Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-45062 State: PUBLISHED Published: 2022-01-14T19:05:05.488011Z Last Updated: 2024-09-17T03:03:13.160Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: Ref
CVE ID: CVE-2021-45063 State: PUBLISHED Published: 2022-01-14T19:05:16.567348Z Last Updated: 2024-09-16T17:43:30.152Z Severity: LOW (CVSS 3.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Addi
ons such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-01.html
CVE ID: CVE-2021-45064 State: PUBLISHED Published: 2022-01-14T19:05:23.583002Z Last Updated: 2024-09-16T22:31:00.956Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-416 Description: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a use-after-free vulnerability in the processing of Format event actions that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: Ref
CVE ID: CVE-2021-45067 State: PUBLISHED Published: 2022-01-14T19:05:35.776369Z Last Updated: 2024-09-16T23:51:36.428Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-788 Description: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional
h as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb22-01.html
CVE ID: CVE-2021-45068 State: PUBLISHED Published: 2022-01-14T19:05:09.071114Z Last Updated: 2024-09-16T16:28:15.719Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-787 Description: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/s
CVE ID: CVE-2021-45071 State: PUBLISHED Published: 2023-04-25T18:29:52.108Z Last Updated: 2024-08-04T04:32:13.508Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N) Vendors: Odoo Products: Odoo Community, Odoo Enterprise Problem Types: CWE-79 Description: Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via crafted uploaded file names. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/odoo/odoo/issues/107697 - https://www.debian.org/security/2023/dsa-5399
CVE ID: CVE-2021-45074 State: PUBLISHED Published: 2022-03-02T21:20:11 Last Updated: 2024-08-04T04:32:13.616Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: JFrog Products: JFrog Artifactory Problem Types: CWE-284 Description: JFrog Artifactory before 7.29.3 and 6.23.38, is vulnerable to Broken Access Control, a low-privileged user is able to delete other known users OAuth token, which will force a reauthentication on an active session or in the next UI session. Additional Analyst Notes: - CVE Program Container: References: - https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories - https://www.jfrog.com/confluence/display/JFROG/CVE-2021-45
frog.com/confluence/display/JFROG/JFrog+Security+Advisories - https://www.jfrog.com/confluence/display/JFROG/CVE-2021-45074%3A+Artifactory+Broken+Access+Control+on+Delete+OAuth+Tokens
CVE ID: CVE-2021-45077 State: PUBLISHED Published: 2021-12-30T21:31:21 Last Updated: 2024-08-04T04:32:13.607Z Vendors: n/a Products: Netgear Nighthawk R6700 Problem Types: Plaintext Password Storage Description: Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2021-57
CVE ID: CVE-2021-45078 State: PUBLISHED Published: 2021-12-15T19:37:46 Last Updated: 2024-08-04T04:32:13.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=28694 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=161e87d12167b1e36193385485c1f6ce92f74f02 - https://l
8694 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=161e87d12167b1e36193385485c1f6ce92f74f02 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UUHLDDT3HH7YEY6TX7IJRGPJUTNNVEL3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQBH244M5PV6S6UMHUTCVCWFZDX7Y4M6/ - https://security.netapp.com/advisory/ntap-20220107-0002/ - https://security.gentoo.org/glsa/202208-30
CVE ID: CVE-2021-45079 State: PUBLISHED Published: 2022-01-31T07:15:52 Last Updated: 2024-08-04T04:32:13.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: In strongSwan before 5.9.5, a malicious responder can send an EAP-Success message too early without actually authenticating the client and (in the case of EAP methods with mutual authentication and EAP-only authentication for IKEv2) even without server authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.strongswan.org/blog/2022/01/24/strongswan-vulnerability-%28cve-2021-45079%29.html
CVE ID: CVE-2021-45081 State: PUBLISHED Published: 2022-02-20T17:52:52 Last Updated: 2024-08-04T04:32:13.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cobbler through 3.3.1. Routines in several files use the HTTP protocol instead of the more secure HTTPS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cobbler/cobbler/releases - http://www.openwall.com/lists/oss-security/2022/02/18/3 - https://bugzilla.suse.com/show_bug.cgi?id=1193683
CVE ID: CVE-2021-45082 State: PUBLISHED Published: 2022-02-18T23:23:30 Last Updated: 2024-08-04T04:32:13.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cobbler/cobbler/releases - https://bugzilla.suse.com/show_bug.cgi?id=1193678 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z5CSXQE7Q4TVDQJKFYBO4
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z5CSXQE7Q4TVDQJKFYBO4XDH3BZ7BLAR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEJN7CPW6YCHBFQPFZKGA6AVA6T5NPIW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZCXMOUW4DH4DYWIJN44SMSU6R3CZDZBE/
