rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-20698 
Sharp NEC Displays (UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and prior to it, UN552VS R1.300 and prior to it, UN552 R1.300 and prior to it, UN552V R1.300 and prior to it, UX552S R1.300 and prior to it, UX552 R1.300 and prior to it, V864Q R2.000 and prior to it, C861Q R2.000 and prior to it, P754Q R2.000 and prior to it, V754Q R2.000 and prior to it, C751Q R2.000 and prior to it, V984Q R2.000 and prior to it, C981Q R2.000 and prior to it, P654Q R2.000 and prior to it, V654Q R2.000 and prior to it, C651Q R2.000 and prior to it, V554Q R2.000 and prior to it, P404 R3.200 and prior to it, P484 R3.200 and prior to it, P554 R3.200 and prior to it, V404 R3.200 and prior to it, V484 R3.200 and prior to it, V554 R3.200 and prior to it, V404-T R3.200 and prior to it, V484-T R3.200 and prior to it, V554-T R3.200 and prior to it, C501 R2.000 and prior to it, C551 R2.000 and prior to it, C431 R2.000 and prior to it) allows an attacker to obtain root privileges and execute remote code by sending unintended parameters that contain specific characters in http request.
Problem types: description: Improper certificate validation
Affected products: vendor: Sharp Display Solutions, Ltd.
product: UN462A
vendor: Sharp Display Solutions, Ltd.
product: UN462VA
vendor: Sharp Display Solutions, Ltd.
product: UN492S
vendor: Sharp Display Solutions, Ltd.
product: UN492VS
vendor: Sharp Display Solutions, Ltd.
product: UN552A
vendor: Sharp Display Solutions, Ltd.
product: UN552S
vendor: Sharp Display Solutions, Ltd.
product: UN552VS
vendor: Sharp Display Solutions, Ltd.
product: UN552
vendor: Sharp Display Solutions, Ltd.
product: UN552V
vendor: Sharp Display Solutions, Ltd.
product: UX552S
vendor: Sharp Display Solutions, Ltd.
product: UX552
vendor: Sharp Display Solutions, Ltd.
product: V864Q
vendor: Sharp Display Solutions, Ltd.
product: C861Q
vendor: Sharp Display Solutions, Ltd.
product: P754Q
vendor: Sharp Display Solutions, Ltd.
product: V754Q
vendor: Sharp Display Solutions, Ltd.
product: C751Q
vendor: Sharp Display Solutions, Ltd.
product: V984Q
vendor: Sharp Display Solutions, Ltd.
product: C981Q
vendor: Sharp Display Solutions, Ltd.
product: P654Q
vendor: Sharp Display Solutions, Ltd.
product: V654Q
vendor: Sharp Display Solutions, Ltd.
product: C651Q
vendor: Sharp Display Solutions, Ltd.
product: V554Q
vendor: Sharp Display Solutions, Ltd.
product: C501
vendor: Sharp Display Solutions, Ltd.
product: C551
vendor: Sharp Display Solutions, Ltd.
product: C431
vendor: Sharp Display Solutions, Ltd.
product: P404
vendor: Sharp Display Solutions, Ltd.
product: P484
vendor: Sharp Display Solutions, Ltd.
product: P554
vendor: Sharp Display Solutions, Ltd.
product: V404
vendor: Sharp Display Solutions, Ltd.
product: V484
vendor: Sharp Display Solutions, Ltd.
product: V554
vendor: Sharp Display Solutions, Ltd.
product: V404-T
vendor: Sharp Display Solutions, Ltd.
product: V484-T
vendor: Sharp Display Solutions, Ltd.
