Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
, WLI2-TX1-AMG54 firmware Ver.2.53 and prior, WLI2-TX1-G54 firmware Ver.2.20 and prior, WLI3-TX1-AMG54 firmware Ver.2.53 and prior, WLI3-TX1-G54 firmware Ver.2.53 and prior, WLI-T1-B11 firmware Ver.2.20 and prior, WLI-TX1-G54 firmware Ver.2.20 and prior, WVR-G54-NF firmware Ver.2.02 and prior, WZR-G108 firmware Ver.2.41 and prior, WZR-G54 firmware Ver.2.41 and prior, WZR-HP-G54 firmware Ver.2.41 and prior, WZR-RS-G54 firmware Ver.2.55 and prior, and WZR-RS-G54HP firmware Ver.2.55 and prior) allows a remote attacker to enable the debug option and to execute arbitrary code or OS commands, change the configuration, and cause a denial of service (DoS) condition. Additional Analyst Notes: - CVE P
OS commands, change the configuration, and cause a denial of service (DoS) condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.buffalo.jp/news/detail/20210427-02.html - https://jvn.jp/en/vu/JVNVU90274525/index.html
CVE ID: CVE-2021-20717 State: PUBLISHED Published: 2021-05-10T09:10:14 Last Updated: 2024-08-03T17:53:21.816Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in EC-CUBE 4.0.0 to 4.0.5 allows a remote attacker to inject a specially crafted script in the specific input field of the EC web site which is created using EC-CUBE. As a result, it may lead to an arbitrary script execution on the administrator's web browser. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/news/detail.php?news_id=384 - https://www.ec-cube.net/news/detail.php?news_id=383 - https://jvn.jp/en/jp/JVN9755
ube.net/news/detail.php?news_id=384 - https://www.ec-cube.net/news/detail.php?news_id=383 - https://jvn.jp/en/jp/JVN97554111/index.html
CVE ID: CVE-2021-20718 State: PUBLISHED Published: 2021-05-20T01:15:21 Last Updated: 2024-08-03T17:53:21.241Z Vendors: ZmartZone Products: mod_auth_openidc Problem Types: Denial-of-service (DoS) Description: mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.zmartzone.eu/ - https://github.com/zmartzone/mod_auth_openidc - https://jvn.jp/en/jp/JVN49704918/index.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FV4KYMQWPS3I2QPW2C253MLIAFGBZPLK/ - https://lists.fedoraproject.org/archives/list
unce%40lists.fedoraproject.org/message/FV4KYMQWPS3I2QPW2C253MLIAFGBZPLK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5HJK366TLFEOIYWTHQSZO24MSDPBXHJU/ - https://www.oracle.com/security-alerts/cpujan2022.html
CVE ID: CVE-2021-20719 State: PUBLISHED Published: 2021-05-20T01:15:21 Last Updated: 2024-08-03T17:53:21.782Z Vendors: NIPPON ANTENNA Co.,Ltd. Products: RFNTPS Problem Types: OS Command Injection Description: RFNTPS firmware versions System_01000004 and earlier, and Web_01000004 and earlier allow an attacker on the same network segment to execute arbitrary OS commands with a root privilege via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.nippon-antenna.co.jp/ja/news/news/news8217702780390204428.html - https://jvn.jp/en/jp/JVN13076220/index.html
CVE ID: CVE-2021-20720 State: PUBLISHED Published: 2021-05-20T01:15:22 Last Updated: 2024-08-03T17:53:21.250Z Vendors: kujirahand Products: KonaWiki2 Problem Types: SQL Injection Description: SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kujirahand.com/konawiki/ - https://jvn.jp/en/jp/JVN34232719/index.html
CVE ID: CVE-2021-20721 State: PUBLISHED Published: 2021-05-20T01:15:23 Last Updated: 2024-08-03T17:53:21.815Z Vendors: kujirahand Products: KonaWiki2 Problem Types: Unrestricted upload of file with dangerous type Description: KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed. Additional Analyst Notes: - CVE Program Container: References: - https://kujirahand.com/konawiki/ - https://jvn.jp/en/jp/JVN34232719/index.html
CVE ID: CVE-2021-20722 State: PUBLISHED Published: 2021-05-24T03:20:29 Last Updated: 2024-08-03T17:53:21.807Z Vendors: FUJITSU LIMITED and PFU LIMITED Products: The installers of ScanSnap Manager and the Software Download Installer Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Cont
invoking the installer via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://scansnap.fujitsu.com/global/dl/ - https://jvn.jp/en/jp/JVN65733194/index.html
CVE ID: CVE-2021-20723 State: PUBLISHED Published: 2021-05-24T03:20:30 Last Updated: 2024-08-03T17:53:21.806Z Vendors: PHP Factory Products: [MailForm01] free edition Problem Types: Cross-site scripting Description: Reflected cross-site scripting vulnerability in [MailForm01] free edition (versions which the last updated date listed at the top of descriptions in the program file is from 2014 December 12 to 2018 July 27) allows a remote attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.php-factory.net/mail/01.php - https://jvn.jp/en/jp/JVN53910556/index.html
