Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-35344 State: PUBLISHED Published: 2021-12-03T19:36:15 Last Updated: 2024-08-04T00:33:51.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function BitStreamReader::getCurVal in bitStream.h. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/justdan96/tsMuxer/issues/432 - https://github.com/justdan96/tsMuxer/pull/439/commits/3a889a37b5b74a45025aca13ebda394b8f706ef3
CVE ID: CVE-2021-35346 State: PUBLISHED Published: 2021-12-03T19:36:16 Last Updated: 2024-08-04T00:33:51.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::short_term_ref_pic_set(int) in hevc.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/justdan96/tsMuxer/pull/422/files - https://github.com/justdan96/tsMuxer/issues/436
CVE ID: CVE-2021-35358 State: PUBLISHED Published: 2021-07-09T21:55:49 Last Updated: 2024-08-04T00:33:51.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross site scripting (XSS) vulnerability in dotAdmin/#/c/c_Images of dotCMS 21.05.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Title' and 'Filename' parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dotCMS/core/issues/20540
CVE ID: CVE-2021-35360 State: PUBLISHED Published: 2021-07-09T21:55:47 Last Updated: 2024-08-04T00:33:51.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/containers of dotCMS 21.05.1 allows attackers to execute arbitrary commands or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dotCMS/core/issues/20541
CVE ID: CVE-2021-35361 State: PUBLISHED Published: 2021-07-09T21:55:48 Last Updated: 2024-08-04T00:33:51.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/links of dotCMS 21.05.1 allows attackers to execute arbitrary commands or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dotCMS/core/issues/20541
CVE ID: CVE-2021-35368 State: PUBLISHED Published: 2021-11-05T00:00:00 Last Updated: 2024-08-04T00:33:51.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is affected by a Request Body Bypass via a trailing pathname. Additional Analyst Notes: - CVE Program Container: References: - https://owasp.org/www-project-modsecurity-core-rule-set/ - https://portswigger.net/daily-swig/lessons-learned-how-a-severe-vulnerability-in-the-owasp-modsecurity-core-rule-set-sparked-much-needed-change - https://portswigger.net/daily-swig/waf-bypass-severe-owasp-modsecurity-core-rule-set-bug-was-present-for
needed-change - https://portswigger.net/daily-swig/waf-bypass-severe-owasp-modsecurity-core-rule-set-bug-was-present-for-several-years - https://coreruleset.org/20210630/cve-2021-35368-crs-request-body-bypass/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6MS5GMNYHFFIBWLJW7N3XAD24SLF3PFZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IVYUJOKHDEXFTM2CZMEESJ6TZSPVNSSZ/ - https://lists.debian.org/debian-lts-announce/2023/01/msg00033.html - https://security.gentoo.org/glsa/202305-25
CVE ID: CVE-2021-35369 State: PUBLISHED Published: 2023-02-24T00:00:00.000Z Last Updated: 2025-03-12T13:53:33.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filtering_get_contents function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peacexie/imcat/issues/7
CVE ID: CVE-2021-35370 State: PUBLISHED Published: 2023-02-24T00:00:00.000Z Last Updated: 2025-03-12T15:42:31.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/peacexie/imcat/issues/8
CVE ID: CVE-2021-35377 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-03-06T15:47:38.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability found in VICIdial v2.14-610c and v.2.10-415c allows attackers execute arbitrary code via the /agc/vicidial.php, agc/vicidial-greay.php, and /vicidial/KHOMP_admin.php parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://vicidial.com - https://www.vicidial.org/VICIDIALforum/viewtopic.php?f=2&t=41634
CVE ID: CVE-2021-35380 State: PUBLISHED Published: 2022-02-15T21:17:02 Last Updated: 2024-08-04T00:33:51.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download (http://url:port/file?valore). Additional Analyst Notes: - CVE Program Container: References: - https://www.swascan.com/it/security-blog/ - https://www.swascan.com/solari-di-udine/ - https://www.exploit-db.com/exploits/50638
CVE ID: CVE-2021-35387 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T16:19:07.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/hospital-management-system-in-php - https://github.com/BigTiger2020/Hospital-Management-System/blob/main/Hospital%20Management%20System.md
