Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-3239 State: PUBLISHED Published: 2021-02-15T20:39:34 Last Updated: 2024-08-03T16:53:16.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: E-Learning System 1.0 suffers from an unauthenticated SQL injection vulnerability, which allows remote attackers to execute arbitrary code on the hosting web server and gain a reverse shell. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TCSWT/E-Learning-System/blob/main/README.md - https://www.exploit-db.com/exploits/49434 - https://www.sourcecodester.com/php/12808/e-learning-system-using-phpmysqli.html - https://packetstormsecurity.com/files/160966/E-Learning-System-1.0-SQL-Injection-Shel
ning-system-using-phpmysqli.html - https://packetstormsecurity.com/files/160966/E-Learning-System-1.0-SQL-Injection-Shell-Upload.html - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/CVE-nu11-101821
CVE ID: CVE-2021-3242 State: PUBLISHED Published: 2022-02-16T19:29:38 Last Updated: 2024-08-03T16:53:17.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: DuxCMS v3.1.3 was discovered to contain a SQL injection vulnerability via the component s/tools/SendTpl/index?keyword=. Additional Analyst Notes: - CVE Program Container: References: - https://www.star123.top/2021/01/16/duxcms3-1-3%E5%AE%A1%E8%AE%A1/ - https://github.com/duxphp/DuxCMS3/issues/4
CVE ID: CVE-2021-3243 State: PUBLISHED Published: 2021-04-15T16:48:00 Last Updated: 2024-08-03T16:53:16.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wfilter ICF 5.0.117 contains a cross-site scripting (XSS) vulnerability. An attacker in the same LAN can craft a packet with a malicious User-Agent header to inject a payload in its logs, where an attacker can take over the system by through its plugin-running function. Additional Analyst Notes: - CVE Program Container: References: - https://drivertom.blogspot.com/2021/01/wfilter-icf-0day-rce.html
CVE ID: CVE-2021-3246 State: PUBLISHED Published: 2021-07-20T00:00:00 Last Updated: 2024-08-03T16:53:16.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/libsndfile/libsndfile/issues/687 - https://lists.debian.org/debian-lts-announce/2021/07/msg00024.html - https://www.debian.org/security/2021/dsa-4947 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7LNW4AVDVL3BU3N3KGVFLTYFASBVCIF/ - https://lists.
.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7LNW4AVDVL3BU3N3KGVFLTYFASBVCIF/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLUDCEMMPRA3IYYYHVZUOUZXI65FU37V/ - https://security.gentoo.org/glsa/202309-11
CVE ID: CVE-2021-3252 State: PUBLISHED Published: 2021-02-23T14:15:32 Last Updated: 2024-08-03T16:53:16.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-15-224-01 - https://twitter.com/Kevin2600/status/1351189347501023238 - https://tiger-team-1337.blogspot.com/202
CS-ALERT-15-224-01 - https://twitter.com/Kevin2600/status/1351189347501023238 - https://tiger-team-1337.blogspot.com/2021/01/kaco-xp100u-hmi-credential-leak.html
CVE ID: CVE-2021-3254 State: PUBLISHED Published: 2022-05-11T11:55:04 Last Updated: 2024-08-03T16:53:16.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asus DSL-N14U-B1 1.1.2.3_805 allows remote attackers to cause a Denial of Service (DoS) via a TCP SYN scan using nmap. Additional Analyst Notes: - CVE Program Container: References: - https://kaisersource.github.io/dsl-n14u-syn - https://github.com/kaisersource/kaisersource.github.io/blob/main/_posts/2021-01-22-dsl-n14u.md
CVE ID: CVE-2021-3256 State: PUBLISHED Published: 2021-06-11T19:50:23 Last Updated: 2024-08-03T16:53:16.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the html_url parameter of the chakanhtml.module.php file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/poropro/kuaifan/issues/3
CVE ID: CVE-2021-3258 State: PUBLISHED Published: 2021-02-05T15:38:18 Last Updated: 2024-08-03T16:53:16.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Question2Answer Q2A Ultimate SEO Version 1.3 is affected by cross-site scripting (XSS), which may lead to arbitrary remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://nirmaldahal.com.np/sxss-to-defacement-and-account-takeover/ - https://www.question2answer.org/qa/58520/important-q2a-ultimate-seo-important-update - https://github.com/q2a-projects/Q2A-Ultimate-SEO/commit/20069f28147c6f2c3acca4e3f6f5154537c5d536
