Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-26800 State: PUBLISHED Published: 2021-12-16T19:06:51 Last Updated: 2024-08-03T20:33:40.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in Change-password.php in phpgurukul user management system in php using stored procedure V1.0, allows attackers to change the password to an arbitrary account. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/user-management-system-in-php-using-stored-procedure/ - https://gist.github.com/Kavisha3/59dac95b268f0d32eab53e659ab59311
CVE ID: CVE-2021-26804 State: PUBLISHED Published: 2021-05-04T16:49:02 Last Updated: 2024-08-03T20:33:41.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extension to ".gif", then uploading it in the "Administration/ Parameters/ Images" section of the application. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40pedro.ferreira.phf/vulnerability-affecting-some-versions-of-centreon-2b34bd6dc621
CVE ID: CVE-2021-26805 State: PUBLISHED Published: 2021-04-14T13:51:01 Last Updated: 2024-08-03T20:33:41.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a malicious WAV file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/justdan96/tsMuxer/issues/395
CVE ID: CVE-2021-26807 State: PUBLISHED Published: 2021-04-30T10:53:04 Last Updated: 2024-08-03T20:33:40.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PATH, which allows an attacker to potentially run code locally through unsigned DLL loading. Additional Analyst Notes: - CVE Program Container: References: - https://www.gog.com - https://illuminati.services/2021/04/29/cve-2021-26807-gog-galaxy-v2-0-35-dll-load-order-hijacking/
CVE ID: CVE-2021-26809 State: PUBLISHED Published: 2021-02-17T14:32:47 Last Updated: 2024-08-03T20:33:41.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/161267/Car-Rental-Project-2.0-Shell-Upload.html - https://www.exploit-db.com/exploits/49520
CVE ID: CVE-2021-26810 State: PUBLISHED Published: 2021-03-30T13:27:57 Last Updated: 2024-08-03T20:33:40.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dir_setWanWifi, which can lead to command injection via shell metacharacters in the statuscheckpppoeuser parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/GD008/vuln/blob/main/DIR-816.md
CVE ID: CVE-2021-26812 State: PUBLISHED Published: 2021-04-14T13:55:47 Last Updated: 2024-08-03T20:33:40.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/udima-university/moodle-mod_jitsi/issues/67
CVE ID: CVE-2021-26813 State: PUBLISHED Published: 2021-03-03T15:17:41 Last Updated: 2024-08-03T20:33:41.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string, it can make markdown2 processing difficult or delayed for an extended period of time. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/trentm/python-markdown2/pull/387 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J752422YELXLMLZJPVJVKD2KKHHQRVEH/ - https://lists.fedoraproject.org/archives/l
nnounce%40lists.fedoraproject.org/message/J752422YELXLMLZJPVJVKD2KKHHQRVEH/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRP5RN35JZTSJ3JT4722F447ZDK7LZS5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTIX5UXRDJZJ57DO4V33ZNJTNKWGBQLY/
CVE ID: CVE-2021-26814 State: PUBLISHED Published: 2021-03-06T01:24:12 Last Updated: 2024-08-03T20:33:41.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI. An authenticated user to the service may exploit incomplete input validation on the /manager/files API to inject arbitrary code within the API service script. Additional Analyst Notes: - CVE Program Container: References: - https://documentation.wazuh.com/4.0/release-notes/release_4_0_4.html - https://github.com/wazuh/wazuh/releases/tag/v4.0.4
CVE ID: CVE-2021-26822 State: PUBLISHED Published: 2021-02-15T20:54:51 Last Updated: 2024-08-03T20:33:41.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php. This vulnerability can be exploited by a remote unauthenticated attacker to leak sensitive information and perform code execution attacks. Additional Analyst Notes: - CVE Program Container: References: - https://phpgurukul.com/teachers-record-management-system-using-php-and-mysql/ - https://www.exploit-db.com/exploits/49562 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-26
and-mysql/ - https://www.exploit-db.com/exploits/49562 - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-26822
CVE ID: CVE-2021-26824 State: PUBLISHED Published: 2021-07-26T12:16:15 Last Updated: 2024-08-03T20:33:41.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: DM FingerTool v1.19 in the DM PD065 Secure USB is susceptible to improper authentication by a replay attack, allowing local attackers to bypass user authentication and access all features and data on the USB. Additional Analyst Notes: - CVE Program Container: References: - https://sites.google.com/view/boss-lab - https://github.com/bosslabdcu/Vulnerability-Reporting/security/advisories/GHSA-xvrv-w76r-gh28
CVE ID: CVE-2021-26825 State: PUBLISHED Published: 2021-02-08T14:58:40 Last Updated: 2024-08-03T20:33:41.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::load_image() function at line: const size_t buffer_size = (tga_header.image_width * tga_header.image_height) * pixel_size; The bug leads to Dynamic stack buffer overflow. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash. Additional Analyst Notes: - CVE Program Container:
local or remote, and can lead to code execution and/or system crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/godotengine/godot/pull/45702 - https://github.com/godotengine/godot/pull/45702/files
CVE ID: CVE-2021-26826 State: PUBLISHED Published: 2021-02-08T14:55:24 Last Updated: 2024-08-03T20:33:40.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/godotengine/godot/pull/45701 - https://github.com/godotengine/godot/pull/45701/commits/403e4fd08b0b212e96f53d926e6273e0745eaa5a
CVE ID: CVE-2021-26827 State: PUBLISHED Published: 2021-04-14T13:53:21 Last Updated: 2024-08-03T20:33:40.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow in TP-Link WR2041 v1 firmware for the TL-WR2041+ router allows remote attackers to cause a Denial-of-Service (DoS) by sending an HTTP request with a very long "ssid" parameter to the "/userRpm/popupSiteSurveyRpm.html" webpage, which crashes the router. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/GD008/vuln/blob/main/tplink_wr2041/tplink_WR2041pv1.md
CVE ID: CVE-2021-26828 State: PUBLISHED Published: 2021-06-11T11:10:58 Last Updated: 2024-08-03T20:33:41.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm. Additional Analyst Notes: - CVE Program Container: References: - https://youtu.be/k1teIStQr1A - http://packetstormsecurity.com/files/162564/ScadaBR-1.0-1.1CE-Linux-Shell-Upload.html - http://forum.scadabr.com.br/t/report-falhas-de-seguranca-em-versoes-do-scadabr/3615/4
CVE ID: CVE-2021-26829 State: PUBLISHED Published: 2021-06-11T11:05:23 Last Updated: 2024-08-03T20:33:41.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm. Additional Analyst Notes: - CVE Program Container: References: - https://youtu.be/Xh6LPCiLMa8 - http://forum.scadabr.com.br/t/report-falhas-de-seguranca-em-versoes-do-scadabr/3615/4
CVE ID: CVE-2021-26830 State: PUBLISHED Published: 2021-04-16T17:24:16 Last Updated: 2024-08-03T20:33:41.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the `ID` input field of ajax.php in the `Pugin library - delete` module. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TribalSystems/Zenario/releases/tag/8.8.53370
CVE ID: CVE-2021-26832 State: PUBLISHED Published: 2021-04-14T13:45:38 Last Updated: 2024-08-03T20:33:41.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victim to a malicious site. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NagliNagli/CVE-2021-26832
CVE ID: CVE-2021-26833 State: PUBLISHED Published: 2021-04-06T15:46:01 Last Updated: 2024-08-03T20:33:41.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cleartext Storage in a File or on Disk in TimelyBills <= 1.7.0 for iOS and versions <= 1.21.115 for Android allows attacker who can locally read user's files obtain JWT tokens for user's account due to insufficient cache clearing mechanisms. A threat actor can obtain sensitive user data by decoding the tokens as JWT is signed and encoded, not encrypted. Additional Analyst Notes: - CVE Program Container: References: - https://beefaaubee.medium.com/cve-2021-26833-cleartext-storage-in-a-file-or-on-disk-in-timelybills-1-7-0-5760d
rences: - https://beefaaubee.medium.com/cve-2021-26833-cleartext-storage-in-a-file-or-on-disk-in-timelybills-1-7-0-5760dc461bd0
CVE ID: CVE-2021-26834 State: PUBLISHED Published: 2021-06-18T11:46:49 Last Updated: 2024-08-03T20:33:41.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability exists in Znote 0.5.2. An attacker can insert payloads, and the code execution will happen immediately on markdown view mode. Additional Analyst Notes: - CVE Program Container: References: - https://www.electronjs.org/apps/znote - https://github.com/alagrede/znote-app/issues/5
CVE ID: CVE-2021-26835 State: PUBLISHED Published: 2021-06-18T11:46:56 Last Updated: 2024-08-03T20:33:41.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: No filtering of cross-site scripting (XSS) payloads in the markdown-editor in Zettlr 1.8.7 allows attackers to perform remote code execution via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Zettlr/Zettlr/issues/1716 - https://github.com/Zettlr/Zettlr/releases/tag/v1.8.9
CVE ID: CVE-2021-26837 State: PUBLISHED Published: 2023-09-18T00:00:00 Last Updated: 2024-09-25T17:59:36.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://community.helpsystems.com/knowledge-base/rjs/delivernow/overview/ - https://susos.co/blog/f/cve-disclosure-sedric-louissaints-discovery-of-sql-injection-in
CVE ID: CVE-2021-26843 State: PUBLISHED Published: 2021-02-07T20:14:34 Last Updated: 2024-08-03T20:33:41.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in sthttpd through 2.27.1. On systems where the strcpy function is implemented with memcpy, the de_dotdot function may cause a Denial-of-Service (daemon crash) due to overlapping memory ranges being passed to memcpy. This can triggered with an HTTP GET request for a crafted filename. NOTE: this is similar to CVE-2017-10671, but occurs in a different part of the de_dotdot function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blueness/sthttpd/issues/14
CVE ID: CVE-2021-26844 State: PUBLISHED Published: 2021-11-05T10:07:48 Last Updated: 2024-08-03T20:33:41.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in Power Admin PA Server Monitor 8.2.1.1 allows remote attackers to inject arbitrary web script or HTML via Console.exe. Additional Analyst Notes: - CVE Program Container: References: - https://www.poweradmin.com/products/server-monitoring/support/release-notes/ - https://pastebin.com/mrzVTPeV
