Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-3791 State: PUBLISHED Published: 2021-11-12T22:05:49 Last Updated: 2024-08-03T17:09:08.947Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Motorola Products: Binatone Hubble Cameras Problem Types: CWE-532 Description: An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same subnet to download an encrypted log file containing sensitive information such as WiFi SSID and password. Additional Analyst Notes: - CVE Program Container: References: - https://binatoneglobal.com/security-advisory/
CVE ID: CVE-2021-3792 State: PUBLISHED Published: 2021-11-12T22:05:51 Last Updated: 2024-08-03T17:09:08.853Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Motorola Products: Binatone Hubble Cameras Problem Types: CWE-319 Description: Some device communications in some Motorola-branded Binatone Hubble Cameras with backend Hubble services are not encrypted which could lead to the communication channel being accessible by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://binatoneglobal.com/security-advisory/
CVE ID: CVE-2021-3793 State: PUBLISHED Published: 2021-11-12T22:05:52 Last Updated: 2024-08-03T17:09:08.614Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Motorola Products: Binatone Hubble Cameras Problem Types: CWE-424 Description: An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated attacker on the same network as the device to access administrative pages that could result in information disclosure or device firmware update with verified firmware. Additional Analyst Notes: - CVE Program Container: References: - https://binatoneglobal.com/security-advisory/
CVE ID: CVE-2021-3794 State: PUBLISHED Published: 2021-09-15T12:25:09 Last Updated: 2024-08-03T17:09:08.635Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: vuelidate Products: vuelidate/vuelidate Problem Types: CWE-1333 Description: vuelidate is vulnerable to Inefficient Regular Expression Complexity Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/d8201b98-fb91-4c12-a6f7-181b4a20d9b7 - https://github.com/vuelidate/vuelidate/commit/1f0ca31c30e5032f00dbd14c4791b5ee7928f71d
CVE ID: CVE-2021-3795 State: PUBLISHED Published: 2021-09-15T16:23:49 Last Updated: 2024-08-03T17:09:08.695Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: sindresorhus Products: sindresorhus/semver-regex Problem Types: CWE-1333 Description: semver-regex is vulnerable to Inefficient Regular Expression Complexity Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/006624e3-35ac-448f-aab9-7b5183f30e28 - https://github.com/sindresorhus/semver-regex/commit/11c66245f4e1976dccc52977ed183696a21a3fd7
CVE ID: CVE-2021-3796 State: PUBLISHED Published: 2021-09-15T00:00:00 Last Updated: 2024-08-03T17:09:08.968Z Severity: HIGH (CVSS 8.2 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L) Vendors: vim Products: vim/vim Problem Types: CWE-416 Description: vim is vulnerable to Use After Free Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ab60b7f3-6fb1-4ac2-a4fa-4d592e08008d - https://github.com/vim/vim/commit/35a9a00afcb20897d462a766793ff45534810dc3 - http://www.openwall.com/lists/oss-security/2021/10/01/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TE62UMYBZE4AE53K6OBBWK32XQ7544QM/ - https://lists.fedo
/archives/list/package-announce%40lists.fedoraproject.org/message/TE62UMYBZE4AE53K6OBBWK32XQ7544QM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/ - https://lists.debian.org/debian-lts-announce/2022/01/msg00003.html - https://security.gentoo.org/glsa/202208-32 - https://security.netapp.com/advisory/ntap-20221118-0004/
