rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-26291 block repositories using http by default
Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository. Maven is changing the default behavior in 3.8.1+ to no longer follow http (non-SSL) repository references by default. More details available in the referenced urls. If you are currently using a repository manager to govern the repositories used by your builds, you are unaffected by the risks present in the legacy behavior, and are unaffected by this vulnerability and change to default behavior. See this link for more information about repository management: https://maven.apache.org/repository-management.html
Problem types: description: Unexpected Behavior
Affected products: vendor: Apache Software Foundation
product: Apache Maven
Credits: lang: en
value: Apache Maven would like to thank Jonathan Leitschuh for highlighting the need for this change.
Published: 2021-04-23T14:20:13.000Z
CVE-2021-26293 
An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversal to create new files (such as an executable file under the web root). This is related to DAVServer.php in 8.x and DAV/Server.php in 7.x.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-04T20:32:44.000Z
CVE-2021-26294 
An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a data/settings/settings.xml file containing admin panel credentials), as demonstrated by dav/server.php/files/personal/%2e%2e when using the caldav_public_user account (with caldav_public_user as its password).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-07T03:42:34.000Z
CVE-2021-26295 RCE vulnerability in latest Apache OFBiz due to Java serialisation using RMI
Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz.
Problem types: description: Java serialisation
Affected products: vendor: Apache Software Foundation
product: Apache OFBiz
Credits: lang: en
value: Apache OFBiz would like to thank the first report from "r00t4dm at Cloud-Penetrating Arrow Lab and Longofo at Knownsec 404 Team" and the second report by MagicZero from SGLAB of Legendsec at Qi'anxin Group.
Published: 2021-03-22T12:00:18.000Z
CVE-2021-26296 Cross-Site Request Forgery (CSRF) vulnerability in Apache MyFaces
In the default configuration, Apache MyFaces Core versions 2.2.0 to 2.2.13, 2.3.0 to 2.3.7, 2.3-next-M1 to 2.3-next-M4, and 3.0.0-RC1 use cryptographically weak implicit and explicit cross-site request forgery (CSRF) tokens. Due to that limitation, it is possible (although difficult) for an attacker to calculate a future CSRF token value and to use that value to trick a user into executing unwanted actions on an application.
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Apache Software Foundation
product: Apache MyFaces Core
Credits: lang: en
value: Apache MyFaces would like to thank Wolfgang Ettlinger (Certitude Consulting GmbH)
Published: 2021-02-19T08:30:14.000Z
CVE-2021-26303 
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-29T01:48:27.000Z
CVE-2021-26304 
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-29T01:48:15.000Z
CVE-2021-26305 
An issue was discovered in Deserializer::read_vec in the cdr crate before 0.2.4 for Rust. A user-provided Read implementation can gain access to the old contents of newly allocated heap memory, violating soundness.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-29T02:27:42.000Z
CVE-2021-26306 
An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It has unsound transmute calls within as_string() methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-29T02:27:27.000Z
CVE-2021-26307 
An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It allows __cpuid_count() calls even if the processor does not support the CPUID instruction, which is unsound and causes a deterministic crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-29T02:27:17.000Z
CVE-2021-26308 
An issue was discovered in the marc crate before 2.0.0 for Rust. A user-provided Read implementation can gain access to the old contents of newly allocated memory, violating soundness.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-01-29T02:27:00.000Z
CVE-2021-26309 
Information disclosure in the TeamCity plugin for IntelliJ before 2020.2.2.85899 was possible because a local temporary file had Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T11:53:02.000Z
CVE-2021-26310 
In the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS was possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-11T11:48:12.000Z
CVE-2021-26311 AMD Secure Encrypted Virtualization
In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.
Problem types: description: Arbitrary Code Execution
Affected products: vendor: AMD
product: SEV/SEV-ES
Published: 2021-05-13T11:06:17.662Z
CVE-2021-26312 
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.
Problem types: cwe_id: CWE-665
description: CWE-665 Improper Initialization
Affected products: vendor: AMD
product: EPYC™ Processors
vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2021-11-16T17:55:24.198Z
CVE-2021-26313 AMD Speculative Code Store Bypass
Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrect speculation and could result in data leakage.
Problem types: cwe_id: CWE-208
description: CWE-208 Information Exposure Through Timing Discrepancy
Affected products: vendor: AMD
product: All supported processors
Published: 2021-06-09T11:23:37.970Z
CVE-2021-26314 AMD Speculative execution with Floating-Point Value Injection
Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage.
