Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
been addressed and fixed on version 11. Default credentials , Security miscommunication , Sensetive data exposure vulnerability in Synel Reports of SYNEL eharmonynew, Synel Reports allows an attacker to log into the system with default credentials. This issue affects: SYNEL eharmonynew, Synel Reports 8.0.2 version 11 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.gov.il/en/departments/faq/cve_advisories
CVE ID: CVE-2021-36719 State: PUBLISHED Published: 2021-12-08T19:25:16 Last Updated: 2024-08-04T01:01:58.939Z Vendors: Cybonet Products: PineApp - Mail Secure Problem Types: Authenticated RCE Description: PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system. The attacker exploits the vulnerable nicUpload.php file to upload a malicious file,Thus taking over the server and running remote code. Additional Analyst Notes: - CVE Program Container: References: - https://www.gov.il/en/departments/faq/cve_advisories
CVE ID: CVE-2021-36720 State: PUBLISHED Published: 2021-12-08T19:24:46 Last Updated: 2024-08-04T01:01:58.686Z Vendors: Cybonet Products: PineApp - Mail Secure Problem Types: Reflected XSS Description: PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=<script>alert(1)</script> and stealing cookies . Additional Analyst Notes: - CVE Program Container: References: - https://www.gov.il/en/departments/faq/cve_advisories
CVE ID: CVE-2021-36721 State: PUBLISHED Published: 2021-12-14T13:59:43.283768Z Last Updated: 2024-09-16T16:33:07.338Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: SysAid Products: SysAid API Problem Types: User Enumeration Description: Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get users names from the LDAP server. Additional Analyst Notes: - CVE Program Container: References: - https://www.gov.il/en/departments/faq/cve_advisories
CVE ID: CVE-2021-36722 State: PUBLISHED Published: 2021-12-29T14:13:38.766729Z Last Updated: 2024-09-16T18:38:48.510Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: Emuse Products: eServices / eNvoice Problem Types: CWE-89 Description: Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole database to full RCE on the affected endpoints. The SQLi caused by CWE-209: Generation of Error Message Containig Sensetive Information, showing parts of the aspx code and the webroot location , information an attacker can leverage to further compromise the host. Additional Analyst Notes: - CVE
webroot location , information an attacker can leverage to further compromise the host. Additional Analyst Notes: - CVE Program Container: References: - https://www.gov.il/en/departments/faq/cve_advisories
CVE ID: CVE-2021-36723 State: PUBLISHED Published: 2021-12-29T14:12:48.982162Z Last Updated: 2024-09-16T17:18:07.632Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) Vendors: Emuse Products: eServices / eNvoice Problem Types: CWE-359 Description: Emuse - eServices / eNvoice Exposure Of Private Personal Information due to lack of identification mechanisms and predictable IDs an attacker can scrape all the files on the service. Additional Analyst Notes: - CVE Program Container: References: - https://www.gov.il/en/departments/faq/cve_advisories
CVE ID: CVE-2021-36724 State: PUBLISHED Published: 2021-12-29T17:02:42.726830Z Last Updated: 2024-09-16T20:07:01.981Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: ForeScout Products: eServices / eNvoice Problem Types: Local Service DoS Description: ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector service writes a large amount of characters in the installationPath. This will cause the buffer to overflow and override the stack cookie causing the service to crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.gov.il/en/departments/faq/cve_advis
crash. Additional Analyst Notes: - CVE Program Container: References: - https://www.gov.il/en/departments/faq/cve_advisories
CVE ID: CVE-2021-36734 State: REJECTED Published: 2022-01-14T17:28:16 Last Updated: 2022-01-14T17:28:16 Description: No description available.
CVE ID: CVE-2021-36735 State: REJECTED Published: 2022-01-14T17:28:17 Last Updated: 2022-01-14T17:28:17 Description: No description available.
CVE ID: CVE-2021-36736 State: REJECTED Published: 2022-01-14T17:28:20 Last Updated: 2022-01-14T17:28:20 Description: No description available.
