Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-45690 State: PUBLISHED Published: 2021-12-26T21:51:15 Last Updated: 2024-08-04T04:47:02.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_binary may read from uninitialized memory locations. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0092.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/messagepack-rs/RUSTSEC-2021-0092.md
CVE ID: CVE-2021-45691 State: PUBLISHED Published: 2021-12-26T21:50:58 Last Updated: 2024-08-04T04:47:01.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_string may read from uninitialized memory locations. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0092.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/messagepack-rs/RUSTSEC-2021-0092.md
CVE ID: CVE-2021-45692 State: PUBLISHED Published: 2021-12-26T21:50:50 Last Updated: 2024-08-04T04:47:02.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_extension_others may read from uninitialized memory locations. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0092.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/messagepack-rs/RUSTSEC-2021-0092.md
CVE ID: CVE-2021-45693 State: PUBLISHED Published: 2021-12-26T21:50:41 Last Updated: 2024-08-04T04:47:01.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserialize_string_primitive may read from uninitialized memory locations. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0092.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/messagepack-rs/RUSTSEC-2021-0092.md
CVE ID: CVE-2021-45694 State: PUBLISHED Published: 2021-12-26T21:50:29 Last Updated: 2024-08-04T04:47:01.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rdiff crate through 2021-02-03 for Rust. Window may read from uninitialized memory locations. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0094.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/rdiff/RUSTSEC-2021-0094.md
CVE ID: CVE-2021-45695 State: PUBLISHED Published: 2021-12-26T21:50:16 Last Updated: 2024-08-04T04:47:02.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the mopa crate through 2021-06-01 for Rust. It incorrectly relies on Trait memory layout, possibly leading to future occurrences of arbitrary code execution or ASLR bypass. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0095.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/mopa/RUSTSEC-2021-0095.md
CVE ID: CVE-2021-45696 State: PUBLISHED Published: 2021-12-26T21:50:03 Last Updated: 2024-08-04T04:47:01.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the sha2 crate 0.9.7 before 0.9.8 for Rust. Hashes of long messages may be incorrect when the AVX2-accelerated backend is used. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0100.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/sha2/RUSTSEC-2021-0100.md
CVE ID: CVE-2021-45697 State: PUBLISHED Published: 2021-12-26T21:49:49 Last Updated: 2024-08-04T04:47:01.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the molecule crate before 0.7.2 for Rust. A FixVec partial read has an incorrect result. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0103.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/molecule/RUSTSEC-2021-0103.md
CVE ID: CVE-2021-45698 State: PUBLISHED Published: 2021-12-26T21:49:38 Last Updated: 2024-08-04T04:47:02.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ckb crate before 0.40.0 for Rust. A get_block_template RPC call may fail in situations where it is supposed to select a Nervos CKB blockchain transaction with a higher fee rate than another transaction. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0107.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ckb/RUSTSEC-2021-0107.md
CVE ID: CVE-2021-45699 State: PUBLISHED Published: 2021-12-26T21:49:25 Last Updated: 2024-08-04T04:47:02.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ckb crate before 0.40.0 for Rust. Remote attackers may be able to conduct a 51% attack against the Nervos CKB blockchain by triggering an inability to allocate memory for the misbehavior HashMap. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0108.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ckb/RUSTSEC-2021-0108.md
CVE ID: CVE-2021-45700 State: PUBLISHED Published: 2021-12-26T21:49:14 Last Updated: 2024-08-04T04:47:02.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ckb crate before 0.40.0 for Rust. Attackers can cause a denial of service (Nervos CKB blockchain node crash) via a dead call that is used as a DepGroup. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0109.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ckb/RUSTSEC-2021-0109.md
CVE ID: CVE-2021-45701 State: PUBLISHED Published: 2021-12-26T21:49:03 Last Updated: 2024-08-04T04:47:02.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A patch operation may result in a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0111.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tremor-script/RUSTSEC-2021-0111.md
CVE ID: CVE-2021-45702 State: PUBLISHED Published: 2021-12-26T21:48:54 Last Updated: 2024-08-04T04:47:01.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the tremor-script crate before 0.11.6 for Rust. A merge operation may result in a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0111.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tremor-script/RUSTSEC-2021-0111.md
