rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-41848 
An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It mishandles software updates such that local third-party apps can provide a spoofed software update file that contains an arbitrary shell script and arbitrary ARM binary, where both will be executed as the root user with an SELinux domain named osi. To exploit this vulnerability, a local third-party app needs to have write access to external storage to write the spoofed update at the expected path. The vulnerable system binary (i.e., /system/bin/osi_bin) does not perform any authentication of the update file beyond ensuring that it is encrypted with an AES key (that is hard-coded in the vulnerable system binary). Processes executing with the osi SELinux domain can programmatically perform the following actions: install apps, grant runtime permissions to apps (including permissions with protection levels of dangerous and development), access extensive Personally Identifiable Information (PII) using the programmatically grant permissions, uninstall apps, set the default launcher app to a malicious launcher app that spoofs other apps, set a network proxy to intercept network traffic, unload kernel modules, set the default keyboard to a keyboard that has keylogging functionality, examine notification contents, send text messages, and more. The spoofed update can optionally contain an arbitrary ARM binary that will be locally stored in internal storage and executed at system startup to achieve persistent code execution as the root user with the osi SELinux domain. This ARM binary will continue to execute at startup even if the app that provided the spoofed update is uninstalled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-11T22:17:42.000Z
CVE-2021-41849 
An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It sends the following Personally Identifiable Information (PII) in plaintext using HTTP to servers located in China: user's list of installed apps and device International Mobile Equipment Identity (IMEI). This PII is transmitted to log.skyroam.com.cn using HTTP, independent of whether the user uses the Simo software.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-11T22:17:42.000Z
CVE-2021-41850 
An issue was discovered in Luna Simo PPR1.180610.011/202001031830. A pre-installed app with a package name of com.skyroam.silverhelper writes three IMEI values to system properties at system startup. The system property values can be obtained via getprop by all third-party applications co-located on the device, even those with no permissions granted, exposing the IMEI values to processes without enforcing any access control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-11T22:17:28.000Z
CVE-2021-41861 
The Telegram application 7.5.0 through 7.8.0 for Android does not properly implement image self-destruction, a different vulnerability than CVE-2019-16248. After approximately two to four uses of the self-destruct feature, there is a misleading UI indication that an image was deleted (on both the sender and recipient sides). The images are still present in the /Storage/Emulated/0/Telegram/Telegram Image/ directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T02:58:42.000Z
CVE-2021-41862 
AviatorScript through 5.2.7 allows code execution via an expression that is encoded with Byte Code Engineering Library (BCEL).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-01T23:21:13.000Z
CVE-2021-41864 
prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-01T23:46:17.000Z
CVE-2021-41865 
HashiCorp Nomad and Nomad Enterprise 1.1.1 through 1.1.5 allowed authenticated users with job submission capabilities to cause denial of service by submitting incomplete job specifications with a Consul mesh gateway and host networking mode. Fixed in 1.1.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-07T13:48:36.000Z
CVE-2021-41866 
MyBB before 1.8.28 allows stored XSS because the displayed Template Name value in the Admin CP's theme management is not escaped properly.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-26T21:25:47.000Z
CVE-2021-41867 
An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T13:48:07.000Z
CVE-2021-41868 
OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T13:45:49.000Z
CVE-2021-41869 
SuiteCRM 7.10.x before 7.10.33 and 7.11.x before 7.11.22 is vulnerable to privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T06:13:28.000Z
CVE-2021-41870 
An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can bypass a client-side file-type check and upload arbitrary .php files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-15T05:48:27.000Z
CVE-2021-41871 
An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place a stored XSS payload. This is executed if an administrator views the System Event Log.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-15T05:49:12.000Z
CVE-2021-41872 
Skyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability, which can be exploited by attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-27T13:00:13.000Z
CVE-2021-41873 
Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vulnerability exists in the Penguin Aurora Box. An attacker can use the vulnerability to gain unauthorized access to a specific link to remotely control the TV.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-26T11:28:39.000Z
CVE-2021-41878 
A reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console and it is possible to insert a vulnerable malicious button.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T11:58:51.000Z
CVE-2021-41916 
A Cross-Site Request Forgery (CSRF) vulnerability in webTareas version 2.4 and earlier allows a remote attacker to create a new administrative profile and add a new user to the new profile. without the victim's knowledge, by enticing an authenticated admin user to visit an attacker's web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-08T15:31:51.000Z
CVE-2021-41917 
webTareas version 2.4 and earlier allows an authenticated user to store arbitrary web script or HTML by creating or editing a client name in the clients section, due to incorrect sanitization of user-supplied data and achieve a Stored Cross-Site Scripting attack against the platform users and administrators. The affected endpoint is /clients/editclient.php, on the HTTP POST cn parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-08T15:33:33.000Z
CVE-2021-41918 
