rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-40498 
A vulnerability has been identified in SAP SuccessFactors Mobile Application for Android - versions older than 2108, which allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service, which can lead to denial of service. The vulnerability is related to Android implementation methods that are widely used across Android mobile applications, and such methods are embedded into the SAP SuccessFactors mobile application. These Android methods begin executing once the user accesses their profile on the mobile application. While executing, it can also pick up the activities from other Android applications that are running in the background of the users device and are using the same types of methods in the application. Such vulnerability can also lead to phishing attacks that can be used for staging other types of attacks.
Problem types: description: Denial of Service
Affected products: vendor: SAP SE
product: SAP SuccessFactors Mobile Application (for Android devices)
Published: 2021-10-12T14:04:14.000Z
CVE-2021-40499 
Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
Problem types: description: Code Injection
Affected products: vendor: SAP SE
product: SAP NetWeaver Application Server for ABAP (SAP Cloud Print Manager and SAPSprint)
Published: 2021-10-12T14:04:00.000Z
CVE-2021-40500 
SAP BusinessObjects Business Intelligence Platform (Crystal Reports) - versions 420, 430, allows an unauthenticated attacker to exploit missing XML validations at endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can enable the attacker to retrieve arbitrary files from the server.
Problem types: cwe_id: CWE-611
description: CWE-611
Affected products: vendor: SAP SE
product: SAP BusinessObjects Business Intelligence Platform (Crystal Reports)
Published: 2021-10-12T14:04:23.000Z
CVE-2021-40501 
SAP ABAP Platform Kernel - versions 7.77, 7.81, 7.85, 7.86, does not perform necessary authorization checks for an authenticated business user, resulting in escalation of privileges. That means this business user is able to read and modify data beyond the vulnerable system. However, the attacker can neither significantly reduce the performance of the system nor stop the system.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: SAP SE
product: SAP ABAP Platform Kernel
Published: 2021-11-10T15:22:15.000Z
CVE-2021-40502 
SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. Authenticated attackers will be able to access and edit data from b2b units they do not belong to.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: SAP SE
product: SAP Commerce
Published: 2021-11-10T15:24:42.000Z
CVE-2021-40503 
An information disclosure vulnerability exists in SAP GUI for Windows - versions < 7.60 PL13, 7.70 PL4, which allows an attacker with sufficient privileges on the local client-side PC to obtain an equivalent of the user’s password. With this highly sensitive data leaked, the attacker would be able to logon to the backend system the SAP GUI for Windows was connected to and launch further attacks depending on the authorizations of the user.
Problem types: cwe_id: CWE-522
description: CWE-522
Affected products: vendor: SAP SE
product: SAP GUI for Windows
Published: 2021-11-10T15:27:28.000Z
CVE-2021-40504 
A certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, contains transport authorizations, which exceed expected display only permissions.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: SAP SE
product: SAP NetWeaver AS for ABAP and ABAP Platform
Published: 2021-11-10T15:29:16.000Z
CVE-2021-40506 
An issue was discovered in the ALU unit of the OR1200 (aka OpenRISC 1200) processor 2011-09-10 through 2015-11-11. The overflow flag is not being updated for the msb and mac instructions, which results in an incorrect value in the overflow flag. Any software that relies on this flag may experience corruption in execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-18T00:00:00.000Z
CVE-2021-40507 
An issue was discovered in the ALU unit of the OR1200 (aka OpenRISC 1200) processor 2011-09-10 through 2015-11-11. The overflow flag is not being updated correctly for the subtract instruction, which results in an incorrect value in the overflow flag. Any software that relies on this flag may experience corruption in execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-04-18T00:00:00.000Z
CVE-2021-40509 
ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-04T19:20:00.000Z
CVE-2021-40510 
XML eXternal Entity (XXE) in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-21T16:10:33.000Z
CVE-2021-40511 
OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion (aka “billion laughs”) attack allowing denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-21T16:09:35.000Z
CVE-2021-40516 
WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-05T17:14:24.000Z
CVE-2021-40517 
Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting. XSS Payload is placed in the name column of the updates table using database access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T16:01:55.000Z
CVE-2021-40518 
Airangel HSMX Gateway devices through 5.2.04 allow CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T15:52:55.000Z
CVE-2021-40519 
Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T15:57:09.000Z
CVE-2021-40520 
Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T16:06:12.000Z
CVE-2021-40521 
Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T15:55:23.000Z
CVE-2021-40523 
In Contiki 3.0, Telnet option negotiation is mishandled. During negotiation between a server and a client, the server may fail to give the WILL/WONT or DO/DONT response for DO and WILL commands because of improper handling of exception condition, which leads to property violations and denial of service. Specifically, a server sometimes sends no response, because a fixed buffer space is available for all responses and that space may have been exhausted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-05T18:26:43.000Z
CVE-2021-40524 
In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. (Versions 1.0.23 through 1.0.49 are affected.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-05T18:26:26.000Z
CVE-2021-40525 Sieve file storage vulnerable to path traversal attacks
Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path traversal, allowing reading and writing any file. This vulnerability had been patched in Apache James 3.6.1 and higher. We recommend the upgrade. Distributed and Cassandra based products are also not impacted.
Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Apache Software Foundation
product: Apache James
Credits: lang: en
value: The Apache James PMC would like to thanks Benoit TELLIER for the report.
Published: 2022-01-04T08:55:25.000Z
CVE-2021-40526 
Incorrect calculation of buffer size vulnerability in Peleton TTR01 up to and including PTV55G allows a remote attacker to trigger a Denial of Service attack through the GymKit daemon process by exploiting a heap overflow in the network server handling the Apple GymKit communication. This can lead to an Apple MFI device not being able to authenticate with the Peleton Bike
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.8
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
version: 3.1
Credits: lang: en
value: Mark Bereza from McAfee Enterprise ATR
Published: 2021-10-25T10:41:02.000Z
CVE-2021-40527 
Exposure of senstive information to an unauthorised actor in the "com.onepeloton.erlich" mobile application up to and including version 1.7.22 allows a remote attacker to access developer files stored in an AWS S3 bucket, by reading credentials stored in plain text within the mobile application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 8.6
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
version: 3.1
Credits: lang: en
value: Sam Quinn from McAfee Enterprise ATR
Published: 2021-10-25T10:40:53.000Z
CVE-2021-40528 
The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-06T00:00:00.000Z
CVE-2021-40529 
The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-06T18:45:08.000Z
CVE-2021-40530 
The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-06T18:44:47.000Z
CVE-2021-40531 
Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-06T20:17:01.000Z
CVE-2021-40532 
Telegram Web K Alpha before 0.7.2 mishandles the characters in a document extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-06T20:23:58.000Z
CVE-2021-40537 
Server Side Request Forgery (SSRF) vulnerability exists in owncloud/user_ldap < 0.15.4 in the settings of the user_ldap app. Administration role is necessary for exploitation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-08T17:26:56.000Z
CVE-2021-40539 
Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T16:06:58.000Z
CVE-2021-40540 
ulfius_uri_logger in Ulfius HTTP Framework before 2.7.4 omits con_info initialization and a con_info->request NULL check for certain malformed HTTP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T01:50:51.000Z
CVE-2021-40541 
PHPFusion 9.03.110 is affected by cross-site scripting (XSS) in the preg patterns filter html tag without "//" in descript() function An authenticated user can trigger XSS by appending "//" in the end of text.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-11T13:16:45.000Z
CVE-2021-40542 
Opensis-Classic Version 8.0 is affected by cross-site scripting (XSS). An unauthenticated user can inject and execute JavaScript code through the link_url parameter in Ajax_url_encode.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-11T12:44:52.000Z
CVE-2021-40543 
Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $_GET['usrid'] and $_GET['prof_id'] in the PasswordCheck.php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-11T12:19:19.000Z
CVE-2021-40546 
Tenda AC6 US_AC6V4.0RTL_V02.03.01.26_cn.bin allows attackers (who have the administrator password) to cause a denial of service (device crash) via a long string in the wifiPwd_5G parameter to /goform/setWifi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-09-05T00:00:00.000Z
CVE-2021-40553 
piwigo 11.5.0 is affected by a remote code execution (RCE) vulnerability in the LocalFiles Editor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-28T16:22:23.000Z
CVE-2021-40555 
Cross site scripting (XSS) vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via description field on the new page creation form.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-16T00:00:00.000Z
CVE-2021-40556 
A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vulnerability is caused by the strcat function called by "caupload" input handle function allowing the user to enter 0xFFFF bytes into the stack. This vulnerability allows an attacker to execute commands remotely. The vulnerability requires authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-06T00:00:00.000Z
CVE-2021-40559 
A null pointer deference vulnerability exists in gpac through 1.0.1 via the naludmx_parse_nal_avc function in reframe_nalu, which allows a denail of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-12T00:00:00.000Z
CVE-2021-40562 
A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmx_enqueue_or_dispatch function in reframe_nalu.c, which causes a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-12T00:00:00.000Z
CVE-2021-40563 
A Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via the naludmx_create_avc_decoder_config function in reframe_nalu.c when using mp4box, which causes a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-12T00:00:00.000Z
CVE-2021-40564 
A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avc_parse_slice function in av_parsers.c when using mp4box, which causes a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-12T00:00:00.000Z
CVE-2021-40565 
A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gf_avc_parse_nalu function in av_parsers.c when using mp4box, which causes a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-12T00:00:00.000Z
CVE-2021-40566 
A Segmentation fault casued by heap use after free vulnerability exists in Gpac through 1.0.1 via the mpgviddmx_process function in reframe_mpgvid.c when using mp4box, which causes a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-12T00:00:00.000Z
CVE-2021-40567 
Segmentation fault vulnerability exists in Gpac through 1.0.1 via the gf_odf_size_descriptor function in desc_private.c when using mp4box, which causes a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-13T00:00:00.000Z
CVE-2021-40568 
A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svc_parse_slice function in av_parsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-13T00:00:00.000Z
CVE-2021-40569 
The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the iloc_entry_del funciton in box_code_meta.c, which allows attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-13T00:00:00.000Z
CVE-2021-40570 
The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc_compute_poc function in av_parsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-13T00:00:00.000Z
CVE-2021-40571 
The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in box_code_apple.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-13T00:00:00.000Z
CVE-2021-40572 
The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx_finalize function in reframe_av1.c, which allows attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-13T00:00:00.000Z
CVE-2021-40573 
The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_list_del function in list.c, which allows attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-13T18:05:25.000Z
CVE-2021-40574 
The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line function in load_text.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-13T00:00:00.000Z
CVE-2021-40575 
The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmx_process function in reframe_mpgvid.c, which allows attackers to cause a denial of service. This vulnerability is possibly due to an incomplete fix for CVE-2021-40566.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-13T00:00:00.000Z
CVE-2021-40576 
The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gf_isom_get_payt_count function in hint_track.c, which allows attackers to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-13T00:00:00.000Z
CVE-2021-40577 
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 in the Add-Users page via the Name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-08T17:45:05.000Z
CVE-2021-40578 
Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execute arbitrary SQL commands via IDNO parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-07T21:13:44.000Z
CVE-2021-40579 
https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected by: Incorrect Access Control. The impact is: gain privileges (remote).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-28T11:59:58.000Z
CVE-2021-40589 
ZAngband zangband-data 2.7.5 is affected by an integer underflow vulnerability in src/tk/plat.c through the variable fileheader.bfOffBits.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T17:58:14.000Z
CVE-2021-40592 
GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a (version v1.0.1 onwards) contains loop with unreachable exit condition ('infinite loop') vulnerability in ISOBMFF reader filter, isoffin_read.c. Function isoffin_process() can result in DoS by infinite loop. To exploit, the victim must open a specially crafted mp4 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-08T00:00:00.000Z
CVE-2021-40595 
SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leave_system/classes/Login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-21T19:03:03.000Z
CVE-2021-40596 
SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands via the faculty_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T14:30:03.000Z
CVE-2021-40597 
The firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with Administrator username and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-29T19:44:58.000Z
CVE-2021-40604 
A Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via phar protocol when generating class names dynamically. In some cases an exploitation is possible by an unauthenticated user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-13T17:45:39.000Z