Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-3759 State: PUBLISHED Published: 2022-08-23T00:00:00 Last Updated: 2024-08-03T17:09:08.717Z Vendors: n/a Products: kernel Problem Types: CWE-400 Description: A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, creating semaphores. This flaw allows a local user to starve the resources, causing a denial of service. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1999675 - https://access.redhat.com/security/cve/CVE-2021-3759 - https://lo
https://bugzilla.redhat.com/show_bug.cgi?id=1999675 - https://access.redhat.com/security/cve/CVE-2021-3759 - https://lore.kernel.org/linux-mm/1626333284-1404-1-git-send-email-nglaive%40gmail.com/ - https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html
CVE ID: CVE-2021-3760 State: PUBLISHED Published: 2022-02-16T18:35:29 Last Updated: 2024-08-03T17:09:08.273Z Vendors: n/a Products: kernel Problem Types: CWE-416 Description: A flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2000585 - https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html - https://www.debian.org/security/2022/dsa-5096 - https://security.netapp.com/advisory/ntap-20220318-0007/
CVE ID: CVE-2021-3761 State: PUBLISHED Published: 2021-09-09T14:05:09.349774Z Last Updated: 2024-09-17T02:56:31.062Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Cloudflare Products: octorpki Problem Types: Missing out of bounds check Description: Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network (for example AS 13335 - Cloudflare) prior to launching a BGP hijack which during normal operations would be rejected as "RPKI invalid". Additionally, in certain deployments RTR session flapping i
uring normal operations would be rejected as "RPKI invalid". Additionally, in certain deployments RTR session flapping in and of itself also could cause BGP routing churn, causing availability issues. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cloudflare/cfrpki/security/advisories/GHSA-c8xp-8mf3-62h9 - https://www.debian.org/security/2022/dsa-5041
CVE ID: CVE-2021-3762 State: PUBLISHED Published: 2022-03-03T21:41:19 Last Updated: 2024-08-03T17:09:08.890Z Vendors: n/a Products: quay/claircore Problem Types: CWE-22 Description: A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2000795 - https://github.com/quay/claircore/pull/478 - https://github.com/quay/clair/pull/1379 - https://github.com/quay/clair/pull/
tps://github.com/quay/claircore/pull/478 - https://github.com/quay/clair/pull/1379 - https://github.com/quay/clair/pull/1380 - https://github.com/quay/claircore/commit/691f2023a1720a0579e688b69a2f4bfe1f4b7821 - https://vulmon.com/exploitdetails?qidtp=maillist_oss_security&qid=d19fce9ede06e13dfb5630ece7f14f83
CVE ID: CVE-2021-3763 State: PUBLISHED Published: 2022-08-23T15:51:59 Last Updated: 2024-08-03T17:09:09.147Z Vendors: n/a Products: AMQ Broker Problem Types: CWE-863 Description: A flaw was found in the Red Hat AMQ Broker management console in version 7.8 where an existing user is able to access some limited information even when the role the user is assigned to should not be allow access to the management console. The main impact is to confidentiality as this flaw means some role bindings are incorrectly checked, some privileged meta information such as queue names and configuration details are disclosed but the impact is limited as not all information is accessible and there is no affect t
figuration details are disclosed but the impact is limited as not all information is accessible and there is no affect to integrity. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2000654 - https://issues.redhat.com/browse/ENTMQBR-5372 - https://access.redhat.com/security/cve/CVE-2021-3763
CVE ID: CVE-2021-3764 State: PUBLISHED Published: 2022-08-23T15:52:14 Last Updated: 2024-08-03T17:09:08.677Z Vendors: n/a Products: Linux Kernel Problem Types: CWE-400 Description: A memory leak flaw was found in the Linux kernel's ccp_run_aes_gcm_cmd() function that allows an attacker to cause a denial of service. The vulnerability is similar to the older CVE-2019-18808. The highest threat from this vulnerability is to system availability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/505d9dcb0f7ddf9d075e729523a33d38642ae680 - https://security-tracker.debian.org/tracker/CVE-2021-3764 - https://bugzilla.redhat.com/show_bug.cgi?id=19