CVE ID: CVE-2021-3797 State: PUBLISHED Published: 2021-09-15T13:05:11 Last Updated: 2024-08-03T17:09:08.816Z Severity: MEDIUM (CVSS 4.8 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: hestiacp Products: hestiacp/hestiacp Problem Types: CWE-597 Description: hestiacp is vulnerable to Use of Wrong Operator in String Comparison Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/c24fb15c-3c84-45c8-af04-a660f8da388f - https://github.com/hestiacp/hestiacp/commit/fc68baff4f94b59e38316f886d0ce47d337042f7
CVE ID: CVE-2021-3798 State: PUBLISHED Published: 2022-08-23T15:48:58 Last Updated: 2024-08-03T17:09:09.595Z Vendors: n/a Products: opencryptoki Problem Types: CWE-200 Description: A flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is valid when an EC key is created via C_CreateObject, nor when C_DeriveKey is used with ECDH public data. This may allow a malicious user to extract the private key by performing an invalid curve attack. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1990591 - https://access.redhat.com/security/cve/CVE-2021-3798 - https://github.com/opencryptoki/opencryptoki/pull/
i?id=1990591 - https://access.redhat.com/security/cve/CVE-2021-3798 - https://github.com/opencryptoki/opencryptoki/pull/402 - https://github.com/opencryptoki/opencryptoki/commit/4e3b43c3d8844402c04a66b55c6c940f965109f0
CVE ID: CVE-2021-3799 State: PUBLISHED Published: 2021-09-27T12:25:22 Last Updated: 2024-08-03T17:09:08.907Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: getgrav Products: getgrav/grav-plugin-admin Problem Types: CWE-1021 Description: grav-plugin-admin is vulnerable to Improper Restriction of Rendered UI Layers or Frames Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/d73f24a8-302b-4f9f-abb8-54688abd9813 - https://github.com/getgrav/grav-plugin-admin/commit/853abfbbd3c14a0a601c941dcfaa3858b6283b69
CVE ID: CVE-2021-3800 State: PUBLISHED Published: 2022-08-23T00:00:00 Last Updated: 2024-08-03T17:09:08.749Z Vendors: n/a Products: Glib Problem Types: CWE-200 Description: A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1938284 - https://access.redhat.com/security/cve/CVE-2021-3800 - https://www.openwall.com/lists/oss-security/2017/06/23/8 - https://gitlab.gnome.org/GNOME/glib/-/commit/3529bb4450a51995 - https://lists.debian.org/debian-lts-announce
7/06/23/8 - https://gitlab.gnome.org/GNOME/glib/-/commit/3529bb4450a51995 - https://lists.debian.org/debian-lts-announce/2022/09/msg00020.html - https://security.netapp.com/advisory/ntap-20221028-0004/
CVE ID: CVE-2021-3801 State: PUBLISHED Published: 2021-09-15T12:40:11 Last Updated: 2024-08-03T17:09:09.479Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: prismjs Products: prismjs/prism Problem Types: CWE-1333 Description: prism is vulnerable to Inefficient Regular Expression Complexity Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/8c16ab31-6eb6-46d1-b9a4-387222fe1b8a - https://github.com/prismjs/prism/commit/0ff371bb4775a131634f47d0fe85794c547232f9
CVE ID: CVE-2021-3802 State: PUBLISHED Published: 2021-11-29T00:00:00 Last Updated: 2024-08-03T17:09:08.943Z Vendors: n/a Products: udisks2 Problem Types: CWE-20 Description: A vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image file/USB leading to kernel panic. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2003649 - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-045.txt - https://lists.debian.org/debian-lts-announce/2023/04/msg00009.html
CVE ID: CVE-2021-3803 State: PUBLISHED Published: 2021-09-17T00:00:00 Last Updated: 2024-08-03T17:09:08.622Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: fb55 Products: fb55/nth-check Problem Types: CWE-1333 Description: nth-check is vulnerable to Inefficient Regular Expression Complexity Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/8cf8cc06-d2cf-4b4e-b42c-99fafb0b04d0 - https://github.com/fb55/nth-check/commit/9894c1d2010870c351f66c6f6efcf656e26bb726 - https://lists.debian.org/debian-lts-announce/2023/05/msg00023.html