webTareas version 2.4 and earlier allows an authenticated user to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Reflected Cross-Site Scripting attack against the platform users and administrators. The issue affects every endpoint on the application because it is related on how each URL is echoed back on every response page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-08T15:35:03.000Z
CVE-2021-41919 
webTareas version 2.4 and earlier allows an authenticated user to arbitrarily upload potentially dangerous files without restrictions. This is working by adding or replacing a personal profile picture. The affected endpoint is /includes/upload.php on the HTTP POST data. This allows an attacker to exploit the platform by injecting code or malware and, under certain conditions, to execute code on remote user browsers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-08T15:36:45.000Z
CVE-2021-41920 
webTareas version 2.4 and earlier allows an unauthenticated user to perform Time and Boolean-based blind SQL Injection on the endpoint /includes/library.php, via the sor_cible, sor_champs, and sor_ordre HTTP POST parameters. This allows an attacker to access all the data in the database and obtain access to the webTareas application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-08T15:37:54.000Z
CVE-2021-41921 
novel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can lead to server attacks and arbitrary code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-28T12:16:26.000Z
CVE-2021-41924 
Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-21T14:18:15.000Z
CVE-2021-41928 
SQL injection in Sourcecodester Try My Recipe (Recipe Sharing Website - CMS) 1.0 by oretnom23, allows attackers to execute arbitrary code via the rid parameter to the view_recipe page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T18:45:58.000Z
CVE-2021-41929 
Cross Site Scripting (XSS) in Sourcecodester The Electric Billing Management System 1.0 by oretnom23, allows attackers to execute arbitrary code via the about page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T18:00:54.000Z
CVE-2021-41930 
Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, allows attackers to execute arbitrary code via the lid parameter to /scheduler/addSchedule.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T18:06:26.000Z
CVE-2021-41931 
The Company's Recruitment Management System in id=2 of the parameter from view_vacancy app on-page appears to be vulnerable to SQL injection. The payloads 19424269' or '1309'='1309 and 39476597' or '2917'='2923 were each submitted in the id parameter. These two requests resulted in different responses, indicating that the input is being incorporated into a SQL query in an unsafe way.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-17T11:33:02.000Z
CVE-2021-41932 
A blind SQL injection vulnerability in search form in TeamMate+ Audit version 28.0.19.0 allows any authenticated user to create malicious SQL injections, which can result in complete database compromise, gaining information about other users, unauthorized access to audit data etc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-06T14:33:35.000Z
CVE-2021-41938 
An issue was discovered in ShopXO CMS 2.2.0. After entering the management page, there is an arbitrary file upload vulnerability in three locations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-19T14:01:55.000Z
CVE-2021-41942 
The Magic CMS MSVOD v10 video system has a SQL injection vulnerability. Attackers can use vulnerabilities to obtain sensitive information in the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-29T11:05:52.000Z
CVE-2021-41943 
Logrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action -> Create a new Contextualize Action -> Inject your HTML tag in the name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-12-12T00:00:00.000Z
CVE-2021-41945 
Encode OSS httpx < 0.23.0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-28T13:22:10.000Z
CVE-2021-41946 
In FiberHome VDSL2 Modem HG150-Ub_V3.0, a stored cross-site scripting (XSS) vulnerability in Parental Control --> Access Time Restriction --> Username field, a user cannot delete the rule due to the XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-18T10:05:35.000Z
CVE-2021-41947 
A SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-08T12:40:28.000Z
CVE-2021-41948 
A cross-site scripting (XSS) vulnerability exists in the "contact us" plugin for Subrion CMS <= 4.2.1 version via "List of subjects".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-29T13:41:22.000Z
CVE-2021-41950 
A directory traversal issue in ResourceSpace 9.6 before 9.6 rev 18277 allows remote unauthenticated attackers to delete arbitrary files on the ResourceSpace server via the provider and variant parameters in pages/ajax/tiles.php. Attackers can delete configuration or source code files, causing the application to become unavailable to all users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-15T15:52:56.000Z
CVE-2021-41951 
ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpress_sso/pages/index.php via the wordpress_user parameter. If an attacker is able to persuade a victim to visit a crafted URL, malicious JavaScript content may be executed within the context of the victim's browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-15T15:27:22.000Z
CVE-2021-41952 
Zenario CMS 9.0.54156 is vulnerable to Cross Site Scripting (XSS) via upload file to *.SVG. An attacker can send malicious files to victims and steals victim's cookie leads to account takeover. The person viewing the image of a contact can be victim of XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-14T14:53:55.000Z
CVE-2021-41959 
JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after RegExp, which causes a memory leak.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-03T10:48:22.000Z
CVE-2021-41962 
Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Owner fullname parameter in a Send Service Request in vehicle_service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-16T17:43:05.000Z
CVE-2021-41965 
A SQL injection vulnerability exists in ChurchCRM version 2.0.0 to 4.4.5 that allows an authenticated attacker to issue an arbitrary SQL command to the database through the unsanitized EN_tyid, theID and EID fields used when an Edit action on an existing record is being performed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-15T10:37:28.000Z
CVE-2021-41971 Possible SQL Injection when template processing is enabled
Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL injection when a malicious authenticated user sends an http request with a custom URL.