CVE ID: CVE-2021-35388 State: PUBLISHED Published: 2022-10-28T00:00:00.000Z Last Updated: 2025-05-07T16:18:25.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hospital Management System v 4.0 is vulnerable to Cross Site Scripting (XSS) via /hospital/hms/admin/patient-search.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://phpgurukul.com/hospital-management-system-in-php - https://github.com/BigTiger2020/Hospital-Management-System/blob/main/xss.md
CVE ID: CVE-2021-35391 State: PUBLISHED Published: 2023-07-21T00:00:00 Last Updated: 2024-10-24T14:49:57.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary code via a crafted URL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://deskpro.com - https://sayaanalam.github.io/CVE-2021-35391.html
CVE ID: CVE-2021-35392 State: PUBLISHED Published: 2021-08-16T11:07:53 Last Updated: 2024-08-04T00:33:51.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The server is vulnerable to a heap buffer overflow that is present due to unsafe crafting of SSDP NOTIFY messages from received M-SEARCH messages ST header. Additional Analyst Notes: - CVE Program Container: References: - https://www.realtek.com/en/cu-1-en/cu-1-taiwan-en - https://www.realtek.com/images/safe-report/Re
ntainer: References: - https://www.realtek.com/en/cu-1-en/cu-1-taiwan-en - https://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2021-35392_35395.pdf - https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain
CVE ID: CVE-2021-35393 State: PUBLISHED Published: 2021-08-16T11:07:46 Last Updated: 2024-08-04T00:33:51.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The server is vulnerable to a stack buffer overflow vulnerability that is present due to unsafe parsing of the UPnP SUBSCRIBE/UNSUBSCRIBE Callback header. Successful exploitation of this vulnerability allows remote unauthenticated attackers to gain arbitrary code execution on the affected device. Additional Analyst No
y allows remote unauthenticated attackers to gain arbitrary code execution on the affected device. Additional Analyst Notes: - CVE Program Container: References: - https://www.realtek.com/en/cu-1-en/cu-1-taiwan-en - https://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2021-35392_35395.pdf - https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain
CVE ID: CVE-2021-35394 State: PUBLISHED Published: 2021-08-16T11:07:38.000Z Last Updated: 2025-10-21T23:25:37.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securityfocus.com/archive/1/534765 - https://www.realtek.com/en/cu-1-en/cu-1-taiwan-en - https://www.realt
- https://www.securityfocus.com/archive/1/534765 - https://www.realtek.com/en/cu-1-en/cu-1-taiwan-en - https://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2021-35392_35395.pdf - https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain
CVE ID: CVE-2021-35395 State: PUBLISHED Published: 2021-08-16T11:07:29.000Z Last Updated: 2025-10-21T23:25:37.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point. Two versions of this management interface exists: one based on Go-Ahead named webs and another based on Boa named boa. Both of them are affected by these vulnerabilities. Specifically, these binaries are vulnerable to the following issues: - stack buffer overflow in formRebootCheck due to unsafe copy of submit-url parameter - stack buffer overflow in formWsc due to uns
fer overflow in formRebootCheck due to unsafe copy of submit-url parameter - stack buffer overflow in formWsc due to unsafe copy of submit-url parameter - stack buffer overflow in formWlanMultipleAP due to unsafe copy of submit-url parameter - stack buffer overflow in formWlSiteSurvey due to unsafe copy of ifname parameter - stack buffer overflow in formStaticDHCP due to unsafe copy of hostname parameter - stack buffer overflow in formWsc due to unsafe copy of 'peerPin' parameter - arbitrary command execution in formSysCmd via the sysCmd parameter - arbitrary command injection in formWsc via the 'peerPin' parameter Exploitability of identified issues will differ based on what the end vendor/
ion in formWsc via the 'peerPin' parameter Exploitability of identified issues will differ based on what the end vendor/manufacturer did with the Realtek SDK webserver. Some vendors use it as-is, others add their own authentication implementation, some kept all the features from the server, some remove some of them, some inserted their own set of features. However, given that Realtek SDK implementation is full of insecure calls and that developers tends to re-use those examples in their custom code, any binary based on Realtek SDK webserver will probably contains its own set of issues on top of the Realtek ones (if kept). Successful exploitation of these issues allows remote attackers to gai
