Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-32503 State: PUBLISHED Published: 2022-04-01T22:17:44 Last Updated: 2024-08-03T23:17:29.581Z Vendors: n/a Products: SICK FTMg Problem Types: CWE-862 Description: Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users only. A malicious attacker could use this sensitive information’s to launch further attacks on the system. Additional Analyst Notes: - CVE Program Container: References: - https://sick.com/psirt
CVE ID: CVE-2021-32504 State: PUBLISHED Published: 2022-07-19T14:11:38 Last Updated: 2024-08-03T23:17:29.550Z Vendors: n/a Products: SICK FTMg Problem Types: CWE-862 Description: Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users only. A malicious attacker could use this sensitive information’s to launch further attacks on the system. Additional Analyst Notes: - CVE Program Container: References: - https://sick.com/psirt
CVE ID: CVE-2021-32505 State: REJECTED Published: 2022-03-09T15:15:50 Last Updated: 2022-03-09T15:15:50 Description: No description available.
CVE ID: CVE-2021-32506 State: PUBLISHED Published: 2021-07-07T14:11:39.173671Z Last Updated: 2024-09-16T18:03:21.221Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: QSAN Products: Storage Manager Problem Types: CWE-36 Description: Absolute Path Traversal vulnerability in GetImage in QSAN Storage Manager allows remote authenticated attackers download arbitrary files via the Url path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3 . Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4862-f8b86-1.html
CVE ID: CVE-2021-32507 State: PUBLISHED Published: 2021-07-07T14:11:40.823137Z Last Updated: 2024-09-16T17:38:03.443Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: QSAN Products: Storage Manager Problem Types: CWE-36 Description: Absolute Path Traversal vulnerability in FileDownload in QSAN Storage Manager allows remote authenticated attackers download arbitrary files via the Url path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4863-57d4a-1.html
CVE ID: CVE-2021-32508 State: PUBLISHED Published: 2021-07-07T14:11:42.382232Z Last Updated: 2024-09-16T18:33:36.254Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: QSAN Products: Storage Manager Problem Types: CWE-61 Description: Absolute Path Traversal vulnerability in FileStreaming in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Symbolic Link following the Url path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4864-94df4-1.html
CVE ID: CVE-2021-32509 State: PUBLISHED Published: 2021-07-07T14:11:44.024835Z Last Updated: 2024-09-16T23:20:43.163Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: QSAN Products: Storage Manager Problem Types: CWE-61 Description: Absolute Path Traversal vulnerability in FileviewDoc in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Symbolic Link following the Url path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4865-0c967-1.html
CVE ID: CVE-2021-32510 State: PUBLISHED Published: 2021-07-07T14:11:45.686003Z Last Updated: 2024-09-16T21:09:06.325Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: QSAN Products: Storage Manager Problem Types: CWE-548 Description: QSAN Storage Manager through directory listing vulnerability in antivirus function allows remote authenticated attackers to list arbitrary directories by injecting file path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4866-b820b-1.html
CVE ID: CVE-2021-32511 State: PUBLISHED Published: 2021-07-07T14:11:47.309563Z Last Updated: 2024-09-16T18:59:24.382Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: QSAN Products: Storage Manager Problem Types: CWE-548 Description: QSAN Storage Manager through directory listing vulnerability in ViewBroserList allows remote authenticated attackers to list arbitrary directories via the file path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4867-9c11c-1.html
CVE ID: CVE-2021-32512 State: PUBLISHED Published: 2021-07-07T14:11:48.904569Z Last Updated: 2024-09-16T16:48:24.443Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: QSAN Products: Storage Manager Problem Types: CWE-78 Description: QuickInstall in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated attackers to inject and execute arbitrary commands. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4868-75574-1.html
CVE ID: CVE-2021-32513 State: PUBLISHED Published: 2021-07-07T14:11:50.536223Z Last Updated: 2024-09-16T17:23:48.543Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: QSAN Products: Storage Manager Problem Types: CWE-78 Description: QsanTorture in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated attackers to inject and execute arbitrary commands. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4869-714a5-1.html
