Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-26098 State: PUBLISHED Published: 2021-08-04T13:20:48 Last Updated: 2024-10-25T13:54:27.314Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:X/RC:X) Vendors: Fortinet Products: Fortinet FortiSandbox Problem Types: Improper Access Control Description: An instance of small space of random values in the RPC API of FortiSandbox before 4.0.0 may allow an attacker in possession of a few information pieces about the state of the device to possibly predict valid session IDs. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-20-218
CVE ID: CVE-2021-26099 State: PUBLISHED Published: 2021-07-12T09:56:37 Last Updated: 2024-10-25T13:56:14.639Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Fortinet Products: Fortinet FortiMail Problem Types: Information disclosure Description: Missing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an attacker who comes in possession of the encrypted master keys to compromise their confidentiality by observing a few invariant properties of the ciphertext. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-20-244
CVE ID: CVE-2021-26100 State: PUBLISHED Published: 2021-07-09T18:23:01 Last Updated: 2024-10-25T13:57:15.657Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Fortinet Products: Fortinet FortiMail Problem Types: Improper Access Control Description: A missing cryptographic step in the Identity-Based Encryption service of FortiMail before 7.0.0 may allow an unauthenticated attacker who intercepts the encrypted messages to manipulate them in such a way that makes the tampering and the recovery of the plaintexts possible. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-003
CVE ID: CVE-2021-26102 State: PUBLISHED Published: 2024-12-19T13:56:38.177Z Last Updated: 2024-12-19T15:17:08.639Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C) Vendors: Fortinet Products: FortiWAN Problem Types: CWE-305 Description: A relative path traversal vulnerability (CWE-23) in FortiWAN version 4.5.7 and below, 4.4 all versions may allow a remote non-authenticated attacker to delete files on the system by sending a crafted POST request. In particular, deleting specific configuration files will reset the Admin password to its default value. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/F
default value. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-21-048
CVE ID: CVE-2021-26103 State: PUBLISHED Published: 2021-12-08T12:01:12 Last Updated: 2024-10-25T13:41:21.796Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:F/RL:X/RC:X) Vendors: Fortinet Products: Fortinet FortiOS Problem Types: Improper access control Description: An insufficient verification of data authenticity vulnerability (CWE-345) in the user interface of FortiProxy verison 2.0.3 and below, 1.2.11 and below and FortiGate verison 7.0.0, 6.4.6 and below, 6.2.9 and below of SSL VPN portal may allow a remote, unauthenticated attacker to conduct a cross-site request forgery (CSRF) attack . Only SSL VPN in web mode or full mode are impacted by this vulnerability.
t a cross-site request forgery (CSRF) attack . Only SSL VPN in web mode or full mode are impacted by this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-20-158
CVE ID: CVE-2021-26104 State: PUBLISHED Published: 2022-04-06T16:00:20 Last Updated: 2024-10-25T13:33:03.773Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiManager, FortiAnalyzer, FortiPortal Problem Types: Execute unauthorized code or commands Description: Multiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, and FortiPortal 5.2.5 and below, 5.3.5 and below and 6.0.4 and below may allow a local authe
of 6.2.x, 6.0.x and 5.6.x, and FortiPortal 5.2.5 and below, 5.3.5 and below and 6.0.4 and below may allow a local authenticated and unprivileged user to execute arbitrary shell commands as root via specifically crafted CLI command parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-037 - https://github.com/orangecertcc/security-research/security/advisories/GHSA-f73m-fvj3-m2pm
CVE ID: CVE-2021-26105 State: PUBLISHED Published: 2025-03-24T15:27:56.111Z Last Updated: 2025-03-31T18:19:39.502Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:X/RC:X) Vendors: Fortinet Products: FortiSandbox Problem Types: CWE-358 Description: A stack-based buffer overflow vulnerability (CWE-121) in the profile parser of FortiSandbox version 3.2.2 and below, version 3.1.4 and below may allow an authenticated attacker to potentially execute unauthorized code or commands via specifically crafted HTTP requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-20-234
