rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-44531 
Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 was accepting URI SAN types, which PKIs are often not defined to use. Additionally, when a protocol allows URI SANs, Node.js did not match the URI correctly.Versions of Node.js with the fix for this disable the URI SAN type when checking a certificate against a hostname. This behavior can be reverted through the --security-revert command-line option.
Problem types: cwe_id: CWE-295
description: Improper Certificate Validation (CWE-295)
Affected products: vendor: NodeJS
product: Node
default_status: unaffected
Published: 2022-02-24T18:27:00.000Z
CVE-2021-44532 
Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format. It uses this string to check peer certificates against hostnames when validating connections. The string format was subject to an injection vulnerability when name constraints were used within a certificate chain, allowing the bypass of these name constraints.Versions of Node.js with the fix for this escape SANs containing the problematic characters in order to prevent the injection. This behavior can be reverted through the --security-revert command-line option.
Problem types: cwe_id: CWE-296
description: Improper Following of a Certificate's Chain of Trust (CWE-296)
Affected products: vendor: NodeJS
product: Node
default_status: unaffected
Published: 2022-02-24T18:27:01.000Z
CVE-2021-44533 
Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects containing a single-value Relative Distinguished Name that would be interpreted as a multi-value Relative Distinguished Name, for example, in order to inject a Common Name that would allow bypassing the certificate subject verification.Affected versions of Node.js that do not accept multi-value Relative Distinguished Names and are thus not vulnerable to such attacks themselves. However, third-party code that uses node's ambiguous presentation of certificate subjects may be vulnerable.
Problem types: cwe_id: CWE-295
description: Improper Certificate Validation (CWE-295)
Affected products: vendor: NodeJS
product: Node
default_status: unaffected
Published: 2022-02-24T18:27:02.000Z
CVE-2021-44534 
Insufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive information disclosure.

Affected products: vendor: ExpressionEngine
product: ExpressionEngine
Published: 2024-05-31T17:40:31.559Z
CVE-2021-44537 
ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading to remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-15T20:51:25.000Z
CVE-2021-44538 
The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic channel between two parties. Therefore, its state is partially controllable by the remote party of the channel. Attackers can construct a crafted sequence of messages to manipulate the state of the receiver's session in such a way that, for some buffer sizes, a buffer overflow happens on a call to olm_session_describe. Furthermore, safe buffer sizes were undocumented. The overflow content is partially controllable by the attacker and limited to ASCII spaces and digits. The known affected products are Element Web And SchildiChat Web.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-14T13:26:32.000Z
CVE-2021-44540 
A vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of compiled pattern spec before bailing.
Problem types: cwe_id: CWE-401
description: CWE-401
Affected products: vendor: n/a
product: Privoxy
Published: 2021-12-23T19:48:42.000Z
CVE-2021-44541 
A vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by freeing header memory when failing to get the request destination.
Problem types: cwe_id: CWE-401
description: CWE-401
Affected products: vendor: n/a
product: Privoxy
Published: 2021-12-23T19:48:42.000Z
CVE-2021-44542 
A memory leak vulnerability was found in Privoxy when handling errors.
Problem types: cwe_id: CWE-401
description: CWE-401
Affected products: vendor: n/a
product: Privoxy
Published: 2021-12-23T19:48:43.000Z
CVE-2021-44543 
An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Privoxy is configured to servce the user-manual itself.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: n/a
product: privoxy
Published: 2021-12-23T19:48:44.000Z
CVE-2021-44544 Delta Electronics DIAEnergie (Update A)
DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Delta Electronics
product: DIAEnergie
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
version: 3.1
Published: 2021-12-22T18:06:50.589Z
CVE-2021-44545 
Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Problem types: description: denial of service
Affected products: vendor: n/a
product: Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products
Published: 2022-08-18T00:00:00.000Z
CVE-2021-44547 
A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading to privilege escalation.
Problem types: cwe_id: CWE-267
description: Privilege Defined With Unsafe Actions
Affected products: vendor: Odoo
product: Odoo Community
default_status: unaffected
vendor: Odoo
product: Odoo Enterprise
default_status: unaffected
Credits: lang: eng
value: Stephane Debauche
Published: 2023-04-25T18:33:42.884Z
CVE-2021-44548 Apache Solr information disclosure vulnerability through DataImportHandler
An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to the network, this may lead to SMB attacks, which may result in: * The exfiltration of sensitive data such as OS user hashes (NTLM/LM hashes), * In case of misconfigured systems, SMB Relay Attacks which can lead to user impersonation on SMB Shares or, in a worse-case scenario, Remote Code Execution This issue affects all Apache Solr versions prior to 8.11.1. This issue only affects Windows.
