Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-26543 State: PUBLISHED Published: 2021-05-06T12:28:10 Last Updated: 2024-08-03T20:26:25.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "gitDiff" function in Wayfair git-parse <=1.0.4 has a command injection vulnerability. Clients of the git-parse library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. The issue has been resolved in version 1.0.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.npmjs.com/package/git-parse - https://advisory.checkmarx.net/advisory/CX-2020-4302
CVE ID: CVE-2021-26544 State: PUBLISHED Published: 2021-02-20T09:00:15.000Z Last Updated: 2025-02-13T16:27:53.277Z Vendors: Apache Software Foundation Products: Apache Livy (Incubating) Problem Types: CWE-79 Description: Livy server version 0.7.0-incubating (only) is vulnerable to a cross site scripting issue in the session name. A malicious user could use this flaw to access logs and results of other users' sessions and run jobs with their privileges. This issue is fixed in Livy 0.7.1-incubating. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/apache/incubator-livy/commit/4d8a912699683b973eee76d4e91447d769a0cb0d - https://lists.apache.org/thread.html/r2db
ub.com/apache/incubator-livy/commit/4d8a912699683b973eee76d4e91447d769a0cb0d - https://lists.apache.org/thread.html/r2db14e7fd1e5ec2519e8828d43529bad623d75698cc7918af3a3f3ed%40%3Cuser.livy.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/02/20/1
CVE ID: CVE-2021-26549 State: PUBLISHED Published: 2021-02-09T19:03:25 Last Updated: 2024-08-03T20:26:25.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XSS issue was discovered in SmartFoxServer 2.17.0. Input passed to the AdminTool console is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ - https://www.smartfoxserver.com - http://packetstormsecurity.com/files/161335/SmartFoxServer-2X-2.17.0-God-Mode-Console-WebSocket-Cross-Site-Scripting.h
- http://packetstormsecurity.com/files/161335/SmartFoxServer-2X-2.17.0-God-Mode-Console-WebSocket-Cross-Site-Scripting.html - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5626.php
CVE ID: CVE-2021-26550 State: PUBLISHED Published: 2021-02-09T19:07:23 Last Updated: 2024-08-03T20:26:25.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SmartFoxServer 2.17.0. Cleartext password disclosure can occur via /config/server.xml. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ - https://www.smartfoxserver.com/ - http://packetstormsecurity.com/files/161337/SmartFoxServer-2X-2.17.0-Credential-Disclosure.html - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5627.php
CVE ID: CVE-2021-26551 State: PUBLISHED Published: 2021-02-09T19:11:42 Last Updated: 2024-08-03T20:26:25.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and editing /config/admin/admintool.xml to enable the Console module. Additional Analyst Notes: - CVE Program Container: References: - https://www.zeroscience.mk/en/vulnerabilities/ - https://www.smartfoxserver.com - http://packetstormsecurity.com/files/161340/SmartFoxServer-2X-2.17.0-Remote-Code-Execution.html
CVE ID: CVE-2021-26556 State: PUBLISHED Published: 2021-10-07T01:00:12 Last Updated: 2024-08-03T20:26:25.523Z Vendors: Octopus Deploy Products: Octopus Server Problem Types: Local privilege escalation in Octopus Server (Windows) Description: When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.octopus.com/adv/2021-01---Local-privilege-escalation-in-Octopus-Server-%28CVE-2021-26556%29.1733296189.html
CVE ID: CVE-2021-26557 State: PUBLISHED Published: 2021-10-07T01:00:13 Last Updated: 2024-08-03T20:26:25.487Z Vendors: Octopus Deploy Products: Octopus Tentacle Problem Types: Local privilege escalation in Octopus Tentacle (Windows) Description: When Octopus Tentacle is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.octopus.com/adv/2021-02---Local-privilege-escalation-in-Octopus-Tentacle-%28CVE-2021-26557%29.1732870264.html
CVE ID: CVE-2021-26558 State: PUBLISHED Published: 2021-11-11T09:35:09 Last Updated: 2024-08-03T20:26:25.540Z Vendors: Apache Software Foundation Products: Apache ShardingSphere-UI Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/4gzkm1zb6c97v9gl8lcz8ll5xr8o484c - http://www.openwall.com/lists/oss-security/2021/11/11/1
