rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-30600 
Use after free in Printing in Google Chrome prior to 92.0.4515.159 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2021-08-26T17:40:21.000Z
CVE-2021-30601 
Use after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2021-08-26T17:40:22.000Z
CVE-2021-30602 
Use after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to visit a malicious website to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2021-08-26T17:40:24.000Z
CVE-2021-30603 
Data race in WebAudio in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Race
Affected products: vendor: Google
product: Chrome
Published: 2021-08-26T17:40:26.000Z
CVE-2021-30604 
Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2021-08-26T17:40:27.000Z
CVE-2021-30605 
Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls.
Problem types: description: Inappropriate implementation
Affected products: vendor: Google
product: Chrome
Published: 2021-09-08T20:35:16.000Z
CVE-2021-30606 
Chromium: CVE-2021-30606 Use after free in Blink
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:35.000Z
CVE-2021-30607 
Chromium: CVE-2021-30607 Use after free in Permissions
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:37.000Z
CVE-2021-30608 
Chromium: CVE-2021-30608 Use after free in Web Share
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:38.000Z
CVE-2021-30609 
Chromium: CVE-2021-30609 Use after free in Sign-In
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:40.000Z
CVE-2021-30610 
Chromium: CVE-2021-30610 Use after free in Extensions API
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:42.000Z
CVE-2021-30611 
Chromium: CVE-2021-30611 Use after free in WebRTC
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:43.000Z
CVE-2021-30612 
Chromium: CVE-2021-30612 Use after free in WebRTC
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:45.000Z
CVE-2021-30613 
Chromium: CVE-2021-30613 Use after free in Base internals
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:47.000Z
CVE-2021-30614 
Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:48.000Z
CVE-2021-30615 
Chromium: CVE-2021-30615 Cross-origin data leak in Navigation
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:50.000Z
CVE-2021-30616 
Chromium: CVE-2021-30616 Use after free in Media
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:51.000Z
CVE-2021-30617 
Chromium: CVE-2021-30617 Policy bypass in Blink
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:53.000Z
CVE-2021-30618 
Chromium: CVE-2021-30618 Inappropriate implementation in DevTools
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:55.000Z
CVE-2021-30619 
Chromium: CVE-2021-30619 UI Spoofing in Autofill
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:56.000Z
CVE-2021-30620 
Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:58.000Z
CVE-2021-30621 
Chromium: CVE-2021-30621 UI Spoofing in Autofill
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:25:59.000Z
CVE-2021-30622 
Chromium: CVE-2021-30622 Use after free in WebApp Installs
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:26:01.000Z
CVE-2021-30623 
Chromium: CVE-2021-30623 Use after free in Bookmarks
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:26:03.000Z
CVE-2021-30624 
Chromium: CVE-2021-30624 Use after free in Autofill
Affected products: vendor: Microsoft
product: Microsoft Edge (Chromium-based)
Published: 2021-09-03T19:26:04.000Z
CVE-2021-30625 
Use after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who convinced the user the visit a malicious website to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2021-10-08T20:50:18.000Z
CVE-2021-30626 
Out of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Out of bounds memory access
Affected products: vendor: Google
product: Chrome
Published: 2021-10-08T20:50:20.000Z
CVE-2021-30627 
Type confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Type Confusion
Affected products: vendor: Google
product: Chrome
Published: 2021-10-08T20:50:21.000Z
CVE-2021-30628 
Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.
Problem types: description: Stack buffer overflow
Affected products: vendor: Google
product: Chrome
Published: 2021-10-08T20:50:23.000Z
CVE-2021-30629 
Use after free in Permissions in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2021-10-08T20:50:24.000Z
CVE-2021-30630 
Inappropriate implementation in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
Problem types: description: Inappropriate implementation
Affected products: vendor: Google
product: Chrome
Published: 2021-10-08T20:50:26.000Z
CVE-2021-30632 
Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Out of bounds write
Affected products: vendor: Google
product: Chrome
Published: 2021-10-08T00:00:00.000Z
CVE-2021-30633 
Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2021-10-08T20:50:29.000Z
CVE-2021-30635 
Sonatype Nexus Repository Manager 3.x before 3.30.1 allows a remote attacker to get a list of files and directories that exist in a UI-related folder via directory traversal (no customer-specific data is exposed).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-27T02:52:06.000Z
CVE-2021-30636 
In MediaTek LinkIt SDK before 4.6.1, there is a possible memory corruption due to an integer overflow during mishandled memory allocation by pvPortCalloc and pvPortRealloc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T00:27:41.000Z
CVE-2021-30637 
htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-13T04:58:14.000Z
CVE-2021-30638 An Information Disclosure due to insufficient input validation exists in Apache Tapestry 5.4.0 and later
Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using a specially-constructed URL. This was caused by an incomplete fix for CVE-2020-13953. This issue affects Apache Tapestry Apache Tapestry 5.4.0 version to Apache Tapestry 5.6.3; Apache Tapestry 5.7.0 version and Apache Tapestry 5.7.1.