CVE ID: CVE-2021-20724 State: PUBLISHED Published: 2021-05-24T03:20:30 Last Updated: 2024-08-03T17:53:21.809Z Vendors: PHP Factory Products: [Telop01] free edition Problem Types: Cross-site scripting Description: Reflected cross-site scripting vulnerability in the admin page of [Telop01] free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.php-factory.net/telop/01.php - https://jvn.jp/en/jp/JVN53910556/index.html
CVE ID: CVE-2021-20725 State: PUBLISHED Published: 2021-05-24T03:20:31 Last Updated: 2024-08-03T17:53:21.797Z Vendors: PHP Factory Products: [Calendar01] free edition Problem Types: Cross-site scripting Description: Reflected cross-site scripting vulnerability in the admin page of [Calendar01] free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.php-factory.net/calendar/01.php - https://jvn.jp/en/jp/JVN53910556/index.html
CVE ID: CVE-2021-20726 State: PUBLISHED Published: 2021-05-24T03:20:32 Last Updated: 2024-08-03T17:53:21.826Z Vendors: Overwolf Ltd. Products: The Installer of Overwolf Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.overwolf.com/ - https://jvn.jp/en/jp/JVN78254777/index.html
CVE ID: CVE-2021-20727 State: PUBLISHED Published: 2021-05-27T08:05:14 Last Updated: 2024-08-03T17:53:21.783Z Vendors: Hendrik Erz Products: Zettlr Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Zettlr from 0.20.0 to 1.8.8 allows an attacker to execute an arbitrary script by loading a file or code snippet containing an invalid iframe into Zettlr. Additional Analyst Notes: - CVE Program Container: References: - https://www.zettlr.com/ - https://github.com/Zettlr/Zettlr - https://jvn.jp/en/jp/JVN98239374/index.html
CVE ID: CVE-2021-20728 State: PUBLISHED Published: 2021-06-09T01:05:22 Last Updated: 2024-08-03T17:53:21.849Z Vendors: NTT Resonant Incorporated Products: goo blog App Problem Types: Improper Access Control Description: Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. Additional Analyst Notes: - CVE Program Container: References: - https://blog.goo.ne.jp/staffblog/e/d84a6b220222462094728301782885db - https://jvn.jp/en/jp/JVN91691168/index.html
CVE ID: CVE-2021-20729 State: PUBLISHED Published: 2022-03-31T07:20:29 Last Updated: 2024-08-03T17:53:21.921Z Vendors: pfSense Products: pfSense CE and pfSense Plus Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions 2.5.2 and earlier, and pfSense Plus software versions 21.05 and earlier) allows a remote attacker to inject an arbitrary script via a malicious URL. Additional Analyst Notes: - CVE Program Container: References: - https://docs.netgate.com/downloads/pfSense-SA-21_02.captiveportal.asc - https://jvn.jp/en/jp/JVN87751554/index.html
CVE ID: CVE-2021-20730 State: PUBLISHED Published: 2021-06-09T01:05:23 Last Updated: 2024-08-03T17:53:21.832Z Vendors: BUFFALO INC. Products: WSR-1166DHP3 and WSR-1166DHP4 Problem Types: Improper server certificate verification Description: Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain configuration information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.buffalo.jp/news/detail/20210531-01.html - https://jvn.jp/en/vu/JVNVU92862829/index.html
CVE ID: CVE-2021-20731 State: PUBLISHED Published: 2021-06-09T01:05:24 Last Updated: 2024-08-03T17:53:21.822Z Vendors: BUFFALO INC. Products: WSR-1166DHP3 and WSR-1166DHP4 Problem Types: OS Command Injection Description: WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.buffalo.jp/news/detail/20210531-01.html - https://jvn.jp/en/vu/JVNVU92862829/index.html
CVE ID: CVE-2021-20732 State: PUBLISHED Published: 2021-06-09T01:05:25 Last Updated: 2024-08-03T17:53:21.907Z Vendors: ATOM tech Inc. Products: ATOM Problem Types: Improper server certificate verification Description: The ATOM (ATOM - Smart life App for Android versions prior to 1.8.1 and ATOM - Smart life App for iOS versions prior to 1.8.2) does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on encrypted communication via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://www.atomtech.co.jp/news/news/2055/ - https://jvn.jp/en/jp/JVN64064138/index.html
