rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-4096 Fancy Product Designer <= 4.7.5 - Cross-Site Request Forgery to Arbitrary File Upload
The Fancy Product Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery via the FPD_Admin_Import class that makes it possible for attackers to upload malicious files that could be used to gain webshell access to a server in versions up to, and including, 4.7.5.
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
cwe_id: CWE-434
description: CWE-434 Unrestricted Upload of File with Dangerous Type
Affected products: vendor: 	fancy-product-designer
product: Fancy Product Designer
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Lin Yu
Published: 2022-04-19T20:26:38.000Z
CVE-2021-4097 CRLF Injection in phpservermon/phpservermon
phpservermon is vulnerable to Improper Neutralization of CRLF Sequences
Problem types: cwe_id: CWE-93
description: CWE-93 Improper Neutralization of CRLF Sequences
Affected products: vendor: phpservermon
product: phpservermon/phpservermon
Published: 2021-12-11T23:30:10.000Z
CVE-2021-4098 
Insufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Problem types: description: Insufficient data validation
Affected products: vendor: Google
product: Chrome
Published: 2022-02-11T22:55:16.000Z
CVE-2021-4099 
Use after free in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2022-02-11T22:55:17.000Z
CVE-2021-4100 
Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Object lifecycle issue
Affected products: vendor: Google
product: Chrome
Published: 2022-02-11T22:55:19.000Z
CVE-2021-4101 
Heap buffer overflow in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Heap buffer overflow
Affected products: vendor: Google
product: Chrome
Published: 2022-02-11T22:55:20.000Z
CVE-2021-4102 
Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Problem types: description: Use after free
Affected products: vendor: Google
product: Chrome
Published: 2022-02-11T22:55:22.000Z
CVE-2021-4103 Cross-site Scripting (XSS) - Stored in vanessa219/vditor
Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 1.0.34.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: vanessa219
product: vanessa219/vditor
Published: 2022-01-23T01:45:11.000Z
CVE-2021-4104 Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: Apache Software Foundation
product: Apache Log4j 1.x
Published: 2021-12-14T00:00:00.000Z
CVE-2021-4105 Unauthenticated Remote Code Execution on COSLAT Firewall
Improper Handling of Parameters vulnerability in BG-TEK COSLAT Firewall allows Remote Code Inclusion.

This issue affects COSLAT Firewall: from 5.24.0.R.20180630 before 5.24.0.R.20210727.
Problem types: cwe_id: CWE-755
description: CWE-755 Improper Handling of Exceptional Conditions
Affected products: vendor: BG-TEK
product: COSLAT Firewall
default_status: unaffected
CVSS v3.1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published: 2023-02-24T11:09:46.710Z
CVE-2021-4106 Vulnerability in Snow Inventory Java Scanner
A vulnerability in Snow Inventory Java Scanner allows an attacker to run malicious code at a higher level of privileges. This issue affects: SNOW Snow Inventory Java Scanner 1.0
Problem types: cwe_id: CWE-691
description: CWE-691
Affected products: vendor: SNOW
product: Snow Inventory Java Scanner
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: John Thiell, Martin Spielmann and Stefan Lubienetzki
Published: 2022-02-16T16:38:02.235Z
CVE-2021-4107 Cross-site Scripting (XSS) - Reflected in yetiforcecompany/yetiforcecrm
yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: yetiforcecompany
product: yetiforcecompany/yetiforcecrm
Published: 2021-12-14T14:20:13.000Z
CVE-2021-4108 Cross-site Scripting (XSS) - Stored in snipe/snipe-it
snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: snipe
product: snipe/snipe-it
Published: 2021-12-14T20:10:14.000Z
CVE-2021-4110 NULL Pointer Dereference in mruby/mruby
mruby is vulnerable to NULL Pointer Dereference
Problem types: cwe_id: CWE-476
description: CWE-476 NULL Pointer Dereference
Affected products: vendor: mruby
product: mruby/mruby
Published: 2021-12-15T04:40:10.000Z
CVE-2021-4111 Business Logic Errors in yetiforcecompany/yetiforcecrm
yetiforcecrm is vulnerable to Business Logic Errors
Problem types: cwe_id: CWE-840
description: CWE-840 Business Logic Errors
Affected products: vendor: yetiforcecompany
product: yetiforcecompany/yetiforcecrm
Published: 2021-12-15T08:55:11.000Z
CVE-2021-4112 
A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment.