CVE ID: CVE-2021-36737 State: PUBLISHED Published: 2022-01-06T08:50:13 Last Updated: 2024-08-04T01:01:58.974Z Vendors: Apache Software Foundation Products: Apache Portals Problem Types: CWE-79 Description: The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the v3-demo-portlet.war artifact Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/x7kt47bf358x8sg9qg02zt0dmdrtow25
CVE ID: CVE-2021-36738 State: PUBLISHED Published: 2022-01-06T08:50:15 Last Updated: 2024-08-04T01:01:59.086Z Vendors: Apache Software Foundation Products: Apache Portals Problem Types: CWE-79 Description: The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/11j19v1gjsk7o6o8nch1xrydow9b8lll
CVE ID: CVE-2021-36739 State: PUBLISHED Published: 2022-01-06T08:50:16.000Z Last Updated: 2025-05-22T18:35:31.820Z Vendors: Apache Software Foundation Products: Apache Portals Problem Types: CWE-79 Description: The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/m5j87nn1lmvzp8b9lmh7gqq68g5lnb7p
CVE ID: CVE-2021-36740 State: PUBLISHED Published: 2021-07-14T16:07:28 Last Updated: 2024-08-04T01:01:58.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Varnish Enterprise 6.0.x before 6.0.8r3, and Varnish Cache 5.x and 6.x before 6.5.2, 6.6.x before 6.6.1, and 6.0 LTS before 6.0.8. Additional Analyst Notes: - CVE Program Container: References: - https://varnish-cache.org/security/VSV00007.html - https://docs.varnish-software.com/security/VSV00007/ - https://github.com/varnishcache/varnish-cache/commit/9be22198e258d0e7a5c
/docs.varnish-software.com/security/VSV00007/ - https://github.com/varnishcache/varnish-cache/commit/9be22198e258d0e7a5c41f4291792214a29405cf - https://github.com/varnishcache/varnish-cache/commit/82b0a629f60136e76112c6f2c6372cce77b683be - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZHBNLDEOTGYRIEQZBWV7F6VPYS4O2AAK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/THV2DQA2GS65HUCKK4KSD2XLN3AAQ2V5/ - https://www.debian.org/security/2022/dsa-5088
CVE ID: CVE-2021-36741 State: PUBLISHED Published: 2021-07-29T19:23:13.000Z Last Updated: 2025-10-21T23:25:39.752Z Vendors: Trend Micro Products: Trend Micro Apex One, Trend Micro OfficeScan, Trend Micro Worry-Free Business Security Problem Types: Arbitrary File Upload Description: An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upload arbitrary files on affected installations. Please note: an attacker must first obtain the ability to logon to the product�s management console in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container:
product�s management console in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/solution/000287819 - https://success.trendmicro.com/solution/000287820 - https://success.trendmicro.com/jp/solution/000287796 - https://success.trendmicro.com/jp/solution/000287815
CVE ID: CVE-2021-36742 State: PUBLISHED Published: 2021-07-29T19:23:14.000Z Last Updated: 2025-10-21T23:25:39.588Z Vendors: Trend Micro Products: Trend Micro Apex One, Trend Micro OfficeScan, Trend Micro Worry-Free Business Security Problem Types: Local Privilege Escalation Description: A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Conta
ivileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/solution/000287819 - https://success.trendmicro.com/solution/000287820 - https://success.trendmicro.com/jp/solution/000287796 - https://success.trendmicro.com/jp/solution/000287815
CVE ID: CVE-2021-36744 State: PUBLISHED Published: 2021-09-06T11:37:47 Last Updated: 2024-08-04T01:01:59.187Z Vendors: Trend Micro Products: Trend Micro Security (Consumer) Problem Types: Directory Junction Denial-of-Service Description: Trend Micro Security (Consumer) 2021 and 2020 are vulnerable to a directory junction vulnerability which could allow an attacker to exploit the system to escalate privileges and create a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://helpcenter.trendmicro.com/en-us/article/tmka-10568 - https://www.zerodayinitiative.com/advisories/ZDI-21-1052/
CVE ID: CVE-2021-36745 State: PUBLISHED Published: 2021-09-29T10:21:30 Last Updated: 2024-08-04T01:01:59.288Z Vendors: Trend Micro Products: Trend Micro ServerProtect for Storage, Trend Micro ServerProtect for EMC Celerra, Trend Micro ServerProtect for Network Appliance Filers, Trend Micro ServerProtect for Microsoft Windows / Novell Netware Problem Types: Authentication Bypass Description: A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations. Additional Analyst
Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations. Additional Analyst Notes: - CVE Program Container: References: - https://success.trendmicro.com/solution/000289038 - https://success.trendmicro.com/jp/solution/000289030 - https://www.zerodayinitiative.com/advisories/ZDI-21-1115/
CVE ID: CVE-2021-36746 State: PUBLISHED Published: 2021-07-20T20:48:18 Last Updated: 2024-08-04T01:01:59.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cseasholtz/CVE-2021-36746
CVE ID: CVE-2021-36747 State: PUBLISHED Published: 2021-07-20T20:44:23 Last Updated: 2024-08-04T01:01:59.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cseasholtz/CVE-2021-36747
CVE ID: CVE-2021-36748 State: PUBLISHED Published: 2021-08-20T17:30:34 Last Updated: 2024-08-04T01:01:58.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simpleblog) module before 1.7.8 for Prestashop allows a remote attacker to extract data from the database via the sb_category parameter. Additional Analyst Notes: - CVE Program Container: References: - https://blog.sorcery.ie - https://alysum5.promokit.eu/promokit/documentation/blog/ - https://blog.sorcery.ie/posts/ph_simpleblog_sqli/
