120 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=34b1a1ce1458f50ef27c54e28eb9b1947012907a - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f2dac39d93987f7de1e20b3988c8685523247ae2 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6ccc84f917d33312eb2846bd7b567639f585ad6d - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2156ac1934166d6deb6cd0f6ffc4c1076ec63697 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5cade200ab9a2a3be9e7f32a752c8d86b502ec7 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04b79c552
b9a2a3be9e7f32a752c8d86b502ec7 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04b79c55201f02ffd675e1231d731365e335c307 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=12bb3f7f1b03d5913b3f9d4236a488aa7774dfe9 - https://www.openwall.com/lists/oss-security/2021/01/29/3 - https://www.openwall.com/lists/oss-security/2021/01/29/1 - http://www.openwall.com/lists/oss-security/2021/01/29/5 - http://www.openwall.com/lists/oss-security/2021/01/29/4 - http://www.openwall.com/lists/oss-security/2021/02/01/4 - https://www.debian.org/security/2021/dsa-4843 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.
ebian.org/security/2021/dsa-4843 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CXAVDAK4RLAHBHHGEPL73UFXSI6BXQ7Q/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QOBMXDJABYE76RKNBAWA2E4TSSBX7CSJ/ - https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html - https://security.netapp.com/advisory/ntap-20210304-0005/ - https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html
CVE ID: CVE-2021-3348 State: PUBLISHED Published: 2021-02-01T03:43:32 Last Updated: 2024-08-03T16:53:17.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b98e762e3d71e893b221f871825dc64694cfb258 - https://www.openwall.com/lists/oss-security/2021/01/28/3 - http://www.openwall.co
762e3d71e893b221f871825dc64694cfb258 - https://www.openwall.com/lists/oss-security/2021/01/28/3 - http://www.openwall.com/lists/oss-security/2021/02/01/1 - https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html
CVE ID: CVE-2021-3349 State: PUBLISHED Published: 2021-02-01T04:04:19 Last Updated: 2024-08-03T16:53:17.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown identifier on a previously trusted key because Evolution does not retrieve enough information from the GnuPG API. NOTE: third parties dispute the significance of this issue, and dispute whether Evolution is the best place to change this behavior Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/evolution/-/issues/299 - https://mgorny.pl/articles/evolution-uid-trust-extrapolat
ces: - https://gitlab.gnome.org/GNOME/evolution/-/issues/299 - https://mgorny.pl/articles/evolution-uid-trust-extrapolation.html - https://dev.gnupg.org/T4735
CVE ID: CVE-2021-3350 State: PUBLISHED Published: 2021-02-01T04:35:34 Last Updated: 2024-08-03T16:53:17.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vintagedaddyo/MyBB_Plugin-Delete_Account/pull/1
CVE ID: CVE-2021-3351 State: PUBLISHED Published: 2021-08-02T05:22:23 Last Updated: 2024-08-03T16:53:17.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page. Additional Analyst Notes: - CVE Program Container: References: - https://www.youtube.com/watch?v=eSAqXq4m8so
CVE ID: CVE-2021-3352 State: PUBLISHED Published: 2021-08-13T15:35:14 Last Updated: 2024-08-03T16:53:17.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and 9.0.0.0 through 9.3.1.0 could allow an unauthenticated attacker to access (view and modify) user data without authorization due to improper handling of tokens. Additional Analyst Notes: - CVE Program Container: References: - https://www.mitel.com/support/security-advisories - https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0002