rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-25165 
A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.
Problem types: description: remote xml external entity
Affected products: vendor: n/a
product: Aruba AirWave Management Platform
Published: 2021-04-28T19:56:26.000Z
CVE-2021-25166 
A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.
Problem types: description: remote unauthorized access
Affected products: vendor: n/a
product: Aruba AirWave Management Platform
Published: 2021-04-29T10:52:15.000Z
CVE-2021-25167 
A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability.
Problem types: description: remote unauthorized access
Affected products: vendor: n/a
product: Aruba AirWave Management Platform
Published: 2021-04-29T11:00:28.000Z
CVE-2021-25168 
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webupdatecomponent function.
Problem types: description: HPE Apollo 70 system bmc firmware libifc.so webupdatecomponent function has a buffer overflow vulnerability.
Affected products: vendor: n/a
product: HPE Apollo 70 System
Published: 2021-02-08T18:01:50.000Z
CVE-2021-25169 
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetservicecfg function.
Problem types: description: HPE Apollo 70 system bmc firmware libifc.so websetservicecfg function has a buffer overflow vulnerability.
Affected products: vendor: n/a
product: HPE Apollo 70 System
Published: 2021-02-08T18:06:29.000Z
CVE-2021-25170 
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetremoteimageinfo function.
Problem types: description: HPE Apollo 70 system bmc firmware libifc.so websetremoteimageinfo function has a buffer overflow vulnerability.
Affected products: vendor: n/a
product: HPE Apollo 70 System
Published: 2021-02-08T18:04:15.000Z
CVE-2021-25171 
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetlicensecfg function.
Problem types: description: HPE Apollo 70 system bmc firmware libifc.so websetlicensecfg function has a buffer overflow vulnerability.
Affected products: vendor: n/a
product: HPE Apollo 70 System
Published: 2021-02-08T18:39:26.000Z
CVE-2021-25172 
The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so websetdefaultlangcfg function.
Problem types: description: HPE Apollo 70 system bmc firmware libifc.so websetdefaultlangcfg function has a command injection vulnerability.
Affected products: vendor: n/a
product: HPE Apollo 70 System
Published: 2021-02-08T19:01:06.000Z
CVE-2021-25173 
An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vulnerability exists when reading malformed DGN files, which allows attackers to cause a crash, potentially enabling denial of service (crash, exit, or restart).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-18T07:14:10.000Z
CVE-2021-25174 
An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists when reading malformed DGN files. It can allow attackers to cause a crash, potentially enabling denial of service (Crash, Exit, or Restart).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-18T07:14:00.000Z
CVE-2021-25175 
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-18T07:13:53.000Z
CVE-2021-25176 
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-18T07:13:46.000Z
CVE-2021-25177 
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-18T07:13:37.000Z
CVE-2021-25178 
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DXF and .DWG files. This can allow attackers to cause a crash potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-18T07:12:43.000Z
CVE-2021-25179 
SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting (XSS) via the HTTP Host header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-05T02:40:13.000Z
CVE-2021-25197 
Cross-site scripting (XSS) vulnerability in SourceCodester Content Management System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter to content_management_system\admin\new_content.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-22T17:20:46.000Z
CVE-2021-25200 
Arbitrary file upload vulnerability in SourceCodester Learning Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to \lms\student_avatar.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-28T16:01:18.000Z
CVE-2021-25201 
SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to execute arbitrary SQL statements through the id parameter to obtain sensitive database information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-23T13:31:48.000Z
CVE-2021-25202 
SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-22T17:10:28.000Z
CVE-2021-25203 
Arbitrary file upload vulnerability in Victor CMS v 1.0 allows attackers to execute arbitrary code via the file upload to \CMSsite-master\admin\includes\admin_add_post.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-23T13:20:37.000Z
CVE-2021-25204 
Cross-site scripting (XSS) vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script or HTM via the subject field to feedback_process.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-23T13:24:30.000Z
CVE-2021-25205 
SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the update parameter to empViewUpdate.php .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-22T19:25:27.000Z
CVE-2021-25206 
Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbitrary code via the file upload to Product_model.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-23T13:15:17.000Z
CVE-2021-25207 
Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers to execute arbitrary code via the file upload to prodViewUpdate.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-23T12:59:02.000Z
CVE-2021-25208 
Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows attackers to execute arbitrary code via the file upload to updatepackage.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-23T13:04:13.000Z
CVE-2021-25209 
SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to view_user.php .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-22T19:05:57.000Z
CVE-2021-25210 
Arbitrary file upload vulnerability in SourceCodester Alumni Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to manage_event.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-22T18:52:24.000Z
CVE-2021-25211 
Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-22T19:15:11.000Z
CVE-2021-25212 
SQL injection vulnerability in SourceCodester Alumni Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to manage_event.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-22T18:58:28.000Z
CVE-2021-25213 
SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-22T19:08:28.000Z
CVE-2021-25214 A broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly
In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a malformed IXFR triggering the flaw described above, the named process will terminate due to a failed assertion the next time the transferred secondary zone is refreshed.
