rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-39426 
An issue was discovered in /Upload/admin/admin_notify.php in Seacms 11.4 allows attackers to execute arbitrary php code via the notify1 parameter when the action parameter equals set.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-15T00:00:00.000Z
CVE-2021-39427 
Cross site scripting vulnerability in 188Jianzhan 2.10 allows attackers to execute arbitrary code via the username parameter to /admin/reg.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-15T00:00:00.000Z
CVE-2021-39428 
Cross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated privilege via the filename for edit_users_head_pic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-15T00:00:00.000Z
CVE-2021-39432 
diplib v3.0.0 is vulnerable to Double Free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-04T00:00:00.000Z
CVE-2021-39433 
A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T19:16:26.000Z
CVE-2021-39434 
A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds 20180901, 20190510.1, 20200309.3, 20200930, 20201231, and 20210220.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-05T00:00:00.000Z
CVE-2021-39458 
Triggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user has to alternate the files of a vaild file backup. This leads of leaking the database credentials in the environment variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T11:32:36.000Z
CVE-2021-39459 
Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user to execute code on the hosting system via a module containing malicious PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-09T11:32:44.000Z
CVE-2021-39473 
Saibamen HotelManager v1.2 is vulnerable to Cross Site Scripting (XSS) due to improper sanitization of comment and contact fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-11-04T00:00:00.000Z
CVE-2021-39474 
Vulnerability in the product Docsis 3.0 UBC1319BA00 Router supported affected version 1319010201r009. The vulnerability allows an attacker with privileges and network access through the ping.cmd component to execute commands on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T11:30:14.000Z
CVE-2021-39480 
Bingrep v0.8.5 was discovered to contain a memory allocation failure which can cause a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-21T21:32:21.000Z
CVE-2021-39486 
A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T13:45:26.000Z
CVE-2021-39491 
A Cross Site Scripting (XSS) vulnerability exists in Yogesh Ojha reNgine v1.0 via the Scan Engine name file in the Scan Engine deletion confirmation modal box . .
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-24T14:24:26.000Z
CVE-2021-39496 
Eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject malicious code into `filename` param to trigger Reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T19:54:38.000Z
CVE-2021-39497 
eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveRemote() function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T19:57:08.000Z
CVE-2021-39499 
A Cross-site scripting (XSS) vulnerability in Users in Qiong ICP EyouCMS 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the `title` parameter in bind_email function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T19:59:42.000Z
CVE-2021-39500 
Eyoucms 1.5.4 is vulnerable to Directory Traversal. Due to a lack of input data sanitizaton in param tpldir, filename, type, nid an attacker can inject "../" to escape and write file to writeable directories.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T20:01:25.000Z
CVE-2021-39501 
EyouCMS 1.5.4 is vulnerable to Open Redirect. An attacker can redirect a user to a malicious url via the Logout function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T20:03:05.000Z
CVE-2021-39503 
PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, =, `,...." In WriteConfig() function, an attacker can inject php code to /include/config.cache.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T19:51:23.000Z
CVE-2021-39509 
An issue was discovered in D-Link DIR-816 DIR-816A2_FWv1.10CNB05_R1B011D88210 The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function. This can lead to command injection through shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-24T18:52:26.000Z
CVE-2021-39510 
An issue was discovered in D-Link DIR816_A1_FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function. This can lead to command injection through shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-24T18:52:28.000Z
CVE-2021-39514 
An issue was discovered in libjpeg through 2020021. An uncaught floating point exception in the function ACLosslessScan::ParseMCU() located in aclosslessscan.cpp. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:46.000Z
CVE-2021-39515 
An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function SampleInterleavedLSScan::ParseMCU() located in sampleinterleavedlsscan.cpp. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:49.000Z
CVE-2021-39516 
An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function HuffmanDecoder::Get() located in huffmandecoder.hpp. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:45.000Z
CVE-2021-39517 
An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::ReconstructUnsampled() located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:48.000Z
CVE-2021-39518 
An issue was discovered in libjpeg through 2020021. LineBuffer::FetchRegion() in linebuffer.cpp has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:48.000Z
CVE-2021-39519 
An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PullQData() located in blockbitmaprequester.cpp It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:46.000Z
CVE-2021-39520 
An issue was discovered in libjpeg through 2020021. A NULL pointer dereference exists in the function BlockBitmapRequester::PushReconstructedData() located in blockbitmaprequester.cpp. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:44.000Z
CVE-2021-39521 
An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function bit_read_BB() located in bits.c. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:47.000Z
CVE-2021-39522 
An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2len() in bits.c has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:47.000Z
CVE-2021-39523 
An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function check_POLYLINE_handles() located in decode.c. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:51.000Z
CVE-2021-39525 
An issue was discovered in libredwg through v0.10.1.3751. bit_read_fixed() in bits.c has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:28:33.000Z
CVE-2021-39527 
An issue was discovered in libredwg through v0.10.1.3751. appinfo_private() in decode.c has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:50.000Z
CVE-2021-39528 
An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:49.000Z
CVE-2021-39530 
An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2nlen() in bits.c has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:48.000Z
CVE-2021-39531 
An issue was discovered in libslax through v0.22.1. slaxLexer() in slaxlexer.c has a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:52.000Z
CVE-2021-39532 
An issue was discovered in libslax through v0.22.1. A NULL pointer dereference exists in the function slaxLexer() located in slaxlexer.c. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:51.000Z
CVE-2021-39533 
An issue was discovered in libslax through v0.22.1. slaxLexer() in slaxlexer.c has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:53.000Z
CVE-2021-39534 
An issue was discovered in libslax through v0.22.1. slaxIsCommentStart() in slaxlexer.c has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:52.000Z
