rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-28952 
An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID number is encountered, aka CID-1c668e1c0a0f. (This has been fixed in 5.12-rc4.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-20T20:05:30.000Z
CVE-2021-28953 
The unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted repository.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-21T04:16:41.000Z
CVE-2021-28954 
In Chris Walz bit before 1.0.5 on Windows, attackers can run arbitrary code via a .exe file in a crafted repository.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-21T04:16:26.000Z
CVE-2021-28955 
git-bug before 0.7.2 has an Uncontrolled Search Path Element. It will execute git.bat from the current directory in certain PATH situations (most often seen on Windows).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-22T06:19:43.000Z
CVE-2021-28956 
The unofficial vscode-sass-lint (aka Sass Lint) extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-22T06:11:13.000Z
CVE-2021-28957 
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-21T04:39:35.000Z
CVE-2021-28958 
Zoho ManageEngine ADSelfService Plus through 6101 is vulnerable to unauthenticated Remote Code Execution while changing the password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-25T11:54:17.000Z
CVE-2021-28959 
Zoho ManageEngine Eventlog Analyzer through 12147 is vulnerable to unauthenticated directory traversal via an entry in a ZIP archive. This leads to remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-30T12:16:42.000Z
CVE-2021-28960 
Zoho ManageEngine Desktop Central before build 10.0.683 allows unauthenticated command injection due to improper handling of an input command in on-demand operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-21T12:46:18.000Z
CVE-2021-28961 
applications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua in the DDNS package for OpenWrt 19.07 allows remote authenticated users to inject arbitrary commands via POST requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-21T05:10:19.000Z
CVE-2021-28962 
Stormshield Network Security (SNS) before 4.2.2 allows a read-only administrator to gain privileges via CLI commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-31T13:50:15.000Z
CVE-2021-28963 
Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-22T07:02:05.000Z
CVE-2021-28964 
A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-22T07:17:34.000Z
CVE-2021-28965 
The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-21T06:55:24.000Z
CVE-2021-28966 
In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T16:01:12.000Z
CVE-2021-28967 
The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-24T06:19:25.000Z
CVE-2021-28968 
An issue was discovered in PunBB before 1.4.6. An XSS vulnerability in the [email] BBcode tag allows (with authentication) injecting arbitrary JavaScript into any forum message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-22T15:10:07.000Z
CVE-2021-28969 
eMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort_by parameter to the email search feature. According to the vendor, the issue is fixed in 9.0.3. NOTE: this is different from CVE-2020-25034 and affects newer versions of the software.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-01T19:47:48.000Z
CVE-2021-28970 
eMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the job_id parameter to the email search feature. According to the vendor, the issue is fixed in 9.0.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-01T19:50:51.000Z
CVE-2021-28971 
In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05a9e0b6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-22T16:53:28.000Z
CVE-2021-28972 
In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination, aka CID-cc7a0bb058b8.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-22T16:53:17.000Z
CVE-2021-28973 
The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-13T16:42:03.000Z
CVE-2021-28975 
WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mst_servers page, for a crafted server_host, server_name, or connection_parameter parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-21T15:44:30.000Z
CVE-2021-28976 
Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-23T12:36:08.000Z
CVE-2021-28977 
Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file header information to the content of xla, pages, and gzip files,
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-23T12:44:04.000Z
CVE-2021-28979 
SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-16T11:32:44.000Z
CVE-2021-28993 
Plixer Scrutinizer 19.0.2 is affected by: SQL Injection. The impact is: obtain sensitive information (remote).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-30T12:18:39.000Z
CVE-2021-28994 
kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10.0.7, and 11.x through 11.0.1 and Zarafa 6.30.x through 7.2.x allows memory exhaustion via long HTTP headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-31T22:11:56.000Z
CVE-2021-28998 
File upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers to gain a webshell via a crafted phar file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-05-08T00:00:00.000Z
CVE-2021-28999 
SQL Injection vulnerability in CMS Made Simple through 2.2.15 allows remote attackers to execute arbitrary commands via the m1_sortby parameter to modules/News/function.admin_articlestab.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-05-08T00:00:00.000Z
CVE-2021-29002 
A stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the "form.widgets.site_title" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-24T14:22:30.000Z
CVE-2021-29003 
Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-13T05:40:12.000Z
CVE-2021-29004 
rConfig 3.9.6 is affected by SQL Injection. A user must be authenticated to exploit the vulnerability. If --secure-file-priv in MySQL server is not set and the Mysql server is the same as rConfig, an attacker may successfully upload a webshell to the server and access it remotely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-11T11:58:33.000Z
CVE-2021-29005 
Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute chmod as root without password which may let an attacker with low privilege to gain root access on server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-11T12:04:49.000Z
CVE-2021-29006 
rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-11T12:02:32.000Z
CVE-2021-29008 
A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via webmaster-tools.php in the "to_time" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-25T19:21:39.000Z
CVE-2021-29009 
A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "type" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-25T19:21:45.000Z
CVE-2021-29010 
A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the "report_type" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-25T19:21:50.000Z
CVE-2021-29011 
DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or address field (under admin.php).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-02T12:53:26.000Z
CVE-2021-29012 
DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session. The cookie is valid when the admin is logged in, but is invalid (temporarily) during times when the admin is logged out. In other words, the cookie is functionally equivalent to a static password, and thus provides permanent access if stolen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-02T12:51:29.000Z
CVE-2021-29022 
In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-10T18:21:56.000Z
CVE-2021-29023 
InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T00:00:00.000Z
CVE-2021-29024 
In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download. Allowing an attacker to directory traversal and download files suppose to be private without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T00:00:00.000Z
CVE-2021-29025 
A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/my_images.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-24T12:02:53.000Z
CVE-2021-29026 
A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/permissions.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-24T12:03:06.000Z
CVE-2021-29027 
A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-24T12:03:14.000Z
CVE-2021-29028 
A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/user_activity.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-24T12:03:21.000Z
CVE-2021-29029 
A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/edit_personal_page.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-24T12:03:26.000Z
CVE-2021-29030 
A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/index.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-24T12:03:34.000Z
CVE-2021-29031 
A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/users_import.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-24T12:03:40.000Z
CVE-2021-29032 
A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/preferences.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-24T12:03:46.000Z
CVE-2021-29033 
A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/edit_group.php URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-24T12:03:52.000Z
CVE-2021-29038 
Liferay Portal 7.2.0 through 7.3.5, and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-the-middle or shoulder surfing attacks to steal user's password reminder answers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-02-20T00:00:00.000Z
CVE-2021-29039 
Cross-site scripting (XSS) vulnerability in the Asset module's categories administration page in Liferay Portal 7.3.4 allows remote attackers to inject arbitrary web script or HTML via the site name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-16T14:58:31.000Z
CVE-2021-29040 
The JSON web services in Liferay Portal 7.3.4 and earlier, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 20 and 7.2 before fix pack 10 may provide overly verbose error messages, which allows remote attackers to use the contents of error messages to help launch another, more focused attacks via crafted inputs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-16T15:03:16.000Z