d38642ae680 - https://security-tracker.debian.org/tracker/CVE-2021-3764 - https://bugzilla.redhat.com/show_bug.cgi?id=1997467 - https://access.redhat.com/security/cve/CVE-2021-3764
CVE ID: CVE-2021-3765 State: PUBLISHED Published: 2021-11-02T07:05:10 Last Updated: 2024-08-03T17:09:08.828Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: validatorjs Products: validatorjs/validator.js Problem Types: CWE-1333 Description: validator.js is vulnerable to Inefficient Regular Expression Complexity Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/c37e975c-21a3-4c5f-9b57-04d63b28cfc9 - https://github.com/validatorjs/validator.js/commit/496fc8b2a7f5997acaaec33cc44d0b8dba5fb5e1
CVE ID: CVE-2021-3766 State: PUBLISHED Published: 2021-09-06T11:17:16 Last Updated: 2024-08-03T17:09:08.632Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: vincit Products: vincit/objection.js Problem Types: CWE-1321 Description: objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/c98e0f0e-ebf2-4072-be73-a1848ea031cc - https://github.com/Vincit/objection.js/commit/46b842a6bc897198b83f41ac85c92864b991d7e9
CVE ID: CVE-2021-3767 State: PUBLISHED Published: 2021-09-06T11:17:17 Last Updated: 2024-08-03T17:09:08.832Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: bookstackapp Products: bookstackapp/bookstack Problem Types: CWE-79 Description: bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/7ec92c85-30eb-4071-8891-6183446ca980 - https://github.com/bookstackapp/bookstack/commit/040997fdc4414776bcac06a3cbaac3b26b5e8a64
CVE ID: CVE-2021-3768 State: PUBLISHED Published: 2021-09-06T11:17:18 Last Updated: 2024-08-03T17:09:08.651Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: bookstackapp Products: bookstackapp/bookstack Problem Types: CWE-79 Description: bookstack is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/64a0229f-ff5e-4c64-b83e-9bfc0698a78e - https://github.com/bookstackapp/bookstack/commit/5e6092aaf8fd420202016038286554860bf8ea64
CVE ID: CVE-2021-3769 State: PUBLISHED Published: 2021-11-30T09:30:18 Last Updated: 2024-08-03T17:09:08.686Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: ohmyzsh Products: ohmyzsh/ohmyzsh Problem Types: CWE-78 Description: # Vulnerability in `pygmalion`, `pygmalion-virtualenv` and `refined` themes **Description**: these themes use `print -P` on user-supplied strings to print them to the terminal. All of them do that on git information, particularly the branch name, so if the branch has a specially-crafted name the vulnerability can be exploited. **Fixed in**: [b3ba9978](https://github.com/ohmyzsh/ohmyzsh/commit/b3ba9978). **Impacted areas**: - `pygmalion` t
oited. **Fixed in**: [b3ba9978](https://github.com/ohmyzsh/ohmyzsh/commit/b3ba9978). **Impacted areas**: - `pygmalion` theme. - `pygmalion-virtualenv` theme. - `refined` theme. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ohmyzsh/ohmyzsh/commit/b3ba9978
CVE ID: CVE-2021-3770 State: PUBLISHED Published: 2021-09-06T00:00:00 Last Updated: 2024-08-03T17:09:08.768Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: vim is vulnerable to Heap-based Buffer Overflow Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/016ad2f2-07c1-4d14-a8ce-6eed10729365 - https://github.com/vim/vim/commit/b7081e135a16091c93f6f5f7525a5c58fb7ca9f9 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J2CJLY3CF55I2ULG2X4ENXLSXAXYW5J4/ - https://lists.fedoraproject.org/archives/list/package-announce%4
project.org/message/J2CJLY3CF55I2ULG2X4ENXLSXAXYW5J4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X4FFQARG3LGREPDZRI4C7ERQL3RJKEWQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZFNTMVZCN4TRTTCAXRLVQ7H2P7FYAIZQ/ - http://www.openwall.com/lists/oss-security/2021/10/01/1 - https://security.gentoo.org/glsa/202208-32 - https://security.netapp.com/advisory/ntap-20221124-0003/
CVE ID: CVE-2021-3771 State: REJECTED Published: 2022-08-23T15:53:16 Last Updated: 2022-08-23T15:53:16 Description: No description available.
