Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows GPSVC Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/ad
SA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31973
CVE ID: CVE-2021-31974 State: PUBLISHED Published: 2021-06-08T22:46:37 Last Updated: 2024-08-03T23:10:31.412Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2,
installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Denial of Service Description: Server for NFS Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31974
CVE ID: CVE-2021-31975 State: PUBLISHED Published: 2021-06-08T22:46:38 Last Updated: 2024-08-03T23:10:31.346Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2,
installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Information Disclosure Description: Server for NFS Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31975
CVE ID: CVE-2021-31976 State: PUBLISHED Published: 2021-06-08T22:46:39 Last Updated: 2024-08-03T23:10:31.453Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2,
installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Information Disclosure Description: Server for NFS Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31976
CVE ID: CVE-2021-31977 State: PUBLISHED Published: 2021-06-08T22:46:39 Last Updated: 2024-08-03T23:10:31.453Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: Denial of Service Description: Windows Hyper-V Denial of Service Vulnerability Additional Analyst Notes: - CVE Progr
es: Denial of Service Description: Windows Hyper-V Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31977
CVE ID: CVE-2021-31978 State: PUBLISHED Published: 2021-06-08T22:46:40 Last Updated: 2024-08-03T23:10:31.460Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Malware Protection Engine Problem Types: Denial of Service Description: Microsoft Defender Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31978
CVE ID: CVE-2021-31979 State: PUBLISHED Published: 2021-07-14T17:53:16.000Z Last Updated: 2025-10-21T23:25:41.354Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server
Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Elevation of Privilege Description: Windows Kernel Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guida
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31979
CVE ID: CVE-2021-31980 State: PUBLISHED Published: 2021-06-08T22:46:41 Last Updated: 2024-08-03T23:10:31.303Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Intune management extension Problem Types: Remote Code Execution Description: Microsoft Intune Management Extension Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31980
CVE ID: CVE-2021-31982 State: PUBLISHED Published: 2023-06-30T23:08:38.347Z Last Updated: 2025-02-28T20:47:16.510Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Edge (Chromium-based) Problem Types: Security Feature Bypass Description: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31982
CVE ID: CVE-2021-31983 State: PUBLISHED Published: 2021-06-08T22:46:41 Last Updated: 2024-08-03T23:10:31.411Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Paint 3D Problem Types: Remote Code Execution Description: Paint 3D Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31983 - https://www.zerodayinitiative.com/advisories/ZDI-21-658/
CVE ID: CVE-2021-31984 State: PUBLISHED Published: 2021-07-14T17:53:17 Last Updated: 2024-08-03T23:10:31.404Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Power BI Desktop Problem Types: Remote Code Execution Description: Power BI Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31984
CVE ID: CVE-2021-31985 State: PUBLISHED Published: 2021-06-08T22:46:42 Last Updated: 2024-08-03T23:10:31.407Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Malware Protection Engine Problem Types: Remote Code Execution Description: Microsoft Defender Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31985 - http://packetstormsecurity.com/files/163443/MpEngine-ASProtect-Embedded-Runtime-DLL-Memory-Corruption.html
CVE ID: CVE-2021-31986 State: PUBLISHED Published: 2021-10-05T21:45:24 Last Updated: 2024-11-08T08:21:21.927Z Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-122 Description: User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage. Additional Analyst Notes: - CVE Program Container: References: - https://www.axis.com/files/tech_notes/CVE-2021-31986.pdf
CVE ID: CVE-2021-31987 State: PUBLISHED Published: 2021-10-05T21:46:45 Last Updated: 2024-11-08T08:20:22.238Z Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-1286 Description: A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients. Additional Analyst Notes: - CVE Program Container: References: - https://www.axis.com/files/tech_notes/CVE-2021-31987.pdf
