rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-27269 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process Was ZDI-CAN-12390.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Foxit
product: PhantomPDF
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2021-03-30T14:35:37.000Z
CVE-2021-27270 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG2000 images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12230.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Foxit
product: PhantomPDF
Credits: lang: en
value: cece
Published: 2021-03-30T14:35:37.000Z
CVE-2021-27271 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in an out-of-bounds read condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12438.
Problem types: cwe_id: CWE-125
description: CWE-125: Out-of-bounds Read
Affected products: vendor: Foxit
product: PhantomPDF
Credits: lang: en
value: Mat Powell of Trend Micro Zero Day Initiative
Published: 2021-03-30T14:35:38.000Z
CVE-2021-27272 
This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the ReportTemplateController class. When parsing the path parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-12123.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NETGEAR
product: ProSAFE Network Management System
Credits: lang: en
value: rgod
Published: 2021-03-29T20:55:22.000Z
CVE-2021-27273 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the SettingConfigController class. When parsing the fileName parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-12121.
Problem types: cwe_id: CWE-78
description: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: NETGEAR
product: ProSAFE Network Management System
Credits: lang: en
value: rgod
Published: 2021-03-29T20:55:23.000Z
CVE-2021-27274 
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MFileUploadController class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-12124.
Problem types: cwe_id: CWE-434
description: CWE-434: Unrestricted Upload of File with Dangerous Type
Affected products: vendor: NETGEAR
product: ProSAFE Network Management System
Credits: lang: en
value: rgod
Published: 2021-03-29T20:55:23.000Z
CVE-2021-27275 
This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the ConfigFileController class. When parsing the realName parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose sensitive information or to create a denial-of-service condition on the system. Was ZDI-CAN-12125.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NETGEAR
product: ProSAFE Network Management System
Credits: lang: en
value: rgod
Published: 2021-03-29T20:55:24.000Z
CVE-2021-27276 
This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the MibController class. When parsing the realName parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-12122.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: NETGEAR
product: ProSAFE Network Management System
Credits: lang: en
value: rgod
Published: 2021-03-29T20:55:25.000Z
CVE-2021-27277 
This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual Infrastructure Monitor 2020.2. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the OneTimeJobSchedulerEventsService WCF service. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-11955.
Problem types: cwe_id: CWE-502
description: CWE-502: Deserialization of Untrusted Data
Affected products: vendor: SolarWinds
product: Orion Virtual Infrastructure Monitor
Credits: lang: en
value: Harrison Neal
Published: 2021-04-22T17:50:13.000Z
CVE-2021-27278 
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the current user on the host system. Was ZDI-CAN-12130.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Parallels
product: Desktop
Credits: lang: en
value: Ezrak1e and Alisa Esage (Pwn2Own)
Published: 2021-04-22T17:50:14.000Z
CVE-2021-27279 
MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-22T19:04:20.000Z
CVE-2021-27280 
OS Command injection vulnerability in mblog 3.5.0 allows attackers to execute arbitrary code via crafted theme when it gets selected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-05-08T00:00:00.000Z
CVE-2021-27285 
An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-01-06T00:00:00.000Z
CVE-2021-27288 
Cross Site Scripting (XSS) in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "Comment" field in "/profile/activity" page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T13:48:25.000Z
CVE-2021-27289 
A replay attack vulnerability was discovered in a Zigbee smart home kit manufactured by Ksix (Zigbee Gateway Module = v1.0.3, Door Sensor = v1.0.7, Motion Sensor = v1.0.12), where the Zigbee anti-replay mechanism - based on the frame counter field - is improperly implemented. As a result, an attacker within wireless range can resend captured packets with a higher sequence number, which the devices incorrectly accept as legitimate messages. This allows spoofed commands to be injected without authentication, triggering false alerts and misleading the user through notifications in the mobile application used to monitor the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-04-15T00:00:00.000Z
CVE-2021-27290 
ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-12T21:47:41.000Z
CVE-2021-27291 
In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-17T12:31:15.000Z
CVE-2021-27292 
ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-17T12:34:48.000Z
CVE-2021-27293 
RestSharp < 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service (ReDoS) when converting strings into DateTimes. If a server responds with a malicious string, the client using RestSharp will be stuck processing it for an exceedingly long time. Thus the remote server can trigger Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-12T10:47:01.000Z
CVE-2021-27306 
