rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-30968 
A validation issue related to hard link behavior was addressed with improved sandbox restrictions. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to bypass certain Privacy preferences.
Problem types: description: A malicious application may be able to bypass certain Privacy preferences
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:07.000Z
CVE-2021-30969 
A path handling issue was addressed with improved validation. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Processing a maliciously crafted URL may cause unexpected JavaScript execution from a file on disk.
Problem types: description: Processing a maliciously crafted URL may cause unexpected JavaScript execution from a file on disk
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:08.000Z
CVE-2021-30970 
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, macOS Big Sur 11.6.2. A malicious application may be able to bypass Privacy preferences.
Problem types: description: A malicious application may be able to bypass Privacy preferences
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:09.000Z
CVE-2021-30971 
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
Problem types: description: Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:10.000Z
CVE-2021-30972 
This issue was addressed with improved checks. This issue is fixed in Security Update 2022-001 Catalina, macOS Big Sur 11.6.3. A malicious application may be able to bypass certain Privacy preferences.
Problem types: description: A malicious application may be able to bypass certain Privacy preferences
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:11.000Z
CVE-2021-30973 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted file may disclose user information.
Problem types: description: Processing a maliciously crafted file may disclose user information
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:12.000Z
CVE-2021-30975 
This issue was addressed by disabling execution of JavaScript when viewing a scripting dictionary. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious OSAX scripting addition may bypass Gatekeeper checks and circumvent sandbox restrictions.
Problem types: description: A malicious OSAX scripting addition may bypass Gatekeeper checks and circumvent sandbox restrictions
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:14.000Z
CVE-2021-30976 
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may bypass Gatekeeper checks.
Problem types: description: A malicious application may bypass Gatekeeper checks
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:15.000Z
CVE-2021-30977 
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:16.000Z
CVE-2021-30979 
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
Problem types: description: Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:17.000Z
CVE-2021-30980 
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:18.000Z
CVE-2021-30981 
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:19.000Z
CVE-2021-30982 
A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A remote attacker may be able to cause unexpected application termination or heap corruption.
Problem types: description: A remote attacker may be able to cause unexpected application termination or heap corruption
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:20.000Z
CVE-2021-30983 
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges.
Problem types: description: An application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2021-08-24T18:51:21.000Z
CVE-2021-30984 
A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:22.000Z
CVE-2021-30985 
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2021-08-24T18:51:24.000Z
CVE-2021-30986 
A device configuration issue was addressed with an updated configuration. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked by its Bluetooth MAC address.
Problem types: description: A device may be passively tracked by its Bluetooth MAC address
Affected products: vendor: Apple
product: macOS
Published: 2021-08-24T18:51:25.000Z
CVE-2021-30987 
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked via BSSIDs.
Problem types: description: A device may be passively tracked via BSSIDs
Affected products: vendor: Apple
product: macOS
Published: 2021-08-24T18:51:26.000Z
CVE-2021-30988 
Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application may be able to identify what other applications a user has installed.
Problem types: description: A malicious application may be able to identify what other applications a user has installed
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2021-08-24T18:51:26.000Z
CVE-2021-30990 
A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may bypass Gatekeeper checks.
Problem types: description: A malicious application may bypass Gatekeeper checks
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:28.000Z
CVE-2021-30991 
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2021-08-24T18:51:29.000Z
CVE-2021-30992 
This issue was addressed with improved handling of file metadata. This issue is fixed in iOS 15.2 and iPadOS 15.2. A user in a FaceTime call may unexpectedly leak sensitive user information through Live Photos metadata.
Problem types: description: A user in a FaceTime call may unexpectedly leak sensitive user information through Live Photos metadata
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2021-08-24T18:51:30.000Z
CVE-2021-30993 
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. An attacker in a privileged network position may be able to execute arbitrary code.
Problem types: description: An attacker in a privileged network position may be able to execute arbitrary code
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:31.000Z
CVE-2021-30994 
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to access local users' Apple IDs.
Problem types: description: A malicious application may be able to access local users' Apple IDs
Affected products: vendor: Apple
product: macOS
Published: 2021-08-24T18:51:32.000Z
CVE-2021-30995 
A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to elevate privileges.
Problem types: description: A malicious application may be able to elevate privileges
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:33.000Z
CVE-2021-30996 
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with kernel privileges
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:34.000Z
CVE-2021-30997 
A S/MIME issue existed in the handling of encrypted email. This issue was addressed by not automatically loading some MIME parts. This issue is fixed in iOS 15.2 and iPadOS 15.2. An attacker may be able to recover plaintext contents of an S/MIME-encrypted e-mail.
Problem types: description: An attacker may be able to recover plaintext contents of an S/MIME-encrypted e-mail
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2021-08-24T18:51:35.000Z
CVE-2021-30998 
A S/MIME issue existed in the handling of encrypted email. This issue was addressed with improved selection of the encryption certificate. This issue is fixed in iOS 15.2 and iPadOS 15.2. A sender's email address may be leaked when sending an S/MIME encrypted email using a certificate with more than one email address.
