Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-44266 State: PUBLISHED Published: 2022-06-11T14:50:50 Last Updated: 2024-08-04T04:17:24.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: GUnet Open eClass (aka openeclass) before 3.12.2 allows XSS via the modules/auth/formuser.php auth parameter. Additional Analyst Notes: - CVE Program Container: References: - https://hg.gunet.gr/openeclass/rev/e0ed11f5768d - https://docs.openeclass.org/el/current#%CE%AD%CE%BA%CE%B4%CE%BF%CF%83%CE%B7_3122 - https://emaragkos.gr/cve-2021-44266/
CVE ID: CVE-2021-44269 State: PUBLISHED Published: 2022-03-10T16:13:27 Last Updated: 2024-08-04T04:17:24.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPackSamples of file src/pack_utils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dbry/WavPack/issues/110 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CRZWZKEEABCLVXZEXQZBIT3ZKLIXVFF5/ - https://lists.fedoraproject.org/archives/list/packa
0lists.fedoraproject.org/message/CRZWZKEEABCLVXZEXQZBIT3ZKLIXVFF5/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2CZUFTX3J4Y4OSRITG4PXCI7NRVFDYVQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SQKOOJRI2VAPYS3652HVDXON723HTXBP/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A5B7L26LA6KGX7YH6SWD5CSBNWKV5MBO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I54NXQZELBF42OL4KQZJJRAYZX7IPZXP/
CVE ID: CVE-2021-44273 State: PUBLISHED Published: 2021-12-23T00:00:00 Last Updated: 2024-08-04T04:17:24.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: e2guardian v5.4.x <= v5.4.3r is affected by missing SSL certificate validation in the SSL MITM engine. In standalone mode (i.e., acting as a proxy or a transparent proxy), with SSL MITM enabled, e2guardian, if built with OpenSSL v1.1.x, did not validate hostnames in certificates of the web servers that it connected to, and thus was itself vulnerable to MITM attacks. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/e2guardian/e2guardian/issues/707 - https://github.com/e2guardian/e2guardian/co
ntainer: References: - https://github.com/e2guardian/e2guardian/issues/707 - https://github.com/e2guardian/e2guardian/commit/eae46a7e2a57103aadca903c4a24cca94dc502a2 - http://www.openwall.com/lists/oss-security/2021/12/23/2 - https://lists.debian.org/debian-lts-announce/2023/09/msg00010.html
CVE ID: CVE-2021-44277 State: PUBLISHED Published: 2021-12-01T13:36:17 Last Updated: 2024-08-04T04:17:24.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/common/alert-log.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/librenms/librenms/pull/13554
CVE ID: CVE-2021-44278 State: PUBLISHED Published: 2021-12-03T12:39:36 Last Updated: 2024-08-04T04:17:24.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/librenms/librenms/pull/13554
CVE ID: CVE-2021-44279 State: PUBLISHED Published: 2021-12-01T13:09:01 Last Updated: 2024-08-04T04:17:24.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Librenms 21.11.0 is affected by a Cross Site Scripting (XSS) vulnerability in includes/html/forms/poller-groups.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/librenms/librenms/pull/13554
CVE ID: CVE-2021-44280 State: PUBLISHED Published: 2021-12-01T12:42:30 Last Updated: 2024-08-04T04:17:24.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: attendance management system 1.0 is affected by a SQL injection vulnerability in admin/incFunctions.php through the makeSafe function. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/php/14173/attendance-management-system.html#comment-96757 - https://www.sourcecodester.com/php/14173/attendance-management-system.html#comment-96812 - https://www.nu11secur1ty.com/2021/12/cve-2021-44280.html - https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44280
CVE ID: CVE-2021-44283 State: PUBLISHED Published: 2023-05-09T00:00:00.000Z Last Updated: 2025-01-29T14:43:54.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in the component /Enclave.cpp of Electronics and Telecommunications Research Institute ShieldStore commit 58d455617f99705f0ffd8a27616abdf77bdc1bdc allows attackers to cause an information leak via a crafted structure from an untrusted operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://electronics.com - http://shieldstore.com - https://github.com/cocoppang/ShieldStore/blob/master/Enclave/Enclave.cpp - https://github.com/cocoppang/ShieldStore
om - https://github.com/cocoppang/ShieldStore/blob/master/Enclave/Enclave.cpp - https://github.com/cocoppang/ShieldStore/issues/19
CVE ID: CVE-2021-44299 State: PUBLISHED Published: 2022-01-19T17:45:43 Last Updated: 2024-08-04T04:17:24.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in \lib\packages\themes\themes.php of Navigate CMS v2.9.4 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NavigateCMS/Navigate-CMS/issues/29
CVE ID: CVE-2021-44302 State: PUBLISHED Published: 2022-02-18T23:52:47 Last Updated: 2024-08-04T04:17:24.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidu_map parameters in /user/ztconfig.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/relightsec/BaiCloud/blob/main/README.md
