Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-4180 State: PUBLISHED Published: 2022-03-23T19:46:20 Last Updated: 2024-08-03T17:16:04.359Z Vendors: n/a Products: openstack-tripleo-heat-templates Problem Types: CWE-200 Description: An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. An attacker could exploit this by checking the www_authenticate_uri parameter (which is visible to all end users) in configuration files. This would give sensitive information which may aid in additional system exploitation. This flaw affects openstack-tripleo-heat-templates versions prior to 11.6.1. Additional Analyst Notes: - CVE Program Container: References: - ht
ack-tripleo-heat-templates versions prior to 11.6.1. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2035793
CVE ID: CVE-2021-4181 State: PUBLISHED Published: 2021-12-30T00:00:00.000Z Last Updated: 2025-11-03T21:45:13.801Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Buffer over-read in Wireshark Description: Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2021-21.html - https://gitlab.com/wireshark/wireshark/-/merge_requests/5429 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4181.json -
/wireshark/wireshark/-/merge_requests/5429 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4181.json - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5AEK3XTOIOGCGUILUFISMGX54YJXWGJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6XGBKWSQFCVYUN4ZK3O3NJIFP3OAFVT/ - https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.gentoo.org/glsa/202210-04
CVE ID: CVE-2021-4182 State: PUBLISHED Published: 2021-12-30T00:00:00.000Z Last Updated: 2025-11-03T21:45:15.278Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Loop with unreachable exit condition ('infinite loop') in Wireshark Description: Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2021-20.html - https://gitlab.com/wireshark/wireshark/-/issues/17801 - https://gitlab.com/gitlab-org/cves/-/blob/master
-2021-20.html - https://gitlab.com/wireshark/wireshark/-/issues/17801 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4182.json - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5AEK3XTOIOGCGUILUFISMGX54YJXWGJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6XGBKWSQFCVYUN4ZK3O3NJIFP3OAFVT/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.gentoo.org/glsa/202210-04
CVE ID: CVE-2021-4183 State: PUBLISHED Published: 2021-12-30T00:00:00 Last Updated: 2024-08-03T17:16:04.246Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Buffer over-read in Wireshark Description: Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2021-19.html - https://gitlab.com/wireshark/wireshark/-/issues/17755 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4183.json - https://lists.fedoraproject.org/archives/list/package-
itlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4183.json - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5AEK3XTOIOGCGUILUFISMGX54YJXWGJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6XGBKWSQFCVYUN4ZK3O3NJIFP3OAFVT/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.gentoo.org/glsa/202210-04
CVE ID: CVE-2021-4184 State: PUBLISHED Published: 2021-12-30T00:00:00.000Z Last Updated: 2025-11-03T21:45:16.761Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Loop with unreachable exit condition ('infinite loop') in Wireshark Description: Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2021-18.html - https://gitlab.com/wireshark/wireshark/-/issues/17754 - https://gitlab.com/gitlab-org/cves
urity/wnpa-sec-2021-18.html - https://gitlab.com/wireshark/wireshark/-/issues/17754 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4184.json - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5AEK3XTOIOGCGUILUFISMGX54YJXWGJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6XGBKWSQFCVYUN4ZK3O3NJIFP3OAFVT/ - https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.gentoo.org/glsa/202210-04
CVE ID: CVE-2021-4185 State: PUBLISHED Published: 2021-12-30T00:00:00.000Z Last Updated: 2025-11-03T21:45:18.240Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Loop with unreachable exit condition ('infinite loop') in Wireshark Description: Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2021-17.html - https://gitlab.com/wireshark/wireshark/-/issues/17745 - https://gitlab.com/gitlab-org/cves/-/blob/m
a-sec-2021-17.html - https://gitlab.com/wireshark/wireshark/-/issues/17745 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4185.json - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5AEK3XTOIOGCGUILUFISMGX54YJXWGJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6XGBKWSQFCVYUN4ZK3O3NJIFP3OAFVT/ - https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.gentoo.org/glsa/202210-04
CVE ID: CVE-2021-4186 State: PUBLISHED Published: 2021-12-30T00:00:00.000Z Last Updated: 2025-11-03T21:45:19.809Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Null pointer dereference in Wireshark Description: Crash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2021-16.html - https://gitlab.com/wireshark/wireshark/-/issues/17737 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4186.json - https://list
shark/wireshark/-/issues/17737 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4186.json - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5AEK3XTOIOGCGUILUFISMGX54YJXWGJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6XGBKWSQFCVYUN4ZK3O3NJIFP3OAFVT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/ - https://security.gentoo.org/glsa/202210-04
CVE ID: CVE-2021-4187 State: PUBLISHED Published: 2021-12-29T17:10:09.000Z Last Updated: 2025-11-03T20:34:02.696Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: vim is vulnerable to Use After Free Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a8bee03a-6e2e-43bf-bee3-4968c5386a2e - https://github.com/vim/vim/commit/4bf1006cae7e87259ccd5219128c3dba75774441 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/ - http://www.openwall.com/lists/oss-security/2022/01/15/1 - https://lis
