rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-46255 
eyouCMS V1.5.5-UTF8-SP3_1 suffers from Arbitrary file deletion due to insufficient filtering of the parameter filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-14T01:37:02.000Z
CVE-2021-46262 
Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the PPPoE module. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-15T19:08:28.000Z
CVE-2021-46263 
Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wifiTime module. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-15T19:08:29.000Z
CVE-2021-46264 
Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the onlineList module. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-15T19:08:29.000Z
CVE-2021-46265 
Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wanBasicCfg module. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-15T19:08:31.000Z
CVE-2021-46270 
JFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin user is able to list all available repository names due to insufficient permission validation.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: JFrog
product: JFrog Artifactory
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 2.7
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2022-03-02T21:20:12.000Z
CVE-2021-46279 Session Fixation and Insufficient Session Expiration
Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Problem types: cwe_id: CWE-384
description: CWE-384 Session Fixation
cwe_id: CWE-613
description: CWE-613 Insufficient Session Expiration
Affected products: vendor: Lanner Inc
product: IAC-AST2500A
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 5.8
baseSeverity: MEDIUM
Credits: lang: en
value: Andrea Palanca of Nozomi Networks found this bug during a security research activity.
Published: 2022-10-24T00:00:00.000Z
CVE-2021-46283 
nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-11T21:19:38.000Z
CVE-2021-46304 
A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions), CP-8000 MASTER MODULE WITH I/O -40/+70°C (All versions), CP-8021 MASTER MODULE (All versions), CP-8022 MASTER MODULE WITH GPRS (All versions). The component allows to activate a web server module which provides unauthenticated access to its web pages. This could allow an attacker to retrieve debug-level information from the component such as internal network topology or connected systems.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: Siemens
product: CP-8000 MASTER MODULE WITH I/O -25/+70°C
vendor: Siemens
product: CP-8000 MASTER MODULE WITH I/O -40/+70°C
vendor: Siemens
product: CP-8021 MASTER MODULE
vendor: Siemens
product: CP-8022 MASTER MODULE WITH GPRS
Published: 2022-08-10T11:17:23.000Z
CVE-2021-46307 
An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-21T15:59:56.000Z
CVE-2021-46308 
An SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0 via the sid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-21T16:17:32.000Z
CVE-2021-46309 
An SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0 via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-21T16:28:02.000Z
CVE-2021-46310 
An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2021-46311 
A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_destroy_routes () at scenegraph/vrml_route.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-21T20:32:59.000Z
CVE-2021-46312 
An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-08-22T00:00:00.000Z
CVE-2021-46313 
The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function __memmove_avx_unaligned_erms (). This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-21T20:33:00.000Z
CVE-2021-46314 
A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable domain name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-17T20:59:18.000Z
CVE-2021-46315 
Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicoius users can use this vulnerability to use "\ " or backticks in the shell metacharacters in the ssid0 or ssid1 parameters to cause arbitrary command execution. Since CVE-2019-17510 vulnerability has not been patched and improved www/hnap1/control/setwizardconfig.php, can also use line breaks and backquotes to bypass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-17T21:15:51.000Z
CVE-2021-46319 
Remote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users can use this vulnerability to use "\ " or backticks to bypass the shell metacharacters in the ssid0 or ssid1 parameters to execute arbitrary commands.This vulnerability is due to the fact that CVE-2019-17509 is not fully patched and can be bypassed by using line breaks or backticks on its basis.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-17T21:27:57.000Z
CVE-2021-46320 
In OpenZeppelin <=v4.4.0, initializer functions that are invoked separate from contract creation (the most prominent example being minimal proxies) may be reentered if they make an untrusted non-view external call. Once an initializer has finished running it can never be re-executed. However, an exception put in place to support multiple inheritance made reentrancy possible, breaking the expectation that there is a single execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T11:35:52.000Z
