rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-20073 
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for cross-site request forgeries.
Problem types: description: Cross-Site Request Forgery (CSRF)
Affected products: vendor: n/a
product: Racom MIDGE Firmware
Published: 2021-02-16T19:43:13.000Z
CVE-2021-20074 
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands.
Problem types: description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: n/a
product: Racom MIDGE Firmware
Published: 2021-02-16T19:43:34.000Z
CVE-2021-20075 
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for privilege escalation via configd.
Problem types: description: Privilege Escalation
Affected products: vendor: n/a
product: Racom MIDGE Firmware
Published: 2021-02-16T19:43:55.000Z
CVE-2021-20076 
Tenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a vulnerability that could allow an authenticated, unprivileged user to perform Remote Code Execution (RCE) on the Tenable.sc server via Hypertext Preprocessor unserialization.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: Tenable.sc
Published: 2021-03-03T16:30:39.000Z
CVE-2021-20077 
Nessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role security token on the local host during initial linking of the Nessus Agent when installed on an Amazon EC2 instance. This could allow a privileged attacker to obtain the token.
Problem types: description: Privilege Escalation
Affected products: vendor: n/a
product: Tenable Nessus Agent
Published: 2021-03-19T18:46:43.000Z
CVE-2021-20078 
Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in spark gateway component. This allows a remote attacker to remotely delete any directory or directories on the OS.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: Manage Engine OpManager
Published: 2021-04-01T18:03:48.000Z
CVE-2021-20079 
Nessus versions 8.13.2 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host.
Problem types: description: Local Privilege Escalation
Affected products: vendor: n/a
product: Nessus
Published: 2021-06-29T18:16:35.000Z
CVE-2021-20080 
Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading a crafted XML asset file.
Problem types: description: Unauthenticated Stored Cross-site Scripting (XSS)
Affected products: vendor: n/a
product: ManageEngine ServiceDesk Plus
vendor: n/a
product: ManageEngine AssetExplorer
Published: 2021-04-09T17:21:07.000Z
CVE-2021-20081 
Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to execute arbitrary commands with SYSTEM privileges.
Problem types: description: Incomplete List of Disallowed Inputs leading to Authenticated Remote Command Execution
Affected products: vendor: n/a
product: ManageEngine ServiceDesk Plus
Published: 2021-06-10T11:01:56.000Z
CVE-2021-20083 
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-plugin-query-object 2.2.3 allows a malicious user to inject properties into Object.prototype.
Problem types: description: Prototype Pollution
Affected products: vendor: n/a
product: jquery-plugin-query-object
Published: 2021-04-23T18:47:42.000Z
CVE-2021-20084 
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-sparkle 1.5.2-beta allows a malicious user to inject properties into Object.prototype.
Problem types: description: Prototype Pollution
Affected products: vendor: n/a
product: jQuery Sparkle
Published: 2021-04-23T17:44:19.000Z
CVE-2021-20085 
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in backbone-query-parameters 0.4.0 allows a malicious user to inject properties into Object.prototype.
Problem types: description: Prototype Pollution
Affected products: vendor: n/a
product: backbone-query-parameters
Published: 2021-04-23T18:41:07.000Z
CVE-2021-20086 
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-bbq 1.2.1 allows a malicious user to inject properties into Object.prototype.
Problem types: description: Prototype Pollution
Affected products: vendor: n/a
product: jquery-bbq
Published: 2021-04-23T18:11:07.000Z
CVE-2021-20087 
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-deparam 0.5.1 allows a malicious user to inject properties into Object.prototype.
Problem types: description: Prototype Pollution
Affected products: vendor: n/a
product: jquery-deparam
Published: 2021-04-23T17:58:23.000Z
CVE-2021-20088 
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in mootools-more 1.6.0 allows a malicious user to inject properties into Object.prototype.
Problem types: description: Prototype Pollution
Affected products: vendor: n/a
product: mootools-more
Published: 2021-04-23T17:49:25.000Z
CVE-2021-20089 
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in purl 2.3.2 allows a malicious user to inject properties into Object.prototype.
Problem types: description: Prototype Pollution
Affected products: vendor: n/a
product: purl
Published: 2021-04-23T18:35:40.000Z
CVE-2021-20090 
A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow unauthenticated remote attackers to bypass authentication.
Problem types: description: Path Traversal
Affected products: vendor: n/a
product: Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3
Published: 2021-04-29T00:00:00.000Z
CVE-2021-20091 
The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input. An authenticated remote attacker could leverage this vulnerability to alter device configuration, potentially gaining remote code execution.
Problem types: description: Static Code Injection
Affected products: vendor: n/a
product: Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3
Published: 2021-04-29T14:29:09.000Z
CVE-2021-20092 
The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly restrict access to sensitive information from an unauthorized actor.