CVE ID: CVE-2021-26106 State: PUBLISHED Published: 2021-07-09T18:26:30 Last Updated: 2024-10-25T13:56:41.494Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Fortinet Products: Fortinet FortiAP-W2, FortiAP-S, FortiAP Problem Types: Execute unauthorized code or commands Description: An improper neutralization of special elements used in an OS Command vulnerability in FortiAP's console 6.4.1 through 6.4.5 and 6.2.4 through 6.2.5 may allow an authenticated attacker to execute unauthorized commands by running the kdbg CLI command with specifically crafted arguments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://f
y crafted arguments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-20-210
CVE ID: CVE-2021-26107 State: PUBLISHED Published: 2021-11-02T17:51:44 Last Updated: 2024-10-25T13:47:55.852Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:H/RL:W/RC:C) Vendors: Fortinet Products: Fortinet FortiManager Problem Types: Improper access control Description: An improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile to modify the VPN tunnel status of other VDOMs using VPN Manager. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-043
CVE ID: CVE-2021-26108 State: PUBLISHED Published: 2021-12-08T12:16:03 Last Updated: 2024-10-25T13:40:59.998Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiOS Problem Types: Information disclosure Description: A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reverse engineering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-051
CVE ID: CVE-2021-26109 State: PUBLISHED Published: 2021-12-08T12:22:19 Last Updated: 2024-10-25T13:40:48.694Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiOS Problem Types: Execute unauthorized code or commands Description: An integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS before 7.0.1 may allow an unauthenticated attacker to corrupt control data on the heap via specifically crafted requests to SSLVPN, resulting in potentially arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advis
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-049
CVE ID: CVE-2021-26110 State: PUBLISHED Published: 2021-12-08T10:41:25 Last Updated: 2024-10-25T13:42:47.340Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:X) Vendors: Fortinet Products: Fortinet FortiOS, FortiProxy Problem Types: Escalation of privilege Description: An improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.12 and below and FortiProxy 2.0.1 and below, 1.2.9 and below may allow an authenticated low-privileged attacker to escalate their privileges to super_admin via a specific crafted configuration of fabric automation CLI script and auto-script features. Additional Analyst Notes:
via a specific crafted configuration of fabric automation CLI script and auto-script features. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-20-131
CVE ID: CVE-2021-26111 State: PUBLISHED Published: 2021-06-01T19:57:24 Last Updated: 2024-10-25T13:58:45.100Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Fortinet Products: Fortinet FortiSwitch Problem Types: Denial of service Description: A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-026
CVE ID: CVE-2021-26112 State: PUBLISHED Published: 2022-04-06T09:15:15 Last Updated: 2024-10-25T13:34:14.258Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiWAN Problem Types: Execute unauthorized code or commands Description: Multiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the command line interpreter of FortiWAN before 4.5.9 may allow an unauthenticated attacker to potentially corrupt control data in memory and execute arbitrary code via specifically crafted requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://f
ly crafted requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-21-065
CVE ID: CVE-2021-26113 State: PUBLISHED Published: 2022-04-06T16:00:57 Last Updated: 2024-10-22T20:58:07.517Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiWAN Problem Types: Information disclosure Description: A use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9 may allow an attacker who has previously come in possession of the password file to potentially guess passwords therein stored. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-21-064
CVE ID: CVE-2021-26114 State: PUBLISHED Published: 2022-04-06T09:15:21 Last Updated: 2024-10-25T13:34:04.126Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiWAN Problem Types: Execute unauthorized code or commands Description: Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/psirt/FG-IR-21-062