CVE ID: CVE-2021-20733 State: PUBLISHED Published: 2021-06-22T01:35:45 Last Updated: 2024-08-03T17:53:21.840Z Vendors: asken Inc. Products: あすけんダイエット (asken diet) for Android Problem Types: Improper Authorization in Handler for Custom URL Scheme Description: Improper authorization in handler for custom URL scheme vulnerability in あすけんダイエット (asken diet) for Android versions from v.3.0.0 to v.4.2.x allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. Additional Analyst Notes: - CVE Program Container: References: - https://www.asken.jp/s/login/?to=/information - https://jvn.jp/en/jp/JVN38034268/index.html
CVE ID: CVE-2021-20734 State: PUBLISHED Published: 2021-06-22T01:35:46 Last Updated: 2024-08-03T17:53:21.891Z Vendors: Collne Inc. Products: Welcart e-Commerce Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbitrary script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.welcart.com/archives/14039.html - https://jvn.jp/en/jp/JVN70566757/index.html
CVE ID: CVE-2021-20735 State: PUBLISHED Published: 2021-06-22T01:35:48 Last Updated: 2024-08-03T17:53:21.843Z Vendors: ETUNA Products: ETUNA EC-CUBE plugins Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in ETUNA EC-CUBE plugins (Delivery slip number plugin (3.0 series) 1.0.10 and earlier, Delivery slip number csv bulk registration plugin (3.0 series) 1.0.8 and earlier, and Delivery slip number mail plugin (3.0 series) 1.0.8 and earlier) allows remote attackers to inject an arbitrary script by executing a specific operation on the management page of EC-CUBE. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/release/d
ment page of EC-CUBE. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/release/detail.php?release_id=5088 - https://www.ec-cube.net/release/detail.php?release_id=5087 - https://www.ec-cube.net/release/detail.php?release_id=5089 - https://jvn.jp/en/jp/JVN79254445/index.html
CVE ID: CVE-2021-20736 State: PUBLISHED Published: 2021-06-22T01:35:50 Last Updated: 2024-08-03T17:53:21.832Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: NoSQL injection Description: NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the information stored in the database via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/security/2021/06/14/vulnerability/growi-nosql-ingection/ - https://jvn.jp/en/jp/JVN95457785/index.html
CVE ID: CVE-2021-20737 State: PUBLISHED Published: 2021-06-22T01:35:51 Last Updated: 2024-08-03T17:53:21.843Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Improper authentication Description: Improper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to view the unauthorized pages without access privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/security/2021/06/14/vulnerability/growi-nosql-ingection/ - https://jvn.jp/en/jp/JVN95457785/index.html
CVE ID: CVE-2021-20738 State: PUBLISHED Published: 2021-07-07T07:05:24 Last Updated: 2024-08-03T17:53:21.857Z Vendors: ELECOM CO.,LTD. Products: WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA Problem Types: Information Disclosure Description: WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210706-01/ - https://jvn.jp/en/vu/JVNVU94260088/index.html
CVE ID: CVE-2021-20739 State: PUBLISHED Published: 2021-07-07T07:05:26 Last Updated: 2024-08-03T17:53:21.835Z Vendors: ELECOM CO.,LTD. Products: WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S Problem Types: OS Command Injection Description: WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/2021070
vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.elecom.co.jp/news/security/20210706-01/ - https://jvn.jp/en/vu/JVNVU94260088/index.html
CVE ID: CVE-2021-20740 State: PUBLISHED Published: 2021-06-28T00:50:31 Last Updated: 2024-08-03T17:53:21.922Z Vendors: Hitachi and NEC Corporation Products: Hitachi Virtual File Platform and NEC Storage M Series NAS Gateway which uses Hitachi Virtual File Platform Problem Types: OS Command Injection Description: Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Gateway Nh4a/Nh8a versions prior to FOS 5.5.3-08(NEC2.5.4a) and Nh4b/Nh8b, Nh4c/Nh8c versions prior to FOS 6.4.3-08(NEC3.4.2) allow remote authenticated attackers to execute arbitrary OS commands with root privileges via unspecified vectors. Additional Analyst Notes:
ated attackers to execute arbitrary OS commands with root privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.hitachi.co.jp/products/it/storage-solutions/global/sec_info/2021/2021_306.html - https://jpn.nec.com/security-info/secinfo/nv21-011.html - https://jvn.jp/en/jp/JVN21298724/index.html