Problem types: cwe_id: CWE-552
description: CWE-552 - Files or Directories Accessible to External Parties
Affected products: vendor: n/a
product: ansible-tower
Published: 2022-08-25T19:35:45.000Z
CVE-2021-4115 
There is a flaw in polkit which can allow an unprivileged user to cause polkit to crash, due to process file descriptor exhaustion. The highest threat from this vulnerability is to availability. NOTE: Polkit process outage duration is tied to the failing process being reaped and a new one being spawned
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: n/a
product: polkitd
Published: 2022-02-21T00:00:00.000Z
CVE-2021-4116 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: yetiforcecompany
product: yetiforcecompany/yetiforcecrm
Published: 2021-12-15T13:35:11.000Z
CVE-2021-4117 Business Logic Errors in yetiforcecompany/yetiforcecrm
yetiforcecrm is vulnerable to Business Logic Errors
Problem types: cwe_id: CWE-840
description: CWE-840 Business Logic Errors
Affected products: vendor: yetiforcecompany
product: yetiforcecompany/yetiforcecrm
Published: 2021-12-15T14:35:12.000Z
CVE-2021-4118 Deserialization of Untrusted Data in pytorchlightning/pytorch-lightning
pytorch-lightning is vulnerable to Deserialization of Untrusted Data
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: pytorchlightning
product: pytorchlightning/pytorch-lightning
Published: 2021-12-23T17:15:11.000Z
CVE-2021-4119 Improper Access Control in bookstackapp/bookstack
bookstack is vulnerable to Improper Access Control
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: bookstackapp
product: bookstackapp/bookstack
Published: 2021-12-15T17:25:10.000Z
CVE-2021-4120 snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths
snapd 2.54.2 fails to perform sufficient validation of snap content interface and layout paths, resulting in the ability for snaps to inject arbitrary AppArmor policy rules via malformed content interface and layout declarations and hence escape strict snap confinement. Fixed in snapd versions 2.54.3+18.04, 2.54.3+20.04 and 2.54.3+21.10.1
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Canonical Ltd.
product: snapd
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Ian Johnson
Published: 2022-02-17T22:15:21.000Z
CVE-2021-4121 Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm
yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: yetiforcecompany
product: yetiforcecompany/yetiforcecrm
Published: 2021-12-16T07:35:10.000Z
CVE-2021-4122 
It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device. An attacker with physical access to the medium, such as a flash disk, could use this flaw to force a user into permanently disabling the encryption layer of that medium.
Problem types: cwe_id: CWE-345
description: CWE-345 - Insufficient Verification of Data Authenticity
Affected products: vendor: n/a
product: cryptsetup
Published: 2022-08-24T15:08:58.000Z
CVE-2021-4123 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: livehelperchat
product: livehelperchat/livehelperchat
Published: 2021-12-16T10:10:10.000Z
CVE-2021-4124 Cross-site Scripting (XSS) - Stored in meetecho/janus-gateway
janus-gateway is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: meetecho
product: meetecho/janus-gateway
Published: 2021-12-16T13:15:11.000Z
CVE-2021-4125 
It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all JndiLookup.class files were removed. This CVE only applies to the OpenShift Metering hive container images, shipped in OpenShift 4.8, 4.7 and 4.6.
Problem types: cwe_id: CWE-20
description: CWE-20 - Improper Input Validation, CWE-502 - Deserialization of Untrusted Data, CWE-400 - Uncontrolled Resource Consumption
Affected products: vendor: n/a
product: kube-reporting/hive
Published: 2022-08-24T15:09:17.000Z
CVE-2021-4126 
When receiving an OpenPGP/MIME signed email message that contains an additional outer MIME message layer, for example a message footer added by a mailing list gateway, Thunderbird only considered the inner signed message for the signature validity. This gave the false impression that the additional contents were also covered by the digital signature. Starting with Thunderbird version 91.4.1, only the signature that belongs to the top level MIME part will be considered for the displayed status. This vulnerability affects Thunderbird < 91.4.1.
Problem types: description: OpenPGP signature status doesn't consider additional message content
Affected products: vendor: Mozilla
product: Thunderbird
Published: 2022-12-22T00:00:00.000Z
CVE-2021-4127 
An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird < 78.9 and Firefox ESR < 78.9.
Problem types: description: Angle graphics library out of date
Affected products: vendor: Mozilla
product: Thunderbird
vendor: Mozilla
product: Firefox ESR
Published: 2022-12-22T00:00:00.000Z
CVE-2021-4128 
When transitioning in and out of fullscreen mode, a graphics object was not correctly protected; resulting in memory corruption and a potentially exploitable crash.<br>*This bug only affects Firefox on MacOS. Other operating systems are unaffected.*. This vulnerability affects Firefox < 95.
Problem types: description: Use-after-free in fullscreen objects on MacOS
Affected products: vendor: Mozilla
product: Firefox
Published: 2022-12-22T00:00:00.000Z
CVE-2021-4129 
Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safety bugs present in Firefox 94. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 95, Firefox ESR < 91.4.0, and Thunderbird < 91.4.0.