Problem types: cwe_id: CWE-89
description: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected products: vendor: Apache Software Foundation
product: Apache Superset
Credits: lang: en
value: Apache Superset would like to thank Kevin Kusnardi for reporting this issue
Published: 2021-10-18T14:30:14.000Z
CVE-2021-41972 Credentials leak
Apache Superset up to and including 1.3.1 allowed for database connections password leak for authenticated users. This information could be accessed in a non-trivial way.
Problem types: cwe_id: CWE-522
description: CWE-522 Insufficiently Protected Credentials
Affected products: vendor: Apache Software Foundation
product: Apache Superset
Credits: lang: en
value: Apache Superset team would like to thank Ke Zhu for reporting this issue
Published: 2021-11-12T18:55:13.000Z
CVE-2021-41973 Apache MINA HTTP listener DOS
In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater.
Problem types: cwe_id: CWE-835
description: CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')
Affected products: vendor: Apache Software Foundation
product: Apache MINA
Published: 2021-11-01T08:35:09.000Z
CVE-2021-41974 Tad Book3 - Improper Authorization
Tad Book3 editing book page does not perform identity verification. Remote attackers can use the vulnerability to view and modify arbitrary content of books without permission.
Problem types: cwe_id: CWE-285
description: CWE-285 Improper Authorization
Affected products: vendor: Tad
product: Tad Book3
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 9.1
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
version: 3.1
Published: 2021-10-08T15:15:41.083Z
CVE-2021-41975 Tad TadTools - Improper Authorization
TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in.
Problem types: cwe_id: CWE-285
description: CWE-285 Improper Authorization
Affected products: vendor: Tad
product: TadTools
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2021-10-08T15:15:42.544Z
CVE-2021-41976 Tad Uploader - Improper Authorization
Tad Uploader edit book list function is vulnerable to authorization bypass, thus remote attackers can use the function to amend the folder names in the book list without logging in.
Problem types: cwe_id: CWE-285
description: CWE-285 Improper Authorization
Affected products: vendor: Tad
product: Uploader
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
version: 3.1
Published: 2021-10-08T15:15:44.085Z
CVE-2021-41987 
In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution. The attacker must know the scep_server_name value. This affects RouterOS 6.46.8, 6.47.9, and 6.47.10.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-16T14:44:58.000Z
CVE-2021-41988 
Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-26T00:00:00.000Z
CVE-2021-41989 
Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-26T00:00:00.000Z
CVE-2021-41990 
The gmp plugin in strongSwan before 5.9.4 has a remote integer overflow via a crafted certificate with an RSASSA-PSS signature. For example, this can be triggered by an unrelated self-signed CA certificate sent by an initiator. Remote code execution cannot occur.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-18T13:44:50.000Z
CVE-2021-41991 
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator, but this is not done correctly. Remote code execution might be a slight possibility.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-18T13:44:25.000Z
CVE-2021-41992 PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass
A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.
Problem types: cwe_id: CWE-310
description: CWE-310 Cryptographic Issues
cwe_id: CWE-288
description: CWE-288 Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: Ping Identity
product: PingID Windows Login
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
version: 3.1
Credits: lang: en
value: Ping Identity credits The Commonwealth Bank of Australia for the discovery of this vulnerability.
Published: 2022-04-30T21:15:19.000Z
CVE-2021-41993 PingID Android mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks
A misconfiguration of RSA in PingID Android app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.
Problem types: cwe_id: CWE-310
description: CWE-310 Cryptographic Issues
Affected products: vendor: Ping Identity
product: PingID Mobile Application
CVSS v3.1: attackComplexity: HIGH
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 6.6
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
version: 3.1
Credits: lang: en
value: Ping Identity credits The Commonwealth Bank of Australia for the discovery of this vulnerability.
Published: 2022-04-30T21:15:21.000Z