CVE ID: CVE-2021-44310 State: PUBLISHED Published: 2022-03-30T16:38:29 Last Updated: 2024-08-04T04:17:24.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Firmware Analysis and Comparison Tool v3.2. With administrator privileges, the attacker could perform stored XSS attacks by inserting JavaScript and HTML code in user creation functionality. Additional Analyst Notes: - CVE Program Container: References: - https://brainy-sternum-995.notion.site/CVE-2021-44310-Reserved-e9efc897f9944464b8807d44c6fc21df
CVE ID: CVE-2021-44312 State: PUBLISHED Published: 2022-03-30T16:39:58 Last Updated: 2024-08-04T04:17:24.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Firmware Analysis and Comparison Tool v3.2. Logged in administrators could be targeted by a CSRF attack through visiting a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - https://brainy-sternum-995.notion.site/CVE-2021-44312-Reserved-b4a4415e95444c0e847f926a9e9d6266
CVE ID: CVE-2021-44315 State: PUBLISHED Published: 2021-12-16T18:21:17 Last Updated: 2024-08-04T04:17:24.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Bus Pass Management System v1.0, Directory Listing/Browsing is enabled on the web server which allows an attacker to view the sensitive files of the application, for example: Any file which contains sensitive information of the user or server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/abhiunix/Bus-Pass-Management-System-v1.0/blob/master/Directory%20listing/Report_Directory%20listing.pdf - https://github.com/abhiunix/Bus-Pass-Management-System-v1.0/tree/master/Directory%20listing
CVE ID: CVE-2021-44317 State: PUBLISHED Published: 2021-12-16T18:26:11 Last Updated: 2024-08-04T04:17:24.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Bus Pass Management System v1.0, parameters 'pagedes' and `About Us` are affected with a Stored Cross-site scripting vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/abhiunix/Bus-Pass-Management-System-v1.0/blob/master/xss/Report_SXSS.pdf - https://github.com/abhiunix/Bus-Pass-Management-System-v1.0/blob/master/xss/
CVE ID: CVE-2021-44321 State: PUBLISHED Published: 2022-03-04T12:31:17 Last Updated: 2024-08-04T04:17:24.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mini-Inventory-and-Sales-Management-System is affected by Cross Site Request Forgery (CSRF), where an attacker can update/delete items in the inventory. The attacker must be logged into the application create a malicious file for updating the inventory details and items. Additional Analyst Notes: - CVE Program Container: References: - https://1410inc.xyz/mini-inventory-and-sales-management-system/ - https://huntr.dev/bounties/1d84931c-ee10-4944-9764-d96612cdbc71/
CVE ID: CVE-2021-44331 State: PUBLISHED Published: 2022-02-28T16:29:10 Last Updated: 2024-08-04T04:17:24.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: ARM astcenc 3.2.0 is vulnerable to Buffer Overflow in function encode_ise(). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ARM-software/astc-encoder/issues/294
CVE ID: CVE-2021-44334 State: PUBLISHED Published: 2022-02-28T14:20:44 Last Updated: 2024-08-04T04:17:24.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: David Brackeen ok-file-formats 97f78ca is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in function ok_jpg_convert_YCbCr_to_RGB() in "/ok_jpg.c:513" . Additional Analyst Notes: - CVE Program Container: References: - https://github.com/brackeen/ok-file-formats/issues/12
CVE ID: CVE-2021-44335 State: PUBLISHED Published: 2022-03-02T23:13:28 Last Updated: 2024-08-04T04:17:24.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurs in function ok_png_transform_scanline() in "/ok_png.c:533". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/brackeen/ok-file-formats/issues/17
CVE ID: CVE-2021-44339 State: PUBLISHED Published: 2022-02-28T15:24:33 Last Updated: 2024-08-04T04:17:24.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurred in function ok_png_transform_scanline() in "/ok_png.c:712". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/brackeen/ok-file-formats/issues/15
CVE ID: CVE-2021-44340 State: PUBLISHED Published: 2022-02-28T15:50:53 Last Updated: 2024-08-04T04:17:24.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: David Brackeen ok-file-formats dev version is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurred in function ok_jpg_generate_huffman_table() in "/ok_jpg.c:403". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/brackeen/ok-file-formats/issues/11
CVE ID: CVE-2021-44342 State: PUBLISHED Published: 2022-02-28T16:18:16 Last Updated: 2024-08-04T04:17:24.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow via function ok_png_transform_scanline() in "/ok_png.c:494". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/brackeen/ok-file-formats/issues/19
CVE ID: CVE-2021-44343 State: PUBLISHED Published: 2022-03-02T23:23:10 Last Updated: 2024-08-04T04:17:24.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: David Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the ok-file-formats project is used, a heap-buffer-overflow occurred in function ok_png_read_data() in "/ok_png.c". Additional Analyst Notes: - CVE Program Container: References: - https://github.com/brackeen/ok-file-formats/issues/18
