Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jhy/jsoup/security/advisories/GHSA-m72m-mhq2-9p6c - https://jsoup.org/news/release-1.14.1 - https://jsoup.org/news/release-1.14.2 - https://lists.apache.org/thread.html/r685c5235235ad0c26e86d0ee987fb802c9675de6081dbf0516464e0b%40%3Cnotifications.james.apache.org%3E - https://
/thread.html/r685c5235235ad0c26e86d0ee987fb802c9675de6081dbf0516464e0b%40%3Cnotifications.james.apache.org%3E - https://lists.apache.org/thread.html/rc3354080fc67fb50b45b3c2d12dc4ca2a3c1c78dad3d3ba012c038aa%40%3Cnotifications.james.apache.org%3E - https://lists.apache.org/thread.html/r97404676a5cf591988faedb887d64e278f522adcaa823d89ca69defe%40%3Cnotifications.james.apache.org%3E - https://lists.apache.org/thread.html/r50e9c9466c592ca9d707a5dea549524d19e3287da08d8392f643960e%40%3Cissues.maven.apache.org%3E - https://lists.apache.org/thread.html/r215009dbf7467a9f6506d0c0024cb36cad30071010e62c9352cfaaf0%40%3Cissues.maven.apache.org%3E - https://lists.apache.org/thread.html/r3d71f18adb78e50f626d
36cad30071010e62c9352cfaaf0%40%3Cissues.maven.apache.org%3E - https://lists.apache.org/thread.html/r3d71f18adb78e50f626dde689161ca63d3b7491bd9718fcddfaecba7%40%3Cissues.maven.apache.org%3E - https://lists.apache.org/thread.html/r377b93d79817ce649e9e68b3456e6f499747ef1643fa987b342e082e%40%3Cissues.maven.apache.org%3E - https://www.oracle.com/security-alerts/cpujan2022.html - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20220210-0022/ - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2021-37715 State: PUBLISHED Published: 2021-08-26T19:40:48 Last Updated: 2024-08-04T01:23:01.561Z Vendors: n/a Products: Aruba AirWave Management Platform Problem Types: remote cross-site scripting (xss) Description: A remote cross-site scripting (XSS) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.13.0. Aruba has released upgrades for the Aruba AirWave Management Platform that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-015.txt
CVE ID: CVE-2021-37716 State: PUBLISHED Published: 2021-09-07T12:02:01 Last Updated: 2024-08-04T01:23:01.702Z Vendors: n/a Products: Aruba SD-WAN Software and Gateways; Aruba Operating System Software Problem Types: remote buffer overflow Description: A remote buffer overflow vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.15. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-
. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf
CVE ID: CVE-2021-37717 State: PUBLISHED Published: 2021-09-07T12:05:19 Last Updated: 2024-08-04T01:23:01.671Z Vendors: n/a Products: Aruba SD-WAN Software and Gateways; Aruba Operating System Software Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com
s security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf
CVE ID: CVE-2021-37718 State: PUBLISHED Published: 2021-09-07T12:32:49 Last Updated: 2024-08-04T01:23:01.502Z Vendors: n/a Products: Aruba SD-WAN Software and Gateways; Aruba Operating System Software Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.6; Prior to 8.7.1.4, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com
CVE ID: CVE-2021-37719 State: PUBLISHED Published: 2021-09-07T12:06:35 Last Updated: 2024-08-04T01:23:01.560Z Vendors: n/a Products: Aruba SD-WAN Software and Gateways; Aruba Operating System Software Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://w
aOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txt
CVE ID: CVE-2021-37720 State: PUBLISHED Published: 2021-09-07T12:08:20 Last Updated: 2024-08-04T01:23:01.836Z Vendors: n/a Products: Aruba SD-WAN Software and Gateways; Aruba Operating System Software Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://w
aOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf
CVE ID: CVE-2021-37721 State: PUBLISHED Published: 2021-09-07T12:35:27 Last Updated: 2024-08-04T01:23:01.549Z Vendors: n/a Products: Aruba SD-WAN Software and Gateways; Aruba Operating System Software Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://w
CVE ID: CVE-2021-37722 State: PUBLISHED Published: 2021-09-07T12:09:31 Last Updated: 2024-08-04T01:23:01.542Z Vendors: n/a Products: Aruba SD-WAN Software and Gateways; Aruba Operating System Software Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://w
CVE ID: CVE-2021-37723 State: PUBLISHED Published: 2021-09-07T12:10:48 Last Updated: 2024-08-04T01:23:01.484Z Vendors: n/a Products: Aruba Operating System Software Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf
CVE ID: CVE-2021-37724 State: PUBLISHED Published: 2021-09-07T12:34:20 Last Updated: 2024-08-04T01:23:01.537Z Vendors: n/a Products: Aruba Operating System Software Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.16. Aruba has released patches for ArubaOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf
CVE ID: CVE-2021-37725 State: PUBLISHED Published: 2021-09-07T12:39:59 Last Updated: 2024-08-04T01:23:01.517Z Vendors: n/a Products: Aruba SD-WAN Software and Gateways; Aruba Operating System Software Problem Types: remote cross-site request forgery (csrf) Description: A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.8.0.1, 8.7.1.2, 8.6.0.8, 8.5.0.12, 8.3.0.15. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://
baOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf
CVE ID: CVE-2021-37726 State: PUBLISHED Published: 2021-10-12T14:06:35 Last Updated: 2024-08-04T01:23:01.639Z Vendors: n/a Products: HPE Aruba Instant (IAP) Problem Types: remote buffer overflow Description: A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-017.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf
CVE ID: CVE-2021-37727 State: PUBLISHED Published: 2021-10-12T14:08:58 Last Updated: 2024-08-04T01:23:01.527Z Vendors: n/a Products: HPE Aruba Instant (IAP) Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba Instant 8.7.x.x: 8.7.1.3 and below. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://w
AP) that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-017.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf
CVE ID: CVE-2021-37728 State: PUBLISHED Published: 2021-09-07T12:36:38 Last Updated: 2024-08-04T01:30:08.956Z Vendors: n/a Products: Aruba Operating System Software Problem Types: remote path traversal Description: A remote path traversal vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.8.0.1, 8.7.1.4, 8.6.0.11, 8.5.0.13. Aruba has released patches for ArubaOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf
CVE ID: CVE-2021-37729 State: PUBLISHED Published: 2021-09-07T12:37:41 Last Updated: 2024-08-04T01:30:07.949Z Vendors: n/a Products: Aruba SD-WAN Software and Gateways; Aruba Operating System Software Problem Types: remote path traversal Description: A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.3, 8.6.0.9, 8.5.0.12, 8.3.0.16, 6.5.4.19, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/asset
rity vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf
CVE ID: CVE-2021-37730 State: PUBLISHED Published: 2021-10-12T14:07:45 Last Updated: 2024-08-04T01:30:07.421Z Vendors: n/a Products: HPE Aruba Instant (IAP) Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba Instant 8.7.x.x: 8.7.1.3 and below. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: Reference
uba Instant (IAP) that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-017.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf
CVE ID: CVE-2021-37731 State: PUBLISHED Published: 2021-09-07T12:41:13 Last Updated: 2024-08-04T01:30:07.497Z Vendors: n/a Products: Aruba SD-WAN Software and Gateways; Aruba Operating System Software Problem Types: local path traversal Description: A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.12, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021
ditional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf
CVE ID: CVE-2021-37732 State: PUBLISHED Published: 2021-10-12T15:12:55 Last Updated: 2024-08-04T01:30:07.452Z Vendors: n/a Products: HPE Aruba Instant (IAP) Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 6.4.x.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x.x: 6.5.4.18 and below; Aruba Instant 8.5.x.x: 8.5.0.11 and below; Aruba Instant 8.6.x.x: 8.6.0.6 and below; Aruba Instant 8.7.x.x: 8.7.1.0 and below. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References
ba Instant (IAP) that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-017.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf
CVE ID: CVE-2021-37733 State: PUBLISHED Published: 2021-09-07T12:38:54 Last Updated: 2024-08-04T01:30:07.969Z Vendors: n/a Products: Aruba SD-WAN Software and Gateways; Aruba Operating System Software Problem Types: remote path traversal Description: A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.11, 8.3.0.16. Aruba has released patches for Aruba SD-WAN Software and Gateways and ArubaOS that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-20
Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf
CVE ID: CVE-2021-37734 State: PUBLISHED Published: 2021-10-12T15:16:28 Last Updated: 2024-08-04T01:30:08.213Z Vendors: n/a Products: HPE Aruba Instant (IAP) Problem Types: remote unauthorized read access to files Description: A remote unauthorized read access to files vulnerability was discovered in Aruba Instant version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.19 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba Instant 8.7.x.x: 8.7.1.3 and below; Aruba Instant 8.8.x.x: 8.8.0.0 and below. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability. Additional Analyst Notes: - CV
ba has released patches for Aruba Instant (IAP) that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-017.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf
CVE ID: CVE-2021-37735 State: PUBLISHED Published: 2021-10-12T15:14:14 Last Updated: 2024-08-04T01:30:07.467Z Vendors: n/a Products: HPE Aruba Instant (IAP) Problem Types: remote denial of service Description: A remote denial of service vulnerability was discovered in Aruba Instant version(s): Aruba Instant 6.5.x.x: 6.5.4.18 and below; Aruba Instant 8.5.x.x: 8.5.0.10 and below; Aruba Instant 8.6.x.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-017.txt - https://cert-portal.siemens.com/productcert/pdf/ssa
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-017.txt - https://cert-portal.siemens.com/productcert/pdf/ssa-917476.pdf
CVE ID: CVE-2021-37736 State: PUBLISHED Published: 2021-10-15T12:32:37 Last Updated: 2024-08-04T01:30:08.072Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote authentication bypass Description: A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-
. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-018.txt
CVE ID: CVE-2021-37737 State: PUBLISHED Published: 2021-10-15T12:31:24 Last Updated: 2024-08-04T01:30:08.561Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote SQL injection Description: A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-018.txt
CVE ID: CVE-2021-37738 State: PUBLISHED Published: 2021-10-15T13:31:45 Last Updated: 2024-08-04T01:30:07.910Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote disclosure of sensitive information Description: A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks
this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-018.txt
CVE ID: CVE-2021-37739 State: PUBLISHED Published: 2021-10-15T13:34:23 Last Updated: 2024-08-04T01:30:08.047Z Vendors: n/a Products: Aruba ClearPass Policy Manager Problem Types: remote arbitrary command execution Description: A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/aler
ulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-018.txt
CVE ID: CVE-2021-37740 State: PUBLISHED Published: 2022-04-20T19:31:19 Last Updated: 2024-08-04T01:30:07.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the device unresponsive to all requests on the KNXnet/IP Secure layer, until the device is rebooted, via a SESSION_REQUEST frame with a modified total length field. Additional Analyst Notes: - CVE Program Container: References: - https://www.mdt.de/EN_IP_Interface_Router.html - https://www.mdt.de/download/MDT_CL_SCN_IP_03_IP_Interface_Rou
rences: - https://www.mdt.de/EN_IP_Interface_Router.html - https://www.mdt.de/download/MDT_CL_SCN_IP_03_IP_Interface_Router.pdf - https://github.com/robertguetzkow/CVE-2021-37740
CVE ID: CVE-2021-37741 State: PUBLISHED Published: 2021-09-21T12:56:52 Last Updated: 2024-08-04T01:30:08.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: ManageEngine ADManager Plus before 7111 has Pre-authentication RCE vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com - https://www.manageengine.com/products/ad-manager/release-notes.html#7111
CVE ID: CVE-2021-37742 State: PUBLISHED Published: 2021-07-30T00:00:00 Last Updated: 2024-08-04T01:30:09.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: app/View/Elements/GalaxyClusters/view_relation_tree.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster relationships. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/af50add82433eb2a740c3621b99d9d14d2b1e192 - https://zigrin.com/advisories/misp-stored-xss-when-viewing-galaxy-cluster-relationships/