CVE ID: CVE-2021-3262 State: PUBLISHED Published: 2023-08-29T00:00:00 Last Updated: 2024-10-02T14:57:43.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: TripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20201123-184084 allows unsafe data inputs in POST body parameters from end users without sanitizing using server-side logic. It was possible to inject custom SQL commands into the "Student Busing Information" search queries. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://tripspark.com - http://veo.com - https://susos.co/blog/f/cve-disclosureuncovered-sql-injection-in-tripspark-veo-transport
CVE ID: CVE-2021-3264 State: PUBLISHED Published: 2021-08-27T18:06:30 Last Updated: 2024-08-03T16:53:16.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cbkhwx/cxuucmsv3/issues/6
CVE ID: CVE-2021-3267 State: PUBLISHED Published: 2023-04-04T00:00:00.000Z Last Updated: 2025-02-18T17:10:59.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Kitesky/KiteCMS/issues/6
CVE ID: CVE-2021-3271 State: PUBLISHED Published: 2021-01-22T17:08:20 Last Updated: 2024-08-03T16:53:16.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: PressBooks 5.17.3 contains a cross-site scripting (XSS). Stored XSS can be submitted via the Book Info's Long Description Body, and all actions to open or preview the books page will result in the triggering the stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pressbooks/pressbooks/pull/2072 - https://github.com/pressbooks/pressbooks - https://www.gosecure.net/blog/2021/02/16/cve-2021-3271-pressbooks-stored-cross-site-scripting-proof-of-concept/
CVE ID: CVE-2021-3272 State: PUBLISHED Published: 2021-01-27T07:29:02 Last Updated: 2024-08-03T16:53:16.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jasper-software/jasper/issues/259 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HD2Y2LT4N5ZWCMKYCUIKB3XODNJLOW3J/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproje
e/HD2Y2LT4N5ZWCMKYCUIKB3XODNJLOW3J/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4BZFU2F6UW4L2FJE65WJLWGUIELDWCL7/
CVE ID: CVE-2021-3273 State: PUBLISHED Published: 2021-02-25T13:32:53 Last Updated: 2024-08-03T16:53:16.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI below 5.7 is affected by code injection in the /nagiosxi/admin/graphtemplates.php component. To exploit this vulnerability, someone must have an admin user account in Nagios XI's web system. Additional Analyst Notes: - CVE Program Container: References: - https://www.nagios.com/downloads/nagios-xi/change-log/ - https://gist.github.com/leommxj/93edce6f8572cefe79a3d7da4389374e
CVE ID: CVE-2021-3275 State: PUBLISHED Published: 2021-03-26T12:21:23 Last Updated: 2024-08-03T16:53:17.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unauthenticated stored cross-site scripting (XSS) exists in multiple TP-Link products including WIFI Routers (Wireless AC routers), Access Points, ADSL + DSL Gateways and Routers, which affects TD-W9977v1, TL-WA801NDv5, TL-WA801Nv6, TL-WA802Nv5, and Archer C3150v2 devices through the improper validation of the hostname. Some of the pages including dhcp.htm, networkMap.htm, dhcpClient.htm, qsEdit.htm, and qsReview.htm and use this vulnerable hostname function (setDefaultHostname()) without sanitization. Additional Analyst Notes
view.htm and use this vulnerable hostname function (setDefaultHostname()) without sanitization. Additional Analyst Notes: - CVE Program Container: References: - https://www.tp-link.com - https://github.com/smriti548/CVE/blob/main/CVE-2021-3275 - https://seclists.org/fulldisclosure/2021/Mar/67 - http://packetstormsecurity.com/files/161989/TP-Link-Cross-Site-Scripting.html
CVE ID: CVE-2021-3277 State: PUBLISHED Published: 2021-06-07T21:05:03 Last Updated: 2024-08-03T16:53:17.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nagios XI 5.7.5 and earlier allows authenticated admins to upload arbitrary files due to improper validation of the rename functionality in custom-includes component, which leads to remote code execution by uploading php files. Additional Analyst Notes: - CVE Program Container: References: - https://asaf.me/2021/01/21/nagios-xi-5-7-5-remote-code-execution/
CVE ID: CVE-2021-3278 State: PUBLISHED Published: 2021-01-25T15:09:00 Last Updated: 2024-08-03T16:53:16.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Local Service Search Engine Management System 1.0 has a vulnerability through authentication bypass using SQL injection . Using this vulnerability, an attacker can bypass the login page. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49163 - https://www.sourcecodester.com/php/14607/local-service-search-engine-management-system-using-phpmysqli-source-code.html - http://packetstormsecurity.com/files/162919/Local-Service-Search-Engine-Management-System-1.0-SQL-Injection.html