Problem types: cwe_id: CWE-200
description: CWE-200 Information Exposure
Affected products: vendor: Apache Software Foundation
product: Apache Tapestry
Credits: lang: en
value: This vulnerability was discovered by Kc Udonsi of Trend Micro
Published: 2021-04-27T18:30:15.000Z
CVE-2021-30639 DoS after non-blocking IO error
A vulnerability in Apache Tomcat allows an attacker to remotely trigger a denial of service. An error introduced as part of a change to improve error handling during non-blocking I/O meant that the error flag associated with the Request object was not reset between requests. This meant that once a non-blocking I/O error occurred, all future requests handled by that request object would fail. Users were able to trigger non-blocking I/O errors, e.g. by dropping a connection, thereby creating the possibility of triggering a DoS. Applications that do not use non-blocking I/O are not exposed to this vulnerability. This issue affects Apache Tomcat 10.0.3 to 10.0.4; 9.0.44; 8.5.64.
Problem types: description: Denial of Service
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2021-07-12T14:55:12.000Z
CVE-2021-30640 Auth weakness in JNDIRealm
A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65.
Problem types: description: Authentication weaknees
Affected products: vendor: Apache Software Foundation
product: Apache Tomcat
Published: 2021-07-12T14:55:13.000Z
CVE-2021-30641 Unexpected URL matching with 'MergeSlashes OFF'
Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'
Problem types: description: Unexpected URL matching with 'MergeSlashes OFF'
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Credits: lang: en
value: Discovered by Christoph Anton Mitterer
Published: 2021-06-10T07:10:24.000Z
CVE-2021-30642 
An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated attacker to execute arbitrary OS commands on the target with elevated privileges.
Problem types: description: OS command injection
Affected products: vendor: n/a
product: Symantec Security Analytics
Published: 2021-04-27T14:49:37.000Z
CVE-2021-30648 
The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance.
Problem types: description: Authentication bypass
Affected products: vendor: n/a
product: Advanced Secure Gateway (ASG) and ProxySG
Published: 2021-06-30T10:40:39.000Z
CVE-2021-30650 
A reflected cross-site scripting (XSS) vulnerability in the Symantec Layer7 API Management OAuth Toolkit (OTK) allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting malicious code into the OTK web UI client application.
Problem types: description: Cross-site scripting (XSS)
Affected products: vendor: n/a
product: Layer7 API Management OAuth Toolkit (OTK)
Published: 2022-02-18T17:50:58.000Z
CVE-2021-30651 
A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be authorized to access.
Problem types: description: Information disclosure
Affected products: vendor: n/a
product: Symantec Messaging Gateway (SMG)
Published: 2022-06-24T15:00:11.000Z
CVE-2021-30652 
A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to gain root privileges.
Problem types: description: A malicious application may be able to gain root privileges
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-09-08T14:48:05.000Z
CVE-2021-30653 
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted image may lead to arbitrary code execution.
Problem types: description: Processing a maliciously crafted image may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: macOS
Published: 2021-09-08T14:48:25.000Z
CVE-2021-30654 
This issue was addressed by removing additional entitlements. This issue is fixed in GarageBand 10.4.3. A local attacker may be able to read sensitive information.
Problem types: description: A local attacker may be able to read sensitive information
Affected products: vendor: Apple
product: GarageBand
Published: 2021-09-08T14:47:18.000Z
CVE-2021-30655 
An application may be able to execute arbitrary code with system privileges. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. The issue was addressed with improved permissions logic.
