rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-31893 
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All versions < V5.6 SP2 HF3), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 HF2). The affected software contains a buffer overflow vulnerability while handling certain files that could allow a local attacker to trigger a denial-of-service condition or potentially lead to remote code execution.
Problem types: cwe_id: CWE-120
description: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products: vendor: Siemens
product: SIMATIC PCS 7 V8.2 and earlier
vendor: Siemens
product: SIMATIC PCS 7 V9.0
vendor: Siemens
product: SIMATIC PDM
vendor: Siemens
product: SIMATIC STEP 7 V5.X
vendor: Siemens
product: SINAMICS STARTER (containing STEP 7 OEM version)
Published: 2021-07-13T11:02:56.000Z
CVE-2021-31894 
A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.X (All versions < V9.1 SP2), SIMATIC PDM (All versions < V9.2 SP2), SIMATIC STEP 7 V5.X (All versions < V5.7), SINAMICS STARTER (containing STEP 7 OEM version) (All versions < V5.4 SP2 HF1). A directory containing metafiles relevant to devices' configurations has write permissions. An attacker could leverage this vulnerability by changing the content of certain metafiles and subsequently manipulate parameters or behavior of devices that would be later configured by the affected software.
Problem types: cwe_id: CWE-732
description: CWE-732: Incorrect Permission Assignment for Critical Resource
Affected products: vendor: Siemens
product: SIMATIC PCS 7 V8.2 and earlier
vendor: Siemens
product: SIMATIC PCS 7 V9.X
vendor: Siemens
product: SIMATIC PDM
vendor: Siemens
product: SIMATIC STEP 7 V5.X
vendor: Siemens
product: SINAMICS STARTER (containing STEP 7 OEM version)
Published: 2021-07-13T11:02:58.000Z
CVE-2021-31897 
In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T12:19:47.000Z
CVE-2021-31898 
In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T12:18:20.000Z
CVE-2021-31899 
In JetBrains Code With Me bundled to the compatible IDEs before version 2021.1, the client could execute code in read-only mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T11:21:55.000Z
CVE-2021-31900 
In JetBrains Code With Me bundled to the compatible IDE versions before 2021.1, a client could open a browser on a host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T11:22:47.000Z
CVE-2021-31901 
In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T11:34:00.000Z
CVE-2021-31902 
In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T11:38:49.000Z
CVE-2021-31903 
In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T11:37:43.000Z
CVE-2021-31904 
In JetBrains TeamCity before 2020.2.2, XSS was potentially possible on the test history page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T11:46:23.000Z
CVE-2021-31905 
In JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T11:40:48.000Z
CVE-2021-31906 
In JetBrains TeamCity before 2020.2.2, audit logs were not sufficient when an administrator uploaded a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T11:54:46.000Z
CVE-2021-31907 
In JetBrains TeamCity before 2020.2.2, permission checks for changing TeamCity plugins were implemented improperly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T11:56:05.000Z
CVE-2021-31908 
In JetBrains TeamCity before 2020.2.3, stored XSS was possible on several pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T12:00:45.000Z
CVE-2021-31909 
In JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T11:59:25.000Z
CVE-2021-31910 
In JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T12:02:20.000Z
CVE-2021-31911 
In JetBrains TeamCity before 2020.2.3, reflected XSS was possible on several pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T12:04:09.000Z
CVE-2021-31912 
In JetBrains TeamCity before 2020.2.3, account takeover was potentially possible during a password reset.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T12:05:35.000Z
CVE-2021-31913 
In JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during GitHub SSO token exchange.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T12:09:57.000Z
CVE-2021-31914 
In JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T12:11:47.000Z
CVE-2021-31915 
In JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T12:12:41.000Z
CVE-2021-31916 
An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: n/a
product: kernel
Published: 2021-05-06T16:14:42.000Z
CVE-2021-31917 
A flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 through 12.0.0). An attacker could bypass authentication on all REST endpoints when DIGEST is used as the authentication method. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: n/a
product: Red Hat DataGrid and Infinispan
Published: 2021-09-21T10:33:41.000Z
CVE-2021-31918 
A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to all users during stack update and creation. The highest threat from this vulnerability is to data confidentiality.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: n/a
product: tripleo-ansible
Published: 2021-05-06T16:23:06.000Z
CVE-2021-31919 
An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-30T03:00:15.000Z
CVE-2021-31920 
Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio authorization policy when path based authorization rules are used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T04:03:31.000Z
CVE-2021-31921 
Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is configured with AUTO_PASSTHROUGH routing configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-02T15:36:41.000Z
CVE-2021-31922 
An HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before 21.1 could allow an attacker to smuggle an HTTP request through an HTTP/2 Header. This vulnerability is resolved in 21.1, 20.3R1, 20.2R1, 20.1R2, 19.2R4, and 18.2R3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-14T00:41:27.000Z
CVE-2021-31923 
Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation.