CVE-2021-29041 
Denial-of-service (DoS) vulnerability in the Multi-Factor Authentication module in Liferay DXP 7.3 before fix pack 1 allows remote authenticated attackers to prevent any user from authenticating by (1) enabling Time-based One-time password (TOTP) on behalf of the other user or (2) modifying the other user's TOTP shared secret.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-16T15:14:22.000Z
CVE-2021-29043 
The Portal Store module in Liferay Portal 7.0.0 through 7.3.5, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 1 does not obfuscate the S3 store's proxy password, which allows attackers to steal the proxy password via man-in-the-middle attacks or shoulder surfing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T10:48:12.000Z
CVE-2021-29044 
Cross-site scripting (XSS) vulnerability in the Site module's membership request administration pages in Liferay Portal 7.0.0 through 7.3.5, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_site_my_sites_web_portlet_MySitesPortlet_comments parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T10:55:02.000Z
CVE-2021-29045 
Cross-site scripting (XSS) vulnerability in the Redirect module's redirection administration page in Liferay Portal 7.3.2 through 7.3.5, and Liferay DXP 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_redirect_web_internal_portlet_RedirectPortlet_destinationURL parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T10:22:30.000Z
CVE-2021-29046 
Cross-site scripting (XSS) vulnerability in the Asset module's category selector input field in Liferay Portal 7.3.5 and Liferay DXP 7.3 before fix pack 1, allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_asset_categories_admin_web_portlet_AssetCategoriesAdminPortlet_title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T10:27:37.000Z
CVE-2021-29047 
The SimpleCaptcha implementation in Liferay Portal 7.3.4, 7.3.5 and Liferay DXP 7.3 before fix pack 1 does not invalidate CAPTCHA answers after it is used, which allows remote attackers to repeatedly perform actions protected by a CAPTCHA challenge by reusing the same CAPTCHA answer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-16T15:29:52.000Z
CVE-2021-29048 
Cross-site scripting (XSS) vulnerability in the Layout module's page administration page in Liferay Portal 7.3.4, 7.3.5 and Liferay DXP 7.2 before fix pack 11 and 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T11:08:23.000Z
CVE-2021-29049 
Cross-site scripting (XSS) vulnerability in the Portal Workflow module's edit process page in Liferay DXP 7.0 before fix pack 99, 7.1 before fix pack 23, 7.2 before fix pack 12 and 7.3 before fix pack 1, allows remote attackers to inject arbitrary web script or HTML via the currentURL parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-09T18:46:16.000Z
CVE-2021-29050 
Cross-Site Request Forgery (CSRF) vulnerability in the terms of use page in Liferay Portal before 7.3.6, and Liferay DXP 7.3 before service pack 1, 7.2 before fix pack 11 allows remote attackers to accept the site's terms of use via social engineering and enticing the user to visit a malicious page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-02-20T00:00:00.000Z
CVE-2021-29051 
Cross-site scripting (XSS) vulnerability in the Asset module's Asset Publisher app in Liferay Portal 7.2.1 through 7.3.5, and Liferay DXP 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_XXXXXXXXXXXX_assetEntryId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T11:01:49.000Z
CVE-2021-29052 
The Data Engine module in Liferay Portal 7.3.0 through 7.3.5, and Liferay DXP 7.3 before fix pack 1 does not check permissions in DataDefinitionResourceImpl.getSiteDataDefinitionByContentTypeByDataDefinitionKey, which allows remote authenticated users to view DDMStructures via GET API calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T11:16:27.000Z
CVE-2021-29053 
Multiple SQL injection vulnerabilities in Liferay Portal 7.3.5 and Liferay DXP 7.3 before fix pack 1 allow remote authenticated users to execute arbitrary SQL commands via the classPKField parameter to (1) CommerceChannelRelFinder.countByC_C, or (2) CommerceChannelRelFinder.findByC_C.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-17T10:41:13.000Z
CVE-2021-29054 
Certain Papoo products are affected by: Cross Site Request Forgery (CSRF) in the admin interface. This affects Papoo CMS Light through 21.02 and Papoo CMS Pro through 6.0.1. The impact is: gain privileges (remote).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-13T05:31:56.000Z
CVE-2021-29055 
Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Firtstname parameter to the Update Account form in student_profile.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-23T14:36:51.000Z
CVE-2021-29056 
Cross Site Scripting (XSS) vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-17T17:23:41.000Z
CVE-2021-29057 
An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool version 1.4.3, allows attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-11T00:00:00.000Z