CVE ID: CVE-2021-3279 State: PUBLISHED Published: 2021-07-19T12:05:31 Last Updated: 2024-08-03T16:53:16.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: sz.chat version 4 allows injection of web scripts and HTML in the message box. Additional Analyst Notes: - CVE Program Container: References: - https://borrachariadofael.sz.chat/webchat/conversation/6009c625415e206dc77172d3 - https://www.youtube.com/watch?v=H9ttpjFVDgA
CVE ID: CVE-2021-3281 State: PUBLISHED Published: 2021-02-02T06:16:28 Last Updated: 2024-08-03T16:53:17.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal via an archive with absolute paths or relative paths with dot segments. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/#%21forum/django-announce - https://docs.djangoproject.com/en/3.1/releases/security/ - https://www.djangoproject.com/weblog/2021/feb/01/security-releases/ - https:/
ngoproject.com/en/3.1/releases/security/ - https://www.djangoproject.com/weblog/2021/feb/01/security-releases/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YF52FKEH5S2P5CM4X7IXSYG67YY2CDOO/ - https://security.netapp.com/advisory/ntap-20210226-0004/
CVE ID: CVE-2021-3282 State: PUBLISHED Published: 2021-02-01T15:38:48 Last Updated: 2024-08-03T16:53:16.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.hashicorp.com/t/hcsec-2021-04-vault-enterprise-s-dr-secondaries-allowed-raft-peer-removal-without-authentication/20337 - https://security.gentoo.org/glsa/202207-01
CVE ID: CVE-2021-3283 State: PUBLISHED Published: 2021-02-01T15:36:18 Last Updated: 2024-08-03T16:53:16.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: HashiCorp Nomad and Nomad Enterprise up to 0.12.9 exec and java task drivers can access processes associated with other tasks on the same node. Fixed in 0.12.10, and 1.0.3. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.hashicorp.com/t/hcsec-2021-01-nomad-s-exec-and-java-task-drivers-did-not-isolate-processes/20332
CVE ID: CVE-2021-3285 State: PUBLISHED Published: 2021-01-23T01:02:50 Last Updated: 2024-08-03T16:53:16.587Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS. Additional Analyst Notes: - CVE Program Container: References: - https://sir.ext.ti.com/jira/browse/EXT_EP-10212
CVE ID: CVE-2021-3286 State: PUBLISHED Published: 2021-01-24T08:41:02 Last Updated: 2024-08-03T16:53:17.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload may be used. NOTE: this issue exists because of an incomplete fix for CVE-2020-35545. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/spotweb/spotweb/issues/653
CVE ID: CVE-2021-3287 State: PUBLISHED Published: 2021-04-22T12:58:00 Last Updated: 2024-08-03T16:53:16.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125329 - http://packetstormsecurity.com/files/164231/ManageEngine-OpManager-SumPDU-Java-Deserialization.html
CVE ID: CVE-2021-3291 State: PUBLISHED Published: 2021-01-26T06:47:35 Last Updated: 2024-08-03T16:53:17.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MucahitSaratar/zencart_auth_rce_poc - http://packetstormsecurity.com/files/161613/Zen-Cart-1.5.7b-Remote-Code-Execution.html
CVE ID: CVE-2021-3293 State: PUBLISHED Published: 2021-02-08T14:17:53 Last Updated: 2024-08-03T16:53:17.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/emlog/emlog/issues/62 - https://github.com/thinkgad/Bugs/blob/main/emlog%20v5.3.1%20has%20Full%20Path%20Disclosure%20vulnerability.md
CVE ID: CVE-2021-3294 State: PUBLISHED Published: 2021-02-08T23:54:38 Last Updated: 2024-08-03T16:53:17.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform user redirection to a malicious website. Additional Analyst Notes: - CVE Program Container: References: - http://casap.com - https://www.sourcecodester.com/download-code?nid=12210&title=CASAP+Automated+Enrollment+System+using+PHP%2FMySQLi+with+Source+Code - https://www.exploit-db.com/exploits/49469 - http://packetstormsecurity.com/files/161421/CASAP-Automated-Enrollment-System-1.0-Cross-Site-S
t-db.com/exploits/49469 - http://packetstormsecurity.com/files/161421/CASAP-Automated-Enrollment-System-1.0-Cross-Site-Scripting.html
CVE ID: CVE-2021-3297 State: PUBLISHED Published: 2021-01-26T07:11:41 Last Updated: 2024-08-03T16:53:17.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access. Additional Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/us/en/support/security_advisories.shtml - https://www.zyxel.com/support/SupportLandingSR.shtml?c=gb&l=en&kbid=M-01490&md=NBG2105 - https://github.com/nieldk/vulnerabilities/blob/main/zyxel%20nbg2105/Admin%20bypass