Problem types: cwe_id: CWE-208
description: CWE-208 Information Exposure Through Timing Discrepancy
Affected products: vendor: AMD
product: All supported processors
Published: 2021-06-09T11:23:44.010Z
CVE-2021-26315 
When the AMD Platform Security Processor (PSP) boot rom loads, authenticates, and subsequently decrypts an encrypted FW, due to insufficient verification of the integrity of decrypted image, arbitrary code may be executed in the PSP when encrypted firmware images are used.
Problem types: cwe_id: CWE-345
description: CWE-345 Insufficient Verification of Data Authenticity
Affected products: vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2021-11-16T18:12:07.291Z
CVE-2021-26316 
Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution.
Problem types: description: n/a
Affected products: vendor:  AMD
product: Ryzen 5000 Series 
default_status: affected
vendor:  AMD
product: Ryzen 2000 Series
default_status: unaffected
vendor: AMD
product: Ryzen 3000 Series
default_status: unaffected
vendor: AMD
product: 1st Gen EPYC 
default_status: unaffected
vendor: AMD
product: 2nd Gen EPYC
default_status: unaffected
vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2023-01-10T19:46:46.575Z
CVE-2021-26317 
Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-12T18:27:48.589Z
CVE-2021-26318 Side-channels Related to the x86 PREFETCH Instruction
A timing and power-based side channel attack leveraging the x86 PREFETCH instructions on some AMD CPUs could potentially result in leaked kernel address space information.
Problem types: cwe_id: CWE-208
description: CWE-208 Information Exposure Through Timing Discrepancy
Affected products: vendor: AMD
product: All supported processors
Published: 2021-10-13T18:29:14.977Z
CVE-2021-26320 
Insufficient validation of the AMD SEV Signing Key (ASK) in the SEND_START command in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP
Problem types: cwe_id: CWE-295
description: CWE-295 Improper Certificate Validation
Affected products: vendor: AMD
product: 1st Gen AMD EPYC™
vendor: AMD
product: 2nd Gen AMD EPYC™
vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2021-11-16T18:05:10.770Z
CVE-2021-26321 
Insufficient ID command validation in the SEV Firmware may allow a local authenticated attacker to perform a denial of service of the PSP.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: AMD
product: 1st Gen AMD EPYC™
vendor: AMD
product: 2nd Gen AMD EPYC™
vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2021-11-16T18:07:26.527Z
CVE-2021-26322 
Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.
Problem types: cwe_id: CWE-320
description: CWE-320 Key Management Errors
Affected products: vendor: AMD
product: 1st Gen AMD EPYC™
vendor: AMD
product: 2nd Gen AMD EPYC™
vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2021-11-16T17:58:40.230Z
CVE-2021-26323 
Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2021-11-16T18:14:43.401Z
CVE-2021-26324 
A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.
Problem types: description: tbd
Affected products: vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2022-05-10T18:27:30.491Z
CVE-2021-26325 
Insufficient input validation in the SNP_GUEST_REQUEST command may lead to a potential data abort error and a denial of service.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2021-11-16T18:23:15.960Z
CVE-2021-26326 
Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity.
Problem types: cwe_id: CWE-665
description: CWE-665 Improper Initialization
Affected products: vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2021-11-16T17:52:14.020Z
CVE-2021-26327 
Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2021-11-16T18:18:25.899Z
CVE-2021-26328 
Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for SNP guests.



Problem types: description: n/a
Affected products: vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:33.464Z
CVE-2021-26329 
AMD System Management Unit (SMU) may experience an integer overflow when an invalid length is provided which may result in a potential loss of resources.
Problem types: cwe_id: CWE-130
description: CWE-130 Improper Handling of Length Parameter Inconsistency
Affected products: vendor: AMD
product: 1st Gen AMD EPYC™
vendor: AMD
product: 2nd Gen AMD EPYC™
vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2021-11-16T17:57:01.031Z
CVE-2021-26330 
AMD System Management Unit (SMU) may experience a heap-based overflow which may result in a loss of resources.
Problem types: cwe_id: CWE-122
description: CWE-122 Heap-based Buffer Overflow
Affected products: vendor: AMD
product: 1st Gen AMD EPYC™
vendor: AMD
product: 2nd Gen AMD EPYC™
vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2021-11-16T18:19:29.476Z
CVE-2021-26331 
AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: AMD
product: 1st Gen AMD EPYC™
vendor: AMD
product: 2nd Gen AMD EPYC™
vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2021-11-16T18:09:35.653Z
CVE-2021-26332 
Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability.
