rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-41994 PingID iOS mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks
A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.
Problem types: cwe_id: CWE-310
description: CWE-310 Cryptographic Issues
Affected products: vendor: Ping Identity
product: PingID Mobile Application
CVSS v3.1: attackComplexity: HIGH
attackVector: PHYSICAL
availabilityImpact: NONE
baseScore: 6.6
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
version: 3.1
Credits: lang: en
value: Ping Identity credits The Commonwealth Bank of Australia for the discovery of this vulnerability.
Published: 2022-04-30T21:15:22.000Z
CVE-2021-41995 PingID Mac Login prior to 1.1 vulnerable to pre-computed dictionary attacks
A misconfiguration of RSA in PingID Mac Login prior to 1.1 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.
Problem types: cwe_id: CWE-310
description: CWE-310 Cryptographic Issues
cwe_id: CWE-288
description: CWE-288 Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: Ping Identity
product: PingID Mac Login
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.7
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
version: 3.1
Credits: lang: en
value: Ping Identity credits The Commonwealth Bank of Australia for the discovery of this vulnerability.
Published: 2022-06-30T19:25:23.000Z
CVE-2021-42000 Ping Identity PingFederate Password Reset and Password Change Mishandling with an authentication policy in parallel reset flows
When a password reset or password change flow with an authentication policy is configured and the adapter in the reset or change policy supports multiple parallel reset flows, an existing user can reset another existing users password.
Problem types: cwe_id: CWE-285
description: CWE-285 Improper Authorization
Affected products: vendor: Ping Identity
product: PingFederate
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
version: 3.1
Published: 2022-02-10T22:30:11.000Z
CVE-2021-42001 PingID Desktop encryption libraries misconfiguration can lead to sensitive data exposure
PingID Desktop prior to 1.7.3 has a misconfiguration in the encryption libraries which can lead to sensitive data exposure. An attacker capable of exploiting this vulnerability may be able to successfully complete an MFA challenge via OTP.
Problem types: cwe_id: CWE-310
description: CWE-310 Cryptographic Issues
Affected products: vendor: Ping Identity
product: PingID Desktop
vendor: Ping Identity
product: PingID Desktop
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Ping Identity credits The Commonwealth Bank of Australia for the discovery of this vulnerability.
Published: 2022-04-30T21:15:24.000Z
CVE-2021-42002 
Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-11T04:33:38.000Z
CVE-2021-42006 
An out-of-bounds access in GffLine::GffLine in gff.cpp in GCLib 0.12.7 allows an attacker to cause a segmentation fault or possibly have unspecified other impact via a crafted GFF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T22:55:43.000Z
CVE-2021-42008 
The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-04T23:17:08.000Z
CVE-2021-42009 Apache Traffic Control Traffic Ops Email Injection Vulnerability
An authenticated Apache Traffic Control Traffic Ops user with Portal-level privileges can send a request with a specially-crafted email subject to the /deliveryservices/request Traffic Ops endpoint to send an email, from the Traffic Ops server, with an arbitrary body to an arbitrary email address. Apache Traffic Control 5.1.x users should upgrade to 5.1.3 or 6.0.0. 4.1.x users should upgrade to 5.1.3.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
description: Email Injection Vulnerability
Affected products: vendor: Apache Software Foundation
product: Apache Traffic Control
Credits: lang: en
value: This issue was discovered by GitHub's CodeQL code scanning service.
Published: 2021-10-12T07:40:11.000Z
CVE-2021-42010 CRLF log injection
Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue.
Problem types: description: CRLF Injection
Affected products: vendor: Apache Software Foundation
product: Apache Heron (Incubating)
Credits: lang: en
value: The Apache Heron (Incubating) project would like to thank Bo Yu for bringing this matter to our attention.
Published: 2022-10-24T00:00:00.000Z
CVE-2021-42011 
An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: description: Incorrect Permission Assignment Privilege Escalation
Affected products: vendor: Trend Micro
product: Trend Micro Apex One
Published: 2021-10-21T07:46:03.000Z
CVE-2021-42012 
A stack-based buffer overflow vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: description: Stack-based Buffer Overflow Privilege Escalation
Affected products: vendor: Trend Micro
product: Trend Micro Apex One
vendor: Trend Micro
product: Trend Micro Worry-Free Business Security
Published: 2021-10-21T07:46:03.000Z
CVE-2021-42013 Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue only affects Apache 2.4.49 and Apache 2.4.50 and not earlier versions.
Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Apache Software Foundation
product: Apache HTTP Server
Credits: lang: en
value: Reported by Juan Escobar from Dreamlab Technologies, Fernando Muñoz from NULL Life CTF Team, and Shungo Kumasaka
Published: 2021-10-07T15:50:14.000Z
CVE-2021-42015 
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All versions < V8.18.12), Mendix Applications using Mendix 9 (All versions < V9.6.1). Applications built with affected versions of Mendix Studio Pro do not prevent file documents from being cached when files are opened or downloaded using a browser. This could allow a local attacker to read those documents by exploring the browser cache.
Problem types: cwe_id: CWE-525
description: CWE-525: Use of Web Browser Cache Containing Sensitive Information
Affected products: vendor: Siemens
product: Mendix Applications using Mendix 7
vendor: Siemens
product: Mendix Applications using Mendix 8
vendor: Siemens
product: Mendix Applications using Mendix 9
Published: 2021-11-09T11:32:14.000Z
CVE-2021-42021 
A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2), Siveillance Video DLNA Server (2019 R3), Siveillance Video DLNA Server (2020 R1), Siveillance Video DLNA Server (2020 R2), Siveillance Video DLNA Server (2020 R3), Siveillance Video DLNA Server (2021 R1). The affected application contains a path traversal vulnerability that could allow to read arbitrary files on the server that are outside the application’s web document directory. An unauthenticated remote attacker could exploit this issue to access sensitive information for subsequent attacks.
Problem types: cwe_id: CWE-26
description: CWE-26: Path Traversal: '/dir/../filename'
Affected products: vendor: Siemens
product: Siveillance Video DLNA Server
vendor: Siemens
product: Siveillance Video DLNA Server
vendor: Siemens
product: Siveillance Video DLNA Server
vendor: Siemens
product: Siveillance Video DLNA Server
vendor: Siemens
product: Siveillance Video DLNA Server
vendor: Siemens
product: Siveillance Video DLNA Server
vendor: Siemens
product: Siveillance Video DLNA Server
Published: 2021-11-09T11:32:15.000Z
CVE-2021-42022 
A vulnerability has been identified in SIMATIC eaSie PCS 7 Skill Package (All versions < V21.00 SP3). When downloading files, the affected systems do not properly neutralize special elements within the pathname. An attacker could then cause the pathname to resolve to a location outside of the restricted directory on the server and read unexpected critical files. The affected file download function is disabled by default.
Problem types: cwe_id: CWE-22
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Siemens
product: SIMATIC eaSie PCS 7 Skill Package
Published: 2021-12-14T12:06:37.000Z
CVE-2021-42023 
A vulnerability has been identified in ModelSim Simulation (All versions), Questa Simulation (All versions). The RSA white-box implementation in affected applications insufficiently protects the built-in private keys that are required to decrypt electronic intellectual property (IP) data in accordance with the IEEE 1735 recommended practice. This could allow a sophisticated attacker to discover the keys, bypassing the protection intended by the IEEE 1735 recommended practice.
Problem types: cwe_id: CWE-522
description: CWE-522: Insufficiently Protected Credentials
Affected products: vendor: Siemens
product: ModelSim Simulation
vendor: Siemens
product: Questa Simulation
Published: 2021-12-14T00:00:00.000Z
CVE-2021-42024 
A vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < 2021.3.1). The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process.
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Siemens
product: Simcenter STAR-CCM+ Viewer
Published: 2021-12-14T12:06:38.000Z
CVE-2021-42025 
A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2). Applications built with affected versions of Mendix Studio Pro do not properly control write access for certain client actions. This could allow authenticated attackers to manipulate the content of System.FileDocument objects in some cases, regardless whether they have write access to it.