CVE ID: CVE-2021-44345 State: PUBLISHED Published: 2022-03-20T15:59:45 Last Updated: 2024-08-04T04:17:24.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Beijing Wisdom Vision Technology Industry Co., Ltd One Card Integrated Management System 3.0 is vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.cnvd.org.cn/flaw/show/3454201
CVE ID: CVE-2021-44347 State: PUBLISHED Published: 2021-12-03T18:55:33 Last Updated: 2024-08-04T04:17:24.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability exists in TuziCMS v2.0.6 in App\Manage\Controller\GuestbookController.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yeyinshi/tuzicms/issues/7
CVE ID: CVE-2021-44348 State: PUBLISHED Published: 2021-12-03T19:01:46 Last Updated: 2024-08-04T04:17:24.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameer in App\Manage\Controller\AdvertController.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yeyinshi/tuzicms/issues/9
CVE ID: CVE-2021-44349 State: PUBLISHED Published: 2021-12-03T19:05:34 Last Updated: 2024-08-04T04:17:25.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameter in App\Manage\Controller\DownloadController.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/yeyinshi/tuzicms/issues/8
CVE ID: CVE-2021-44350 State: PUBLISHED Published: 2021-12-15T22:09:06 Last Updated: 2024-08-04T04:17:25.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability exists in ThinkPHP5 5.0.x <=5.1.22 via the parseOrder function in Builder.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/top-think/framework/issues/2613
CVE ID: CVE-2021-44351 State: PUBLISHED Published: 2022-01-06T11:37:24 Last Updated: 2024-08-04T04:17:24.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file read vulnerability exists in NavigateCMS 2.9 via /navigate/navigate_download.php id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NavigateCMS/Navigate-CMS/issues/28
CVE ID: CVE-2021-44352 State: PUBLISHED Published: 2021-12-03T18:31:35 Last Updated: 2024-08-04T04:17:24.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stack-based Buffer Overflow vulnerability exists in the Tenda AC15 V15.03.05.18_multi device via the list parameter in a post request in goform/SetIpMacBind. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/zhlu32/cve/blob/main/tenda/Tenda-ac15-buffer-overflow.md
CVE ID: CVE-2021-44354 State: PUBLISHED Published: 2022-04-14T19:56:23.213Z Last Updated: 2025-04-15T19:06:53.740Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Reolink Products: RLC-410W Problem Types: CWE-20 Description: Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44355 State: PUBLISHED Published: 2022-04-14T19:56:24.787Z Last Updated: 2025-04-15T19:06:46.584Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Reolink Products: RLC-410W Problem Types: CWE-20 Description: Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44356 State: PUBLISHED Published: 2022-04-14T19:56:26.219Z Last Updated: 2025-04-15T19:06:38.971Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Reolink Products: RLC-410W Problem Types: CWE-20 Description: Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44357 State: PUBLISHED Published: 2022-04-14T19:56:27.654Z Last Updated: 2025-04-15T19:06:31.688Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: Reolink Products: RLC-410W Problem Types: CWE-20 Description: Multiple denial of service vulnerabilities exist in the cgiserver.cgi JSON command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44358 State: PUBLISHED Published: 2022-01-28T21:42:13.000Z Last Updated: 2025-04-15T19:19:58.218Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetRec param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44359 State: PUBLISHED Published: 2022-01-28T21:42:14.000Z Last Updated: 2025-04-15T19:19:50.818Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetCrop param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44360 State: PUBLISHED Published: 2022-01-28T21:42:16.000Z Last Updated: 2025-04-15T19:19:43.255Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetNorm param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44361 State: PUBLISHED Published: 2022-01-28T21:42:16.000Z Last Updated: 2025-04-15T19:19:34.233Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. Set3G param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44362 State: PUBLISHED Published: 2022-01-28T21:42:17.000Z Last Updated: 2025-04-15T19:19:27.277Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetCloudSchedule param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1
ogram Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44363 State: PUBLISHED Published: 2022-01-28T21:42:18.000Z Last Updated: 2025-04-15T19:19:20.766Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetPush param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44364 State: PUBLISHED Published: 2022-01-28T21:42:19.000Z Last Updated: 2025-04-15T19:19:13.817Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetWifi param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421
CVE ID: CVE-2021-44365 State: PUBLISHED Published: 2022-01-28T21:42:19.000Z Last Updated: 2025-04-15T19:19:07.725Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: n/a Problem Types: CWE-20 Description: A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a reboot. SetDevName param is not object. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2021-1421