CVE ID: CVE-2021-26559 State: PUBLISHED Published: 2021-02-17T14:15:14.000Z Last Updated: 2025-02-13T16:27:54.002Z Vendors: Apache Software Foundation Products: Apache Airflow Problem Types: CWE-284 Description: Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow allows users with Viewer or User role to get Airflow Configurations including sensitive information even when `[webserver] expose_config` is set to `False` in `airflow.cfg`. This allowed a privilege escalation attack. This issue affects Apache Airflow 2.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r3b3787700279ec361308cbefb7c2cce2acb268
tes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r3b3787700279ec361308cbefb7c2cce2acb26891a12ce864e4a13c8d%40%3Cusers.airflow.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/02/17/1 - https://lists.apache.org/thread.html/rd142565996d7ee847b9c14b8a9921dcf80bc6bc160e3d9dca6dfc2f8%40%3Cannounce.apache.org%3E
CVE ID: CVE-2021-26560 State: PUBLISHED Published: 2021-02-26T21:45:30.498636Z Last Updated: 2024-09-17T01:30:56.188Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Synology Products: Synology DiskStation Manager (DSM) Problem Types: CWE-319 Description: Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_26 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020
ww.synology.com/security/advisory/Synology_SA_20_26 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1159
CVE ID: CVE-2021-26561 State: PUBLISHED Published: 2021-02-26T21:45:31.206502Z Last Updated: 2024-09-16T23:06:05.777Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Synology Products: Synology DiskStation Manager (DSM) Problem Types: CWE-121 Description: Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_26 - https://www.talosintelligence.com/vulnerability_reports/TALOS-20
/www.synology.com/security/advisory/Synology_SA_20_26 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1159
CVE ID: CVE-2021-26562 State: PUBLISHED Published: 2021-02-26T21:45:31.818984Z Last Updated: 2024-09-17T04:08:58.655Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Synology Products: Synology DiskStation Manager (DSM) Problem Types: CWE-787 Description: Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_26 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1159
CVE ID: CVE-2021-26563 State: PUBLISHED Published: 2021-02-26T21:45:33.039881Z Last Updated: 2024-09-16T16:23:45.140Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Synology Products: DiskStation Manager (DSM) Problem Types: CWE-863 Description: Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1158 - https://www.synology.com/security/advisory/Synology_SA_21_03
CVE ID: CVE-2021-26564 State: PUBLISHED Published: 2021-02-26T21:45:33.663943Z Last Updated: 2024-09-17T00:46:03.051Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Synology Products: Synology DiskStation Manager (DSM) Problem Types: CWE-319 Description: Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_26 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1160
CVE ID: CVE-2021-26565 State: PUBLISHED Published: 2021-02-26T21:45:34.345463Z Last Updated: 2024-09-17T01:27:07.136Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Synology Products: Synology DiskStation Manager (DSM) Problem Types: CWE-319 Description: Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain sensitive information via an HTTP session. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_26 - https://www.talosintelligence.com/vulnerability_reports/TALOS
s://www.synology.com/security/advisory/Synology_SA_20_26 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1160
CVE ID: CVE-2021-26566 State: PUBLISHED Published: 2021-02-26T21:45:35.118113Z Last Updated: 2024-09-17T03:23:15.693Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Synology Products: Synology DiskStation Manager (DSM) Problem Types: CWE-201 Description: Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary commands via inbound QuickConnect traffic. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_26 - https://www.talosintelligence.com/vulnerability_
ences: - https://www.synology.com/security/advisory/Synology_SA_20_26 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1160
CVE ID: CVE-2021-26567 State: PUBLISHED Published: 2021-02-26T21:45:35.788553Z Last Updated: 2024-09-16T19:56:15.211Z Vendors: github/knik0 Products: faad2 Problem Types: CWE-121 Description: Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_26 - https://github.com/knik0/faad2/commit/720f7004d6c4aabee19aad16e7c456ed76a3ebfa
CVE ID: CVE-2021-26568 State: REJECTED Published: N/A Last Updated: 2022-12-30T00:00:00 Description: No description available.