Problem types: description: A sender's email address may be leaked when sending an S/MIME encrypted email using a certificate with more than one email address
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2021-08-24T18:51:36.000Z
CVE-2021-30999 
The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.6 and iPadOS 14.6. A user may be unable to fully delete browsing history.
Problem types: description: A user may be unable to fully delete browsing history
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2021-08-24T18:51:37.000Z
CVE-2021-31000 
A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. A malicious application may be able to read sensitive contact information.
Problem types: description: A malicious application may be able to read sensitive contact information
Affected products: vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
Published: 2021-08-24T18:51:38.000Z
CVE-2021-31001 
An access issue was addressed with improved access restrictions. This issue is fixed in iOS 15 and iPadOS 15. An attacker in a privileged network position may be able to leak sensitive user information.
Problem types: description: An attacker in a privileged network position may be able to leak sensitive user information
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2021-08-24T18:51:39.000Z
CVE-2021-31002 
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.2. A malicious application may be able to execute arbitrary code with system privileges.
Problem types: description: A malicious application may be able to execute arbitrary code with system privileges
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:40.000Z
CVE-2021-31004 
A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.5. An application may be able to gain elevated privileges.
Problem types: description: An application may be able to gain elevated privileges
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:42.000Z
CVE-2021-31005 
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, macOS Monterey 12.0.1. Turning off "Block all remote content" may not apply to all remote content types.
Problem types: description: Turning off "Block all remote content" may not apply to all remote content types
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:43.000Z
CVE-2021-31006 
Description: A permissions issue was addressed with improved validation. This issue is fixed in watchOS 7.6, tvOS 14.7, macOS Big Sur 11.5. A malicious application may be able to bypass certain Privacy preferences.
Problem types: description: A malicious application may be able to bypass certain Privacy preferences
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
Published: 2021-08-24T18:51:44.000Z
CVE-2021-31007 
Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, tvOS 15.1, macOS Big Sur 11.6.2, watchOS 8.1, macOS Monterey 12.1. A malicious application may be able to bypass Privacy preferences.
Problem types: description: A malicious application may be able to bypass Privacy preferences
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
Published: 2021-08-24T18:51:45.000Z
CVE-2021-31008 
A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 15.1, tvOS 15.1, iOS 15 and iPadOS 15, macOS Monterey 12.0.1, watchOS 8.1. Processing maliciously crafted web content may lead to code execution.
Problem types: description: Processing maliciously crafted web content may lead to code execution
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
Published: 2021-08-24T18:51:46.000Z
CVE-2021-31009 
Multiple issues were addressed by removing HDF5. This issue is fixed in iOS 15.2 and iPadOS 15.2, macOS Monterey 12.1. Multiple issues in HDF5.
Problem types: description: Multiple issues in HDF5
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:47.000Z
CVE-2021-31010 
A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release..
Problem types: description: A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report that this issue may have been actively exploited at the time of release.
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
vendor: Apple
product: watchOS
Published: 2021-08-24T18:51:48.000Z
CVE-2021-31013 
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. Processing a maliciously crafted font may result in the disclosure of process memory.
Problem types: description: Processing a maliciously crafted font may result in the disclosure of process memory
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-08-24T18:51:51.000Z
CVE-2021-31152 
Multilaser Router AC1200 V02.03.01.45_pt contains a cross-site request forgery (CSRF) vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T00:00:00.000Z
CVE-2021-31153 
please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the search_path function, the --check option, or the -d option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T12:08:44.000Z
CVE-2021-31154 
pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T12:10:39.000Z
CVE-2021-31155 
Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-27T12:11:42.000Z
CVE-2021-31156 
Allied Telesis AT-S115 1.2.0 devices before 1.00.024 with Boot Loader 1.00.006 allow Directory Traversal to achieve partial access to data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-03-28T00:00:00.000Z
CVE-2021-31158 
In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user's permissions, allowing read-access to resources beyond what those users were explicitly allowed to access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-19T18:37:15.000Z
CVE-2021-31159 
Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generation in the Forgot Password functionality, aka SDPMSP-15732.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T12:51:13.000Z
CVE-2021-31160 
Zoho ManageEngine ServiceDesk Plus MSP before 10521 allows an attacker to access internal data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-29T13:10:16.000Z
CVE-2021-31162 
In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T00:00:00.000Z
CVE-2021-31164 Apache Unomi log injection
Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.
Problem types: cwe_id: CWE-93
description: CWE-93 Improper Neutralization of CRLF Sequences ('CRLF Injection')
Affected products: vendor: Apache Software Foundation
product: Apache Unomi
Published: 2021-05-04T06:55:12.000Z
CVE-2021-31165 Windows Container Manager Service Elevation of Privilege Vulnerability
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows 10 Version 2004
cpes: cpe:2.3:o:microsoft:windows_10_1809:10.0.19041.982:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server version 2004
cpes: cpe:2.3:o:microsoft:windows_server_2004:10.0.19041.982:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 20H2
cpes: cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.982:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.982:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows Server version 20H2
cpes: cpe:2.3:o:microsoft:windows_server_20H2:10.0.19042.982:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-05-11T19:11:19.000Z