Problem types: description: Improper Access Control
Affected products: vendor: n/a
product: Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3
Published: 2021-04-29T14:29:16.000Z
CVE-2021-20093 
A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server.
Problem types: description: Buffer Over-read
Affected products: vendor: n/a
product: Wibu-Systems CodeMeter
Published: 2021-06-16T11:09:02.000Z
CVE-2021-20094 
A denial of service vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to crash the CodeMeter Runtime Server.
Problem types: description: Uncaught Exception
Affected products: vendor: n/a
product: Wibu-Systems CodeMeter
Published: 2021-06-16T11:09:07.000Z
CVE-2021-20096 
Cross-site request forgery in OpenOversight 0.6.4 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.
Problem types: description: Cross-site Request Forgery
Affected products: vendor: n/a
product: OpenOversight
Published: 2021-05-25T11:31:10.000Z
CVE-2021-20099 
Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows executables as the Nessus host. This is different than CVE-2021-20100.
Problem types: description: Local Privilege Escalation
Affected products: vendor: n/a
product: Nessus Agent
Published: 2021-06-28T10:29:13.000Z
CVE-2021-20100 
Nessus Agent 8.2.4 and earlier for Windows were found to contain multiple local privilege escalation vulnerabilities which could allow an authenticated, local administrator to run specific Windows executables as the Nessus host. This is different than CVE-2021-20099.
Problem types: description: Local Privilege Escalation
Affected products: vendor: n/a
product: Nessus Agent
Published: 2021-06-28T10:29:19.000Z
CVE-2021-20101 
Machform prior to version 16 is vulnerable to HTTP host header injection due to improperly validated host headers. This could cause a victim to receive malformed content.
Problem types: description: Host Header Injection
Affected products: vendor: n/a
product: AppNitro Machform
Published: 2021-06-29T15:30:39.000Z
CVE-2021-20102 
Machform prior to version 16 is vulnerable to cross-site request forgery due to a lack of CSRF tokens in place.
Problem types: description: Cross-Site Request Forgery
Affected products: vendor: n/a
product: AppNitro Machform
Published: 2021-06-29T15:30:45.000Z
CVE-2021-20103 
Machform prior to version 16 is vulnerable to stored cross-site scripting due to insufficient sanitization of file attachments uploaded with forms through upload.php.
Problem types: description: Unauthenticated File Upload
Affected products: vendor: n/a
product: AppNitro Machform
Published: 2021-06-29T15:30:51.000Z
CVE-2021-20104 
Machform prior to version 16 is vulnerable to unauthenticated remote code execution due to insufficient sanitization of file attachments uploaded with forms through upload.php.
Problem types: description: Remote Code Execution
Affected products: vendor: n/a
product: AppNitro Machform
Published: 2021-06-29T15:31:01.000Z
CVE-2021-20105 
Machform prior to version 16 is vulnerable to an open redirect in Safari_init.php due to an improperly sanitized 'ref' parameter.
Problem types: description: Open Redirect
Affected products: vendor: n/a
product: AppNitro Machform
Published: 2021-06-29T15:37:41.000Z
CVE-2021-20106 
Nessus Agent versions 8.2.5 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host.
Problem types: description: Local Privilege Escalation
Affected products: vendor: n/a
product: Nessus Agent
Published: 2021-07-21T10:20:42.000Z
CVE-2021-20107 
There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS. The vulnerability allows for unauthenticated kinetic effects and information disclosure on the faucets. It is possible to use the Bluetooth Low Energy (BLE) connectivity to read and write to many BLE characteristics on the device. Some of these control the flow of water, the sensitivity of the sensors, and information about maintenance.
Problem types: description: Improper Access Control
Affected products: vendor: n/a
product: SLOAN
Published: 2021-06-30T13:21:56.000Z
CVE-2021-20108 
Manage Engine Asset Explorer Agent 1.0.34 listens on port 9000 for incoming commands over HTTPS from Manage Engine Server. The HTTPS certificates are not verified which allows any arbitrary user on the network to send commands over port 9000. While these commands may not be executed (due to authtoken validation), the Asset Explorer agent will reach out to the manage engine server for an HTTP request. During this process, AEAgent.cpp allocates 0x66 bytes using "malloc". This memory is never free-ed in the program, causing a memory leak. Additionally, the instruction sent to aeagent (ie: NEWSCAN, DELTASCAN, etc) is converted to a unicode string, but is never freed. These memory leaks allow a remote attacker to exploit a Denial of Service scenario through repetitively sending these commands to an agent and eventually crashing it the agent due to an out-of-memory condition.