CVE ID: CVE-2021-26115 State: PUBLISHED Published: 2024-12-19T10:57:54.695Z Last Updated: 2024-12-20T17:22:16.068Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C) Vendors: Fortinet Products: FortiWAN Problem Types: CWE-78 Description: An OS command injection (CWE-78) vulnerability in FortiWAN version 4.5.7 and below Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command.An OS command injection (CWE-78) vulnerability in FortiWAN Command Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via ex
nd Line Interface may allow a local, authenticated and unprivileged attacker to escalate their privileges to root via executing a specially-crafted command. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-21-069
CVE ID: CVE-2021-26116 State: PUBLISHED Published: 2022-04-06T16:00:51 Last Updated: 2024-10-25T13:32:31.331Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C) Vendors: Fortinet Products: Fortinet FortiAuthenticator Problem Types: Execute unauthorized code or commands Description: An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of FortiAuthenticator before 6.3.1 may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortigu
ting commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fortiguard.com/advisory/FG-IR-21-068
CVE ID: CVE-2021-26117 State: PUBLISHED Published: 2021-01-27T00:00:00 Last Updated: 2024-08-03T20:19:20.050Z Vendors: Apache Software Foundation Products: Apache ActiveMQ Problem Types: CWE-287 Description: The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password. Additional Analyst Notes: - CVE Program Container: References: - https://mail-archives.apache.org/mod_mbox/activemq-users/202101.mbox/%3cCAH+vQmMeUEiKN4wY
ogram Container: References: - https://mail-archives.apache.org/mod_mbox/activemq-users/202101.mbox/%3cCAH+vQmMeUEiKN4wYX9nLBbqmFZFPXqajNvBKmzb2V8QZANcSTA%40mail.gmail.com%3e - https://lists.apache.org/thread.html/rffa5cd05d01c4c9853b17f3004d80ea6eb8856c422a8545c5f79b1a6%40%3Ccommits.activemq.apache.org%3E - https://lists.apache.org/thread.html/re1b98da90a5f2e1c2e2d50e31c12e2578d61fe01c0737f9d0bd8de99%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7%40%3Ccommits.activemq.apache.org%3E - https://lists.debian.org/debian-lts-announce/2021/03/msg00005.html - https://lists.apache.org/thread.html/r70389648227317bdadcdecbd9
s.debian.org/debian-lts-announce/2021/03/msg00005.html - https://lists.apache.org/thread.html/r70389648227317bdadcdecbd9f238571a6047469d156bd72bb0ca2f7%40%3Cgitbox.activemq.apache.org%3E - https://lists.apache.org/thread.html/r5899ece90bcae5805ad6142fdb05c58595cff19cb2e98cc58a91f55b%40%3Cgitbox.activemq.apache.org%3E - https://lists.apache.org/thread.html/rec93794f8aeddf8a5f1a643d264b4e66b933f06fd72a38f31448f0ac%40%3Cgitbox.activemq.apache.org%3E - https://lists.apache.org/thread.html/rd75600cee29cb248d548edcf6338fe296466d63a69e2ed0afc439ec7%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/raea451de09baed76950d6a60cc4bb1b74476c505e03205a3c68c9808%40%3Cissues.activemq
3E - https://lists.apache.org/thread.html/raea451de09baed76950d6a60cc4bb1b74476c505e03205a3c68c9808%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/r110cacfa754471361234965ffe851a046e302ff2693b055f49f47b02%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/r22cdc0fb45e223ac92bc2ceff7af92f1193dfc614c8b248534456229%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/r3341d96d8f956e878fb7b463b08d57ca1d58fec9c970aee929b58e0d%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/r519bfafd67091d0b91243efcb1c49b1eea27321355ba5594f679277d%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.htm
7091d0b91243efcb1c49b1eea27321355ba5594f679277d%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/rd05b1c9d61dbd220664d559aa0e2b55e5830f006a09e82057f3f7863%40%3Cissues.activemq.apache.org%3E - https://lists.apache.org/thread.html/ra255ddfc8b613b80e9fa22ff3e106168b245f38a22316bfb54d21159%40%3Cissues.activemq.apache.org%3E - https://www.oracle.com/security-alerts/cpuApr2021.html - https://security.netapp.com/advisory/ntap-20210304-0008/ - https://www.oracle.com//security-alerts/cpujul2021.html - https://www.oracle.com/security-alerts/cpuoct2021.html - https://lists.debian.org/debian-lts-announce/2023/11/msg00013.html
CVE ID: CVE-2021-26118 State: PUBLISHED Published: 2021-01-27T18:55:13.000Z Last Updated: 2025-02-13T16:27:51.360Z Vendors: Apache Software Foundation Products: Apache ActiveMQ Artemis Problem Types: CWE-284 Description: While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed policy based access control for the entire session. Production of advisory messages was not subject to access control in error. Additional Analyst Notes: - CVE Program Container: References: - https://mail-archives.apache.org/mod_mbox/activemq-users/202101.mbox/%3CCAH%2BvQmMUNnkiXv2-d3ucdErWOsdnLi6CgnK%2BVfixyJvTgTuYig%