product: V554-T
Published: 2021-06-07T13:25:26.000Z
CVE-2021-20699 
Sharp NEC Displays ((UN462A R1.300 and prior to it, UN462VA R1.300 and prior to it, UN492S R1.300 and prior to it, UN492VS R1.300 and prior to it, UN552A R1.300 and prior to it, UN552S R1.300 and prior to it, UN552VS R1.300 and prior to it, UN552 R1.300 and prior to it, UN552V R1.300 and prior to it, UX552S R1.300 and prior to it, UX552 R1.300 and prior to it, V864Q R2.000 and prior to it, C861Q R2.000 and prior to it, P754Q R2.000 and prior to it, V754Q R2.000 and prior to it, C751Q R2.000 and prior to it, V984Q R2.000 and prior to it, C981Q R2.000 and prior to it, P654Q R2.000 and prior to it, V654Q R2.000 and prior to it, C651Q R2.000 and prior to it, V554Q R2.000 and prior to it, P404 R3.200 and prior to it, P484 R3.200 and prior to it, P554 R3.200 and prior to it, V404 R3.200 and prior to it, V484 R3.200 and prior to it, V554 R3.200 and prior to it, V404-T R3.200 and prior to it, V484-T R3.200 and prior to it, V554-T R3.200 and prior to it, C501 R2.000 and prior to it, C551 R2.000 and prior to it, C431 R2.000 and prior to it) allows an attacker a buffer overflow and to execute remote code by sending long parameters that contains specific characters in http request.
Problem types: description: Improper certificate validation
Affected products: vendor: Sharp Display Solutions, Ltd.
product: UN462A
vendor: Sharp Display Solutions, Ltd.
product: UN462VA
vendor: Sharp Display Solutions, Ltd.
product: UN492S
vendor: Sharp Display Solutions, Ltd.
product: UN492VS
vendor: Sharp Display Solutions, Ltd.
product: UN552A
vendor: Sharp Display Solutions, Ltd.
product: UN552S
vendor: Sharp Display Solutions, Ltd.
product: UN552VS
vendor: Sharp Display Solutions, Ltd.
product: UN552
vendor: Sharp Display Solutions, Ltd.
product: UN552V
vendor: Sharp Display Solutions, Ltd.
product: UX552S
vendor: Sharp Display Solutions, Ltd.
product: UX552
vendor: Sharp Display Solutions, Ltd.
product: V864Q
vendor: Sharp Display Solutions, Ltd.
product: C861Q
vendor: Sharp Display Solutions, Ltd.
product: P754Q
vendor: Sharp Display Solutions, Ltd.
product: V754Q
vendor: Sharp Display Solutions, Ltd.
product: C751Q
vendor: Sharp Display Solutions, Ltd.
product: V984Q
vendor: Sharp Display Solutions, Ltd.
product: C981Q
vendor: Sharp Display Solutions, Ltd.
product: P654Q
vendor: Sharp Display Solutions, Ltd.
product: V654Q
vendor: Sharp Display Solutions, Ltd.
product: C651Q
vendor: Sharp Display Solutions, Ltd.
product: V554Q
vendor: Sharp Display Solutions, Ltd.
product: C501
vendor: Sharp Display Solutions, Ltd.
product: C551
vendor: Sharp Display Solutions, Ltd.
product: C431
vendor: Sharp Display Solutions, Ltd.
product: P404
vendor: Sharp Display Solutions, Ltd.
product: P484
vendor: Sharp Display Solutions, Ltd.
product: P554
vendor: Sharp Display Solutions, Ltd.
product: V404
vendor: Sharp Display Solutions, Ltd.
product: V484
vendor: Sharp Display Solutions, Ltd.
product: V554
vendor: Sharp Display Solutions, Ltd.
product: V404-T
vendor: Sharp Display Solutions, Ltd.
product: V484-T
vendor: Sharp Display Solutions, Ltd.
product: V554-T
Published: 2021-06-07T13:25:33.000Z
CVE-2021-20700 
Buffer overflow vulnerability in the Disk Agent CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote code execution via a network.
Problem types: description: Buffer overflow
Affected products: vendor: NEC Corporation
product: CLUSTERPRO X
Published: 2021-11-02T23:29:46.000Z
CVE-2021-20701 
Buffer overflow vulnerability in the Disk Agent CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote code execution via a network.
Problem types: description: Buffer overflow
Affected products: vendor: NEC Corporation
product: CLUSTERPRO X
Published: 2021-11-02T23:30:21.000Z
CVE-2021-20702 
Buffer overflow vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote code execution via a network.