CVE ID: CVE-2021-4188 State: PUBLISHED Published: 2021-12-30T06:55:09 Last Updated: 2024-08-03T17:16:04.248Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) Vendors: mruby Products: mruby/mruby Problem Types: CWE-476 Description: mruby is vulnerable to NULL Pointer Dereference Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/78533fb9-f3e0-47c2-86dc-d1f96d5bea28 - https://github.com/mruby/mruby/commit/27d1e0132a0804581dca28df042e7047fd27eaa8
CVE ID: CVE-2021-4189 State: PUBLISHED Published: 2022-08-24T00:00:00.000Z Last Updated: 2025-11-03T21:45:21.395Z Vendors: n/a Products: python Problem Types: Not-Known Description: A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible. Additional Analyst Notes: - CVE Program Container: References: - https:
s, which otherwise would not have been possible. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.python.org/issue43285 - https://python-security.readthedocs.io/vuln/ftplib-pasv.html - https://github.com/python/cpython/commit/0ab152c6b5d95caa2dc1a30fa96e10258b5f188e - https://security-tracker.debian.org/tracker/CVE-2021-4189 - https://bugzilla.redhat.com/show_bug.cgi?id=2036020 - https://access.redhat.com/security/cve/CVE-2021-4189 - https://security.netapp.com/advisory/ntap-20221104-0004/ - https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html - https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html
CVE ID: CVE-2021-4190 State: PUBLISHED Published: 2021-12-30T00:00:00.000Z Last Updated: 2025-11-03T21:45:24.052Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: Excessive iteration in Wireshark Description: Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: References: - https://www.wireshark.org/security/wnpa-sec-2021-22.html - https://gitlab.com/wireshark/wireshark/-/issues/17811 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4190.json - https://lists.fedoraprojec
k/-/issues/17811 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4190.json - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5AEK3XTOIOGCGUILUFISMGX54YJXWGJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q6XGBKWSQFCVYUN4ZK3O3NJIFP3OAFVT/ - https://security.gentoo.org/glsa/202210-04
CVE ID: CVE-2021-4191 State: PUBLISHED Published: 2022-03-28T18:53:12 Last Updated: 2024-08-03T17:16:04.293Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances with restricted sign-ups may be vulnerable to user enumeration to unauthenticated users through the GraphQL API. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/343898 - https://hackerone.com/reports/1089609 - https://gitl
eferences: - https://gitlab.com/gitlab-org/gitlab/-/issues/343898 - https://hackerone.com/reports/1089609 - https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-4191.json
CVE ID: CVE-2021-4192 State: PUBLISHED Published: 2021-12-31T00:00:00 Last Updated: 2024-08-03T17:16:04.251Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: vim is vulnerable to Use After Free Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/6dd9cb2e-a940-4093-856e-59b502429f22 - https://github.com/vim/vim/commit/4c13e5e6763c6eb36a343a2b8235ea227202e952 - http://www.openwall.com/lists/oss-security/2022/01/15/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/ - https://lists.de
rg/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/ - https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html - https://support.apple.com/kb/HT213183 - http://seclists.org/fulldisclosure/2022/Mar/29 - https://support.apple.com/kb/HT213256 - http://seclists.org/fulldisclosure/2022/May/35 - https://support.apple.com/kb/HT213343 - http://seclists.org/fulldisclosure/2022/Jul/14 - https://security.gentoo.org/glsa/202208-32 - https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
CVE ID: CVE-2021-4193 State: PUBLISHED Published: 2021-12-31T00:00:00 Last Updated: 2024-08-03T17:16:04.259Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: vim Products: vim/vim Problem Types: CWE-125 Description: vim is vulnerable to Out-of-bounds Read Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/92c1940d-8154-473f-84ce-0de43b0c2eb0 - https://github.com/vim/vim/commit/94f3192b03ed27474db80b4d3a409e107140738b - http://www.openwall.com/lists/oss-security/2022/01/15/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/ - https://list
ct.org/archives/list/package-announce%40lists.fedoraproject.org/message/3FH2J57GDA2WMBS6J56F6QQRA6BXQQFZ/ - https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html - https://support.apple.com/kb/HT213183 - http://seclists.org/fulldisclosure/2022/Mar/29 - https://support.apple.com/kb/HT213256 - http://seclists.org/fulldisclosure/2022/May/35 - https://support.apple.com/kb/HT213343 - http://seclists.org/fulldisclosure/2022/Jul/14 - https://security.gentoo.org/glsa/202208-32 - https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
CVE ID: CVE-2021-4194 State: PUBLISHED Published: 2022-01-06T17:35:10 Last Updated: 2024-08-03T17:16:04.262Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: bookstackapp Products: bookstackapp/bookstack Problem Types: CWE-284 Description: bookstack is vulnerable to Improper Access Control Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/0bc8b3f7-9057-4eb7-a989-24cd5689f114 - https://github.com/bookstackapp/bookstack/commit/cb0d674a71449de883713db2fcdccb6e108992ad
CVE ID: CVE-2021-4195 State: PUBLISHED Published: 2023-03-14T08:10:48.103Z Last Updated: 2025-02-27T17:58:10.997Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Firmanet Software and Technology Products: Customer Relation Manager Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firmanet Software and Technology Customer Relation Manager allows XSS Targeting HTML Attributes.This issue affects Customer Relation Manager: before 2022.03.13. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-23-0145
CVE ID: CVE-2021-4197 State: PUBLISHED Published: 2022-03-23T19:46:43 Last Updated: 2024-08-03T17:16:04.250Z Vendors: n/a Products: kernel Problem Types: CWE-287 Description: An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cgroup2 and cgroup1 versions of control groups. A local user could use this flaw to crash the system or escalate their privileges on the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.