CVE ID: CVE-2021-3804 State: PUBLISHED Published: 2021-09-17T06:15:21 Last Updated: 2024-08-03T17:09:09.530Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: nervjs Products: nervjs/taro Problem Types: CWE-1333 Description: taro is vulnerable to Inefficient Regular Expression Complexity Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/0ebe85e6-cc85-42b8-957e-18d8df277414 - https://github.com/nervjs/taro/commit/acadb6c826ba57f2030a626f1de4f7b4608fcdb5
CVE ID: CVE-2021-3805 State: PUBLISHED Published: 2021-09-17T00:00:00 Last Updated: 2024-08-03T17:09:09.600Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: mariocasciaro Products: mariocasciaro/object-path Problem Types: CWE-1321 Description: object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/571e3baf-7c46-46e3-9003-ba7e4e623053 - https://github.com/mariocasciaro/object-path/commit/e6bb638ffdd431176701b3e9024f80050d0ef0a6 - https://lists.debian.org/debian-lts-announce/2023/01/msg00031.html
CVE ID: CVE-2021-3806 State: PUBLISHED Published: 2021-09-18T13:20:11.941230Z Last Updated: 2024-09-16T23:46:50.605Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: TUBITAK Products: Pardus Software Center Problem Types: CWE-22 Description: A path traversal vulnerability on Pardus Software Center's "extractArchive" function could allow anyone on the same network to do a man-in-the-middle and write files on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-21-0754 - https://pentest.blog/pardus-21-linux-distro-remote-code-execution-0day-2021/
CVE ID: CVE-2021-3807 State: PUBLISHED Published: 2021-09-17T00:00:00 Last Updated: 2024-08-03T17:09:08.762Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: chalk Products: chalk/ansi-regex Problem Types: CWE-1333 Description: ansi-regex is vulnerable to Inefficient Regular Expression Complexity Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994 - https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9 - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20221014-0002/
CVE ID: CVE-2021-3808 State: PUBLISHED Published: 2023-01-30T20:52:16.761Z Last Updated: 2025-03-27T19:02:10.722Z Vendors: HP Inc. Products: HP PC BIOS Problem Types: n/a Description: Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_6184733-6184761-16/hpsbhf03788
CVE ID: CVE-2021-3809 State: PUBLISHED Published: 2023-01-30T20:53:00.162Z Last Updated: 2025-03-27T19:00:42.865Z Vendors: HP Inc. Products: HP PC BIOS Problem Types: n/a Description: Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_6184733-6184761-16/hpsbhf03788
CVE ID: CVE-2021-3810 State: PUBLISHED Published: 2021-09-17T06:15:24 Last Updated: 2024-08-03T17:09:09.471Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: cdr Products: cdr/code-server Problem Types: CWE-1333 Description: code-server is vulnerable to Inefficient Regular Expression Complexity Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/38888513-30fc-4d8f-805d-34070d60e223 - https://github.com/cdr/code-server/commit/ca617df135e78833f93c8320cb2d2cf8bba809f5
CVE ID: CVE-2021-3811 State: PUBLISHED Published: 2021-09-17T06:15:26 Last Updated: 2024-08-03T17:09:09.570Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: pi-hole Products: pi-hole/adminlte Problem Types: CWE-79 Description: adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/fa38c61f-4043-4872-bc85-7fe5ae5cc2e8 - https://github.com/pi-hole/adminlte/commit/f526716de7bb0fd382a64bcbbb33915c926f94bb
CVE ID: CVE-2021-3812 State: PUBLISHED Published: 2021-09-17T06:15:28 Last Updated: 2024-08-03T17:09:09.585Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: pi-hole Products: pi-hole/adminlte Problem Types: CWE-79 Description: adminlte is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pi-hole/adminlte/commit/f526716de7bb0fd382a64bcbbb33915c926f94bb - https://huntr.dev/bounties/875a6885-9a64-46f3-94ad-92f40f989200