Problem types: description: HTTP Request Smuggling
Affected products: vendor: Ping Identity
product: PingAccess
Credits: lang: en
value: Ping Identity credits Portswigger Research for the discovery of this vulnerability.
lang: en
value: Ping Identity credits MUFG Union Bank for their responsible disclosure.
Published: 2021-09-24T02:30:11.000Z
CVE-2021-31924 
Yubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and the application used, could lead to a local PIN bypass. This issue does not allow user presence (touch) or cryptographic signature verification to be bypassed, so an attacker would still need to physically possess and interact with the YubiKey or another enrolled authenticator. If pam-u2f is configured to require PIN authentication, and the application using pam-u2f allows the user to submit NULL as the PIN, pam-u2f will attempt to perform a FIDO2 authentication without PIN. If this authentication is successful, the PIN requirement is bypassed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-25T23:40:11.000Z
CVE-2021-31925 
Pexip Infinity 25.x before 25.4 has Improper Input Validation, and thus an unauthenticated remote attacker can cause a denial of service via the administrative web interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-07T14:01:52.000Z
CVE-2021-31926 
AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the applicable API endpoint (despite not having permission to make changes to the system's network configuration).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-30T19:56:57.000Z
CVE-2021-31927 
An Insecure Direct Object Reference (IDOR) vulnerability in Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify any existing user, including users assigned to different environments and clients. It was fixed in v2021.1.0.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T14:58:16.000Z
CVE-2021-31928 
Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to escalate privileges to superadministrator. It was fixed in v2021.1.0.2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T14:02:56.000Z
CVE-2021-31929 
Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify loyalty campaigns and settings, such as fraud prevention, coupon groups, email templates, or referrals.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T13:03:01.000Z
CVE-2021-31930 
Persistent cross-site scripting (XSS) in the web interface of Concerto through 2.3.6 allows an unauthenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into the First Name or Last Name parameter upon registration. When a privileged user attempts to delete the account, the XSS payload will be executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-19T14:06:57.000Z
CVE-2021-31932 
Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. A malicious unauthenticated user can get access to all the functionalities exposed via the web panel, circumventing the authentication process, by using URL encoding for the . (dot) character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-11T17:37:40.000Z
CVE-2021-31933 
A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a parameter used for file uploads, and improper file-extension filtering for certain filenames (e.g., .phar or .pht). A remote authenticated administrator is able to upload a file containing arbitrary PHP code into specific directories via main/inc/lib/fileUpload.lib.php directory traversal to achieve PHP code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:H/S:U/UI:N
version: 3.1
Published: 2021-04-30T20:49:20.000Z
CVE-2021-31934 
OX App Suite 7.10.4 and earlier allows XSS via a crafted contact object (payload in the position or company field) that is mishandled in the App Suite UI on a smartphone.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-30T21:19:43.000Z
CVE-2021-31935 
OX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list (payload in the common name) that is mishandled in the scheduling view.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-30T21:19:30.000Z
CVE-2021-31936 Microsoft Accessibility Insights for Web Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Microsoft Accessibility Insights for Web
cpes: cpe:2.3:a:microsoft:accessibility_insights_for_web:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.4
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C
Published: 2021-05-11T19:11:45.000Z
CVE-2021-31937 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
cpes: cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.2
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C
Published: 2023-06-28T17:27:17.404Z
CVE-2021-31938 Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Visual Studio Code - Kubernetes Tools
cpes: cpe:2.3:a:microsoft:kubernetes_tools:-:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.3
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-06-08T22:46:14.000Z