CVE ID: CVE-2021-3772 State: PUBLISHED Published: 2022-03-02T00:00:00 Last Updated: 2024-08-03T17:09:08.707Z Vendors: n/a Products: kernel Problem Types: CWE-354 Description: A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2000694 - https://ubuntu.com/security/CVE-2021-3772 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=32f8807a48ae55be0e76880cf
/CVE-2021-3772 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=32f8807a48ae55be0e76880cfe8607a18b5bb0df - https://github.com/torvalds/linux/commit/32f8807a48ae55be0e76880cfe8607a18b5bb0df - https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html - https://www.debian.org/security/2022/dsa-5096 - https://www.oracle.com/security-alerts/cpujul2022.html - https://security.netapp.com/advisory/ntap-20221007-0001/
CVE ID: CVE-2021-3773 State: PUBLISHED Published: 2022-02-16T18:35:30.000Z Last Updated: 2025-03-28T15:02:57.589Z Vendors: n/a Products: kernel Problem Types: CWE-200 Description: A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2004949 - https://www.oracle.com/security-alerts/cpujul2022.html - https://citizenlab.ca/2024/07/vulnerabilities-in-vpns-paper-presented-at-the-privacy-enhancing-technologies-symposium-2024/
CVE ID: CVE-2021-3774 State: PUBLISHED Published: 2021-11-05T19:41:27.000Z Last Updated: 2025-04-23T19:24:23.318Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: Meross Products: Meross Smart Wi-Fi 2 Way Wall Switch Problem Types: CWE-319 Description: Meross Smart Wi-Fi 2 Way Wall Switch (MSS550X), on its 3.1.3 version and before, creates an open Wi-Fi Access Point without the required security measures in its initial setup. This could allow a remote attacker to obtain the Wi-Fi SSID as well as the password configured by the user from Meross app via Http/JSON plain request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
app via Http/JSON plain request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/meross-mss550x-missing-encryption-sensitive-data
CVE ID: CVE-2021-3775 State: PUBLISHED Published: 2021-11-13T09:25:10 Last Updated: 2024-08-03T17:09:08.744Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-352 Description: showdoc is vulnerable to Cross-Site Request Forgery (CSRF) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/star7th/showdoc/commit/67093c879a6563aa6ee08003177777d1975e2351 - https://huntr.dev/bounties/6a59d203-4ca7-4aed-bdb9-1e39b66c77b3
CVE ID: CVE-2021-3776 State: PUBLISHED Published: 2021-11-13T09:20:10 Last Updated: 2024-08-03T17:09:08.884Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: star7th Products: star7th/showdoc Problem Types: CWE-352 Description: showdoc is vulnerable to Cross-Site Request Forgery (CSRF) Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/e0edf27d-437e-44fe-907a-df020f385304 - https://github.com/star7th/showdoc/commit/67093c879a6563aa6ee08003177777d1975e2351
CVE ID: CVE-2021-3777 State: PUBLISHED Published: 2021-09-15T07:15:11 Last Updated: 2024-08-03T17:09:08.812Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: daaku Products: daaku/nodejs-tmpl Problem Types: CWE-1333 Description: nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a07b547a-f457-41c9-9d89-ee48bee8a4df - https://github.com/daaku/nodejs-tmpl/commit/4c654e4d1542f329ed561fd95ccd80f30c6872d6
CVE ID: CVE-2021-3778 State: PUBLISHED Published: 2021-09-15T00:00:00 Last Updated: 2024-08-03T17:09:08.823Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: vim is vulnerable to Heap-based Buffer Overflow Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/d9c17308-2c99-4f9f-a706-f7f72c24c273 - https://github.com/vim/vim/commit/65b605665997fad54ef39a93199e305af2fe4d7f - http://www.openwall.com/lists/oss-security/2021/10/01/1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TE62UMYBZE4AE53K6OBBWK32XQ7544QM/ - https:
aproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TE62UMYBZE4AE53K6OBBWK32XQ7544QM/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7K4JJBIH3OQSZRVTWKCJCDLGMFGQ5DOH/ - https://lists.debian.org/debian-lts-announce/2022/01/msg00003.html - https://security.gentoo.org/glsa/202208-32 - https://security.netapp.com/advisory/ntap-20221118-0003/
CVE ID: CVE-2021-3779 State: PUBLISHED Published: 2022-06-28T16:30:15.611030Z Last Updated: 2024-09-17T00:16:17.183Z Vendors: Tomita Masahiro Products: ruby-mysql Problem Types: CWE-610 Description: A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later. Additional Analyst Notes: - CVE Program Container: References: - https://www.rapid7.com/blog/post/2022/06/28/cve-2021-3779-ruby-mysql-gem-client-file-read-fixed/
CVE ID: CVE-2021-3780 State: PUBLISHED Published: 2021-09-15T11:15:11 Last Updated: 2024-08-03T17:09:08.860Z Severity: HIGH (CVSS 7.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L) Vendors: chocobozzz Products: chocobozzz/peertube Problem Types: CWE-79 Description: peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/282807a8-4bf5-4fe2-af62-e05f945b3d65 - https://github.com/chocobozzz/peertube/commit/0ea2f79d45b301fcd660efc894469a99b2239bf6
CVE ID: CVE-2021-3781 State: PUBLISHED Published: 2022-02-16T00:00:00 Last Updated: 2024-08-03T17:09:08.668Z Vendors: n/a Products: ghostscript Problem Types: CWE-20 Description: A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting a specially crafted pipe command. This flaw allows a specially crafted document to execute arbitrary commands on the system in the context of the ghostscript interpreter. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2002271 - ht