mail-archives.apache.org/mod_mbox/activemq-users/202101.mbox/%3CCAH%2BvQmMUNnkiXv2-d3ucdErWOsdnLi6CgnK%2BVfixyJvTgTuYig%40mail.gmail.com%3E - https://lists.apache.org/thread.html/rafd5d7cf303772a0118865262946586921a65ebd98fc24f56c812574%40%3Cannounce.apache.org%3E - https://security.netapp.com/advisory/ntap-20210827-0002/
CVE ID: CVE-2021-26119 State: PUBLISHED Published: 2021-02-22T01:34:05 Last Updated: 2024-08-03T20:19:20.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/smarty-php/smarty/blob/master/CHANGELOG.md - https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html - https://lists.debian.org/debian-lts-announce/2021/04/msg00014.html - https://security.gentoo.org/glsa/202105-06 - https://www.debian.org/security/2022/dsa-5151
CVE ID: CVE-2021-26120 State: PUBLISHED Published: 2021-02-22T01:38:15 Last Updated: 2024-08-03T20:19:20.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/smarty-php/smarty/blob/master/CHANGELOG.md - https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html - https://lists.debian.org/debian-lts-announce/2021/04/msg00014.html - https://security.gentoo.org/glsa/202105-06 - https://www.debian.org/security/2022/dsa-5151
CVE ID: CVE-2021-26122 State: PUBLISHED Published: 2021-05-07T11:07:20 Last Updated: 2024-08-03T20:19:20.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: LivingLogic XIST4C before 0.107.8 allows XSS via feedback.htm or feedback.wihtm. Additional Analyst Notes: - CVE Program Container: References: - https://www.xist4c.com - https://www.dgc.org/responsible_disclosure_20210421_livinglogic_xss
CVE ID: CVE-2021-26123 State: PUBLISHED Published: 2021-05-07T11:07:27 Last Updated: 2024-08-03T20:19:20.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: LivingLogic XIST4C before 0.107.8 allows XSS via login.htm, login.wihtm, or login-form.htm. Additional Analyst Notes: - CVE Program Container: References: - https://www.xist4c.com - https://www.dgc.org/responsible_disclosure_20210421_livinglogic_xss
CVE ID: CVE-2021-26194 State: PUBLISHED Published: 2021-06-10T22:14:44 Last Updated: 2024-08-03T20:19:20.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_is_lexical_environment in the ecma-helpers.c file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/4445
CVE ID: CVE-2021-26195 State: PUBLISHED Published: 2021-06-10T22:14:49 Last Updated: 2024-08-03T20:19:20.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexer_parse_number in js-lexer.c file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/4442
CVE ID: CVE-2021-26197 State: PUBLISHED Published: 2021-06-10T22:14:55 Last Updated: 2024-08-03T20:19:20.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JerryScript 2.4.0. There is a SEGV in main_print_unhandled_exception in main-utils.c file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/4403
CVE ID: CVE-2021-26198 State: PUBLISHED Published: 2021-06-10T22:15:00 Last Updated: 2024-08-03T20:19:20.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecma_deref_bigint in ecma-helpers.c file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/4402
CVE ID: CVE-2021-26199 State: PUBLISHED Published: 2021-06-10T22:15:04 Last Updated: 2024-08-03T20:19:20.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_bytecode_ref in ecma-helpers.c file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jerryscript-project/jerryscript/issues/4056
CVE ID: CVE-2021-26200 State: PUBLISHED Published: 2021-02-15T20:39:41 Last Updated: 2024-08-03T20:19:20.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The user area for Library System 1.0 is vulnerable to SQL injection where a user can bypass the authentication and login as the admin user. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49462
CVE ID: CVE-2021-26201 State: PUBLISHED Published: 2021-02-15T20:39:48 Last Updated: 2024-08-03T20:19:20.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass. An attacker can obtain access to the admin panel by injecting a SQL query in the username field of the login page. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49463
CVE ID: CVE-2021-26215 State: PUBLISHED Published: 2021-03-18T15:44:47 Last Updated: 2024-08-03T20:19:20.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditDocument.php. Additional Analyst Notes: - CVE Program Container: References: - http://seeddms.com - https://tuhin1729.medium.com/cve-2021-26215-7ce6800be822