Problem types: description: tbd
Affected products: vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2022-05-10T18:26:52.115Z
CVE-2021-26333 AMD Chipset Driver Information Disclosure Vulnerability
An information disclosure vulnerability exists in AMD Platform Security Processor (PSP) chipset driver. The discretionary access control list (DACL) may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages.
Problem types: cwe_id: CWE-200
description: CWE-200 Information Exposure
Affected products: vendor: AMD
product: PSP Driver
Published: 2021-09-21T10:49:49.457Z
CVE-2021-26334 AMD Chipset Driver Information Disclosure Vulnerability
The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: AMD
product: μProf Tool
Published: 2021-12-01T15:43:24.387Z
CVE-2021-26335 
Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2021-11-16T18:08:39.387Z
CVE-2021-26336 
Insufficient bounds checking in System Management Unit (SMU) may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2021-11-16T18:04:08.054Z
CVE-2021-26337 
Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2021-11-16T18:24:01.483Z
CVE-2021-26338 
Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tables located in DRAM resulting in a potential lack of system resources.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: AMD
product: 2nd Gen AMD EPYC™
vendor: AMD
product: 3rd Gen AMD EPYC™
Published: 2021-11-16T17:53:50.233Z
CVE-2021-26339 
A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific code includes a specific x86 instruction sequence that would not be generated by compilers.
Problem types: description: tbd
Affected products: vendor: AMD
product: EPYC™ Processors
vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-11T16:18:02.079Z
CVE-2021-26340 
A malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES guest VM may fail to flush the Translation Lookaside Buffer (TLB) resulting in unexpected behavior inside the virtual machine (VM).
Problem types: description: NA
Affected products: vendor: AMD
product: AMD EPYC™
Published: 2021-12-10T21:55:10.021Z
CVE-2021-26341 
Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage.
Problem types: description: NA
Affected products: vendor: AMD
product: AMD Processors
Published: 2022-03-11T17:54:35.055Z
CVE-2021-26342 
In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for disclosure of SEV guest memory contents. Users of SEV-ES/SEV-SNP guest VMs are not impacted by this vulnerability.
Problem types: description: tbd
Affected products: vendor: AMD
product: EPYC™ Processors
Published: 2022-05-11T16:21:04.403Z
CVE-2021-26343 
Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which may result in information disclosure.



Problem types: description: n/a
Affected products: vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2023-01-10T20:56:34.870Z
CVE-2021-26345 
Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.
Affected products: vendor: AMD
product: 2nd Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 3rd Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: 4th Gen AMD EPYC™ Processors
default_status: unaffected
vendor: AMD
product: AMD EPYC™ Embedded 7002
default_status: unaffected
vendor: AMD
product: AMD EPYC™ Embedded 7003
default_status: unaffected
vendor: AMD
product: AMD EPYC™ Embedded 7002
default_status: unaffected
vendor: AMD
product: AMD EPYC™ Embedded 7003
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 1.9
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L
version: 3.1
Published: 2023-11-14T18:53:20.979Z
CVE-2021-26346 
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.
Problem types: description: n/a
Affected products: vendor:  AMD
product: Ryzen 5000 Series
default_status: affected
Published: 2023-01-10T19:50:24.146Z
CVE-2021-26347 
Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service.
Problem types: description: n/a
Affected products: vendor: AMD
product: Ryzen 5000 Series
default_status: affected
Published: 2022-05-11T16:22:09.774Z
CVE-2021-26348 
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity.
Problem types: description: tbd
Affected products: vendor: AMD
product: EPYC™ Processors
Published: 2022-05-11T16:26:16.451Z
CVE-2021-26349 
Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (MA).
Problem types: description: tbd
Affected products: vendor: AMD
product: EPYC™ Processors
Published: 2022-05-11T16:24:22.957Z
CVE-2021-26350 
A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service.
Problem types: description: tbd
Affected products: vendor: AMD
product: EPYC™ Processors
Published: 2022-05-11T16:16:40.882Z
CVE-2021-26351 
Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/write from/to invalid DRAM address that could result in denial of service.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-12T17:18:51.729Z
CVE-2021-26352 
Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service.
Problem types: description: tbd
Affected products: vendor: AMD
product: Ryzen™ Series
vendor: AMD
product: Athlon™ Series
Published: 2022-05-10T18:26:07.477Z
CVE-2021-26353 
Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.
Problem types: description: n/a
Affected products: vendor: AMD
product: 3rd Gen EPYC
default_status: unaffected
Published: 2022-05-10T18:33:42.470Z