t of issues on top of the Realtek ones (if kept). Successful exploitation of these issues allows remote attackers to gain arbitrary code execution on the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.realtek.com/en/cu-1-en/cu-1-taiwan-en - https://www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2021-35392_35395.pdf - https://www.iot-inspector.com/blog/advisory-multiple-issues-realtek-sdk-iot-supply-chain
CVE ID: CVE-2021-35397 State: PUBLISHED Published: 2021-08-04T10:41:07 Last Updated: 2024-08-04T00:40:45.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: A path traversal vulnerability in the static router for Drogon from 1.0.0-beta14 to 1.6.0 could allow an unauthenticated, remote attacker to arbitrarily read files. The vulnerability is due to lack of proper input validation for requested path. An attacker could exploit this vulnerability by sending crafted HTTP request with specific path to read. Successful exploitation could allow the attacker to read files that should be restricted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/an-tao/
s that should be restricted. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/an-tao/drogon - https://github.com/an-tao/drogon/blob/834e3eabdd0441ad2bc80c02e8bbfc3b8312c213/lib/src/StaticFileRouter.cc#L62-L67 - https://github.com/an-tao/drogon/wiki/ENG-02-Installation - https://github.com/an-tao/drogon/wiki/ENG-03-Quick-Start#Static-Site
CVE ID: CVE-2021-35413 State: PUBLISHED Published: 2021-12-03T21:07:04 Last Updated: 2024-08-04T00:40:45.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#authenticated-remote-code-execution-in-import-file - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-66-2021-05-21-High-impact-very-low-risk-Authenticated-RCE-in-accessory-script - https://github.com/
ecurity_issues#Issue-66-2021-05-21-High-impact-very-low-risk-Authenticated-RCE-in-accessory-script - https://github.com/chamilo/chamilo-lms/commit/2e5c004b57d551678a1815500ef91524ba7bb757 - https://github.com/chamilo/chamilo-lms/commit/905a21037ebc9bc5369f0fb380177cb56f496f5c
CVE ID: CVE-2021-35414 State: PUBLISHED Published: 2021-12-03T21:07:06 Last Updated: 2024-08-04T00:40:45.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#unauthenticated-sql-injection-in-compilatio-module - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-59-2021-05-13-High-impact-low-risk-Unauthenticated-SQL-injection-vulnerability-when-a-module-is-enabled - https://github.com/chamilo/chamilo-lms/commit/36149c
uthenticated-SQL-injection-vulnerability-when-a-module-is-enabled - https://github.com/chamilo/chamilo-lms/commit/36149c1ff99973840a809bb865f23e1b23d6df00 - https://github.com/chamilo/chamilo-lms/commit/f398b5b45c019f873a54fe25c815dbaaf963728b - https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#unauthenticated-sql-injection-2-in-plugin - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-65-2021-05-15-High-impact-very-high-risk-Unauthenticated-SQL-injection-in-plugin - https://github.com/chamilo/chamilo-lms/commit/6a98e32bb04aa66cbd0d29ad74d7d20cc7e7e9c5
CVE ID: CVE-2021-35415 State: PUBLISHED Published: 2021-12-03T21:07:07 Last Updated: 2024-08-04T00:40:45.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the course "Title" and "Content" fields. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#multiple-stored-cross-site-scripting-vulnerabilities - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-61-2021-05-14-Low-impact-very-low-risk-XSS-in-course-name - https://support.chamilo.org/projects/1/wiki/Secu
ssues#Issue-61-2021-05-14-Low-impact-very-low-risk-XSS-in-course-name - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-62-2021-05-14-Low-impact-low-risk-XSS-in-course-description - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-63-2021-05-14-Low-impact-moderate-risk-XSS-in-course-documents - https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-64-2021-05-14-Low-impact-low-risk-XSS-in-course-document-title-on-upload - https://github.com/chamilo/chamilo-lms/commit/fd54f6194285f949c86060d3b2a7967b43689480 - https://github.com/chamilo/chamilo-lms/commit/19189a91d1eac9aa204b9439b82e3e73c8ac2e03 - https://github.com/chamilo/chamilo-lms/commit/cf84
chamilo/chamilo-lms/commit/19189a91d1eac9aa204b9439b82e3e73c8ac2e03 - https://github.com/chamilo/chamilo-lms/commit/cf84be1ca1d9a08ad1341dfbf8df475b13a89072
CVE ID: CVE-2021-35437 State: PUBLISHED Published: 2023-11-16T00:00:00 Last Updated: 2024-08-29T14:57:45.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/GHA193/Vulns/blob/main/lmxcms%20injection.md