CVE ID: CVE-2021-45083 State: PUBLISHED Published: 2022-02-20T17:56:11 Last Updated: 2024-08-04T04:32:13.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain some sensitive information that can be exposed to a local user who has non-privileged access to the server. The users.digest file contains the sha2-512 digest of users in a Cobbler local installation. In the case of an easy-to-guess password, it's trivial to obtain the plaintext string. The settings.yaml file contains secrets such as the hashed default password. Additional Analyst Notes: - CVE Program Containe
ettings.yaml file contains secrets such as the hashed default password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cobbler/cobbler/releases - https://www.openwall.com/lists/oss-security/2022/02/18/3 - https://bugzilla.suse.com/show_bug.cgi?id=1193671 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z5CSXQE7Q4TVDQJKFYBO4XDH3BZ7BLAR/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEJN7CPW6YCHBFQPFZKGA6AVA6T5NPIW/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZCXMOUW4DH4DYWIJN44SMSU6R3CZDZBE/
CVE ID: CVE-2021-45085 State: PUBLISHED Published: 2021-12-16T02:19:08 Last Updated: 2024-08-04T04:32:13.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/epiphany/-/issues/1612 - https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045 - https://www.debian.org/security/2022/dsa-5042 - https://lists.debian.org/debian-lts-announce/2022/08/msg00006.html
CVE ID: CVE-2021-45086 State: PUBLISHED Published: 2021-12-16T02:19:35 Last Updated: 2024-08-04T04:32:13.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name value in PDF.js. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/epiphany/-/issues/1612 - https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045 - https://www.debian.org/security/2022/dsa-5042
CVE ID: CVE-2021-45087 State: PUBLISHED Published: 2021-12-16T02:19:26 Last Updated: 2024-08-04T04:32:13.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by a a page title. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/epiphany/-/issues/1612 - https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045 - https://www.debian.org/security/2022/dsa-5042 - https://lists.debian.org/debian-lts-announce/2022/08/msg00006.html
CVE ID: CVE-2021-45088 State: PUBLISHED Published: 2021-12-16T02:19:17 Last Updated: 2024-08-04T04:32:13.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an error page. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.gnome.org/GNOME/epiphany/-/issues/1612 - https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/1045 - https://www.debian.org/security/2022/dsa-5042 - https://lists.debian.org/debian-lts-announce/2022/08/msg00006.html
CVE ID: CVE-2021-45089 State: PUBLISHED Published: 2021-12-21T15:15:02 Last Updated: 2024-08-04T04:32:13.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu/2021-071/
CVE ID: CVE-2021-45090 State: PUBLISHED Published: 2021-12-21T15:17:04 Last Updated: 2024-08-04T04:32:13.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stormshield Endpoint Security before 2.1.2 allows remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu/2021-070/
CVE ID: CVE-2021-45091 State: PUBLISHED Published: 2021-12-21T15:10:57 Last Updated: 2024-08-04T04:32:13.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control. Additional Analyst Notes: - CVE Program Container: References: - https://advisories.stormshield.eu/2021-072/
CVE ID: CVE-2021-45092 State: PUBLISHED Published: 2021-12-16T03:07:32 Last Updated: 2024-08-04T04:32:13.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cybelesoft/virtualui/issues/2 - http://packetstormsecurity.com/files/166068/Thinfinity-VirtualUI-2.5.41.0-IFRAME-Injection.html
CVE ID: CVE-2021-45094 State: PUBLISHED Published: 2023-07-20T00:00:00 Last Updated: 2024-10-24T16:50:46.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Imprivata Privileged Access Management (formally Xton Privileged Access Management) 2.3.202112051108 allows XSS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.imprivata.com/privileged-access-management - https://aegis9.com.au/blog/ - https://www.aegis9.com.au/blog/5/
CVE ID: CVE-2021-45095 State: PUBLISHED Published: 2021-12-16T03:37:50 Last Updated: 2024-08-04T04:32:13.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: pep_sock_accept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=bcd0f93353326954817a4f9fa55ec57fb38acbb0 - https://github.com/torvalds/linux/commit/bcd0f93353326954817a4f9fa55ec57fb38acbb0 - https://www.debian.org/security/2022/dsa-5050 - https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html - https://lists.debian.org/debian-lts-announce/2022/03/msg
://lists.debian.org/debian-lts-announce/2022/03/msg00011.html - https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html - https://www.debian.org/security/2022/dsa-5096
CVE ID: CVE-2021-45096 State: PUBLISHED Published: 2021-12-16T00:00:00 Last Updated: 2024-08-04T04:32:13.524Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730. Additional Analyst Notes: - CVE Program Container: References: - https://www.knime.com/changelog-v45 - https://www.knime.com/whats-new-in-knime-45 - https://github.com/dawid-czarnecki/public-vulnerabilities - https://zigrin.com/advisories/knime-analytics-platform-external-xml-entity-injection/