An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without a valid token JWT.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-18T14:02:16.000Z
CVE-2021-27308 
A cross-site scripting (XSS) vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the "redirect" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-22T14:49:40.000Z
CVE-2021-27309 
Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-23T13:28:32.000Z
CVE-2021-27310 
Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-23T13:27:19.000Z
CVE-2021-27312 
Server Side Request Forgery (SSRF) vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-04-03T00:00:00.000Z
CVE-2021-27314 
SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-04T23:32:50.000Z
CVE-2021-27315 
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-24T13:41:50.000Z
CVE-2021-27316 
Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-24T13:44:58.000Z
CVE-2021-27317 
Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the comment parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-01T20:16:34.000Z
CVE-2021-27318 
Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the lastname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-01T20:14:14.000Z
CVE-2021-27319 
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-24T13:45:59.000Z
CVE-2021-27320 
Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-24T13:46:28.000Z
CVE-2021-27328 
Yeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An authenticated user can decrypt firmware and can read sensitive information, such as a password or decryption key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-19T18:23:22.000Z
CVE-2021-27329 
Friendica 2021.01 allows SSRF via parse_url?binurl= for DNS lookups or HTTP requests to arbitrary domain names.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-18T17:23:32.000Z
CVE-2021-27330 
Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-25T15:11:58.000Z
CVE-2021-27332 
Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the class_name parameter to update_class.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-22T18:46:48.000Z
CVE-2021-27335 
KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-18T17:51:19.000Z
CVE-2021-27338 
Faraday Edge before 3.7 allows XSS via the network/create/ page and its network name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-20T11:50:24.000Z
CVE-2021-27340 
OpenSIS Community Edition version <= 7.6 is affected by a reflected XSS vulnerability in EmailCheck.php via the "opt" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T13:48:33.000Z
CVE-2021-27341 
OpenSIS Community Edition version <= 7.6 is affected by a local file inclusion vulnerability in DownloadWindow.php via the "filename" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-16T13:47:48.000Z
CVE-2021-27342 
An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T12:20:43.000Z
CVE-2021-27343 
SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information (context-dependent). The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::der_decode_sequence() function. The attack vector is: Parsing RSA Key ASN.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T12:07:12.000Z
CVE-2021-27345 
A null pointer dereference was discovered in ucompthread in stream.c in Irzip 0.631 which allows attackers to cause a denial of service (DOS) via a crafted compressed file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T15:45:02.000Z
CVE-2021-27347 
Use after free in lzma_decompress_buf function in stream.c in Irzip 0.631 allows attackers to cause Denial of Service (DoS) via a crafted compressed file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-10T15:37:06.000Z
CVE-2021-27349 
Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-31T21:34:09.000Z
CVE-2021-27351 
The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-19T18:57:52.000Z
CVE-2021-27352 
An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's site after a successful login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-29T15:28:05.000Z
CVE-2021-27357 
RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T12:07:36.000Z
CVE-2021-27358 
The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-18T19:43:04.000Z
CVE-2021-27362 
The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPG_W+0x0000000000000133, which might allow remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-17T15:44:06.000Z
CVE-2021-27363 
An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-07T03:55:58.000Z
CVE-2021-27364 
An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-07T04:03:38.000Z
CVE-2021-27365 
An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-07T04:22:58.000Z
CVE-2021-27367 
Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-17T20:47:48.000Z
CVE-2021-27368 
The Contact page in Monica 2.19.1 allows stored XSS via the First Name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-22T14:38:15.000Z
CVE-2021-27369 
The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-22T14:37:36.000Z
CVE-2021-27370 
The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-22T14:38:02.000Z
CVE-2021-27371 
The Contact page in Monica 2.19.1 allows stored XSS via the Description field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-22T14:37:54.000Z
CVE-2021-27372 
Realtek xPON RTL9601D SDK 1.9 stores passwords in plaintext which may allow attackers to possibly gain access to the device with root permissions via the build-in network monitoring tool and execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-25T21:31:22.000Z
CVE-2021-27374 
VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207 allows attackers to achieve "Zugriff auf Inhalte der WebOffice Applikation."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-17T21:58:58.000Z
CVE-2021-27375 
Traefik before 2.4.5 allows the loading of IFRAME elements from other domains.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-18T02:55:14.000Z