CVE ID: CVE-2021-36749 State: PUBLISHED Published: 2021-09-24T09:30:11 Last Updated: 2024-08-04T01:01:59.216Z Vendors: Apache Software Foundation Products: Apache Druid Problem Types: Data accessible to unathorized parties Description: In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of the Druid server process. This is not an elevation of privilege when users access Druid directly, since Druid also provides the Local InputSource, which allows the same level of access. But it is problemati
d directly, since Druid also provides the Local InputSource, which allows the same level of access. But it is problematic when users interact with Druid indirectly through an application that allows users to specify the HTTP InputSource, but not the Local InputSource. In this case, users could bypass the application-level restriction by passing a file URL to the HTTP InputSource. This issue was previously mentioned as being fixed in 0.21.0 as per CVE-2021-26920 but was not fixed in 0.21.0 or 0.21.1. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/rc9400a70d0ec5cdb8a3486fc5ddb0b5282961c0b63e764abfbcb9f5d%40%3Cdev.druid.apache.org%3E - http
sts.apache.org/thread.html/rc9400a70d0ec5cdb8a3486fc5ddb0b5282961c0b63e764abfbcb9f5d%40%3Cdev.druid.apache.org%3E - https://lists.apache.org/thread.html/r304dfe56a5dfe1b2d9166b24d2c74ad1c6730338b20aef77a00ed2be%40%3Cannounce.apache.org%3E
CVE ID: CVE-2021-36750 State: PUBLISHED Published: 2021-12-22T13:40:32 Last Updated: 2024-08-04T01:01:59.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across USB drives sold under multiple brand names). Additional Analyst Notes: - CVE Program Container: References: - https://www.encsecurity.com/solutions.php - https://encsecurity.zendesk.com/hc/en-us/articles/4413283717265-Update-for-ENC-Software - https://www.westerndigital.com/en-ap/support/product-security/wdc-21014-sandisk-secureaccess-software-update - https://pretalx.c3v
w.westerndigital.com/en-ap/support/product-security/wdc-21014-sandisk-secureaccess-software-update - https://pretalx.c3voc.de/rc3-2021-r3s/talk/QMYGR3/
CVE ID: CVE-2021-36751 State: PUBLISHED Published: 2022-01-02T00:00:00 Last Updated: 2024-08-04T01:01:59.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation (without knowledge of the key). This is called ciphertext malleability. There is no data integrity mechanism to detect this manipulation. Additional Analyst Notes: - CVE Program Container: References: - https://encsecurity.zendesk.com/hc/en-us/articles/4413283717265-Update-for-ENC-Software - https://pretalx.c3voc.de/rc3-2021-r3s/talk/QMYGR3/ - https://encsecurity.zendesk.com/hc/en-us/articles/7860771829533
CVE ID: CVE-2021-36753 State: PUBLISHED Published: 2021-07-15T19:07:08 Last Updated: 2024-08-04T01:01:59.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: sharkdp BAT before 0.18.2 executes less.exe from the current working directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/sharkdp/bat/releases/tag/v0.18.2 - https://github.com/sharkdp/bat/pull/1724 - https://github.com/sharkdp/bat/commit/bf2b2df9c9e218e35e5a38ce3d03cffb7c363956 - https://vuln.ryotak.me/advisories/53
CVE ID: CVE-2021-36754 State: PUBLISHED Published: 2021-07-27T05:35:37 Last Updated: 2024-08-04T01:01:58.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE 65535) that causes an out-of-bounds exception. Additional Analyst Notes: - CVE Program Container: References: - https://doc.powerdns.com/authoritative/security-advisories/index.html - http://www.openwall.com/lists/oss-security/2021/07/26/2 - https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2021-01.html
CVE ID: CVE-2021-36755 State: PUBLISHED Published: 2021-07-15T23:01:50 Last Updated: 2024-08-04T01:01:59.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nightscout Web Monitor (aka cgm-remote-monitor) 14.2.2 allows XSS via a crafted X-Forwarded-For header. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nightscout/cgm-remote-monitor/commit/68f3f90e30cc1da57f7e5069f9c4e1467973521f
CVE ID: CVE-2021-36756 State: PUBLISHED Published: 2021-10-27T14:26:00 Last Updated: 2024-08-04T01:01:59.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation. Additional Analyst Notes: - CVE Program Container: References: - https://cfengine.com/downloads/cfengine-enterprise/ - https://cfengine.com/blog/2021/cve-2021-38379-and-cve-2021-36756/
CVE ID: CVE-2021-36758 State: PUBLISHED Published: 2021-07-15T23:14:00 Last Updated: 2024-08-04T01:01:59.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: 1Password Connect server before 1.2 is missing validation checks, permitting users to create Secrets Automation access tokens that can be used to perform privilege escalation. Malicious users authorized to create Secrets Automation access tokens can create tokens that have access beyond what the user is authorized to access, but limited to the existing authorizations of the Secret Automation the token is created in. Additional Analyst Notes: - CVE Program Container: References: - https://support.1password.com/kb/202106/
CVE ID: CVE-2021-36759 State: REJECTED Published: N/A Last Updated: 2024-03-26T14:20:25.956085 Description: No description available.