CVE ID: CVE-2021-45703 State: PUBLISHED Published: 2021-12-26T21:48:44 Last Updated: 2024-08-04T04:47:01.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the tectonic_xdv crate before 0.1.12 for Rust. XdvParser::<T>::process may read from uninitialized memory locations. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0112.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tectonic_xdv/RUSTSEC-2021-0112.md
CVE ID: CVE-2021-45704 State: PUBLISHED Published: 2021-12-26T21:48:33 Last Updated: 2024-08-04T04:47:02.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket<T> unconditionally implements the Send and Sync traits. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0113.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/metrics-util/RUSTSEC-2021-0113.md
CVE ID: CVE-2021-45705 State: PUBLISHED Published: 2021-12-26T21:48:21 Last Updated: 2024-08-04T04:47:02.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0114.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/nanorand/RUSTSEC-2021-0114.md
CVE ID: CVE-2021-45706 State: PUBLISHED Published: 2021-12-26T21:48:11 Last Updated: 2024-08-04T04:47:02.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the zeroize_derive crate before 1.1.1 for Rust. Dropped memory is not zeroed out for an enum. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0115.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/zeroize_derive/RUSTSEC-2021-0115.md
CVE ID: CVE-2021-45707 State: PUBLISHED Published: 2021-12-26T21:48:02 Last Updated: 2024-08-04T04:47:02.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an out-of-bounds write if a user is in more than 16 /etc/groups groups. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0119.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/nix/RUSTSEC-2021-0119.md - https://github.com/advisories/GHSA-wgrg-5h56-jg27
CVE ID: CVE-2021-45708 State: PUBLISHED Published: 2021-12-26T21:47:45 Last Updated: 2024-08-04T04:47:01.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the abomonation crate through 2021-10-17 for Rust. Because transmute operations are insufficiently constrained, there can be an information leak or ASLR bypass. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0120.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/abomonation/RUSTSEC-2021-0120.md
CVE ID: CVE-2021-45709 State: PUBLISHED Published: 2021-12-26T21:47:32 Last Updated: 2024-08-04T04:47:02.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the crypto2 crate through 2021-10-08 for Rust. During Chacha20 encryption and decryption, an unaligned read of a u32 may occur. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0121.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/crypto2/RUSTSEC-2021-0121.md
CVE ID: CVE-2021-45710 State: PUBLISHED Published: 2021-12-26T21:47:20 Last Updated: 2024-08-04T04:47:02.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0124.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tokio/RUSTSEC-2021-0124.md
CVE ID: CVE-2021-45711 State: PUBLISHED Published: 2021-12-26T21:47:07 Last Updated: 2024-08-04T04:47:02.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the simple_asn1 crate 0.6.0 before 0.6.1 for Rust. There is a panic if UTCTime data, supplied by a remote attacker, has a second character greater than 0x7f. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0125.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/simple_asn1/RUSTSEC-2021-0125.md
CVE ID: CVE-2021-45712 State: PUBLISHED Published: 2021-12-26T21:46:50 Last Updated: 2024-08-04T04:47:02.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rust-embed crate before 6.3.0 for Rust. A ../ directory traversal can sometimes occur in debug mode. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0126.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/rust-embed/RUSTSEC-2021-0126.md
CVE ID: CVE-2021-45713 State: PUBLISHED Published: 2021-12-26T21:46:38 Last Updated: 2024-08-04T04:47:02.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_scalar_function has a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0128.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/rusqlite/RUSTSEC-2021-0128.md
CVE ID: CVE-2021-45714 State: PUBLISHED Published: 2021-12-26T21:46:28 Last Updated: 2024-08-04T04:47:02.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_aggregate_function has a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0128.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/rusqlite/RUSTSEC-2021-0128.md
CVE ID: CVE-2021-45715 State: PUBLISHED Published: 2021-12-26T21:46:20 Last Updated: 2024-08-04T04:47:02.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_window_function has a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0128.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/rusqlite/RUSTSEC-2021-0128.md
CVE ID: CVE-2021-45716 State: PUBLISHED Published: 2021-12-26T21:46:02 Last Updated: 2024-08-04T04:47:02.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. create_collation has a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0128.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/rusqlite/RUSTSEC-2021-0128.md
CVE ID: CVE-2021-45717 State: PUBLISHED Published: 2021-12-26T21:45:53 Last Updated: 2024-08-04T04:47:02.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. commit_hook has a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0128.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/rusqlite/RUSTSEC-2021-0128.md
CVE ID: CVE-2021-45718 State: PUBLISHED Published: 2021-12-26T21:45:39 Last Updated: 2024-08-04T04:47:02.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. rollback_hook has a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0128.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/rusqlite/RUSTSEC-2021-0128.md