CVE ID: CVE-2021-35438 State: PUBLISHED Published: 2021-06-23T14:20:08 Last Updated: 2024-08-04T00:40:45.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets/ipcalc-result.php and app/tools/ip-calculator/result.php of the IP calculator. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/phpipam/phpipam/issues/3351
CVE ID: CVE-2021-35440 State: PUBLISHED Published: 2021-07-06T14:44:39 Last Updated: 2024-08-04T00:40:45.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smashing 1.3.4 is vulnerable to Cross Site Scripting (XSS). A URL for a widget can be crafted and used to execute JavaScript on the victim's computer. The JavaScript code can then steal data available in the session/cookies depending on the user environment (e.g. if re-using internal URL's for deploying, or cookies that are very permissive) private information may be retrieved by the attacker. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Smashing/smashing/pull/186 - https://github.com/Sm
lyst Notes: - CVE Program Container: References: - https://github.com/Smashing/smashing/pull/186 - https://github.com/Smashing/smashing/pull/186#issuecomment-871727614 - https://github.com/Smashing/smashing/blob/ad7325f159f89854ca4e7d94e7be9bee507b6d46/CHANGELOG.md
CVE ID: CVE-2021-35448 State: PUBLISHED Published: 2021-06-24T19:43:50 Last Updated: 2024-08-04T00:40:45.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using the Image Transfer Folder feature to navigate to cmd.exe. It binds to local ports to listen for incoming connections. Additional Analyst Notes: - CVE Program Container: References: - https://deathflash.ml/blog/remote-mouse-lpe - https://www.exploit-db.com/exploits/50047 - https://leobreaker1411.github.io/blog/cve-2021-35448
CVE ID: CVE-2021-35449 State: PUBLISHED Published: 2021-07-19T14:16:42 Last Updated: 2024-08-04T00:40:46.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing during the add printer process, resulting in escalation of privileges to SYSTEM. Additional Analyst Notes: - CVE Program Container: References: - http://support.lexmark.com/alerts/ - https://raw.githubusercontent.com/jacob-baines/vuln_disc
m Container: References: - http://support.lexmark.com/alerts/ - https://raw.githubusercontent.com/jacob-baines/vuln_disclosure/main/vuln_2021_02.txt - http://packetstormsecurity.com/files/163811/Lexmark-Driver-Privilege-Escalation.html
CVE ID: CVE-2021-35450 State: PUBLISHED Published: 2021-08-02T19:03:30 Last Updated: 2024-08-04T00:40:45.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Server Side Template Injection in the Entando Admin Console 6.3.9 and before allows a user with privileges to execute FreeMarker template with command execution via freemarker.template.utility.Execute Additional Analyst Notes: - CVE Program Container: References: - https://github.com/entando/entando-admin-console - https://www.swascan.com/entando/
CVE ID: CVE-2021-35451 State: PUBLISHED Published: 2021-07-07T13:30:23 Last Updated: 2024-08-04T00:40:46.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text into user browser via the Web application. Additional Analyst Notes: - CVE Program Container: References: - http://teradici.com - https://gist.github.com/rvismit/578f9f98d79f22d81a5e45dbbc0b4fa4
CVE ID: CVE-2021-35452 State: PUBLISHED Published: 2022-01-10T00:00:00 Last Updated: 2024-08-04T00:40:46.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Incorrect Access Control vulnerability exists in libde265 v1.0.8 due to a SEGV in slice.cc. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/strukturag/libde265/issues/298 - https://lists.debian.org/debian-lts-announce/2022/12/msg00027.html - https://www.debian.org/security/2023/dsa-5346
CVE ID: CVE-2021-35456 State: PUBLISHED Published: 2021-06-28T14:27:42 Last Updated: 2024-08-04T00:40:45.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Pet Shop We App 1.0 is vulnerable to remote SQL injection and shell upload Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14839/online-pet-shop-we-app-using-php-and-paypal-free-source-code.html - https://packetstormsecurity.com/files/163282/Online-Pet-Shop-We-App-1.0-SQL-Injection-Shell-Upload.html
CVE ID: CVE-2021-35458 State: PUBLISHED Published: 2021-07-27T05:24:58 Last Updated: 2024-08-04T00:40:45.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Pet Shop We App 1.0 is vulnerable to Union SQL Injection in products.php (aka p=products) via the c or s parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14839/online-pet-shop-we-app-using-php-and-paypal-free-source-code.html - http://packetstormsecurity.com/files/163282/Online-Pet-Shop-We-App-1.0-SQL-Injection-Shell-Upload.html - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-35458