CVE ID: CVE-2021-36760 State: PUBLISHED Published: 2021-12-07T20:48:56 Last Updated: 2024-08-04T01:01:59.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter modifying the URL that precedes the callback parameter. Once the username or password reset procedure is completed, the JavaScript code will be executed. (recoverpassword.do also has an open redirect issue for a similar reason.) Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/2021+Advisories - https://docs.wso2.com
s: - CVE Program Container: References: - https://docs.wso2.com/display/Security/2021+Advisories - https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1314
CVE ID: CVE-2021-36761 State: PUBLISHED Published: 2022-06-21T16:07:30 Last Updated: 2024-08-04T01:01:59.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GeoAnalytics feature in Qlik Sense April 2020 patch 4 allows SSRF. Additional Analyst Notes: - CVE Program Container: References: - https://www.cyberiskvision.com/advisory/
CVE ID: CVE-2021-36762 State: PUBLISHED Published: 2021-08-19T11:09:58 Last Updated: 2024-08-04T01:01:59.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd():tftpsrv.c TFTP packet processing function doesn't ensure that a filename is adequately '\0' terminated; therefore, a subsequent call to strlen for the filename might read out of bounds of the protocol packet buffer (if no '\0' byte exists within a reasonable range). Additional Analyst Notes: - CVE Program Container: References: - https://www.hcc-embedded.com/about/about-interniche - https://www.forescout.com/blog/new-critical-operational-t
ences: - https://www.hcc-embedded.com/about/about-interniche - https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/ - https://www.kb.cert.org/vuls/id/608209
CVE ID: CVE-2021-36763 State: PUBLISHED Published: 2021-08-03T15:49:10 Last Updated: 2024-08-04T01:01:58.779Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16803&token=0b8edf9276dc39ee52f43026c415c5b38085d90a&download=
CVE ID: CVE-2021-36764 State: PUBLISHED Published: 2021-08-04T13:35:31 Last Updated: 2024-08-04T01:01:59.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a Null pointer dereference in the affected CODESYS products and may result in a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16804&token=d8c89c887979b22fdfc9fd5c3aa3804bbb1ddbff&download=
CVE ID: CVE-2021-36765 State: PUBLISHED Published: 2021-08-04T13:22:18 Last Updated: 2024-08-04T01:01:59.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause a null pointer dereference in the downloaded vulnerable EtherNet/IP stack that is executed by the CODESYS Control runtime system. Additional Analyst Notes: - CVE Program Container: References: - https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16806&token=3b0c51de5a6e35bccbb413ddaaa56551ca5490f6&download=
CVE ID: CVE-2021-36766 State: PUBLISHED Published: 2021-07-27T05:38:42 Last Updated: 2024-08-04T01:01:59.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Concrete5 through 8.5.5 deserializes Untrusted Data. The vulnerable code is located within the controllers/single_page/dashboard/system/environment/logging.php Logging::update_logging() method. User input passed through the logFile request parameter is not properly sanitized before being used in a call to the file_exists() PHP function. This can be exploited by malicious users to inject arbitrary PHP objects into the application scope (PHP Object Injection via phar:// stream wrapper), allowing them to carry out a variety of a
into the application scope (PHP Object Injection via phar:// stream wrapper), allowing them to carry out a variety of attacks, such as executing arbitrary PHP code. Additional Analyst Notes: - CVE Program Container: References: - https://hackerone.com/reports/1063039 - http://seclists.org/fulldisclosure/2021/Jul/36 - http://packetstormsecurity.com/files/163564/Concrete5-8.5.5-Phar-Deserialization.html
CVE ID: CVE-2021-36767 State: PUBLISHED Published: 2021-10-08T14:22:57 Last Updated: 2024-08-04T01:01:59.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Digi RealPort through 4.10.490, authentication relies on a challenge-response mechanism that gives access to the server password, making the protection ineffective. An attacker may send an unauthenticated request to the server. The server will reply with a weakly-hashed version of the server's access password. The attacker may then crack this hash offline in order to successfully login to the server. Additional Analyst Notes: - CVE Program Container: References: - https://raw.githubusercontent.com/reidmefirst/vuln-disclosu