Problem types: description: Incremental zone transfers (IXFR) provide a way of transferring changed portion(s) of a zone between servers. An IXFR stream containing SOA records with an owner name other than the transferred zone's apex may cause the receiving named server to inadvertently remove the SOA record for the zone in question from the zone database. This leads to an assertion failure when the next SOA refresh query for that zone is made.  Affects BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch.
Affected products: vendor: ISC
product: BIND9
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: ISC would like to thank Greg Kuechle of SaskTel for bringing this vulnerability to our attention.
Published: 2021-04-29T00:55:16.042Z
CVE-2021-25215 An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself
In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a query for a record triggering the flaw described above, the named process will terminate due to a failed assertion check. The vulnerability affects all currently maintained BIND 9 branches (9.11, 9.11-S, 9.16, 9.16-S, 9.17) as well as all other versions of BIND 9.
Problem types: description: DNAME records, described in RFC 6672, provide a way to redirect a subtree of the domain name tree in the DNS. A flaw in the way named processes these records may trigger an attempt to add the same RRset to the ANSWER section more than once. This causes an assertion check in BIND to fail.  DNAME records are processed by both authoritative and recursive servers. For authoritative servers, the DNAME record triggering the flaw can be retrieved from a zone database. For servers performing recursion, such a record is processed in the course of a query sent to an authoritative server.  Affects BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch.
Affected products: vendor: ISC
product: BIND9
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: ISC would like to thank Siva Kakarla for bringing this vulnerability to our attention.
Published: 2021-04-29T00:55:16.726Z
CVE-2021-25218 A too-strict assertion check could be triggered when responses in BIND 9.16.19 and 9.17.16 require UDP fragmentation if RRL is in use
In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named receives a query under the circumstances described above, the named process will terminate due to a failed assertion check. The vulnerability affects only BIND 9 releases 9.16.19, 9.17.16, and release 9.16.19-S1 of the BIND Supported Preview Edition.
Problem types: description: If named attempts to respond over UDP with a response that is larger than the current effective interface maximum transmission unit (MTU), and if response-rate limiting (RRL) is active, an assertion failure is triggered (resulting in termination of the named server process).  There are two ways for named to exceed the interface MTU:      Direct configuration in named.conf setting max-udp-size to a value larger than the interface's MTU, or     Path MTU discovery (PMTUD) informing the IP stack that it should use a smaller MTU for the interface and destination than the default max-udp-size value of 1232. Some operating systems allow packets received via other protocols to affect PMTUD values for DNS over UDP.  While RRL is not enabled by default for user-defined views or the built-in default INTERNET (IN) class view, "_default", the built-in default CHAOS (CH) class view, "_bind", does have RRL enabled.  Note that while this defect can be triggered through misconfiguration or by deliberate exploitation, it can also arise during normal operating conditions, even with hardened PMTUD settings.  Affects BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition.
Affected products: vendor: ISC
product: BIND9
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-08-18T18:20:11.962Z
CVE-2021-25219 Lame cache can be abused to severely degrade resolver performance
In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch, exploitation of broken authoritative servers using a flaw in response processing can cause degradation in BIND resolver performance. The way the lame cache is currently designed makes it possible for its internal data structures to grow almost infinitely, which may cause significant delays in client query processing.