Problem types: description: Buffer overflow
Affected products: vendor: NEC Corporation
product: CLUSTERPRO X
Published: 2021-11-02T23:30:03.000Z
CVE-2021-20703 
Buffer overflow vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote code execution via a network.
Problem types: description: Buffer overflow
Affected products: vendor: NEC Corporation
product: CLUSTERPRO X
Published: 2021-11-02T23:30:28.000Z
CVE-2021-20704 
Buffer overflow vulnerability in the compatible API with previous versions CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote code execution via a network.
Problem types: description: Buffer overflow
Affected products: vendor: NEC Corporation
product: CLUSTERPRO X
Published: 2021-11-02T23:30:09.000Z
CVE-2021-20705 
Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote file upload via network.
Problem types: description: Improper input Validation
Affected products: vendor: NEC Corporation
product: CLUSTERPRO X
Published: 2021-11-02T23:30:43.000Z
CVE-2021-20706 
Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to remote file upload via network.
Problem types: description: Improper input Validation
Affected products: vendor: NEC Corporation
product: CLUSTERPRO X
Published: 2021-11-02T23:30:15.000Z
CVE-2021-20707 
Improper input validation vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3 SingleServerSafe for Windows and earlier allows attacker to read files upload via network..
Problem types: description: Improper input Validation
Affected products: vendor: NEC Corporation
product: CLUSTERPRO X
Published: 2021-11-02T23:30:35.000Z
CVE-2021-20708 
NEC Aterm devices (Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier) allow authenticated attackers to execute arbitrary OS commands by sending a specially crafted request to a specific URL.
Problem types: description: OS Command Injection
Affected products: vendor: NEC Corporation
product: NEC Aterm devices
Published: 2021-04-26T00:20:44.000Z
CVE-2021-20709 
Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to a specific URL.
Problem types: description: Improper Validation of Integrity Check Value
Affected products: vendor: NEC Corporation
product: NEC Aterm devices
Published: 2021-04-26T00:20:44.000Z
CVE-2021-20710 
Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.5.1 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: NEC Corporation
product: Aterm WG2600HS
Published: 2021-04-26T00:20:45.000Z
CVE-2021-20711 
Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: NEC Corporation
product: Aterm WG2600HS
Published: 2021-04-26T00:20:46.000Z
CVE-2021-20712 
Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier allows a device connected to the LAN side to be accessed from the WAN side due to the defect in the IPv6 firewall function.
Problem types: description: Improper Access Control
Affected products: vendor: NEC Corporation
product: NEC Aterm devices
Published: 2021-04-26T00:20:46.000Z
CVE-2021-20713 
Privilege escalation vulnerability in QND Advance/Premium/Standard Ver.11.0.4i and earlier allows an attacker who can log in to the PC where the product's Windows client is installed to gain administrative privileges via unspecified vectors. As a result, sensitive information may be altered/obtained or unintended operations may be performed.
Problem types: description: Privilege escalation
Affected products: vendor: QualitySoft Corporation
product: QND Advance/Premium/Standard
Published: 2021-05-24T03:20:28.000Z
CVE-2021-20714 
Directory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote attacker with administrator privileges to delete arbitrary files on the server via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: Emre Vona
product: WP Fastest Cache
Published: 2021-04-27T05:42:33.000Z
CVE-2021-20715 
Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.
Problem types: description: Improper Access Control
Affected products: vendor: Recruit Co., Ltd.