Problem types: cwe_id: CWE-863
description: CWE-863: Incorrect Authorization
Affected products: vendor: Siemens
product: Mendix Applications using Mendix 8
vendor: Siemens
product: Mendix Applications using Mendix 9
Published: 2021-11-09T11:32:16.000Z
CVE-2021-42026 
A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2). Applications built with affected versions of Mendix Studio Pro do not properly control read access for certain client actions. This could allow authenticated attackers to retrieve the changedDate attribute of arbitrary objects, even when they don't have read access to them.
Problem types: cwe_id: CWE-863
description: CWE-863: Incorrect Authorization
Affected products: vendor: Siemens
product: Mendix Applications using Mendix 8
vendor: Siemens
product: Mendix Applications using Mendix 9
Published: 2021-11-09T11:32:17.000Z
CVE-2021-42027 
A vulnerability has been identified in SINUMERIK Edge (All versions < V3.2). The affected software does not properly validate the server certificate when initiating a TLS connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between the client and the intended server.
Problem types: cwe_id: CWE-295
description: CWE-295: Improper Certificate Validation
Affected products: vendor: Siemens
product: SINUMERIK Edge
Published: 2021-12-14T12:06:39.000Z
CVE-2021-42028 
A vulnerability has been identified in syngo fastView (All versions). The affected application lacks proper validation of user-supplied data when parsing BMP files. This could result in an out-of-bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-14860)
Problem types: cwe_id: CWE-787
description: CWE-787: Out-of-bounds Write
Affected products: vendor: Siemens
product: syngo fastView
default_status: unknown
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C
baseScore: 7.8
baseSeverity: HIGH
Published: 2024-01-04T11:20:17.462Z
CVE-2021-42029 
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5), SIMATIC STEP 7 (TIA Portal) V17 (All versions < V17 Update 2). An attacker could achieve privilege escalation on the web server of certain devices due to improper access control vulnerability in the engineering system software. The attacker needs to have direct access to the impacted web server.
Problem types: cwe_id: CWE-284
description: CWE-284: Improper Access Control
Affected products: vendor: Siemens
product: SIMATIC STEP 7 (TIA Portal) V15
vendor: Siemens
product: SIMATIC STEP 7 (TIA Portal) V16
vendor: Siemens
product: SIMATIC STEP 7 (TIA Portal) V17
Published: 2022-04-12T09:07:30.000Z
CVE-2021-42040 
An issue was discovered in MediaWiki through 1.36.2. A parser function related to loop control allowed for an infinite loop (and php-fpm hang) within the Loops extension because egLoopsCountLimit is mishandled. This could lead to memory exhaustion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T20:28:59.000Z
CVE-2021-42041 
An issue was discovered in CentralAuth in MediaWiki through 1.36.2. The rightsnone MediaWiki message was not being properly sanitized and allowed for the injection and execution of HTML and JavaScript via the setchange log.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T20:28:43.000Z
CVE-2021-42042 
An issue was discovered in SpecialEditGrowthConfig in the GrowthExperiments extension in MediaWiki through 1.36.2. The growthexperiments-edit-config-error-invalid-title MediaWiki message was not being properly sanitized and allowed for the injection and execution of HTML and JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T20:28:33.000Z
CVE-2021-42043 
An issue was discovered in Special:MediaSearch in the MediaSearch extension in MediaWiki through 1.36.2. The suggestion text (a parameter to mediasearch-did-you-mean) was not being properly sanitized and allowed for the injection and execution of HTML and JavaScript via the intitle: search operator within the query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T20:28:20.000Z
CVE-2021-42044 
An issue was discovered in the Mentor dashboard in the GrowthExperiments extension in MediaWiki through 1.36.2. The Growthexperiments-mentor-dashboard-mentee-overview-add-filter-total-edits-headline, growthexperiments-mentor-dashboard-mentee-overview-add-filter-starred-headline, growthexperiments-mentor-dashboard-mentee-overview-info-text, growthexperiments-mentor-dashboard-mentee-overview-info-legend-headline, and growthexperiments-mentor-dashboard-mentee-overview-active-ago MediaWiki messages were not being properly sanitized and allowed for the injection and execution of HTML and JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T20:28:07.000Z
CVE-2021-42045 
An issue was discovered in SecurePoll in the Growth extension in MediaWiki through 1.36.2. Simple polls allow users to create alerts by changing their User-Agent HTTP header and submitting a vote.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T20:49:18.000Z
CVE-2021-42046 