Problem types: description: The issue was addressed with improved permissions logic
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-09-08T14:47:09.000Z
CVE-2021-30656 
An access issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5. A malicious application may be able to determine kernel memory layout.
Problem types: description: A malicious application may be able to determine kernel memory layout
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2021-09-08T14:48:41.000Z
CVE-2021-30657 
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited..
Problem types: description: A malicious application may bypass Gatekeeper checks. Apple is aware of a report that this issue may have been actively exploited.
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-09-08T14:49:34.000Z
CVE-2021-30658 
This issue was addressed with improved handling of file metadata. This issue is fixed in macOS Big Sur 11.3. A malicious application may bypass Gatekeeper checks.
Problem types: description: A malicious application may bypass Gatekeeper checks
Affected products: vendor: Apple
product: macOS
Published: 2021-09-08T14:48:11.000Z
CVE-2021-30659 
A validation issue was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, macOS Big Sur 11.3. A malicious application may be able to leak sensitive user information.
Problem types: description: A malicious application may be able to leak sensitive user information
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: watchOS
vendor: Apple
product: macOS
Published: 2021-09-08T14:51:00.000Z
CVE-2021-30660 
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to disclose kernel memory.
Problem types: description: A malicious application may be able to disclose kernel memory
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: macOS
Published: 2021-09-08T14:48:00.000Z
CVE-2021-30661 
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.1, iOS 12.5.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: Safari
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-09-08T14:48:29.000Z
CVE-2021-30662 
This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. Processing a maliciously crafted file may lead to arbitrary code execution.
Problem types: description: Processing a maliciously crafted file may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2021-09-08T14:46:47.000Z
CVE-2021-30663 
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution.
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-09-08T14:49:41.000Z
CVE-2021-30664 
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted file may lead to arbitrary code execution.
Problem types: description: Processing a maliciously crafted file may lead to arbitrary code execution
Affected products: vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: iOS and iPadOS
vendor: Apple
product: tvOS
vendor: Apple
product: watchOS
vendor: Apple
product: macOS
Published: 2021-09-08T14:32:34.000Z
CVE-2021-30665 
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 7.4.1, iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-09-08T14:25:00.000Z
CVE-2021-30666 
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..
Problem types: description: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Affected products: vendor: Apple
product: iOS
Published: 2021-09-08T14:25:25.000Z
CVE-2021-30667 
A logic issue was addressed with improved validation. This issue is fixed in iOS 14.6 and iPadOS 14.6. An attacker in WiFi range may be able to force a client to use a less secure authentication mechanism.
Problem types: description: An attacker in WiFi range may be able to force a client to use a less secure authentication mechanism
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2021-09-08T14:25:12.000Z
CVE-2021-30668 
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4. A person with physical access to a Mac may be able to bypass Login Window during a software update.
Problem types: description: A person with physical access to a Mac may be able to bypass Login Window during a software update
Affected products: vendor: Apple
product: macOS
Published: 2021-09-08T14:25:35.000Z
CVE-2021-30669 
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A malicious application may bypass Gatekeeper checks.
Problem types: description: A malicious application may bypass Gatekeeper checks
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-09-08T14:25:19.000Z
CVE-2021-30671 
A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A malicious application may be able to send unauthorized Apple events to Finder.
Problem types: description: A malicious application may be able to send unauthorized Apple events to Finder
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-09-08T14:25:56.000Z
CVE-2021-30672 
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to gain root privileges.
Problem types: description: A malicious application may be able to gain root privileges
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-09-08T14:25:08.000Z
CVE-2021-30673 
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina. A malicious application may be able to access a user's call history.
Problem types: description: A malicious application may be able to access a user's call history
Affected products: vendor: Apple
product: macOS
vendor: Apple
product: macOS
Published: 2021-09-08T14:26:07.000Z
CVE-2021-30674 
This issue was addressed with improved checks. This issue is fixed in iOS 14.6 and iPadOS 14.6. A malicious application may disclose restricted memory.
Problem types: description: A malicious application may disclose restricted memory
Affected products: vendor: Apple
product: iOS and iPadOS
Published: 2021-09-08T14:25:41.000Z