Problem types: description: Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4
Affected products: vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Thunderbird
Published: 2022-12-22T00:00:00.000Z
CVE-2021-4130 Cross-Site Request Forgery (CSRF) in snipe/snipe-it
snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: snipe
product: snipe/snipe-it
Published: 2021-12-18T04:40:10.000Z
CVE-2021-4131 Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: livehelperchat
product: livehelperchat/livehelperchat
Published: 2021-12-18T06:20:10.000Z
CVE-2021-4132 Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: livehelperchat
product: livehelperchat/livehelperchat
Published: 2021-12-17T12:45:09.000Z
CVE-2021-4133 
A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user accounts via the administrative REST API even when new user registration is disabled.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: n/a
product: Keycloak
Published: 2022-01-25T19:11:13.000Z
CVE-2021-4134 Fancy Product Designer <= 4.7.4 Admin+ SQL Injection
The Fancy Product Designer WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the ID parameter found in the ~/inc/api/class-view.php file which allows attackers with administrative level permissions to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 4.7.4.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Fancy Product Designer 
product: Fancy Product Designer 
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Lin Yu
Published: 2022-02-16T16:38:05.000Z
CVE-2021-4135 
A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsim_map_alloc_elem being called. A local user could use this flaw to get unauthorized access to some data.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: n/a
product: kernel
Published: 2022-07-14T19:30:19.000Z
CVE-2021-4136 Heap-based Buffer Overflow in vim/vim
vim is vulnerable to Heap-based Buffer Overflow
Problem types: cwe_id: CWE-122
description: CWE-122 Heap-based Buffer Overflow
Affected products: vendor: vim
product: vim/vim
Published: 2021-12-19T17:00:10.000Z
CVE-2021-4138 
Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname.
Problem types: description: Fixed a DNS rebinding issues by enforcing a stricter Host header check.
Affected products: vendor: Mozilla
product: geckodriver
Published: 2022-05-02T22:08:07.000Z
CVE-2021-4139 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: pimcore
product: pimcore/pimcore
Published: 2021-12-21T12:50:10.000Z
CVE-2021-4140 
It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.
Problem types: description: Iframe sandbox bypass with XSLT
Affected products: vendor: Mozilla
product: Firefox ESR
vendor: Mozilla
product: Firefox
vendor: Mozilla
product: Thunderbird
Published: 2022-12-22T00:00:00.000Z
CVE-2021-4142 
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.
Problem types: cwe_id: CWE-639
description: CWE-639 - Authorization Bypass Through User-Controlled Key -> CWE-287 - Improper Authentication
Affected products: vendor: n/a
product: candlepin
Published: 2022-08-24T15:09:56.000Z
CVE-2021-4143 Cross-site Scripting (XSS) - Generic in bigbluebutton/bigbluebutton
Cross-site Scripting (XSS) - Generic in GitHub repository bigbluebutton/bigbluebutton prior to 2.4.0.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: bigbluebutton
product: bigbluebutton/bigbluebutton
Published: 2022-01-19T22:20:09.000Z
CVE-2021-4144 
TP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS command injection.
Problem types: cwe_id: CWE-78
description: CWE-78: OS command injection
Affected products: vendor: TP-LINK
product: TL-WR802N V4(JP)
Published: 2021-12-23T06:30:10.000Z
CVE-2021-4145 
A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The `self` pointer is dereferenced in mirror_wait_on_conflicts() without ensuring that it's not NULL. A malicious unprivileged user within the guest could use this flaw to crash the QEMU process on the host when writing data reaches the threshold of mirroring node.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: n/a
product: QEMU
Published: 2022-01-25T19:11:14.000Z
CVE-2021-4146 Business Logic Errors in pimcore/pimcore
Business Logic Errors in GitHub repository pimcore/pimcore prior to 10.2.6.
Problem types: cwe_id: CWE-840
description: CWE-840 Business Logic Errors
Affected products: vendor: pimcore
product: pimcore/pimcore
Published: 2022-01-18T15:30:12.000Z
CVE-2021-4147 
A flaw was found in the libvirt libxl driver. A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.
Problem types: cwe_id: CWE-667
description: CWE-667
Affected products: vendor: n/a
product: libvirt
Published: 2022-03-25T00:00:00.000Z
CVE-2021-4148 
A vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the filesystem. A missing sanity check may allow a local attacker with user privilege to cause a denial of service (DOS) problem.
Problem types: cwe_id: CWE-354
description: CWE-354
Affected products: vendor: n/a
product: kernel
Published: 2022-03-23T19:46:44.000Z
CVE-2021-4149 
A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem.
Problem types: cwe_id: CWE-667
description: CWE-667
Affected products: vendor: n/a
product: kernel
Published: 2022-03-23T19:46:44.000Z
CVE-2021-4150 
A use-after-free flaw was found in the add_partition in block/partitions/core.c in the Linux kernel. A local attacker with user privileges could cause a denial of service on the system. The issue results from the lack of code cleanup when device_add call fails when adding a partition to the disk.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: n/a
product: kernel
Published: 2022-03-23T19:46:46.000Z
CVE-2021-4154 
A use-after-free flaw was found in cgroup1_parse_param in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service on the system.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: n/a
product: kernel
Published: 2022-02-04T22:29:17.000Z
CVE-2021-4155 
A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them.
Problem types: cwe_id: CWE-131
description: CWE-131 - Incorrect Calculation of Buffer Size
Affected products: vendor: n/a
product: kernel
Published: 2022-08-24T15:10:19.000Z