CVE ID: CVE-2021-32514 State: PUBLISHED Published: 2021-07-07T14:11:52.169156Z Last Updated: 2024-09-16T16:58:14.848Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: QSAN Products: Storage Manager Problem Types: CWE-284 Description: Improper access control vulnerability in FirmwareUpgrade in QSAN Storage Manager allows remote attackers to reboot and discontinue the device. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4870-83620-1.html
CVE ID: CVE-2021-32515 State: PUBLISHED Published: 2021-07-07T14:11:53.717559Z Last Updated: 2024-09-17T01:31:03.172Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: QSAN Products: Storage Manager Problem Types: CWE-548 Description: Directory listing vulnerability in share_link in QSAN Storage Manager allows attackers to list arbitrary directories and further access credential information. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4871-2a2d7-1.html
CVE ID: CVE-2021-32516 State: PUBLISHED Published: 2021-07-07T14:11:55.453957Z Last Updated: 2024-09-17T02:36:42.642Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: QSAN Products: Storage Manager Problem Types: CWE-22 Description: Path traversal vulnerability in share_link in QSAN Storage Manager allows remote attackers to download arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4872-fcfa4-1.html
CVE ID: CVE-2021-32517 State: PUBLISHED Published: 2021-07-07T14:11:57.011779Z Last Updated: 2024-09-17T01:30:54.341Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: QSAN Products: Storage Manager Problem Types: CWE-284 Description: Improper access control vulnerability in share_link in QSAN Storage Manager allows remote attackers to download arbitrary files using particular parameter in download function. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4873-6f88b-1.html
CVE ID: CVE-2021-32518 State: PUBLISHED Published: 2021-07-07T14:11:58.569396Z Last Updated: 2024-09-16T18:29:47.617Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: QSAN Products: Storage Manager Problem Types: CWE-61 Description: A vulnerability in share_link in QSAN Storage Manager allows remote attackers to create a symbolic link then access arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4874-79edc-1.html
CVE ID: CVE-2021-32519 State: PUBLISHED Published: 2021-07-07T14:12:00.118740Z Last Updated: 2024-09-16T19:11:01.631Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: QSAN Products: Storage Manager, XEVO, SANOS Problem Types: CWE-916 Description: Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.2, QSAN XEVO v2.1.0, and QSAN SANOS v2.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://www
2, QSAN XEVO v2.1.0, and QSAN SANOS v2.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4875-692f0-1.html
CVE ID: CVE-2021-32520 State: PUBLISHED Published: 2021-07-07T14:12:01.681910Z Last Updated: 2024-09-17T03:37:44.199Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: QSAN Products: Storage Manager Problem Types: CWE-321 Description: Use of hard-coded cryptographic key vulnerability in QSAN Storage Manager allows attackers to obtain users’ credentials and related permissions. Suggest contacting with QSAN and refer to recommendations in QSAN Document. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4876-8da07-1.html
CVE ID: CVE-2021-32521 State: PUBLISHED Published: 2021-07-07T14:12:03.418144Z Last Updated: 2024-09-16T18:04:06.277Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: QSAN Products: Storage Manager, XEVO, SANOS Problem Types: CWE-259 Description: Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges. Suggest contacting with QSAN and refer to recommendations in QSAN Document. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4877-7b696-1.html
CVE ID: CVE-2021-32522 State: PUBLISHED Published: 2021-07-07T14:12:05.005342Z Last Updated: 2024-09-16T19:14:09.855Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: QSAN Products: Storage Manager, XEVO, SANOS Problem Types: CWE-307 Description: Improper restriction of excessive authentication attempts vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to discover users’ credentials and obtain access via a brute force attack. Suggest contacting with QSAN and refer to recommendations in QSAN Document. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4878-0a279-1.html
CVE ID: CVE-2021-32523 State: PUBLISHED Published: 2021-07-07T14:12:06.570692Z Last Updated: 2024-09-16T23:45:28.851Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: QSAN Products: Storage Manager Problem Types: CWE-285 Description: Improper authorization vulnerability in QSAN Storage Manager allows remote privileged users to bypass the access control and execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4879-01616-1.html