CVE-2021-46321 
Tenda AC Series Router AC11_V02.03.01.104_CN was discovered to contain a stack buffer overflow in the wifiBasicCfg module. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-15T19:08:32.000Z
CVE-2021-46322 
Duktape v2.99.99 was discovered to contain a SEGV vulnerability via the component duk_push_tval in duktape/duk_api_stack.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T00:00:00.000Z
CVE-2021-46323 
Espruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in jsiGetDeviceFromClass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:17.000Z
CVE-2021-46324 
Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:18.000Z
CVE-2021-46325 
Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:19.000Z
CVE-2021-46326 
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:21.000Z
CVE-2021-46327 
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_prototype_sort.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:22.000Z
CVE-2021-46328 
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:22.000Z
CVE-2021-46329 
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:22.000Z
CVE-2021-46330 
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fx_ArrayBuffer_prototype_concat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:23.000Z
CVE-2021-46331 
Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:24.000Z
CVE-2021-46332 
Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:24.000Z
CVE-2021-46333 
Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component __asan_memmove.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:25.000Z
CVE-2021-46334 
Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:29.000Z
CVE-2021-46335 
Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototype_hasInstance.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:26.000Z
CVE-2021-46336 
There is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at /parser/js/js-parser-expr.c(parser_parse_class_body) in JerryScript 3.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:27.000Z
CVE-2021-46337 
There is an Assertion 'page_p != NULL' failed at /parser/js/js-parser-mem.c(parser_list_get) in JerryScript 3.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:30.000Z
CVE-2021-46338 
There is an Assertion 'ecma_is_lexical_environment (object_p)' failed at /base/ecma-helpers.c(ecma_get_lex_env_type) in JerryScript 3.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:31.000Z
CVE-2021-46339 
There is an Assertion 'lit_is_valid_cesu8_string (string_p, string_size)' failed at /base/ecma-helpers-string.c(ecma_new_ecma_string_from_utf8) in JerryScript 3.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:32.000Z
CVE-2021-46340 
There is an Assertion 'context_p->stack_top_uint8 == SCAN_STACK_TRY_STATEMENT || context_p->stack_top_uint8 == SCAN_STACK_CATCH_STATEMENT' failed at /parser/js/js-scanner.c(scanner_scan_statement_end) in JerryScript 3.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:36.000Z
CVE-2021-46342 
There is an Assertion 'ecma_is_lexical_environment (obj_p) || !ecma_op_object_is_fast_array (obj_p)' failed at /jerry-core/ecma/base/ecma-helpers.c in JerryScript 3.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:36.000Z
CVE-2021-46343 
There is an Assertion 'context_p->token.type == LEXER_LITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:37.000Z
CVE-2021-46344 
There is an Assertion 'flags & PARSER_PATTERN_HAS_REST_ELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:38.000Z
CVE-2021-46345 
There is an Assertion 'cesu8_cursor_p == cesu8_end_p' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:38.000Z
CVE-2021-46346 
There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.c(ecma_builtin_date_prototype_dispatch_set):421 in JerryScript 3.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:39.000Z
CVE-2021-46347 
There is an Assertion 'ecma_object_check_class_name_is_object (obj_p)' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:40.000Z
CVE-2021-46348 
There is an Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at /jerry-core/ecma/base/ecma-literal-storage.c in JerryScript 3.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:40.000Z
CVE-2021-46349 
There is an Assertion 'type == ECMA_OBJECT_TYPE_GENERAL || type == ECMA_OBJECT_TYPE_PROXY' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:41.000Z
CVE-2021-46350 
There is an Assertion 'ecma_is_value_object (value)' failed at jerryscript/jerry-core/ecma/base/ecma-helpers-value.c in JerryScript 3.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:41.000Z
CVE-2021-46351 
There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.c(ecma_builtin_date_prototype_dispatch_set):421 in JerryScript 3.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-20T21:14:42.000Z
CVE-2021-46353 
An information disclosure in web interface in D-Link DIR-X1860 before 1.03 RevA1 allows a remote unauthenticated attacker to send a specially crafted HTTP request and gain knowledge of different absolute paths that are being used by the web application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T21:13:56.000Z