dditional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2002271 - https://ghostscript.com/CVE-2021-3781.html - https://security.gentoo.org/glsa/202211-11
CVE ID: CVE-2021-3782 State: PUBLISHED Published: 2022-09-23T15:26:59.000Z Last Updated: 2025-05-22T18:21:26.824Z Vendors: n/a Products: wayland Problem Types: CWE-190 Description: An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. The reference count is maintained as an int; on LP64 systems this can cause the reference count to overflow if the client creates a large number of wl_shm buffer objects, or if it can coerce the server to create a large number of external references to the buffer storage. With the reference count overflowing, a use-after-free can be constructed on the wl_shm_pool tracking structure, where values ma
reference count overflowing, a use-after-free can be constructed on the wl_shm_pool tracking structure, where values may be incremented or decremented; it may also be possible to construct a limited oracle to leak 4 bytes of server-side memory to the attacking client at a time. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://gitlab.freedesktop.org/wayland/wayland/-/issues/224
CVE ID: CVE-2021-3783 State: PUBLISHED Published: 2021-09-15T12:00:18 Last Updated: 2024-08-03T17:09:08.880Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: yourls Products: yourls/yourls Problem Types: CWE-79 Description: yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/b688e553-d0d9-4ddf-95a3-ff4b78004984 - https://github.com/yourls/yourls/commit/94f6bab91182142c96ff11f481585b445449efd4
CVE ID: CVE-2021-3784 State: PUBLISHED Published: 2023-10-04T15:00:49.765Z Last Updated: 2025-06-17T15:03:18.630Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Garuda Linux Products: Garuda Linux Problem Types: CWE-287 Description: Garuda Linux performs an insecure user creation and authentication that allows any user to impersonate the created account. By creating users from the 'Garuda settings manager', an insecure procedure is performed that keeps the created user without an assigned password during some seconds. This could allow a potential attacker to exploit this vulnerability in order to authenticate without knowing the password. Additional Analyst
tential attacker to exploit this vulnerability in order to authenticate without knowing the password. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/garuda-linux-improper-authorization
CVE ID: CVE-2021-3785 State: PUBLISHED Published: 2021-09-15T12:05:13 Last Updated: 2024-08-03T17:09:09.030Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: yourls Products: yourls/yourls Problem Types: CWE-79 Description: yourls is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/b4085d13-54fa-4419-a2ce-1d780cc31638 - https://github.com/yourls/yourls/commit/1d8e224ebabb8a4c75b97f026950ed710faab0ff
CVE ID: CVE-2021-3786 State: PUBLISHED Published: 2021-11-12T22:05:41 Last Updated: 2024-08-03T17:09:08.738Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Lenovo Products: Notebook and ThinkPad BIOS Problem Types: CWE-20 Description: A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range. Additional Analyst Notes: - CVE Program Container: References: - https://support.lenovo.com/us/en/product_security/LEN-67440
CVE ID: CVE-2021-3787 State: PUBLISHED Published: 2021-11-12T22:05:43 Last Updated: 2024-08-03T17:09:08.656Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Motorola Products: Binatone Hubble Cameras Problem Types: CWE-256 Description: A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the MQTT credentials that could result in unauthorized access to backend Hubble services. Additional Analyst Notes: - CVE Program Container: References: - https://binatoneglobal.com/security-advisory/
CVE ID: CVE-2021-3788 State: PUBLISHED Published: 2021-11-12T22:05:44 Last Updated: 2024-08-03T17:09:09.312Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Motorola Products: Binatone Hubble Cameras Problem Types: CWE-1299 Description: An exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access unauthorized access to the device. Additional Analyst Notes: - CVE Program Container: References: - https://binatoneglobal.com/security-advisory/
CVE ID: CVE-2021-3789 State: PUBLISHED Published: 2021-11-12T22:05:46 Last Updated: 2024-08-03T17:09:08.966Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Motorola Products: Binatone Hubble Cameras Problem Types: CWE-522 Description: An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access to obtain the encryption key used to decrypt firmware update packages. Additional Analyst Notes: - CVE Program Container: References: - https://binatoneglobal.com/security-advisory/
CVE ID: CVE-2021-3790 State: PUBLISHED Published: 2021-11-12T22:05:48 Last Updated: 2024-08-03T17:09:08.814Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Motorola Products: Binatone Hubble Cameras Problem Types: CWE-121 Description: A buffer overflow was reported in the local web server of some Motorola-branded Binatone Hubble Cameras that could allow an unauthenticated attacker on the same network to perform a denial-of-service attack against the device. Additional Analyst Notes: - CVE Program Container: References: - https://binatoneglobal.com/security-advisory/