product: Hot Pepper Gourmet App
Published: 2021-04-27T05:42:33.000Z
CVE-2021-20716 
Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and prior, WBR2-G54-KD firmware Ver.2.32 and prior, WBR-B11 firmware Ver.2.23 and prior, WBR-G54 firmware Ver.2.23 and prior, WBR-G54L firmware Ver.2.20 and prior, WHR2-A54G54 firmware Ver.2.25 and prior, WHR2-G54 firmware Ver.2.23 and prior, WHR2-G54V firmware Ver.2.55 and prior, WHR3-AG54 firmware Ver.2.23 and prior, WHR-G54 firmware Ver.2.16 and prior, WHR-G54-NF firmware Ver.2.10 and prior, WLA2-G54 firmware Ver.2.24 and prior, WLA2-G54C firmware Ver.2.24 and prior, WLA-B11 firmware Ver.2.20 and prior, WLA-G54 firmware Ver.2.20 and prior, WLA-G54C firmware Ver.2.20 and prior, WLAH-A54G54 firmware Ver.2.54 and prior, WLAH-AM54G54 firmware Ver.2.54 and prior, WLAH-G54 firmware Ver.2.54 and prior, WLI2-TX1-AG54 firmware Ver.2.53 and prior, WLI2-TX1-AMG54 firmware Ver.2.53 and prior, WLI2-TX1-G54 firmware Ver.2.20 and prior, WLI3-TX1-AMG54 firmware Ver.2.53 and prior, WLI3-TX1-G54 firmware Ver.2.53 and prior, WLI-T1-B11 firmware Ver.2.20 and prior, WLI-TX1-G54 firmware Ver.2.20 and prior, WVR-G54-NF firmware Ver.2.02 and prior, WZR-G108 firmware Ver.2.41 and prior, WZR-G54 firmware Ver.2.41 and prior, WZR-HP-G54 firmware Ver.2.41 and prior, WZR-RS-G54 firmware Ver.2.55 and prior, and WZR-RS-G54HP firmware Ver.2.55 and prior) allows a remote attacker to enable the debug option and to execute arbitrary code or OS commands, change the configuration, and cause a denial of service (DoS) condition.
Problem types: description: Hidden Functionality
Affected products: vendor: BUFFALO INC.
product: Buffalo network devices
Published: 2021-04-28T00:45:25.000Z
CVE-2021-20717 
Cross-site scripting vulnerability in EC-CUBE 4.0.0 to 4.0.5 allows a remote attacker to inject a specially crafted script in the specific input field of the EC web site which is created using EC-CUBE. As a result, it may lead to an arbitrary script execution on the administrator's web browser.
Problem types: description: Cross-site scripting
Affected products: vendor: EC-CUBE CO.,LTD.
product: EC-CUBE
Published: 2021-05-10T09:10:14.000Z
CVE-2021-20718 
mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: ZmartZone
product: mod_auth_openidc
Published: 2021-05-20T01:15:21.000Z
CVE-2021-20719 
RFNTPS firmware versions System_01000004 and earlier, and Web_01000004 and earlier allow an attacker on the same network segment to execute arbitrary OS commands with a root privilege via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: NIPPON ANTENNA Co.,Ltd.
product: RFNTPS
Published: 2021-05-20T01:15:21.000Z
CVE-2021-20720 
SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors.
Problem types: description: SQL Injection
Affected products: vendor: kujirahand
product: KonaWiki2
Published: 2021-05-20T01:15:22.000Z
CVE-2021-20721 
KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed.
Problem types: description: Unrestricted upload of file with dangerous type
Affected products: vendor: kujirahand
product: KonaWiki2
Published: 2021-05-20T01:15:23.000Z
CVE-2021-20722 
Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prior to WinSSInst2JP.exe and WinSSInst2iX1500JP.exe allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: FUJITSU LIMITED and PFU LIMITED
product: The installers of ScanSnap Manager and the Software Download Installer
Published: 2021-05-24T03:20:29.000Z
CVE-2021-20723 
Reflected cross-site scripting vulnerability in [MailForm01] free edition (versions which the last updated date listed at the top of descriptions in the program file is from 2014 December 12 to 2018 July 27) allows a remote attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: PHP Factory
product: [MailForm01] free edition
Published: 2021-05-24T03:20:30.000Z
CVE-2021-20724 
Reflected cross-site scripting vulnerability in the admin page of [Telop01] free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: PHP Factory
product: [Telop01] free edition
Published: 2021-05-24T03:20:30.000Z
CVE-2021-20725 
Reflected cross-site scripting vulnerability in the admin page of [Calendar01] free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: PHP Factory
product: [Calendar01] free edition
Published: 2021-05-24T03:20:31.000Z
CVE-2021-20726 
Untrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an attacker to gain privileges and execute arbitrary code with the privilege of the user invoking the installer via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Overwolf Ltd.
product: The Installer of Overwolf
Published: 2021-05-24T03:20:32.000Z
CVE-2021-20727 
Cross-site scripting vulnerability in Zettlr from 0.20.0 to 1.8.8 allows an attacker to execute an arbitrary script by loading a file or code snippet containing an invalid iframe into Zettlr.
