Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-33780 State: PUBLISHED Published: 2021-07-14T17:53:52 Last Updated: 2024-08-03T23:58:23.181Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server version 2004, Windows Server version 20H2, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012
rvice Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Remote Code Execution Description: Windows DNS Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33780
CVE ID: CVE-2021-33781 State: PUBLISHED Published: 2021-07-14T17:53:53 Last Updated: 2024-08-03T23:58:22.912Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 11 version 21H2, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation) Problem Types: Security Feature Bypass Description: Azure AD Security Feature Bypass Vulnerability Additio
installation) Problem Types: Security Feature Bypass Description: Azure AD Security Feature Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33781
CVE ID: CVE-2021-33782 State: PUBLISHED Published: 2021-07-14T17:53:54 Last Updated: 2024-08-03T23:58:22.975Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 20
e installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Spoofing Description: Windows Authenticode Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33782
CVE ID: CVE-2021-33783 State: PUBLISHED Published: 2021-07-14T17:53:55 Last Updated: 2024-08-03T23:58:23.059Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 20
e installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Information Disclosure Description: Windows SMB Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33783
CVE ID: CVE-2021-33784 State: PUBLISHED Published: 2021-07-14T17:53:56 Last Updated: 2024-08-03T23:58:23.170Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 Problem Types: Elevation of Privilege Description: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com
ivilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33784
CVE ID: CVE-2021-33785 State: PUBLISHED Published: 2021-07-14T17:53:57 Last Updated: 2024-11-19T14:42:17.504Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2 Problem Types: Denial of Service Description: Windows AF_UNIX Socket Provider Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.micro
lity Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33785
CVE ID: CVE-2021-33786 State: PUBLISHED Published: 2021-07-14T17:53:58 Last Updated: 2024-08-03T23:58:23.058Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server version 2004, Windows Server version 20H2, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012
rvice Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Security Feature Bypass Description: Windows LSA Security Feature Bypass Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33786
CVE ID: CVE-2021-33788 State: PUBLISHED Published: 2021-07-14T17:53:59 Last Updated: 2024-08-03T23:58:23.141Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1909, Windows 10 Version 21H1, Windows 10 Version 2004, Windows Server version 2004, Windows 10 Version 20H2, Windows Server version 20H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008
installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Denial of Service Description: Windows LSA Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-33788
CVE ID: CVE-2021-33790 State: PUBLISHED Published: 2021-05-31T04:00:33 Last Updated: 2024-08-03T23:58:23.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RebornCore library before 4.7.3 allows remote code execution because it deserializes untrusted data in ObjectInputStream.readObject as part of reborncore.common.network.ExtendedPacketBuffer. An attacker can instantiate any class on the classpath with any data. A class usable for exploitation might or might not be present, depending on what Minecraft modifications are installed. Additional Analyst Notes: - CVE Program Container: References: - https://www.curseforge.com/minecraft/mc-mods/reborncore - https://vuln.ryotak.me/
- CVE Program Container: References: - https://www.curseforge.com/minecraft/mc-mods/reborncore - https://vuln.ryotak.me/advisories/45 - https://github.com/TechReborn/RebornCore/security/advisories/GHSA-r7pg-4xrf-7mrm
CVE ID: CVE-2021-33791 State: REJECTED Published: 2021-08-11T19:35:37 Last Updated: 2021-08-11T19:43:43 Description: No description available.