CVE-2021-39535 
An issue was discovered in libxsmm through v1.16.1-93. A NULL pointer dereference exists in JIT code. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:51.000Z
CVE-2021-39536 
An issue was discovered in libxsmm through v1.16.1-93. The JIT code has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:55.000Z
CVE-2021-39537 
An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T00:00:00.000Z
CVE-2021-39538 
An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function node::ObjNode::Value() located in objnode.cpp. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:59.000Z
CVE-2021-39539 
An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function node::BDCNode::~BDCNode() located in bdcnode.cpp. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:58.000Z
CVE-2021-39540 
An issue was discovered in pdftools through 20200714. A stack-buffer-overflow exists in the function Analyze::AnalyzePages() located in analyze.cpp. It allows an attacker to cause code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:56.000Z
CVE-2021-39541 
An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Analyze::AnalyzeXref() located in analyze.cpp. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:56.000Z
CVE-2021-39542 
An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Font::Size() located in font.cpp. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:56.000Z
CVE-2021-39543 
An issue was discovered in pdftools through 20200714. A NULL pointer dereference exists in the function Analyze::AnalyzeRoot() located in analyze.cpp. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:56.000Z
CVE-2021-39544 
An issue was discovered in sela through 20200412. file::WavFile::writeToFile() in wav_file.c has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:00.000Z
CVE-2021-39545 
An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function rice::RiceDecoder::process() located in rice_decoder.c. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:59.000Z
CVE-2021-39546 
An issue was discovered in sela through 20200412. rice::RiceDecoder::process() in rice_decoder.cpp has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:02.000Z
CVE-2021-39547 
An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function lpc::SampleGenerator::process() located in sample_generator.cpp. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:02.000Z
CVE-2021-39548 
An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function frame::FrameDecoder::process() located in frame_decoder.c. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:59.000Z
CVE-2021-39549 
An issue was discovered in sela through 20200412. A NULL pointer dereference exists in the function file::WavFile::WavFile() located in wav_file.c. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:58.000Z
CVE-2021-39550 
An issue was discovered in sela through 20200412. file::SelaFile::readFromFile() in sela_file.cpp has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:56.000Z
CVE-2021-39551 
An issue was discovered in sela through 20200412. file::SelaFile::readFromFile() in sela_file.c has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:29:04.000Z
CVE-2021-39552 
An issue was discovered in sela through 20200412. file::WavFile::readFromFile() in wav_file.c has a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:26:59.000Z
CVE-2021-39553 
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function grealloc() located in gmem.cc. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:06.000Z
CVE-2021-39554 
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function Lexer::Lexer() located in Lexer.cc. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:06.000Z
CVE-2021-39555 
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function InfoOutputDev::type3D0() located in InfoOutputDev.cc. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:06.000Z
CVE-2021-39556 
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function InfoOutputDev::type3D1() located in InfoOutputDev.cc. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:06.000Z
CVE-2021-39557 
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function copyString() located in gmem.cc. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:03.000Z
CVE-2021-39558 
An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function VectorGraphicOutputDev::drawGeneralImage() located in VectorGraphicOutputDev.cc. It allows an attacker to cause code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:12.000Z
CVE-2021-39559 
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function GString::~GString() located in GString.cc. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:05.000Z
CVE-2021-39561 
An issue was discovered in swftools through 20200710. A stack-buffer-overflow exists in the function Gfx::opSetFillColorN() located in Gfx.cc. It allows an attacker to cause code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:03.000Z
CVE-2021-39562 
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function FileStream::makeSubStream() located in Stream.cc. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:03.000Z
CVE-2021-39563 
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_DumpActions() located in swfaction.c. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:11.000Z
CVE-2021-39564 
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swf_DumpActions() located in swfaction.c. It allows an attacker to cause code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:14.000Z
CVE-2021-39569 
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function OpAdvance() located in swfaction.c. It allows an attacker to cause code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:08.000Z
CVE-2021-39574 
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function pool_read() located in pool.c. It allows an attacker to cause code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:10.000Z
CVE-2021-39575 
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function dump_method() located in abc.c. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:02.000Z
CVE-2021-39577 
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function main() located in swfdump.c. It allows an attacker to cause code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:07.000Z
CVE-2021-39579 
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function string_hash() located in q.c. It allows an attacker to cause code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:11.000Z
CVE-2021-39582 
An issue was discovered in swftools through 20200710. A heap-buffer-overflow exists in the function swf_GetPlaceObject() located in swfobject.c. It allows an attacker to cause code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:15.000Z
CVE-2021-39583 
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function pool_lookup_string2() located in pool.c. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:09.000Z
CVE-2021-39584 
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function namespace_set_hash() located in pool.c. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:06.000Z
CVE-2021-39585 
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function traits_dump() located in abc.c. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:16.000Z
CVE-2021-39587 
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_DumpABC() located in abc.c. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:11.000Z
CVE-2021-39588 
An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function swf_ReadABC() located in abc.c. It allows an attacker to cause Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-20T15:27:16.000Z