es on the system. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2035652 - https://lore.kernel.org/lkml/20211209214707.805617-1-tj%40kernel.org/T/ - https://www.debian.org/security/2022/dsa-5127 - https://www.debian.org/security/2022/dsa-5173 - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20220602-0006/
CVE ID: CVE-2021-4198 State: PUBLISHED Published: 2022-03-07T11:30:14.308193Z Last Updated: 2024-09-17T02:06:29.957Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: Bitdefender Products: Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone Problem Types: CWE-476 Description: A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generate crashdump files. This issue affects: Bitdefender Total Security versions prior to 26.0.3.29
oduct processes and generate crashdump files. This issue affects: Bitdefender Total Security versions prior to 26.0.3.29. Bitdefender Internet Security versions prior to 26.0.3.29. Bitdefender Antivirus Plus versions prior to 26.0.3.29. Bitdefender Endpoint Security Tools versions prior to 7.2.2.92. Bitdefender VPN Standalone versions prior to 25.5.0.48. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/messaging_ipc-dll-null-pointer-dereference-in-multiple-bitdefender-products-va-10016/ - https://www.zerodayinitiative.com/advisories/ZDI-22-483/
CVE ID: CVE-2021-4199 State: PUBLISHED Published: 2022-03-07T11:35:12.457317Z Last Updated: 2024-09-16T18:03:11.548Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Bitdefender Products: Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows Problem Types: CWE-732 Description: Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to 26.0.
attacker to escalate local privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to 26.0.10.45. Bitdefender Internet Security versions prior to 26.0.10.45. Bitdefender Antivirus Plus versions prior to 26.0.10.45. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.3.146. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/incorrect-permission-assignment-for-critical-resource-vulnerability-in-bdreinit-exe-va-10017/ - https://www.zerodayinitiative.com/advisories/ZDI-22-484/
CVE ID: CVE-2021-4200 State: PUBLISHED Published: 2022-05-02T07:05:15.716359Z Last Updated: 2024-09-16T17:54:05.276Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: SUSE Products: Rancher Problem Types: CWE-269 Description: A Improper Privilege Management vulnerability in SUSE Rancher allows write access to the Catalog for any user when restricted-admin role is enabled. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.suse.com/show_bug.cgi?id=1193992
CVE ID: CVE-2021-4201 State: PUBLISHED Published: 2022-02-14T21:04:29.132Z Last Updated: 2025-04-14T17:03:52.274Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: ForgeRock Products: Access Management Problem Types: CWE-284 Description: Missing access control in ForgeRock Access Management 7.1.0 and earlier versions on all platforms allows remote unauthenticated attackers to hijack sessions, including potentially admin-level sessions. This issue affects: ForgeRock Access Management 7.1 versions prior to 7.1.1; 6.5 versions prior to 6.5.4; all previous versions. Additional Analyst Notes: - CVE Program Container: References: - https://backstage.forgerock.com/
all previous versions. Additional Analyst Notes: - CVE Program Container: References: - https://backstage.forgerock.com/knowledge/kb/article/a50037155#x7ZPA0
CVE ID: CVE-2021-4202 State: PUBLISHED Published: 2022-03-25T18:02:45 Last Updated: 2024-08-03T17:16:04.245Z Vendors: n/a Products: kernel Problem Types: CWE-362 Description: A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalation problem. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2036682 - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3e3b5dfcd16a3e254aab61bd1e8c417dd4503
6682 - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3e3b5dfcd16a3e254aab61bd1e8c417dd4503102 - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=48b71a9e66c2eab60564b1b1c85f4928ed04e406 - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=86cdf8e38792545161dbe3350a7eced558ba4d15 - https://security.netapp.com/advisory/ntap-20220513-0002/ - http://www.openwall.com/lists/oss-security/2022/06/01/2 - http://www.openwall.com/lists/oss-security/2022/06/04/2 - http://www.openwall.com/lists/oss-security/2022/06/07/2
CVE ID: CVE-2021-4203 State: PUBLISHED Published: 2022-03-25T00:00:00 Last Updated: 2024-08-03T17:16:04.262Z Vendors: n/a Products: kernel Problem Types: CWE-362 Description: A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2036934 - https://bugs.chromium.org/p/project-zero/issues/detail?id=2230&can=7&q=modified-after%3Atoday-30&sort=-modified&colspec=ID%20Type