CVE ID: CVE-2021-26845 State: PUBLISHED Published: 2021-06-14T21:25:40.617368Z Last Updated: 2024-09-16T18:23:30.123Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report data if the URL used to access the report is discovered. This issue affects: Hitachi ABB Power Grids eSOMS 6.0 versions prior to 6.0.4.2.2; 6.1 versions prior to 6.1.4; 6.3 versions prior to 6.3. Additional Analyst Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8942&L
Notes: - CVE Program Container: References: - https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8942&LanguageCode=en&DocumentPartId=&Action=Launch
CVE ID: CVE-2021-26854 State: PUBLISHED Published: 2021-03-02T23:55:25 Last Updated: 2024-08-03T20:33:41.063Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Exchange Server 2016 Cumulative Update 18 Problem Types: Remote Code Execution Description: Microsoft Exchange Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/e
ution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26854
CVE ID: CVE-2021-26855 State: PUBLISHED Published: 2021-03-02T23:55:26.000Z Last Updated: 2025-10-21T23:25:53.200Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:F/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8, Microsoft Exchange Server 2019, Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Exch
Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Exchan
icrosoft Exchange Server 2016 Cumulative Update 12, Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Exchange Server 2016 Cumulative Update 11 Problem Types: Remote Code Execution Description: Microsoft Exchange Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26855 - http://packetstormsecurity.com/files/161846/Microsoft-Exchange-2019-SSRF-Arbitrary-File-Write.html -
y/CVE-2021-26855 - http://packetstormsecurity.com/files/161846/Microsoft-Exchange-2019-SSRF-Arbitrary-File-Write.html - http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html - http://packetstormsecurity.com/files/162610/Microsoft-Exchange-2019-Unauthenticated-Email-Download.html - http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.html
CVE ID: CVE-2021-26857 State: PUBLISHED Published: 2021-03-02T23:55:26.000Z Last Updated: 2025-10-21T23:25:52.982Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8, Microsoft Exchange Server 2019, Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Exchange
rosoft Exchange Server 2019 Cumulative Update 3, Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Exchange Server 2010 Service Pack 3, Microsoft Exchange Server 2013 Service Pack 1, Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Exchange Server 2016
xchange Server 2013 Service Pack 1, Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Exchange Server 2016 Cumulative Update 11 Problem Types: Remote Code Execution Description: Microsoft Exchange Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26857
CVE ID: CVE-2021-26858 State: PUBLISHED Published: 2021-03-02T23:55:27.000Z Last Updated: 2025-10-21T23:25:52.837Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Exchange Server 2019, Microsoft Exchange Server 2013 Cumulative Update 22, Microsoft Exchange Server 2019 Cumulative Update 2, Microsoft Exchange Server 2016 Cumulative Update 13, Microsoft Exchange Server 2013 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 3, Microsoft Exchange Server 2016 Cumulative Update 14, Microsoft Exchange Server 2019 Cumulative Update 4, Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Exchange
rosoft Exchange Server 2019 Cumulative Update 4, Microsoft Exchange Server 2016 Cumulative Update 15, Microsoft Exchange Server 2019 Cumulative Update 5, Microsoft Exchange Server 2019 Cumulative Update 6, Microsoft Exchange Server 2016 Cumulative Update 16, Microsoft Exchange Server 2016 Cumulative Update 17, Microsoft Exchange Server 2019 Cumulative Update 7, Microsoft Exchange Server 2016 Cumulative Update 18, Microsoft Exchange Server 2016 Cumulative Update 19, Microsoft Exchange Server 2019 Cumulative Update 8, Microsoft Exchange Server 2013 Cumulative Update 21, Microsoft Exchange Server 2016 Cumulative Update 12, Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Exchange S
soft Exchange Server 2016 Cumulative Update 12, Microsoft Exchange Server 2016 Cumulative Update 8, Microsoft Exchange Server 2019 Cumulative Update 1, Microsoft Exchange Server 2016 Cumulative Update 9, Microsoft Exchange Server 2016 Cumulative Update 10, Microsoft Exchange Server 2016 Cumulative Update 11 Problem Types: Remote Code Execution Description: Microsoft Exchange Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26858
CVE ID: CVE-2021-26859 State: PUBLISHED Published: 2021-03-11T15:35:31 Last Updated: 2024-08-03T20:33:41.132Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Power BI Report Server version 15.0.1103.234, Power BI Report Server version 15.0.1104.300 Problem Types: Information Disclosure Description: Microsoft Power BI Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26859
CVE ID: CVE-2021-26860 State: PUBLISHED Published: 2021-03-11T15:36:50 Last Updated: 2024-08-03T20:33:41.365Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation), Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 Problem Types: Elevation of Privilege Description: Windows App-V Overlay Filter Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://por