Problem types: description: Authoritative-only BIND 9 servers are NOT vulnerable to this flaw. The purpose of a resolver's lame cache is to ensure that if an authoritative server responds to a resolver's query in a specific broken way, subsequent client queries for the same <QNAME, QTYPE> tuple do not trigger further queries to the same server for a configurable amount of time. The lame cache is enabled by setting the "lame-ttl" option in named.conf to a value greater than 0. That option is set to "lame-ttl 600;" in the default configuration, which means the lame cache is enabled by default. A successful attack exploiting this flaw causes a named resolver to spend most of its CPU time on managing and checking the lame cache. This results in client queries being responded to with large delays, and increased likelihood of DNS timeouts on client hosts. Affects BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development branch.
Affected products: vendor: ISC
product: BIND9
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: LOW
baseScore: 5.3
baseSeverity: MEDIUM
Credits: lang: en
value: ISC would like to thank Kishore Kumar Kothapalli of Infoblox for bringing this vulnerability to our attention.
Published: 2021-10-27T21:10:10.088Z
CVE-2021-25220 DNS forwarders - cache poisoning vulnerability
BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.
Problem types: description: When using forwarders, bogus NS records supplied by, or via, those forwarders may be cached and used by named if it needs to recurse for any reason, causing it to obtain and pass on potentially incorrect answers. Some examples of configurations that will be vulnerable are:     Resolvers using per zone or global forwarding with forward first (forward first is the default).     Resolvers not using global forwarding, but with per-zone forwarding with either forward first (the default) or forward only.     Resolvers configured with global forwarding along with zone statements that disable forwarding for part of the DNS namespace. Authoritative-only BIND 9 servers are not vulnerable to this flaw. BIND     9.11.0 -> 9.11.36     9.12.0 -> 9.16.26     9.17.0 -> 9.18.0 BIND Supported Preview Editions:     9.11.4-S1 -> 9.11.36-S1     9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL.
Affected products: vendor: ISC
product: BIND
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: HIGH
availabilityImpact: NONE
baseScore: 6.8
baseSeverity: MEDIUM
Credits: lang: en
value: ISC would like to thank Xiang Li, Baojun Liu, and Chaoyi Lu from Network and Information Security Lab, Tsinghua University and Changgen Zou from Qi An Xin Group Corp. for discovering and reporting this issue.
Published: 2022-03-23T12:50:10.367Z
CVE-2021-25224 
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: description: Memory Exhaustion DOS
Affected products: vendor: Trend Micro
product: Trend Micro ServerProtect for Linux
Published: 2021-01-27T19:10:24.000Z
CVE-2021-25225 
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scheduled scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: description: Memory Exhaustion DOS
Affected products: vendor: Trend Micro
product: Trend Micro ServerProtect for Linux
Published: 2021-01-27T19:10:24.000Z
CVE-2021-25226 
A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scan engine component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: description: Memory Exhaustion DOS
Affected products: vendor: Trend Micro
product: Trend Micro ServerProtect for Linux
Published: 2021-01-27T19:10:25.000Z
CVE-2021-25227 
Trend Micro Antivirus for Mac 2021 (Consumer) is vulnerable to a memory exhaustion vulnerability that could lead to disabling all the scanning functionality within the application. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability - i.e. the attacker must already have access to the target system (either legitimately or via another exploit).
Problem types: description: Memory Exhaustion DOS
Affected products: vendor: Trend Micro
product: Trend Micro Antivirus for Mac
Published: 2021-02-04T19:36:37.000Z
CVE-2021-25228 
An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about hotfix history.
Problem types: description: Improper Access Control Information Disclosure
Affected products: vendor: Trend Micro
product: Trend Micro Apex One
vendor: Trend Micro
product: Trend Micro OfficeScan
vendor: Trend Micro
product: Trend Micro Worry-Free Business Security
Published: 2021-02-04T19:36:38.000Z
CVE-2021-25229 
An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the database server.
Problem types: description: Improper Access Control Information Disclosure
Affected products: vendor: Trend Micro
product: Trend Micro Apex One
vendor: Trend Micro
product: Trend Micro OfficeScan
Published: 2021-02-04T19:36:38.000Z