CVE ID: CVE-2021-20741 State: PUBLISHED Published: 2021-06-22T01:35:53 Last Updated: 2024-08-03T17:53:21.842Z Vendors: Hitachi Products: Hitachi Application Server Help Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Hitachi Application Server Help (Hitachi Application Server V10 Manual (Windows) version 10-11-01 and earlier and Hitachi Application Server V10 Manual (UNIX) version 10-11-01 and earlier) allows a remote attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2021-104 - https://jvn.jp/en/j
rences: - https://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2021-104 - https://jvn.jp/en/jp/JVN03776901/index.html
CVE ID: CVE-2021-20742 State: PUBLISHED Published: 2021-06-22T01:35:55 Last Updated: 2024-08-03T17:53:21.884Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE Business form output plugin (for EC-CUBE 3.0 series) Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in EC-CUBE Business form output plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script via unspecified vector. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/products/detail.php?product_id=959 - https://jvn.jp/en/jp/JVN57524494/index.html
CVE ID: CVE-2021-20743 State: PUBLISHED Published: 2021-06-22T01:35:56 Last Updated: 2024-08-03T17:53:21.904Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series) Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.4 allows a remote attacker to inject an arbitrary script by leading a user to a specially crafted page and to perform a specific operation. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN57524494/index.html - https://www.ec-cube.net/products/detail.php?prod
Container: References: - https://jvn.jp/en/jp/JVN57524494/index.html - https://www.ec-cube.net/products/detail.php?product_id=960
CVE ID: CVE-2021-20744 State: PUBLISHED Published: 2021-06-22T01:35:58 Last Updated: 2024-08-03T17:53:21.885Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page and to perform a specific operation. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN57524494/index.html - https://www.ec-cube.net/products/detail.php?produc
ontainer: References: - https://jvn.jp/en/jp/JVN57524494/index.html - https://www.ec-cube.net/products/detail.php?product_id=1070
CVE ID: CVE-2021-20745 State: PUBLISHED Published: 2021-06-28T00:50:33 Last Updated: 2024-08-03T17:53:21.924Z Vendors: Takuya Matsuyama Products: Inkdrop Problem Types: OS Command Injection Description: Inkdrop versions prior to v5.3.1 allows an attacker to execute arbitrary OS commands on the system where it runs by loading a file or code snippet containing an invalid iframe into Inkdrop. Additional Analyst Notes: - CVE Program Container: References: - https://www.inkdrop.app/ - https://docs.inkdrop.app/releases/5.3.1 - https://jvn.jp/en/jp/JVN29949691/index.html
CVE ID: CVE-2021-20746 State: PUBLISHED Published: 2021-06-28T00:50:35 Last Updated: 2024-08-03T17:53:21.923Z Vendors: Hector Cabrera Products: WordPress Popular Posts Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wordpress-popular-posts/ - https://cabrerahector.com/wordpress/wordpress-popular-posts-5-3-improved-php-8-support-retina-display-support-and-more/#minor-updates-and-hotfixes - https://cabrerahector.com/ - https://j
roved-php-8-support-retina-display-support-and-more/#minor-updates-and-hotfixes - https://cabrerahector.com/ - https://jvn.jp/en/jp/JVN63066062/index.html
CVE ID: CVE-2021-20747 State: PUBLISHED Published: 2021-07-14T01:20:23 Last Updated: 2024-08-03T17:53:21.979Z Vendors: Retty Inc. Products: Retty App Problem Types: Improper Authorization in Handler for Custom URL Scheme Description: Improper authorization in handler for custom URL scheme vulnerability in Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1PBYqIsK8QxEEhGJ4SEgpY7iZw3RTTDho/view - https://jvn.jp/en/jp/JVN26891339/index.html
CVE ID: CVE-2021-20748 State: PUBLISHED Published: 2021-07-14T01:20:25 Last Updated: 2024-08-03T17:53:22.042Z Vendors: Retty Inc. Products: Retty App Problem Types: Use of Hard-coded Credentials Description: Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1PBYqIsK8QxEEhGJ4SEgpY7iZw3RTTDho/view - https://jvn.jp/en/jp/JVN26891339/index.html
CVE ID: CVE-2021-20749 State: PUBLISHED Published: 2021-06-28T00:50:37 Last Updated: 2024-08-03T17:53:22.045Z Vendors: nendeb Products: 'Fudousan plugin' series Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Fudousan plugin ver5.7.0 and earlier, Fudousan Plugin Pro Single-User Type ver5.7.0 and earlier, and Fudousan Plugin Pro Multi-User Type ver5.7.0 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://nendeb.jp/fudou - https://www.nendeb-biz.jp/2021-0617-1200/ - https://jvn.jp/en/jp/JVN93799513/index.html