CVE ID: CVE-2021-3813 State: PUBLISHED Published: 2022-02-09T14:15:11 Last Updated: 2024-08-03T17:09:08.818Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: chatwoot Products: chatwoot/chatwoot Problem Types: CWE-269 Description: Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/36f02c4f-cf1c-479e-a1ad-091a1ac7cb56 - https://github.com/chatwoot/chatwoot/commit/9454c6b14f75e778ef98cf84bdafdf0ed8ae5705
CVE ID: CVE-2021-3814 State: PUBLISHED Published: 2022-03-25T18:02:50 Last Updated: 2024-08-03T17:09:09.522Z Vendors: n/a Products: 3scale Problem Types: CWE-862 Description: It was found that 3scale's APIdocs does not validate the access token, in the case of invalid token, it uses session auth instead. This conceivably bypasses access controls and permits unauthorized information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2004322
CVE ID: CVE-2021-3815 State: PUBLISHED Published: 2021-12-08T16:15:11 Last Updated: 2024-08-03T17:09:09.561Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: fabiocaccamo Products: fabiocaccamo/utils.js Problem Types: CWE-1321 Description: utils.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/20f48c63-f078-4173-bcac-a9f34885f2c0 - https://github.com/fabiocaccamo/utils.js/commit/102efafb291ce1916985514440d3bf8a6826890a
CVE ID: CVE-2021-3816 State: PUBLISHED Published: 2022-01-19T20:38:50 Last Updated: 2024-08-03T17:09:09.541Z Vendors: n/a Products: Cacti Problem Types: CWE-79 Description: Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix field during the creation of a new group via "Copy" method at user_group_admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.cacti.net/info/changelog
CVE ID: CVE-2021-3817 State: PUBLISHED Published: 2021-12-09T10:50:10 Last Updated: 2024-08-03T17:09:09.552Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: wbce Products: wbce/wbce_cms Problem Types: CWE-89 Description: wbce_cms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/c330dc0d-220a-4b15-b785-5face4cf6ef7 - https://github.com/wbce/wbce_cms/commit/6ca63f0cad5f0cd606fdb69a372f09b7d238f1d7 - http://packetstormsecurity.com/files/165377/WBCE-CMS-1.5.1-Admin-Password-Reset.html
CVE ID: CVE-2021-3818 State: PUBLISHED Published: 2021-09-27T12:25:23 Last Updated: 2024-08-03T17:09:09.606Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: getgrav Products: getgrav/grav Problem Types: CWE-565 Description: grav is vulnerable to Reliance on Cookies without Validation and Integrity Checking Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/c2bc65af-7b93-4020-886e-8cdaeb0a58ea - https://github.com/getgrav/grav/commit/c51fb1779b83f620c0b6f3548d4a96322b55df07
CVE ID: CVE-2021-3819 State: PUBLISHED Published: 2021-09-27T12:25:25 Last Updated: 2024-08-03T17:09:09.535Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: firefly-iii Products: firefly-iii/firefly-iii Problem Types: CWE-352 Description: firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF) Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/da82f7b6-4ffc-4109-87a4-a2a790bd44e5 - https://github.com/firefly-iii/firefly-iii/commit/578f350498b75f31d321c78a608c7f7b3b7b07e9
CVE ID: CVE-2021-3820 State: PUBLISHED Published: 2021-09-27T12:25:26 Last Updated: 2024-08-03T17:09:09.527Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: pksunkara Products: pksunkara/inflect Problem Types: CWE-1333 Description: inflect is vulnerable to Inefficient Regular Expression Complexity Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/4612b31a-072b-4f61-a916-c7e4cbc2042a - https://github.com/pksunkara/inflect/commit/a9a0a8e9561c3487854c7cae42565d9652ec858b
CVE ID: CVE-2021-3821 State: PUBLISHED Published: 2022-11-21T21:27:09.538Z Last Updated: 2025-04-29T04:40:57.107Z Vendors: HP Inc. Products: HP FutureSmart Problem Types: n/a Description: A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Denial of Service when running HP Workpath solutions on potentially affected products. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_4980799-4980823-16/hpsbpi03747