Problem types: cwe_id: CWE-40
description: CWE-40: Path Traversal: '\\UNC\share\name\' (Windows UNC Share)
cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Apache Software Foundation
product: Apache Solr
Credits: lang: en
value: Apache Solr would like to thank LaiHan of Nsfocus security team for reporting the issue
Published: 2021-12-23T08:55:09.000Z
CVE-2021-44549 SMTPS server hostname not checked when making TLS connection to SMTPS server
Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of "man in the middle" attacks additional server identity checks must be performed when accessing mail servers. For compatibility reasons these additional checks are disabled by default in JavaMail/Jakarta Mail. The SimpleMailService in Apache Sling Commons Messaging Mail 1.0 lacks an option to enable these checks for the shared mail session. A user could enable these checks nevertheless by accessing the session via the message created by SimpleMessageBuilder and setting the property mail.smtps.ssl.checkserveridentity to true. Apache Sling Commons Messaging Mail 2.0 adds support for enabling server identity checks and these checks are enabled by default. - https://javaee.github.io/javamail/docs/SSLNOTES.txt - https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html - https://github.com/eclipse-ee4j/mail/issues/429
Problem types: cwe_id: CWE-295
description: CWE-295: Improper Certificate Validation, CWE-297: Improper Validation of Certificate with Host Mismatch
Affected products: vendor: Apache Software Foundation
product: Apache Sling Commons Messaging Mail
Credits: lang: en
value: The issue was reported by Michael Lescisin.
Published: 2021-12-14T15:15:10.000Z
CVE-2021-44550 
An Incorrect Access Control vulnerability exists in CoreNLP 4.3.2 via the classifier in NERServlet.java (lines 158 and 159).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-23T20:19:17.000Z
CVE-2021-44554 
Thinfinity VirtualUI before 3.0 allows a malicious actor to enumerate users registered in the OS (Windows) through the /changePassword URI. By accessing the vector, an attacker can determine if a username exists thanks to the message returned; it can be presented in different languages according to the configuration of VirtualUI. Common users are administrator, admin, guest and krgtbt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-20T08:31:42.000Z
CVE-2021-44556 
National Library of the Netherlands digger < 6697d1269d981e35e11f240725b16401b5ce3db5 is affected by a XML External Entity (XXE) vulnerability. Since XML parsing resolves external entities, a malicious XML stream could leak internal files and/or cause a DoS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-08T11:16:57.000Z
CVE-2021-44557 
National Library of the Netherlands multiNER <= c0440948057afc6e3d6b4903a7c05e666b94a3bc is affected by an XML External Entity (XXE) vulnerability in multiNER/ner.py. Since XML parsing resolves external entities, a malicious XML stream could leak internal files and/or cause a DoS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-08T11:21:10.000Z
CVE-2021-44564 
A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access to the SYNC device and knowledge of its IP address. The attack exploits the unsecured communication channel used between the administration tool Easyconnect and the SYNC device (in the affected family of SYNC products).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-06T11:53:39.000Z
CVE-2021-44565 
A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 7.6.1 via the xss_clean function in classes/Security.php, which allows remote malicious users to inject arbitrary JavaScript or HTML. An example of affected components are all Markdown input fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-22T19:58:33.000Z
CVE-2021-44566 
A Cross Site Scripting (XSS) vulnerability exists in RosarioSIS before 4.3 via the SanitizeMarkDown function in ProgramFunctions/MarkDownHTML.fnc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-22T20:02:49.000Z
CVE-2021-44567 
An unauthenticated SQL Injection vulnerability exists in RosarioSIS before 7.6.1 via the votes parameter in ProgramFunctions/PortalPollsNotes.fnc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-22T20:16:14.000Z
CVE-2021-44568 
Two heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the decisionmap variable via the resolve_dependencies function at src/solver.c (line 1940 & line 1995), which could cause a remote Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-21T17:38:57.000Z
CVE-2021-44581 
An SQL Injection vulnerabilty exists in Kreado Kreasfero 1.5 via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-29T00:45:16.000Z
CVE-2021-44582 
A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remote malicious user to gain elevated privileges to the Admin role via any URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-10T12:32:12.000Z
CVE-2021-44584 
Cross-site scripting (XSS) vulnerability in index.php in emlog version <= pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-06T12:05:34.000Z
CVE-2021-44585 
A Cross Site Scripting (XSS) vulnerabilitiy exits in jeecg-boot 3.0 in /jeecg-boot/jmreport/view with a mouseover event.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-10T20:02:44.000Z
CVE-2021-44586 
An issue was discovered in dst-admin v1.3.0. The product has an unauthorized arbitrary file download vulnerability that can expose sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-10T14:18:37.000Z
CVE-2021-44590 
In libming 0.4.8, a memory exhaustion vulnerability exist in the function cws2fws in util/main.c. Remote attackers could launch denial of service attacks by submitting a crafted SWF file that exploits this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-06T13:30:45.000Z
CVE-2021-44591 
In libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check that would lead to denial-of-service attacks via a crafted SWF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-06T13:38:59.000Z
CVE-2021-44593 
Simple College Website 1.0 is vulnerable to unauthenticated file upload & remote code execution via UNION-based SQL injection in the username parameter on /admin/login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-21T18:08:55.000Z
CVE-2021-44595 
Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-29T11:23:46.000Z
CVE-2021-44596 
Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" service(the service is running under SYSTEM privileges) and manipulate it to execute malicious executable without any validation from a remote location and gain SYSTEM privileges
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-29T11:23:52.000Z
CVE-2021-44598 
Attendance Management System 1.0 is affected by a Cross Site Scripting (XSS) vulnerability. The value of the FirstRecord request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. The attacker can access the system, by using the XSS-reflected method, and then can store information by injecting the admin account on this system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-26T14:41:35.000Z
CVE-2021-44599 
The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks. A crafted payload injects a SQL sub-query that calls MySQL's load_file function with a UNC file path that references a URL on an external domain. The application interacted with that domain, indicating that the injected SQL query was executed. The attacker can retrieve sensitive information for all users of this system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-23T12:31:27.000Z
CVE-2021-44600 
The password parameter on Simple Online Mens Salon Management System (MSMS) 1.0 appears to be vulnerable to SQL injection attacks through the password parameter. The predictive tests of this application interacted with that domain, indicating that the injected SQL query was executed. The attacker can retrieve all authentication and information about the users of this system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-23T13:21:52.000Z
CVE-2021-44607 
A Cross Site Scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 in the Assets page via an SVG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-23T18:42:23.000Z
CVE-2021-44608 
Multiple Cross Site Scripting (XSS) vulnerabilities exists in bloofoxCMS 0.5.2.1 - 0.5.1 via the (1) file parameter and (2) type parameter in an edit action in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-23T18:51:04.000Z
CVE-2021-44610 
Multiple SQL Injection vulnerabilities exist in bloofoxCMS 0.5.2.1 - 0.5.1 via the (1) URLs, (2) lang_id, (3) tmpl_id, (4) mod_rewrite (5) eta_doctype. (6) meta_charset, (7) default_group, and (8) page group parameters in the settings mode in admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-23T19:30:36.000Z
CVE-2021-44617 
A SQL Injection vulnerability exits in the Ramo plugin for GLPI 9.4.6 via the idu parameter in plugins/ramo/ramoapirest.php/getOutdated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-28T01:08:13.000Z
CVE-2021-44618 
A Server-side Template Injection (SSTI) vulnerability exists in Nystudio107 Seomatic 3.4.12 in src/helpers/UrlHelper.php via the host header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-11T15:17:39.000Z
CVE-2021-44620 
A Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm.asp via the hosTime parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-11T15:54:20.000Z
CVE-2021-44622 
A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/check_reg_verify_code function which could let a remove malicious user execute arbitrary code via a crafted post request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-09T20:47:28.000Z
CVE-2021-44623 
A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 via the /cloud_config/router_post/check_reset_pwd_verify_code interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-09T21:18:12.000Z
CVE-2021-44625 
A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in /cloud_config/cloud_device/info interface, which allows a malicious user to executee arbitrary code on the system via a crafted post request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-09T21:31:44.000Z
CVE-2021-44626 
A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/get_reg_verify_code feature, which allows malicious users to execute arbitrary code on the system via a crafted post request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-09T21:37:41.000Z
CVE-2021-44627 
A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/get_reset_pwd_veirfy_code feature, which allows malicious users to execute arbitrary code on the system via a crafted post request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-09T21:44:59.000Z
CVE-2021-44628 
A Buffer Overflow vulnerabiltiy exists in TP-LINK WR-886N 20190826 2.3.8 in thee /cloud_config/router_post/login feature, which allows malicious users to execute arbitrary code on the system via a crafted post request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-09T21:48:00.000Z
CVE-2021-44629 
A Buffer Overflow vulnerabilitiy exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/register feature, which allows malicious users to execute arbitrary code on the system via a crafted post request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-09T21:50:44.000Z
CVE-2021-44630 
A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/modify_account_pwd feature, which allows malicious users to execute arbitrary code on the system via a crafted post request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-09T21:52:59.000Z
CVE-2021-44631 
A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/reset_cloud_pwd feature, which allows malicous users to execute arbitrary code on the system via a crafted post request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-09T21:55:34.000Z
CVE-2021-44632 
A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/upgrade_info feature, which allows malicious users to execute arbitrary code on the system via a crafted post request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-09T21:58:06.000Z
CVE-2021-44647 
Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-11T00:00:00.000Z
CVE-2021-44648 
GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-12T12:31:26.000Z
CVE-2021-44649 
Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting (XSS) vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the affected user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-12T12:57:19.000Z
CVE-2021-44650 
Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings through the Admin ProxySettings and Tenant ProxySettings components.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-12T13:35:18.000Z
CVE-2021-44651 
Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings component due to an improper security patch for CVE-2021-40175.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-12T14:44:54.000Z