CVE ID: CVE-2021-31988 State: PUBLISHED Published: 2021-10-05T21:48:03 Last Updated: 2024-11-08T08:20:43.807Z Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-1286 Description: A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and include arbitrary SMTP headers in the generated test email. Additional Analyst Notes: - CVE Program Container: References: - https://www.axis.com/files/tech_notes/CVE-2021-31988.pdf
CVE ID: CVE-2021-31989 State: PUBLISHED Published: 2021-08-25T18:29:41 Last Updated: 2024-11-08T08:21:08.424Z Vendors: Axis Communications AB Products: AXIS Device Manager Problem Types: CWE-316 Description: A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memory dump may potentially contain credentials of connected Axis devices. Additional Analyst Notes: - CVE Program Container: References: - https://www.axis.com/files/tech_notes/CVE-2021-31989.pdf
CVE ID: CVE-2021-31996 State: PUBLISHED Published: 2021-05-03T06:01:21 Last Updated: 2024-08-03T23:10:31.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the algorithmica crate through 2021-03-07 for Rust. There is a double free in merge_sort::merge(). Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0053.html
CVE ID: CVE-2021-31997 State: PUBLISHED Published: 2021-06-10T11:35:11.799931Z Last Updated: 2024-09-16T23:22:17.307Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: openSUSE Products: Leap 15.2, Factory Problem Types: CWE-59 Description: A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalate from users postorius or postorius-admin to root. This issue affects: openSUSE Leap 15.2 python-postorius version 1.3.2-lp152.1.2 and prior versions. openSUSE Factory python-postorius version 1.3.4-2.1 and prior versions. Additional Analyst Notes: - CVE Program Container: References: -
python-postorius version 1.3.4-2.1 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1182407
CVE ID: CVE-2021-31998 State: PUBLISHED Published: 2021-06-10T11:25:11.178555Z Last Updated: 2024-09-16T22:40:51.163Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: SUSE, openSUSE Products: SUSE Linux Enterprise Server 11-SP3, openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 Problem Types: CWE-276 Description: A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local attackers to escalate their privileges from the news user to root. This issue affects: SUSE Linux Enterprise Server 11-SP3 inn version inn-2.4.2-170.21.3.1 and prior versions. ope
o root. This issue affects: SUSE Linux Enterprise Server 11-SP3 inn version inn-2.4.2-170.21.3.1 and prior versions. openSUSE Backports SLE-15-SP2 inn versions prior to 2.6.2. openSUSE Leap 15.2 inn versions prior to 2.6.2. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1182321
CVE ID: CVE-2021-31999 State: PUBLISHED Published: 2021-07-15T08:55:18.646427Z Last Updated: 2024-09-17T02:26:40.038Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Rancher Products: Rancher, SUSE Linux Enterprise Server 15 Problem Types: CWE-807 Description: A Reliance on Untrusted Inputs in a Security Decision vulnerability in Rancher allows users in the cluster to act as others users in the cluster by forging the "Impersonate-User" or "Impersonate-Group" headers. This issue affects: Rancher versions prior to 2.5.9. Rancher versions prior to 2.4.16. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=11
to 2.4.16. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1187084
CVE ID: CVE-2021-32000 State: PUBLISHED Published: 2021-07-28T09:35:11.535016Z Last Updated: 2024-09-16T17:48:09.451Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: SUSE, openSUSE Products: SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1, Factory Problem Types: Improper Link Resolution Before File Access ('Link Following') Description: A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue affects: SUSE Linux Enterprise
er 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue affects: SUSE Linux Enterprise Server 12 SP3 clone-master-clean-up version 1.6-4.6.1 and prior versions. SUSE Linux Enterprise Server 15 SP1 clone-master-clean-up version 1.6-3.9.1 and prior versions. openSUSE Factory clone-master-clean-up version 1.6-1.4 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1181050