CVE ID: CVE-2021-3822 State: PUBLISHED Published: 2021-09-27T12:25:28 Last Updated: 2024-08-03T17:09:09.598Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: josdejong Products: josdejong/jsoneditor Problem Types: CWE-1333 Description: jsoneditor is vulnerable to Inefficient Regular Expression Complexity Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/1e3ed803-b7ed-42f1-a4ea-c4c75da9de73 - https://github.com/josdejong/jsoneditor/commit/092e386cf49f2a1450625617da8e0137ed067c3e
CVE ID: CVE-2021-3823 State: PUBLISHED Published: 2021-10-28T13:55:12.997054Z Last Updated: 2024-09-16T16:28:06.148Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: Bitdefender Products: GravityZone Update Server Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects: Bitdefender GravityZone versions prior to 3.3.8.249. Additional Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/path-t
nal Analyst Notes: - CVE Program Container: References: - https://www.bitdefender.com/support/security-advisories/path-traversal-vulnerability-in-bitdefender-gravitzone-update-server-in-relay-mode-va-10039/
CVE ID: CVE-2021-3824 State: PUBLISHED Published: 2021-09-23T14:53:51 Last Updated: 2024-08-03T17:09:09.578Z Vendors: n/a Products: OpenVPN Access Server Problem Types: CWE-84 Description: OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL. Additional Analyst Notes: - CVE Program Container: References: - https://openvpn.net/vpn-server-resources/release-notes/#openvpn-access-server-2-9-5
CVE ID: CVE-2021-3825 State: PUBLISHED Published: 2021-10-01T14:36:20.926355Z Last Updated: 2024-09-16T19:56:05.415Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: TUBITAK Products: Lider Problem Types: CWE-306 Description: On 2.1.15 version and below of Lider module in LiderAhenk software is leaking it's configurations via an unsecured API. An attacker with an access to the configurations API could get valid LDAP credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.usom.gov.tr/bildirim/tr-21-0795 - https://pentest.blog/liderahenk-0day-all-your-pardus-clients-belongs-to-me/
CVE ID: CVE-2021-3826 State: PUBLISHED Published: 2022-09-01T00:00:00 Last Updated: 2024-08-03T17:09:09.547Z Vendors: n/a Products: gcc Problem Types: CWE-119 Description: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol. Additional Analyst Notes: - CVE Program Container: References: - https://gcc.gnu.org/pipermail/gcc-patches/2021-September/579987 - https://gcc.gnu.org/git/?p=gcc.git%3Ba=commit%3Bh=5481040197402be6dfee265bd2ff5a4c88e30505 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXFC
d2ff5a4c88e30505 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXFC74WRZ2Q7F2TSUKPYNIL7ZPBWYI6L/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MYLS3VR4OPL5ECRWOR4ZHMGXUSCJFZY/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MTEHT3G6YKJ7F7MSGWYSI4UM3XBAYXZ/
CVE ID: CVE-2021-3827 State: PUBLISHED Published: 2022-08-23T15:52:50 Last Updated: 2024-08-03T17:09:09.546Z Vendors: n/a Products: keycloak Problem Types: CWE-287 Description: A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior, an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The highest threat from this vulnerability is to confidentiality and integrity. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/keycloak/keycloak/security/advisories/GHSA-4pc7-vqv5-5r3v - https://
Program Container: References: - https://github.com/keycloak/keycloak/security/advisories/GHSA-4pc7-vqv5-5r3v - https://github.com/keycloak/keycloak/commit/44000caaf5051d7f218d1ad79573bd3d175cad0d - https://bugzilla.redhat.com/show_bug.cgi?id=2007512 - https://access.redhat.com/security/cve/CVE-2021-3827