CVE ID: CVE-2021-45719 State: PUBLISHED Published: 2021-12-26T21:45:28 Last Updated: 2024-08-04T04:47:02.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. update_hook has a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0128.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/rusqlite/RUSTSEC-2021-0128.md
CVE ID: CVE-2021-45720 State: PUBLISHED Published: 2021-12-26T21:45:09 Last Updated: 2024-08-04T04:47:02.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the lru crate before 0.7.1 for Rust. The iterators have a use-after-free, as demonstrated by an access after a pop operation. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2021-0130.html - https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/lru/RUSTSEC-2021-0130.md
CVE ID: CVE-2021-45721 State: PUBLISHED Published: 2022-07-06T09:15:11 Last Updated: 2024-08-04T04:47:02.005Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: JFrog Products: JFrog Artifactory Problem Types: CWE-79 Description: JFrog Artifactory prior to version 7.29.8 and 6.23.38 is vulnerable to Reflected Cross-Site Scripting (XSS) through one of the XHR parameters in Users REST API endpoint. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.36.1 versions prior to 7.29.8; JFrog Artifactory versions before 6.23.41 versions prior to 6.23.38. Additional Analyst Notes: - CVE Program Container: References: - https://www.jfrog.com/co
.41 versions prior to 6.23.38. Additional Analyst Notes: - CVE Program Container: References: - https://www.jfrog.com/confluence/display/JFROG/JFrog+Security+Advisories - https://www.jfrog.com/confluence/display/JFROG/CVE-2021-45721%3A+Cross-Site+Script+%28XSS%29+on+User+REST+API
CVE ID: CVE-2021-45729 State: PUBLISHED Published: 2022-01-25T19:11:15.848Z Last Updated: 2025-02-20T20:32:28.530Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: WP Google Map Products: WP Google Map (WordPress plugin) Problem Types: CWE-269 Description: The Privilege Escalation vulnerability discovered in the WP Google Map WordPress plugin (versions <= 1.8.0) allows authenticated low-role users to create, edit, and delete maps. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/plugins/gmap-embed/#developers - https://patchstack.com/database/vulnerability/gmap-embed/wordpress-wp-google-map-plugin
plugins/gmap-embed/#developers - https://patchstack.com/database/vulnerability/gmap-embed/wordpress-wp-google-map-plugin-1-8-0-privilege-escalation-vulnerability
CVE ID: CVE-2021-45730 State: PUBLISHED Published: 2022-05-19T14:30:10 Last Updated: 2024-08-04T04:47:02.171Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L) Vendors: JFrog Products: Artifactory Problem Types: CWE-284 Description: JFrog Artifactory prior to 7.31.10, is vulnerable to Broken Access Control where a Project Admin is able to create, edit and delete Repository Layouts while Repository Layouts configuration should only be available for Platform Administrators. Additional Analyst Notes: - CVE Program Container: References: - https://www.jfrog.com/confluence/display/JFROG/CVE-2021-45730%3A+Artifactory+Broken+Access+Control+on+Repository+Layouts+Configuration
CVE ID: CVE-2021-45732 State: PUBLISHED Published: 2021-12-30T21:31:20 Last Updated: 2024-08-04T04:47:02.172Z Vendors: n/a Products: Netgear Nighthawk R6700 Problem Types: Hardcoded Credentials Description: Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted/obfuscated. By extracting the configuration using readily available public tools, a user can reconfigure settings not intended to be manipulated, repackage the configuration, and restore a backup causing these settings to be changed. Additional Analyst Notes: - CVE Program Con
he configuration, and restore a backup causing these settings to be changed. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2021-57
CVE ID: CVE-2021-45733 State: PUBLISHED Published: 2022-02-04T01:34:00 Last Updated: 2024-08-04T04:47:01.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter host_time. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_7/7.md
CVE ID: CVE-2021-45734 State: PUBLISHED Published: 2022-02-04T01:33:59 Last Updated: 2024-08-04T04:47:02.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_10/10.md
CVE ID: CVE-2021-45735 State: PUBLISHED Published: 2022-02-04T01:33:58 Last Updated: 2024-08-04T04:47:02.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_12/12.md
CVE ID: CVE-2021-45736 State: PUBLISHED Published: 2022-02-04T01:33:55 Last Updated: 2024-08-04T04:47:02.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the eip, sip, server parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_9/9.md
CVE ID: CVE-2021-45737 State: PUBLISHED Published: 2022-02-04T01:33:54 Last Updated: 2024-08-04T04:47:02.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the Host parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_6/6.md
CVE ID: CVE-2021-45738 State: PUBLISHED Published: 2022-02-04T01:33:53 Last Updated: 2024-08-04T04:47:01.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerability allows attackers to execute arbitrary commands via the parameter FileName. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_8/8.md
CVE ID: CVE-2021-45739 State: PUBLISHED Published: 2022-02-04T01:33:53 Last Updated: 2024-08-04T04:47:01.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the flag parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pjqwudi/my_vuln/blob/main/totolink/vuln_5/5.md