CVE-2021-46354 
Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerability in the parameter "Addr" in cmd site. The ability to send requests to other systems can allow the vulnerable server to filtrate the real IP of the web server or increase the attack surface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-09T13:10:00.000Z
CVE-2021-46355 
OCS Inventory 2.9.1 is affected by Cross Site Scripting (XSS). To exploit the vulnerability, the attacker needs to manipulate the name of some device on your computer, such as a printer, replacing the device name with some malicious code that allows the execution of Stored Cross-site Scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-11T12:39:57.000Z
CVE-2021-46359 
FISCO-BCOS release-3.0.0-rc2 contains a denial of service vulnerability. Some transactions may not be committed successfully, and malicious users may use this to achieve double-spending attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-07T12:47:10.000Z
CVE-2021-46360 
Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrary code via uploading a PHP shell through /adminzone/index.php?page=admin-commandr.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-09T00:00:00.000Z
CVE-2021-46361 
An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary code via a crafted FreeMarker payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-11T20:08:41.000Z
CVE-2021-46362 
A Server-Side Template Injection (SSTI) vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.3 and below allows attackers to execute arbitrary code via a crafted payload entered into the fullname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-11T20:08:42.000Z
CVE-2021-46363 
An issue in the Export function of Magnolia v6.2.3 and below allows attackers to perform Formula Injection attacks via crafted CSV/XLS files. These formulas may result in arbitrary code execution on a victim's computer when opening the exported files with Microsoft Excel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-11T20:08:42.000Z
CVE-2021-46364 
A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-11T20:08:44.000Z
CVE-2021-46365 
An issue in the Export function of Magnolia v6.2.3 and below allows attackers to execute XML External Entity attacks via a crafted XLF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-11T20:08:45.000Z
CVE-2021-46366 
An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery (CSRF) in order to brute force and exfiltrate users' credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-11T20:08:50.000Z
CVE-2021-46367 
RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel. An authenticated attacker can upload a PHP file and bypass the .htacess configuration to deny execution of .php files in media and files directory by default.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T12:00:39.000Z
CVE-2021-46368 
TRIGONE Remote System Monitor 3.61 is vulnerable to an unquoted path service allowing local users to launch processes with elevated privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-17T11:23:47.000Z
CVE-2021-46371 
antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-14T15:22:00.000Z
CVE-2021-46372 
Scoold 1.47.2 is a Q&A/knowledge base platform written in Java. When writing a Q&A, the markdown editor is vulnerable to a XSS attack when using uppercase letters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-18T12:40:26.000Z
CVE-2021-46377 
There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.php#viewUser
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T17:36:06.000Z
CVE-2021-46378 
DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote configuration download.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T14:33:52.000Z
CVE-2021-46379 
DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL redirection to untrusted site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T15:02:26.000Z
CVE-2021-46381 
Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd] and [/etc/shadow].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T15:24:50.000Z
CVE-2021-46382 
Unauthenticated cross-site scripting (XSS) in Netgear WAC120 AC Access Point may lead to mulitple attacks like session hijacking even clipboard hijacking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T15:32:15.000Z
CVE-2021-46383 
https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsoft.mdiy.action.web.DictAction#list. The attack vector is: 0 or sleep(3). ¶¶ MCMS has a sql injection vulnerability through which attacker can get sensitive information from the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-26T16:14:56.000Z
CVE-2021-46384 
https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: RCE. The impact is: execute arbitrary code (remote). The attack vector is: ${"freemarker.template.utility.Execute"?new()("calc")}. ¶¶ MCMS has a pre-auth RCE vulnerability through which allows unauthenticated attacker with network access via http to compromise MCMS. Successful attacks of this vulnerability can result in takeover of MCMS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T21:42:13.000Z