CVE ID: CVE-2021-32524 State: PUBLISHED Published: 2021-07-07T14:12:08.193560Z Last Updated: 2024-09-17T04:00:25.980Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: QSAN Products: Storage Manager Problem Types: CWE-78 Description: Command injection vulnerability in QSAN Storage Manager allows remote privileged users to execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4880-e9ce7-1.html
CVE ID: CVE-2021-32525 State: PUBLISHED Published: 2021-07-07T14:12:09.748727Z Last Updated: 2024-09-17T04:24:33.071Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: QSAN Products: Storage Manager Problem Types: CWE-259 Description: The same hard-coded password in QSAN Storage Manager's in the firmware allows remote attackers to access the control interface with the administrator’s credential, entering the hard-coded password of the debug mode to execute the restricted system instructions. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3. Additional Analyst Notes: - CVE Program Container: References: - http
he updated version of QSAN Storage Manager v3.3.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4881-959d3-1.html
CVE ID: CVE-2021-32526 State: PUBLISHED Published: 2021-07-07T14:12:11.318911Z Last Updated: 2024-09-16T16:24:00.799Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: QSAN Products: Storage Manager Problem Types: CWE-732 Description: Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4882-c0310-1.html
CVE ID: CVE-2021-32527 State: PUBLISHED Published: 2021-07-07T14:12:12.917483Z Last Updated: 2024-09-16T19:30:57.666Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: QSAN Products: Storage Manager Problem Types: CWE-22 Description: Path traversal vulnerability in QSAN Storage Manager allows remote unauthenticated attackers to download arbitrary files thru injecting file path in download function. Suggest contacting with QSAN and refer to recommendations in QSAN Document. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4883-aef9d-1.html
CVE ID: CVE-2021-32528 State: PUBLISHED Published: 2021-07-07T14:12:14.468087Z Last Updated: 2024-09-16T16:38:38.906Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: QSAN Products: Storage Manager Problem Types: CWE-200 Description: Observable behavioral discrepancy vulnerability in QSAN Storage Manager allows remote attackers to obtain the system information without permissions. Suggest contacting with QSAN and refer to recommendations in QSAN Document. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4884-fd4cb-1.html
CVE ID: CVE-2021-32529 State: PUBLISHED Published: 2021-07-07T14:12:16.002500Z Last Updated: 2024-09-16T18:24:08.653Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: QSAN Products: XEVO, SANOS Problem Types: CWE-77 Description: Command injection vulnerability in QSAN XEVO, SANOS allows remote unauthenticated attackers to execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4885-b03c8-1.html
CVE ID: CVE-2021-32530 State: PUBLISHED Published: 2021-07-07T14:12:17.596301Z Last Updated: 2024-09-16T22:02:09.065Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: QSAN Products: XEVO Problem Types: CWE-78 Description: OS command injection vulnerability in Array function in QSAN XEVO allows remote unauthenticated attackers to execute arbitrary commands via status parameter. The referred vulnerability has been solved with the updated version of QSAN XEVO v2.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4886-d3b14-1.html
CVE ID: CVE-2021-32531 State: PUBLISHED Published: 2021-07-07T14:12:19.152889Z Last Updated: 2024-09-17T02:06:13.328Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: QSAN Products: XEVO Problem Types: CWE-78 Description: OS command injection vulnerability in Init function in QSAN XEVO allows remote attackers to execute arbitrary commands without permissions. The referred vulnerability has been solved with the updated version of QSAN XEVO v2.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4887-ee5e3-1.html
CVE ID: CVE-2021-32532 State: PUBLISHED Published: 2021-07-07T14:12:20.707258Z Last Updated: 2024-09-16T22:56:19.616Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: QSAN Products: XEVO Problem Types: CWE-22 Description: Path traversal vulnerability in back-end analysis function in QSAN XEVO allows remote attackers to download arbitrary files without permissions. The referred vulnerability has been solved with the updated version of QSAN XEVO v2.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4889-23410-1.html