CVE ID: CVE-2021-33792 State: PUBLISHED Published: 2021-07-09T17:14:06 Last Updated: 2024-08-03T23:58:23.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write via a crafted /Size key in the Trailer dictionary. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.html
CVE ID: CVE-2021-33793 State: PUBLISHED Published: 2021-08-11T19:34:14 Last Updated: 2024-08-03T23:58:23.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.html
CVE ID: CVE-2021-33794 State: PUBLISHED Published: 2021-08-11T19:28:25 Last Updated: 2024-08-03T23:58:23.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.html
CVE ID: CVE-2021-33795 State: PUBLISHED Published: 2021-07-09T17:13:39 Last Updated: 2024-08-03T23:58:23.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 produce incorrect PDF document signatures because the certificate name, document owner, and signature author are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.html
CVE ID: CVE-2021-33796 State: PUBLISHED Published: 2023-07-07T17:55:00.630Z Last Updated: 2024-11-12T19:49:00.304Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: MuJS Products: MuJS Problem Types: CWE-416 Description: In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ccxvii/mujs/commit/7ef066a3bb95bf83e7c5be50d859e62e58fe8515
CVE ID: CVE-2021-33797 State: PUBLISHED Published: 2023-04-17T00:00:00.000Z Last Updated: 2025-02-06T16:51:47.788Z Vendors: n/a Products: mujs Problem Types: CWE-119 Description: Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent, which leads to a buffer overflow in the pointer *d. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ccxvii/mujs/issues/148 - https://github.com/ccxvii/mujs/commit/833b6f1672b4f2991a63c4d05318f0b84ef4d550
CVE ID: CVE-2021-33798 State: PUBLISHED Published: 2023-07-07T17:39:16.274Z Last Updated: 2024-10-28T15:46:30.811Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: libpano13 Products: libpano13 Problem Types: CWE-476 Description: A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denial of service and potential code execute via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://groups.google.com/u/1/g/hugin-ptx/c/gLtz2vweD74 - https://sourceforge.net/p/panotools/libpano13/ci/62aa7eed8fae5d8f247a2508a757f31000de386f/
CVE ID: CVE-2021-33800 State: PUBLISHED Published: 2021-11-03T19:09:33 Last Updated: 2024-08-03T23:58:23.194Z Vendors: n/a Products: Druid Problem Types: Directory Traversal Description: In Druid 1.2.3, visiting the path with parameter in a certain function can lead to directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://security.alibaba.com/announcement/announcement?id=214
CVE ID: CVE-2021-33805 State: REJECTED Published: 2021-06-03T02:39:49 Last Updated: 2021-06-09T18:07:04 Description: No description available.
CVE ID: CVE-2021-33806 State: PUBLISHED Published: 2021-06-03T11:22:05 Last Updated: 2024-08-03T23:58:23.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BDew BdLib library before 1.16.1.7 for Minecraft allows remote code execution because it deserializes untrusted data in ObjectInputStream.readObject as part of its use of Java serialization. Additional Analyst Notes: - CVE Program Container: References: - https://bdew.net - https://www.curseforge.com/minecraft/mc-mods/bdlib/files/3331330 - https://vuln.ryotak.me/advisories/46 - https://github.com/bdew-minecraft/bdlib/commit/447210530ceec72fb3374efecb0930ed359d2297
CVE ID: CVE-2021-33807 State: PUBLISHED Published: 2021-07-12T14:51:57 Last Updated: 2024-08-03T23:58:23.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData. Additional Analyst Notes: - CVE Program Container: References: - https://www.cartadis.com/gespage-website/ - https://www.gespage.com - https://support.gespage.com/fr/support/solutions/articles/14000130201-security-advisory-gespage-directory-traversal - https://www.on-x.com/sites/default/files/on-x_-_security_advisory_-_gespage_-_cve-2021-33807.pdf
CVE ID: CVE-2021-33813 State: PUBLISHED Published: 2021-06-16T11:18:14 Last Updated: 2024-08-03T23:58:23.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/hunterhacker/jdom/pull/188 - https://github.com/hunterhacker/jdom/releases - https://lists.debian.org/debian-lts-announce/2021/06/msg00026.html - https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/rbc075a4ac85e
87b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/r89b3800cfabb1e773e49425e5d4239c28a659839a2eca6af3431482e%40%3Cissues.solr.apache.org%3E - https://lists.debian.org/debian-lts-announce/2021/07/msg00012.html - https://lists.apache.org/thread.html/rfb7a93e40ebeb1e0068cde0bf3834dcab46bb1ef06d6424db48ed9fd%40%3Cdev.tika.apache.org%3E - https://lists.apache.org/thread.html/r845e987b7cd8efe610284958e997b84583f5a98d3394adc09e3482fe%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/r5674106135bb1a