CVE ID: CVE-2021-26569 State: PUBLISHED Published: 2021-03-12T06:40:13.071732Z Last Updated: 2024-09-17T03:49:02.807Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Synology Products: Synology DiskStation Manager (DSM) Problem Types: CWE-366 Description: Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests. Additional Analyst Notes: - CVE Program Container: References: - https://www.synology.com/security/advisory/Synology_SA_20_26 - https://www.zerodayinitiative.com/advisories/ZDI-21-338/
CVE ID: CVE-2021-26570 State: PUBLISHED Published: 2021-02-08T18:47:43 Last Updated: 2024-08-03T20:26:25.476Z Vendors: n/a Products: HPE Apollo 70 System Problem Types: HPE Apollo 70 system bmc firmware libifc.so webifc_setadconfig function has a buffer overflow vulnerability. Description: The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webifc_setadconfig function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us - https://www.zerodayinitiative.com/advisories/ZDI-21-340/
CVE ID: CVE-2021-26571 State: PUBLISHED Published: 2021-02-08T18:43:35 Last Updated: 2024-08-03T20:26:25.490Z Vendors: n/a Products: HPE Apollo 70 System Problem Types: HPE Apollo 70 system bmc firmware libifc.so webgetactivexcfg function has a buffer overflow vulnerability. Description: The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us
CVE ID: CVE-2021-26572 State: PUBLISHED Published: 2021-02-08T18:50:42 Last Updated: 2024-08-03T20:26:25.457Z Vendors: n/a Products: HPE Apollo 70 System Problem Types: HPE Apollo 70 system bmc firmware libifc.so webgetactivexcfg function has a buffer overflow vulnerability. Description: The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us
CVE ID: CVE-2021-26573 State: PUBLISHED Published: 2021-02-08T19:05:31 Last Updated: 2024-08-03T20:26:25.539Z Vendors: n/a Products: HPE Apollo 70 System Problem Types: HPE Apollo 70 system bmc firmware libifc.so webgeneratesslcfg function has a buffer overflow vulnerability. Description: The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgeneratesslcfg function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us
CVE ID: CVE-2021-26574 State: PUBLISHED Published: 2021-02-08T19:51:01 Last Updated: 2024-08-03T20:26:25.537Z Vendors: n/a Products: HPE Apollo 70 System Problem Types: HPE Apollo 70 system bmc firmware libifc.so webdeletevideofile function has a path traversal vulnerability. Description: The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletevideofile function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us
CVE ID: CVE-2021-26575 State: PUBLISHED Published: 2021-02-08T19:43:43 Last Updated: 2024-08-03T20:26:25.708Z Vendors: n/a Products: HPE Apollo 70 System Problem Types: HPE Apollo 70 system bmc firmware libifc.so webdeletesolvideofile function has a path traversal vulnerability. Description: The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletesolvideofile function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us
CVE ID: CVE-2021-26576 State: PUBLISHED Published: 2021-02-08T20:04:28 Last Updated: 2024-08-03T20:26:25.467Z Vendors: n/a Products: HPE Apollo 70 System Problem Types: HPE Apollo 70 system bmc firmware libifc.so uploadsshkey function has a command injection vulnerability. Description: The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so uploadsshkey function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us
CVE ID: CVE-2021-26577 State: PUBLISHED Published: 2021-02-08T19:46:58 Last Updated: 2024-08-03T20:26:25.535Z Vendors: n/a Products: HPE Apollo 70 System Problem Types: HPE Aollo 70 system bmc firmware libfc.so uploadsshkey function has a buffer overflow vulnerability. Description: The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so uploadsshkey function. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us
CVE ID: CVE-2021-26578 State: PUBLISHED Published: 2021-03-22T17:02:14 Last Updated: 2024-08-03T20:26:25.483Z Vendors: n/a Products: HPE Network Orchestrator Problem Types: remote sql injection Description: A potential security vulnerability has been identified in HPE Network Orchestrator (NetO) version(s): Prior to 2.5. The vulnerability could be remotely exploited with SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04097en_us