CVE ID: CVE-2021-32533 State: PUBLISHED Published: 2021-07-07T14:12:22.244586Z Last Updated: 2024-09-16T21:57:43.704Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: QSAN Products: SANOS Problem Types: CWE-78 Description: The QSAN SANOS setting page does not filter special parameters. Remote attackers can use this vulnerability to inject and execute arbitrary commands without permissions. The referred vulnerability has been solved with the updated version of QSAN SANOS v2.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4890-39791-1.html
CVE ID: CVE-2021-32534 State: PUBLISHED Published: 2021-07-07T14:12:23.901676Z Last Updated: 2024-09-17T01:35:39.320Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: QSAN Products: SANOS Problem Types: CWE-78 Description: QSAN SANOS factory reset function does not filter special parameters. Remote attackers can use this vulnerability to inject and execute arbitrary commands without permissions. The referred vulnerability has been solved with the updated version of QSAN SANOS v2.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4891-94707-1.html
CVE ID: CVE-2021-32535 State: PUBLISHED Published: 2021-07-07T14:12:25.490610Z Last Updated: 2024-09-16T16:38:41.859Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: QSAN Products: SANOS Problem Types: CWE-798 Description: The vulnerability of hard-coded default credentials in QSAN SANOS allows unauthenticated remote attackers to obtain administrator’s permission and execute arbitrary functions. The referred vulnerability has been solved with the updated version of QSAN SANOS v2.1.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4892-768d9-1.html
CVE ID: CVE-2021-32536 State: PUBLISHED Published: 2021-06-18T09:55:13.817095Z Last Updated: 2024-09-16T22:10:15.250Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: MCU Technologies Products: MCUsystem Problem Types: CWE-79 Description: The login page in the MCUsystem does not filter with special characters, which allows remote attackers can inject JavaScript without privilege and thus perform reflected XSS attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4811-4a160-1.html
CVE ID: CVE-2021-32537 State: PUBLISHED Published: 2021-07-07T14:12:27.033916Z Last Updated: 2024-09-17T00:50:35.243Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: Realtek Products: HDA driver Problem Types: None Description: Realtek HAD contains a driver crashed vulnerability which allows local side attackers to send a special string to the kernel driver in a user’s mode. Due to unexpected commands, the kernel driver will cause the system crashed. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4813-7b578-1.html - http://packetstormsecurity.com/files/163498/Realtek-RTKVHD64.sys-Out-Of-Bounds-Access.html
CVE ID: CVE-2021-32538 State: PUBLISHED Published: 2021-07-07T14:12:28.979225Z Last Updated: 2024-09-17T04:29:22.982Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ARTWARE Products: CMS Problem Types: CWE-434 Description: ARTWARE CMS parameter of image upload function does not filter the type of upload files which allows remote attackers can upload arbitrary files without logging in, and further execute code unrestrictedly. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4850-9b53f-1.html
CVE ID: CVE-2021-32539 State: PUBLISHED Published: 2021-05-28T08:10:25.786559Z Last Updated: 2024-09-16T18:34:37.629Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Hundred Plus Products: 101EIP Problem Types: CWE-79 Description: Add event in calendar function in the 101EIP system does not filter special characters in specific fields, which allows remote authenticated users to inject JavaScript and perform a stored XSS attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4755-bd590-1.html
CVE ID: CVE-2021-32540 State: PUBLISHED Published: 2021-05-28T08:10:26.429584Z Last Updated: 2024-09-16T22:09:39.642Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Hundred Plus Products: 101EIP Problem Types: CWE-79 Description: Add announcement function in the 101EIP system does not filter special characters, which allows authenticated users to inject JavaScript and perform a stored XSS attack. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4756-981be-1.html
CVE ID: CVE-2021-32541 State: PUBLISHED Published: 2021-05-28T08:10:27.063232Z Last Updated: 2024-09-17T00:46:15.943Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: SysJust Products: CTS Web Problem Types: None Description: The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows remote unauthenticated attackers can send a large number of valid usernames, and force those logged-in account to log out, causing the user to be unable to access the services Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/tw/cp-132-4757-893eb-1.html - https://www.chtsecurity