CVE ID: CVE-2021-32001 State: PUBLISHED Published: 2021-07-28T09:25:11.153803Z Last Updated: 2024-09-16T22:10:22.048Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: SUSE Products: Rancher Problem Types: CWE-311 Description: K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying material (cluster certificate authority private keys, secrets encryption configuration passphrase, etc.) and decrypt it, without having to know the token value. This issue affects: SUSE Rancher K3s version v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1 and prior versions; RKE2 version v1.19.12+
e affects: SUSE Rancher K3s version v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1 and prior versions; RKE2 version v1.19.12+rke2r1, v1.20.8+rke2r1, v1.21.2+rke2r1 and prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1188453
CVE ID: CVE-2021-32002 State: PUBLISHED Published: 2021-08-05T20:33:27 Last Updated: 2024-08-03T23:17:27.964Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Secomea Products: SiteManager Problem Types: CWE-284, CWE-200 Description: Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network information and configuration of the SiteManager. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory
CVE ID: CVE-2021-32003 State: PUBLISHED Published: 2021-08-05T20:33:30 Last Updated: 2024-08-03T23:17:27.897Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Secomea Products: SiteManager Problem Types: CWE-523 Description: Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture credentials if the service is used after provisioning. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory
CVE ID: CVE-2021-32004 State: PUBLISHED Published: 2021-11-22T20:32:45 Last Updated: 2024-08-03T23:17:28.501Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-923 Description: This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/#4578
CVE ID: CVE-2021-32005 State: PUBLISHED Published: 2022-03-07T15:21:27 Last Updated: 2024-08-03T23:17:27.941Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: Secomea Products: SiteManager Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/#5017
CVE ID: CVE-2021-32006 State: PUBLISHED Published: 2022-03-07T15:08:16 Last Updated: 2024-08-03T23:17:28.226Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-275, CWE-274 Description: This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2021-32007 State: PUBLISHED Published: 2024-12-13T11:05:58.370Z Last Updated: 2024-12-23T19:14:49.546Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-200 Description: This issue affects: Secomea GateManager Version 9.5 and all prior versions. Protection Mechanism Failure vulnerability in web server of Secomea GateManager to potentially leak information to remote servers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2021-32008 State: PUBLISHED Published: 2022-03-04T21:20:10 Last Updated: 2024-08-03T23:17:27.898Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Secomea Products: GateManager Problem Types: CWE-552, CWE-22 Description: This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Improper Limitation of a Pathname to restricted directory, allows logged in GateManager admin to delete system Files or Directories. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory
CVE ID: CVE-2021-32009 State: PUBLISHED Published: 2022-03-11T17:53:58 Last Updated: 2024-08-03T23:17:28.154Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Secomea Products: GateManager Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory
CVE ID: CVE-2021-32010 State: PUBLISHED Published: 2022-05-04T13:45:03 Last Updated: 2024-08-03T23:17:28.463Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Secomea Products: SiteManager, LinkManager, GateManager Problem Types: CWE-326 Description: Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All versions prior to 9.7. Secomea LinkManager versions prior to 9.7. Secomea GateManager versions prior to 9.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-adv
9.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2021-32012 State: PUBLISHED Published: 2021-07-19T13:20:01 Last Updated: 2024-08-03T23:17:27.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 1 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://sheetjs.com/pro - https://www.oracle.com/security-alerts/cpujan2022.html - https://floqast.com/engineering-blog/post/fuzzing-and-parsing-securely/ - https://www.npmjs.com/package/xlsx/v/0.17.0
CVE ID: CVE-2021-32013 State: PUBLISHED Published: 2021-07-19T13:20:07 Last Updated: 2024-08-03T23:17:27.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js (issue 2 of 2). Additional Analyst Notes: - CVE Program Container: References: - https://sheetjs.com/pro - https://www.oracle.com/security-alerts/cpujan2022.html - https://floqast.com/engineering-blog/post/fuzzing-and-parsing-securely/ - https://www.npmjs.com/package/xlsx/v/0.17.0