58e997b84583f5a98d3394adc09e3482fe%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/r5674106135bb1a6ef57483f4c63a9c44bca85d0e2a8a05895a8f1d89%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/r6db397ae7281ead825338200d1f62d2827585a70797cc9ac0c4bd23f%40%3Cissues.solr.apache.org%3E - https://lists.apache.org/thread.html/r21c406c7ed88fe340db7dbae75e58355159e6c324037c7d5547bf40b%40%3Cissues.solr.apache.org%3E - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AH46QHE5GIMT6BL6C3GDTOYF27JYILXM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWFVYTHGILOQXUA7U3
M/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EWFVYTHGILOQXUA7U3SPOERQXL7OPSZG/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://alephsecurity.com/vulns/aleph-2021003 - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-33815 State: PUBLISHED Published: 2021-06-03T00:00:00 Last Updated: 2024-08-03T23:58:23.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: dwa_uncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dc_count is not strictly checked. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/FFmpeg/FFmpeg/commit/26d3c81bc5ef2f8c3f09d45eaeacfb4b1139a777 - https://security.gentoo.org/glsa/202312-14
CVE ID: CVE-2021-33816 State: PUBLISHED Published: 2021-11-10T22:37:21 Last Updated: 2024-08-03T23:58:23.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The website builder module in Dolibarr 13.0.2 allows remote PHP code execution because of an incomplete protection mechanism in which system, exec, and shell_exec are blocked but backticks are not blocked. Additional Analyst Notes: - CVE Program Container: References: - https://trovent.io/security-advisory-2106-01 - https://trovent.github.io/security-advisories/TRSA-2106-01/TRSA-2106-01.txt - http://seclists.org/fulldisclosure/2021/Nov/39
CVE ID: CVE-2021-33818 State: PUBLISHED Published: 2021-06-18T18:38:03 Last Updated: 2024-08-03T23:58:23.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shekyan/slowhttptest - https://store.ui.com/collections/unifi-protect-cameras/products/unifi-video-g3-flex-camera - https://github.com/Jian-Xian/CVE
://store.ui.com/collections/unifi-protect-cameras/products/unifi-video-g3-flex-camera - https://github.com/Jian-Xian/CVE-POC/blob/master/CVE-2021-33818.md
CVE ID: CVE-2021-33820 State: PUBLISHED Published: 2021-06-18T18:32:04 Last Updated: 2024-08-03T23:58:23.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://store.ui.com/collections/unifi-protect-cameras/products/unifi-video-g3-flex-camera - https://linuxhint.com/hping3/ - https://github.com/Jian-Xian/CVE-POC/blob/master/CVE-2021-33820.md
CVE ID: CVE-2021-33822 State: PUBLISHED Published: 2021-06-18T18:47:47 Last Updated: 2024-08-03T23:58:23.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on 4GEE ROUTER HH70VB Version HH70_E1_02.00_22. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shekyan/slowhttptest - https://www.sing4g.com/product-page/4gee-router-hh70vb-4g-300mbps-2lan-32wifi - https://github.com/Jian-Xian/CVE-POC/blob/master/CVE-
ing4g.com/product-page/4gee-router-hh70vb-4g-300mbps-2lan-32wifi - https://github.com/Jian-Xian/CVE-POC/blob/master/CVE-2021-33822.md
CVE ID: CVE-2021-33823 State: PUBLISHED Published: 2021-06-18T19:02:06 Last Updated: 2024-08-03T23:58:23.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://www.moxa.com/en/products/industrial-edge-connectivity/protocol-gateways/modbus-tcp-gateways/mgate-mb3180-mb3280-mb3480-series - https://github.com/Jian-Xian/CVE-POC/blob/master/CVE-2021-33823.md
CVE ID: CVE-2021-33824 State: PUBLISHED Published: 2021-06-18T19:08:05 Last Updated: 2024-08-03T23:58:23.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shekyan/slowhttptest - https://www.moxa.com/en/products/industrial-edge-connectivity/protocol-gateways/modbus-tcp-gateways/mgate-mb3180-mb3280-mb3480-serie
moxa.com/en/products/industrial-edge-connectivity/protocol-gateways/modbus-tcp-gateways/mgate-mb3180-mb3280-mb3480-series - https://github.com/Jian-Xian/CVE-POC/blob/master/CVE-2021-33824.md
CVE ID: CVE-2021-33827 State: PUBLISHED Published: 2022-01-15T20:55:50 Last Updated: 2024-08-03T23:58:23.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: The files_antivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings. Additional Analyst Notes: - CVE Program Container: References: - https://doc.owncloud.com/server/admin_manual/release_notes.html - https://owncloud.com/security-advisories/cve-2021-33827/
CVE ID: CVE-2021-33828 State: PUBLISHED Published: 2022-01-15T20:54:30 Last Updated: 2024-08-03T23:58:23.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (that have been uploaded to a public share) are supposed to be deleted upon detection. Additional Analyst Notes: - CVE Program Container: References: - https://doc.owncloud.com/server/admin_manual/release_notes.html - https://owncloud.com/security-advisories/cve-2021-33828/