CVE ID: CVE-2021-26579 State: PUBLISHED Published: 2021-03-30T17:27:11 Last Updated: 2024-08-03T20:26:25.534Z Vendors: n/a Products: HPE Unified Data Management (UDM) Problem Types: local disclosure of privileged information Description: A security vulnerability in HPE Unified Data Management (UDM) could allow the local disclosure of privileged information (CWE-321: Use of Hard-coded Cryptographic Key in a product). HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management (UDM). Version 1.2103.0 of HPE Unified Data Management (UDM) removes all hard-coded cryptographic keys. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.c
ll hard-coded cryptographic keys. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu04112en_us
CVE ID: CVE-2021-26580 State: PUBLISHED Published: 2021-04-01T18:41:26 Last Updated: 2024-08-03T20:26:25.436Z Vendors: n/a Products: iLO Amplifier Pack Problem Types: remote cross-site scripting (xss) Description: A potential security vulnerability has been identified in HPE iLO Amplifier Pack. The vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS). HPE has provided the following software update to resolve the vulnerability in HPE iLO Amplifier Pack: HPE iLO Amplifier Pack 1.95 or later. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04107en_us
CVE ID: CVE-2021-26581 State: PUBLISHED Published: 2021-04-01T18:42:53 Last Updated: 2024-08-03T20:26:25.481Z Vendors: n/a Products: HPE Superdome Flex Server Problem Types: remote denial of service (dos) Description: A potential security vulnerability has been identified in HPE Superdome Flex server. A denial of service attack can be remotely exploited leaving hung connections to the BMC web interface. The monarch BMC must be rebooted to recover from this situation. Other BMC management is not impacted. HPE has made the following software update to resolve the vulnerability in HPE Superdome Flex Server: Superdome Flex Server Firmware 3.30.142 or later. Additional Analyst Notes: - CVE Progra
y in HPE Superdome Flex Server: Superdome Flex Server Firmware 3.30.142 or later. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04102en_us
CVE ID: CVE-2021-26582 State: PUBLISHED Published: 2021-04-15T17:50:41 Last Updated: 2024-08-03T20:26:25.525Z Vendors: n/a Products: IceWall SSO Dgfw Problem Types: remote cross-site scripting (xss) Description: A security vulnerability in HPE IceWall SSO Domain Gateway Option (Dgfw) module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04086en_us
CVE ID: CVE-2021-26583 State: PUBLISHED Published: 2021-05-10T12:38:42 Last Updated: 2024-08-03T20:26:25.538Z Vendors: n/a Products: iLO Amplifier Pack Problem Types: remote code execution Description: A potential security vulnerability was identified in HPE iLO Amplifier Pack. The vulnerabilities could be remotely exploited to allow remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04129en_us
CVE ID: CVE-2021-26584 State: PUBLISHED Published: 2021-06-03T10:59:53 Last Updated: 2024-08-03T20:26:25.544Z Vendors: n/a Products: HPE OneView for VMware vCenter with Operations Manager and Log Insight Problem Types: remote cross-site scripting (xss) Description: A security vulnerability in HPE OneView for VMware vCenter (OV4VC) could be exploited remotely to allow Cross-Site Scripting. HPE has released the following software update to resolve the vulnerability in HPE OneView for VMware vCenter (OV4VC). Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04151en_us
CVE ID: CVE-2021-26585 State: PUBLISHED Published: 2021-06-24T11:02:24 Last Updated: 2024-08-03T20:26:25.544Z Vendors: n/a Products: HPE OneView Global Dashboard Problem Types: local disclosure of privileged information Description: A potential vulnerability has been identified in HPE OneView Global Dashboard release 2.31 which could lead to a local disclosure of privileged information. HPE has provided an update to OneView Global Dashboard. The issue is resolved in 2.32. Additional Analyst Notes: - CVE Program Container: References: - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04162en_us