CVE-2021-31939 Microsoft Excel Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Office Online Server
cpes: cpe:2.3:a:microsoft:office:2021:*:*:*:ltsc:*:*:*
vendor: Microsoft
product: Microsoft Office 2019
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
cpes: cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft Excel 2016
cpes: cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Office 2016
cpes: cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Excel 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Office 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Office Web Apps Server 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-06-08T22:46:15.000Z
CVE-2021-31940 Microsoft Office Graphics Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Office 2019
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Office 2019 for Mac
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
cpes: cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft Office 2016
cpes: cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Office 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x64:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-06-08T22:46:15.000Z
CVE-2021-31941 Microsoft Office Graphics Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Office 2019
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft Office 2019 for Mac
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
cpes: cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft Office 2016
cpes: cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Office 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x86:*
cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x64:*
vendor: Microsoft
product: Microsoft Outlook 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:outlook:2013:*:*:*:rt:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-06-08T22:46:16.000Z
CVE-2021-31942 3D Viewer Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: 3D Viewer
cpes: cpe:2.3:a:microsoft:3d_viewer:-:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-06-08T22:46:17.000Z
CVE-2021-31943 3D Viewer Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: 3D Viewer
cpes: cpe:2.3:a:microsoft:3d_viewer:-:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-06-08T22:46:17.000Z
CVE-2021-31944 3D Viewer Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: 3D Viewer
cpes: cpe:2.3:a:microsoft:3d_viewer:-:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Published: 2021-06-08T22:46:18.000Z
CVE-2021-31945 Paint 3D Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Paint 3D
cpes: cpe:2.3:a:microsoft:paint_3d:-:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-06-08T22:46:19.000Z
CVE-2021-31946 Paint 3D Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Paint 3D
cpes: cpe:2.3:a:microsoft:paint_3d:-:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-06-08T22:46:19.000Z
CVE-2021-31947 HEVC Video Extensions Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: HEVC Video Extensions
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-07-14T17:53:14.000Z
CVE-2021-31948 Microsoft SharePoint Server Spoofing Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft SharePoint Enterprise Server 2016
cpes: cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft SharePoint Server 2019
cpes: cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft SharePoint Foundation 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.6
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C
Published: 2021-06-08T22:46:20.000Z
CVE-2021-31949 Microsoft Outlook Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Office 2019
cpes: cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft 365 Apps for Enterprise
cpes: cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft Outlook 2016
cpes: cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:x86:*:*
cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:x64:*:*
vendor: Microsoft
product: Microsoft Outlook 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:outlook:2013:*:*:*:*:x86:*:*
cpe:2.3:a:microsoft:outlook:2013:*:*:*:*:*:x64:*
cpe:2.3:a:microsoft:outlook:2013:*:*:*:rt:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.3
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C
Published: 2021-06-08T22:46:21.000Z
CVE-2021-31950 Microsoft SharePoint Server Spoofing Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft SharePoint Enterprise Server 2016
cpes: cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*
vendor: Microsoft
product: Microsoft SharePoint Server 2019
cpes: cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
vendor: Microsoft
product: Microsoft SharePoint Foundation 2013 Service Pack 1
cpes: cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.6
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C
Published: 2021-06-08T22:46:21.000Z