Problem types: description: Cross-site scripting
Affected products: vendor: Hendrik Erz
product: Zettlr
Published: 2021-05-27T08:05:14.000Z
CVE-2021-20728 
Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.
Problem types: description: Improper Access Control
Affected products: vendor: NTT Resonant Incorporated
product: goo blog App
Published: 2021-06-09T01:05:22.000Z
CVE-2021-20729 
Cross-site scripting vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions 2.5.2 and earlier, and pfSense Plus software versions 21.05 and earlier) allows a remote attacker to inject an arbitrary script via a malicious URL.
Problem types: description: Cross-site scripting
Affected products: vendor: pfSense
product: pfSense CE and pfSense Plus
Published: 2022-03-31T07:20:29.000Z
CVE-2021-20730 
Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allows an attacker to obtain configuration information via unspecified vectors.
Problem types: description: Improper server certificate verification
Affected products: vendor: BUFFALO INC.
product: WSR-1166DHP3 and WSR-1166DHP4
Published: 2021-06-09T01:05:23.000Z
CVE-2021-20731 
WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: BUFFALO INC.
product: WSR-1166DHP3 and WSR-1166DHP4
Published: 2021-06-09T01:05:24.000Z
CVE-2021-20732 
The ATOM (ATOM - Smart life App for Android versions prior to 1.8.1 and ATOM - Smart life App for iOS versions prior to 1.8.2) does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on encrypted communication via a crafted certificate.
Problem types: description: Improper server certificate verification
Affected products: vendor: ATOM tech Inc.
product: ATOM
Published: 2021-06-09T01:05:25.000Z
CVE-2021-20733 
Improper authorization in handler for custom URL scheme vulnerability in あすけんダイエット (asken diet) for Android versions from v.3.0.0 to v.4.2.x allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.
Problem types: description: Improper Authorization in Handler for Custom URL Scheme
Affected products: vendor: asken Inc.
product: あすけんダイエット (asken diet) for Android
Published: 2021-06-22T01:35:45.000Z
CVE-2021-20734 
Cross-site scripting vulnerability in Welcart e-Commerce versions prior to 2.2.4 allows remote attackers to inject arbitrary script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Collne Inc.
product: Welcart e-Commerce
Published: 2021-06-22T01:35:46.000Z
CVE-2021-20735 
Cross-site scripting vulnerability in ETUNA EC-CUBE plugins (Delivery slip number plugin (3.0 series) 1.0.10 and earlier, Delivery slip number csv bulk registration plugin (3.0 series) 1.0.8 and earlier, and Delivery slip number mail plugin (3.0 series) 1.0.8 and earlier) allows remote attackers to inject an arbitrary script by executing a specific operation on the management page of EC-CUBE.
Problem types: description: Cross-site scripting
Affected products: vendor: ETUNA
product: ETUNA EC-CUBE plugins
Published: 2021-06-22T01:35:48.000Z
CVE-2021-20736 
NoSQL injection vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to obtain and/or alter the information stored in the database via unspecified vectors.
Problem types: description: NoSQL injection
Affected products: vendor: WESEEK, Inc.
product: GROWI
Published: 2021-06-22T01:35:50.000Z
CVE-2021-20737 
Improper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to view the unauthorized pages without access privileges via unspecified vectors.
Problem types: description: Improper authentication
Affected products: vendor: WESEEK, Inc.
product: GROWI
Published: 2021-06-22T01:35:51.000Z
CVE-2021-20738 
WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors.
Problem types: description: Information Disclosure
Affected products: vendor: ELECOM CO.,LTD.
product: WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA
Published: 2021-07-07T07:05:24.000Z