CVE ID: CVE-2021-45097 State: PUBLISHED Published: 2021-12-16T00:00:00 Last Updated: 2024-08-04T04:32:13.714Z Severity: LOW (CVSS 2.9 CVSS:3.1/AC:H/AV:L/A:N/C:L/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file access controls, allowing all local users to read its content. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dawid-czarnecki/public-vulnerabilities/tree/master/KNIME/CVE-weak-file-permission - https://zigrin.com/advisories/knime-server-weak-file-permissions/
CVE ID: CVE-2021-45098 State: PUBLISHED Published: 2021-12-16T04:07:57.000Z Last Updated: 2025-11-03T19:26:34.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option. Then, the client can send an HTTP GET request with a forbidden URL. The server will ignore the RST ACK and send the response HTTP packet for the client's request. These packets will not trigger a Suricata reject action. Additio
send the response HTTP packet for the client's request. These packets will not trigger a Suricata reject action. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/OISF/suricata/releases - https://redmine.openinfosecfoundation.org/issues/4710 - https://forum.suricata.io/t/suricata-6-0-4-and-5-0-8-released/1942 - https://github.com/OISF/suricata/commit/50e2b973eeec7172991bf8f544ab06fb782b97df
CVE ID: CVE-2021-45099 State: PUBLISHED Published: 2021-12-16T04:20:38 Last Updated: 2024-11-18T19:59:49.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: The addon.stdin service in addon-ssh (aka Home Assistant Community Add-on: SSH & Web Terminal) before 10.0.0 has an attack surface that requires social engineering. NOTE: the vendor does not agree that this is a vulnerability; however, addon.stdin was removed as a defense-in-depth measure against complex social engineering situations Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hassio-addons/addon-ssh/releases/tag/v10.0.0 - https://gist.github.com/Eriner/08726285
References: - https://github.com/hassio-addons/addon-ssh/releases/tag/v10.0.0 - https://gist.github.com/Eriner/0872628519f70556d2c26c83439a9f67
CVE ID: CVE-2021-45100 State: PUBLISHED Published: 2021-12-16T04:37:02 Last Updated: 2024-08-04T04:32:13.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2_GLOBAL_CAP_ENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol specification. When Windows 10 detects this protocol violation, it disables encryption. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cifsd-team/ksmbd/issues/550 - https://github.com/cifsd-team/ksmbd/
E Program Container: References: - https://github.com/cifsd-team/ksmbd/issues/550 - https://github.com/cifsd-team/ksmbd/pull/551 - https://marc.info/?l=linux-kernel&m=163961726017023&w=2 - https://security.netapp.com/advisory/ntap-20220107-0001/
CVE ID: CVE-2021-45101 State: PUBLISHED Published: 2021-12-16T04:46:42 Last Updated: 2024-08-04T04:32:13.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2. Using standard command-line tools, a user with only READ access to an HTCondor SchedD or Collector daemon can discover secrets that could allow them to control other users' jobs and/or read their data. Additional Analyst Notes: - CVE Program Container: References: - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0003/
CVE ID: CVE-2021-45102 State: PUBLISHED Published: 2021-12-16T04:46:58 Last Updated: 2024-08-04T04:32:13.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HTCondor 9.0.x before 9.0.4 and 9.1.x before 9.1.2. When authenticating to an HTCondor daemon using a SciToken, a user may be granted authorizations beyond what the token should allow. Additional Analyst Notes: - CVE Program Container: References: - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0004/
CVE ID: CVE-2021-45103 State: PUBLISHED Published: 2022-04-06T00:55:20 Last Updated: 2024-08-04T04:32:13.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer. Additional Analyst Notes: - CVE Program Container: References: - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0005/ - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2022-0001
CVE ID: CVE-2021-45104 State: PUBLISHED Published: 2022-04-06T01:04:19 Last Updated: 2024-08-04T04:39:20.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data. Additional Analyst Notes: - CVE Program Container: References: - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0006/ - https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2022-0002
CVE ID: CVE-2021-45105 State: PUBLISHED Published: 2021-12-18T11:55:08 Last Updated: 2024-08-04T04:39:20.295Z Vendors: Apache Software Foundation Products: Apache Log4j2 Problem Types: CWE-20, CWE-674 Description: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1. Additional Analyst Notes: - CVE Program Container: References: - https://logging.apache.org/log4j/2.x/security.html - https://psirt.global.soni
s: - CVE Program Container: References: - https://logging.apache.org/log4j/2.x/security.html - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032 - https://www.kb.cert.org/vuls/id/930724 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd - http://www.openwall.com/lists/oss-security/2021/12/19/1 - https://www.debian.org/security/2021/dsa-5024 - https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf - https://security.netapp.com/advisory/ntap-20211218-0001/ - https://www.zerodayinitiative.com/advisories/ZDI-21-1541/ - https://cert-portal.siemens.com/productcert/pdf/ssa-501673.pdf - https://www.oracle.com/security-alerts/c