Problem types: description: Denial of service
Affected products: vendor: n/a
product: Manage Engine Asset Explorer Agent
Published: 2021-07-19T14:34:05.000Z
CVE-2021-20109 
Due to the Asset Explorer agent not validating HTTPS certificates, an attacker on the network can statically configure their IP address to match the Asset Explorer's Server IP address. This will allow an attacker to send a NEWSCAN request to a listening agent on the network as well as receive the agent's HTTP request verifying its authtoken. In AEAgent.cpp, the agent responding back over HTTP is vulnerable to a Heap Overflow if the POST payload response is too large. The POST payload response is converted to Unicode using vswprintf. This is written to a buffer only 0x2000 bytes big. If POST payload is larger, then heap overflow will occur.
Problem types: description: Heap overflow
Affected products: vendor: n/a
product: Manage Engine Asset Explorer Agent
Published: 2021-07-19T14:24:30.000Z
CVE-2021-20110 
Due to Manage Engine Asset Explorer Agent 1.0.34 not validating HTTPS certificates, an attacker on the network can statically configure their IP address to match the Asset Explorer's Server IP address. This will allow an attacker to send a NEWSCAN request to a listening agent on the network as well as receive the agent's HTTP request verifying its authtoken. In httphandler.cpp, the agent reaching out over HTTP is vulnerable to an Integer Overflow, which can be turned into a Heap Overflow allowing for remote code execution as NT AUTHORITY/SYSTEM on the agent machine. The Integer Overflow occurs when receiving POST response from the Manage Engine server, and the agent calling "HttpQueryInfoW" in order to get the "Content-Length" size from the incoming POST request. This size is taken, but multiplied to a larger amount. If an attacker specifies a Content-Length size of 1073741823 or larger, this integer arithmetic will wrap the value back around to smaller integer, then calls "calloc" with this size to allocate memory. The following API "InternetReadFile" will copy the POST data into this buffer, which will be too small for the contents, and cause heap overflow.
Problem types: description: Arbitrary Code Execution
Affected products: vendor: n/a
product: Manage Engine Asset Explorer Agent
Published: 2021-07-19T14:48:14.000Z
CVE-2021-20111 
A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1. Valid files uploaded via tce_filemanager.php with a filename beggining with a period will be rendered as text/html. An attacker with access to tce_filemanager.php could upload a malicious javascript payload which would be triggered when another user views the file.
Problem types: description: Stored XSS
Affected products: vendor: n/a
product: TCExam
Published: 2021-07-29T17:57:30.000Z
CVE-2021-20112 
A stored cross-site scripting vulnerability exists in TCExam <= 14.8.1. Valid files uploaded via tce_select_mediafile.php with a filename beggining with a period will be rendered as text/html. An attacker with access to tce_select_mediafile.php could upload a malicious javascript payload which would be triggered when another user views the file.
Problem types: description: Stored XSS
Affected products: vendor: n/a
product: TCExam
Published: 2021-07-29T18:00:21.000Z
CVE-2021-20113 
An exposure of sensitive information vulnerability exists in TCExam <= 14.8.1. If a password reset request was made for an email address that was not registered with a user then we would be presented with an ‘unknown email’ error. If an email is given that is registered with a user then this error will not appear. A malicious actor could abuse this to enumerate the email addresses of
Problem types: description: Observable Discrepancy
Affected products: vendor: n/a
product: TCExam
Published: 2021-07-29T18:00:49.000Z
CVE-2021-20114 
When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which included sensitive database backup files.
Problem types: description: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: n/a
product: TCExam
Published: 2021-07-29T18:00:55.000Z
CVE-2021-20115 
A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.3. The paths provided in the f, d, and dir parameters in tce_filemanager.php were not properly validated and could cause reflected XSS via the unsanitized output of the path supplied. An attacker could craft a malicious link which, if triggered by an administrator, could result in the attacker hijacking the victim's session or performing actions on their behalf.
Problem types: description: Reflected Cross-Site Scripting
Affected products: vendor: n/a
product: TCExam
Published: 2021-08-05T20:38:20.000Z
CVE-2021-20116 
A reflected cross-site scripting vulnerability exists in TCExam <= 14.8.4. The paths provided in the f, d, and dir parameters in tce_select_mediafile.php were not properly validated and could cause reflected XSS via the unsanitized output of the path supplied. An attacker could craft a malicious link which, if triggered by an administrator, could result in the attacker hijacking the victim's session or performing actions on their behalf.
Problem types: description: Reflected Cross-Site Scripting
Affected products: vendor: n/a
product: TCExam
Published: 2021-08-05T20:38:27.000Z
CVE-2021-20117 
Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrator to run specific executables on the Nessus Agent host. This is different than CVE-2021-20118.