An issue was discovered in the GlobalWatchlist extension in MediaWiki through 1.36.2. The rev-deleted-user and ntimes messages were not properly escaped and allowed for users to inject HTML and JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T20:48:31.000Z
CVE-2021-42047 
An issue was discovered in the Growth extension in MediaWiki through 1.36.2. On any Wiki with the Mentor Dashboard feature enabled, users can login with a mentor account and trigger an XSS payload (such as alert) via Growthexperiments-mentor-dashboard-mentee-overview-no-js-fallback.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T20:48:01.000Z
CVE-2021-42048 
An issue was discovered in the Growth extension in MediaWiki through 1.36.2. Any admin can add arbitrary JavaScript code to the Newcomer home page footer, which can be executed by viewers with zero edits.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T20:47:15.000Z
CVE-2021-42049 
An issue was discovered in the Translate extension in MediaWiki through 1.36.2. Oversighters cannot undo revisions or oversight on pages where they suppressed information (such as PII). This allows oversighters to whitewash revisions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-06T20:47:00.000Z
CVE-2021-42050 
An issue was discovered in AbanteCart before 1.3.2. It allows DOM Based XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-14T14:09:34.000Z
CVE-2021-42051 
An issue was discovered in AbanteCart before 1.3.2. Any low-privileged user with file-upload permissions can upload a malicious SVG document that contains an XSS payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-14T14:15:20.000Z
CVE-2021-42052 
IPESA e-Flow 3.3.6 allows path traversal for reading any file within the web root directory via the lib/js/build/STEResource.res path and the R query parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-08-16T21:29:22.000Z
CVE-2021-42053 
The Unicorn framework through 0.35.3 for Django allows XSS via component.name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-07T05:21:05.000Z
CVE-2021-42054 
ACCEL-PPP 1.12.0 has an out-of-bounds read in triton_context_schedule if the client exits after authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-07T05:28:57.000Z
CVE-2021-42055 
ASUSTek ZenBook Pro Due 15 UX582 laptop firmware through 203 has Insecure Permissions that allow attacks by a physically proximate attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-18T16:21:22.000Z
CVE-2021-42056 
Thales Safenet Authentication Client (SAC) for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a local attacker, through a symlink attack, to overwrite arbitrary files, and potentially achieve arbitrary command execution with high privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-24T16:14:23.000Z
CVE-2021-42057 
Obsidian Dataview through 0.4.12-hotfix1 allows eval injection. The evalInContext function in executes user input, which allows an attacker to craft malicious Markdown files that will execute arbitrary code once opened. NOTE: 0.4.13 provides a mitigation for some use cases.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-04T20:20:59.000Z
CVE-2021-42059 
An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.08.41, Kernel 5.1 before 05.16.41, Kernel 5.2 before 05.26.41, Kernel 5.3 before 05.35.41, and Kernel 5.4 before 05.42.20. A stack-based buffer overflow leads toarbitrary code execution in UEFI DisplayTypeDxe DXE driver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-03T01:13:47.000Z
CVE-2021-42060 
An issue was discovered in Insyde InsydeH2O Kernel 5.0 through 05.08.41, Kernel 5.1 through 05.16.41, Kernel 5.2 before 05.23.22, and Kernel 5.3 before 05.32.22. An Int15ServiceSmm SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-03T01:27:34.000Z
CVE-2021-42061 
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) - version 420, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. This allows a low privileged attacker to retrieve some data from the victim but will never be able to modify the document and publish these modifications to the server. It impacts the "Quick Prompt" workflow.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: SAP SE
product: SAP BusinessObjects Business Intelligence Platform
Published: 2021-12-14T15:44:16.000Z
CVE-2021-42062 
SAP ERP HCM Portugal does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause availability impacts.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: SAP SE
product: SAP ERP HCM Portugal
Published: 2021-11-10T15:30:39.000Z
CVE-2021-42063 
A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usage of one SAP KW component within a Web browser enables unauthorized attackers to conduct XSS attacks, which might lead to disclose sensitive data.
Problem types: description: Cross-Site Scripting
Affected products: vendor: SAP SE
product: SAP Knowledge Warehouse
Published: 2021-12-14T15:44:11.000Z