CVE ID: CVE-2021-3298 State: PUBLISHED Published: 2021-01-29T05:27:59 Last Updated: 2024-08-03T16:53:16.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://collabtive.o-dyn.de/forum/viewforum.php?f=6 - https://www.exploit-db.com/exploits/49468
CVE ID: CVE-2021-3304 State: PUBLISHED Published: 2021-01-26T06:05:15 Last Updated: 2024-08-03T16:53:16.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/j0nh4t/status/1349649975479840769
CVE ID: CVE-2021-3305 State: PUBLISHED Published: 2022-10-18T00:00:00.000Z Last Updated: 2025-05-13T14:59:12.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Beijing Feishu Technology Co., Ltd Feishu v3.40.3 was discovered to contain an untrusted search path vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://beijing.com - http://feishu.com - https://github.com/liong007/Feishu/issues/1
CVE ID: CVE-2021-3308 State: PUBLISHED Published: 2021-01-26T19:58:23 Last Updated: 2024-08-03T16:53:16.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a
em, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-360.html - http://www.openwall.com/lists/oss-security/2021/01/26/4 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5C42TMQYB6SDVT2MPFEWY65A6RSUVBN/ - https://security.gentoo.org/glsa/202107-30
CVE ID: CVE-2021-3309 State: PUBLISHED Published: 2021-01-26T20:13:54 Last Updated: 2024-08-03T16:53:17.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store, Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wekan/wekan/issues/3482 - https://github.com/wekan/wekan/pull/3483/commits/31f89121fecca5a761b05cc3a26d4f237e90b484 - https://github.com/wekan/wekan/releases/tag/v4.87
CVE ID: CVE-2021-3310 State: PUBLISHED Published: 2021-03-10T04:55:35 Last Updated: 2024-08-03T16:53:17.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure (by reading local files). Additional Analyst Notes: - CVE Program Container: References: - https://www.westerndigital.com/support/productsecurity/wdc-21002-my-cloud-firmware-version-5-10-122 - https://www.zerodayinitiative.com/advisories/ZDI-21-277/
CVE ID: CVE-2021-3311 State: PUBLISHED Published: 2021-02-05T04:47:53 Last Updated: 2024-08-03T16:53:17.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in October through build 471. It reactivates an old session ID (which had been invalid after a logout) once a new login occurs. NOTE: this violates the intended Auth/Manager.php authentication behavior but, admittedly, is only relevant if an old session ID is known to an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://octobercms.com/forum/chan/announcements - https://github.com/octobercms/library/commit/642f597489e6f644d4bd9a0c267e864cabead024 - https://anisiosantos.me
ements - https://github.com/octobercms/library/commit/642f597489e6f644d4bd9a0c267e864cabead024 - https://anisiosantos.me/october-cms-token-reactivation
CVE ID: CVE-2021-3312 State: PUBLISHED Published: 2021-10-08T14:44:58 Last Updated: 2024-08-03T16:53:17.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML external entity (XXE) vulnerability in Alkacon OpenCms 11.0, 11.0.1 and 11.0.2 allows remote authenticated users with edit privileges to exfiltrate files from the server's file system by uploading a crafted SVG document. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alkacon/opencms-core/releases - https://github.com/alkacon/opencms-core/issues/725
CVE ID: CVE-2021-3313 State: PUBLISHED Published: 2021-05-20T15:34:13 Last Updated: 2024-08-03T16:53:17.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in the user fullname property and the file upload functionality. The user's input data is not properly encoded when being echoed back to the user. This data can be interpreted as executable code by the browser and allows an attacker to execute JavaScript in the context of the victim's browser if the victim opens a vulnerable page containing an XSS payload. Additional Analyst Notes: - CVE Program Container: References: - https://plone.org/downlo
age containing an XSS payload. Additional Analyst Notes: - CVE Program Container: References: - https://plone.org/download/releases/5.2.3 - https://www.compass-security.com/fileadmin/Research/Advisories/2021-07_CSNC-2021-013_XSS_in_Plone_CMS.txt - https://plone.org/security/hotfix/20210518 - http://www.openwall.com/lists/oss-security/2021/05/22/1