Problem types: description: Local Privilege Escalation
Affected products: vendor: n/a
product: Nessus Agent
Published: 2021-09-09T11:26:52.000Z
CVE-2021-20118 
Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrator to run specific executables on the Nessus Agent host. This is different than CVE-2021-20117.
Problem types: description: Local Privilege Escalation
Affected products: vendor: n/a
product: Nessus Agent
Published: 2021-09-09T11:26:58.000Z
CVE-2021-20119 
The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that allow any logged-in user to change the administrator password.
Problem types: description: Insecure Password Change Utility
Affected products: vendor: n/a
product: Arris SurfBoard SB8200
Published: 2021-11-09T18:13:22.000Z
CVE-2021-20120 
The administration web interface for the Arris Surfboard SB8200 lacks any protections against cross-site request forgery attacks. This means that an attacker could make configuration changes (such as changing the administrative password) without the consent of the user.
Problem types: description: Cross Site Request Forgery
Affected products: vendor: n/a
product: Arris SurfBoard SB8200
Published: 2021-10-21T16:27:20.000Z
CVE-2021-20121 
The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is vulnerable to an authenticated arbitrary file read. An authenticated user with physical access to the device can read arbitrary files from the device by preparing and connecting a specially prepared USB drive to the device, and making a series of crafted requests to the device's web interface.
Problem types: description: Arbitrary file read
Affected products: vendor: n/a
product: Telus Wi-Fi Hub (PRV65B444A-S-TS)
Published: 2021-10-11T16:48:55.000Z
CVE-2021-20122 
The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is affected by an authenticated command injection vulnerability in multiple parameters passed to tr69_cmd.cgi. A remote attacker connected to the router's LAN and authenticated with a super user account, or using a bypass authentication vulnerability like CVE-2021-20090 could leverage this issue to run commands or gain a shell as root on the target device.
Problem types: description: Command Injection
Affected products: vendor: n/a
product: Telus Wi-Fi Hub (PRV65B444A-S-TS)
Published: 2021-10-11T16:48:59.000Z
CVE-2021-20123 
A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.
Problem types: description: Path Traversal
Affected products: vendor: n/a
product: Draytek VigorConnect
Published: 2021-10-13T15:47:58.000Z
CVE-2021-20124 
A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.
Problem types: description: Path Traversal
Affected products: vendor: n/a
product: Draytek VigorConnect
Published: 2021-10-13T15:48:03.000Z
CVE-2021-20125 
An arbitrary file upload and directory traversal vulnerability exists in the file upload functionality of DownloadFileServlet in Draytek VigorConnect 1.6.0-B3. An unauthenticated attacker could leverage this vulnerability to upload files to any location on the target operating system with root privileges.
Problem types: description: Unrestricted Upload of File with Dangerous Type
Affected products: vendor: n/a
product: Draytek VigorConnect
Published: 2021-10-13T15:48:08.000Z
CVE-2021-20126 
Draytek VigorConnect 1.6.0-B3 lacks cross-site request forgery protections and does not sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
Problem types: description: Cross-Site Request Forgery
Affected products: vendor: n/a
product: Draytek VigorConnect
Published: 2021-10-13T15:48:15.000Z
CVE-2021-20127 
An arbitrary file deletion vulnerability exists in the file delete functionality of the Html5Servlet endpoint of Draytek VigorConnect 1.6.0-B3. This allows an authenticated user to arbitrarily delete files in any location on the target operating system with root privileges.
Problem types: description: Improper Access Control
Affected products: vendor: n/a
product: Draytek VigorConnect
Published: 2021-10-13T15:49:25.000Z
CVE-2021-20128 
The Profile Name field in the floor plan (Network Menu) page in Draytek VigorConnect 1.6.0-B3 was found to be vulnerable to stored XSS, as user input is not properly sanitized.
Problem types: description: Cross-site Scripting
Affected products: vendor: n/a
product: Draytek VigorConnect
Published: 2021-10-13T15:49:30.000Z
CVE-2021-20129 
An information disclosure vulnerability exists in Draytek VigorConnect 1.6.0-B3, allowing an unauthenticated attacker to export system logs.
Problem types: description: Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: n/a
product: Draytek VigorConnect
Published: 2021-10-13T15:49:35.000Z
CVE-2021-20130 
ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface.
Problem types: description: Arbitrary Code Execution
Affected products: vendor: n/a
product: ManageEngine ADManager Plus Build 7111
Published: 2021-10-13T17:30:14.000Z
CVE-2021-20131 
ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the Personalization interface.
Problem types: description: Arbitrary Code Execution
Affected products: vendor: n/a
product: ManageEngine ADManager Plus Build 7111
Published: 2021-10-13T17:30:20.000Z