rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-38135 Possible External service interaction Vulnerability in OpenText iManager
Possible 
External Service Interaction attack

in iManager has been discovered in
OpenText™ iManager 3.2.6.0000.
Problem types: cwe_id: CWE-918
description: CWE-918 Server-Side Request Forgery (SSRF)
cwe_id: CWE-406
description: CWE-406: Insufficient Control of Network Message Volume (Network Amplification)
Affected products: vendor: OpenText
product: iManager
default_status: affected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.6
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
version: 3.1
Published: 2024-11-22T15:34:34.561Z
CVE-2021-38136 
Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snap_file parameter in the /it-IT/splunkd/__raw/services/get_snapshot HTTP API endpoint. A ‘low privileged’ attacker can read any file on the target host.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T14:06:16.000Z
CVE-2021-38137 
Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T14:01:30.000Z
CVE-2021-38138 
OneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not any XSS protection at present, because the attack risk is largely limited to a compromised account; however, XSS protection is planned for a future release.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-05T15:59:00.000Z
CVE-2021-38140 
The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after set_user().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-10T18:00:43.000Z
CVE-2021-38142 
Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades. An attacker on the local network can achieve remote code execution on any computer that tries to update Windows Sender due to the fact that the upgrade mechanism is not secured (is not protected with TLS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T17:18:22.000Z
CVE-2021-38143 
An issue was discovered in Form Tools through 3.0.20. When an administrator creates a customer account, it is possible for the customer to log in and proceed with a change of name and last name. However, these fields are vulnerable to XSS payload insertion, being triggered in the admin panel when the admin tries to see the client list. This type of XSS (stored) can lead to the extraction of the PHPSESSID cookie belonging to the admin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-31T04:05:12.000Z
CVE-2021-38144 
An issue was discovered in Form Tools through 3.0.20. A low-privileged user can trigger Reflected XSS when a viewing a form via the submission_id parameter, e.g., clients/forms/edit_submission.php?form_id=1&view_id=1&submission_id=[XSS].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-31T04:06:18.000Z
CVE-2021-38145 
An issue was discovered in Form Tools through 3.0.20. SQL Injection can occur via the export_group_id field when a low-privileged user (client) tries to export a form with data, e.g., manipulation of modules/export_manager/export.php?export_group_id=1&export_group_1_results=all&export_type_id=1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-31T04:03:48.000Z
CVE-2021-38146 
The File Download API in Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-22T08:34:58.000Z
CVE-2021-38147 
Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/Domain_Credential_Report_Excel, processexecution/DownloadExcelFile/User_Report_Excel, processexecution/DownloadExcelFile/Process_Report_Excel, processexecution/DownloadExcelFile/Infrastructure_Report_Excel, or processexecution/DownloadExcelFile/Resolver_Report_Excel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-29T07:42:23.000Z
CVE-2021-38148 
Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-07T02:28:49.000Z
CVE-2021-38149 
index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T11:50:11.000Z
CVE-2021-38150 
When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engineering attack, SAP Business Client versions - 7.0, 7.70, will allow him to read extremely sensitive data, such as credentials. This would allow the attacker to compromise the corresponding backend for which the credentials are valid.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Business Client
Published: 2021-09-14T11:14:59.000Z
CVE-2021-38151 
index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T11:50:28.000Z
CVE-2021-38152 
index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T11:50:40.000Z
CVE-2021-38153 Timing Attack Vulnerability for Apache Kafka Connect and Clients
Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnerability has been fixed. The affected versions include Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, 2.2.2, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.6.0, 2.6.1, 2.6.2, 2.7.0, 2.7.1, and 2.8.0.
Problem types: cwe_id: CWE-203
description: CWE-203 Observable Discrepancy
Affected products: vendor: Apache Software Foundation
product: Apache Kafka
Credits: lang: en
value: Apache Kafka would like to thank J. Santilli for reporting this issue.
Published: 2021-09-22T09:05:11.000Z
CVE-2021-38154 
Certain Canon devices manufactured in 2012 through 2020 (such as imageRUNNER ADVANCE iR-ADV C5250), when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For example, an incoming FAX may be sent through e-mail to the attacker. This occurs when a PIN is not required for General User Mode, as exploited in the wild in August 2021.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-29T04:59:18.000Z
CVE-2021-38155 
OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allows information disclosure during account locking (related to PCI DSS features). By guessing the name of an account and failing to authenticate multiple times, any unauthenticated actor could both confirm the account exists and obtain that account's corresponding UUID, which might be leveraged for other unrelated attacks. All deployments enabling security_compliance.lockout_failure_attempts are affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T00:00:00.000Z
CVE-2021-38156 
In Nagios XI before 5.8.6, XSS exists in the dashboard page (/dashboards/#) when administrative users attempt to edit a dashboard.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T13:20:49.000Z
CVE-2021-38157 
LeoStream Connection Broker 9.x before 9.0.34.3 allows Unauthenticated Reflected XSS via the /index.pl user parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T20:58:13.000Z
CVE-2021-38159 
In certain Progress MOVEit Transfer versions before 2021.0.4 (aka 13.0.4), SQL injection in the MOVEit Transfer web application could allow an unauthenticated remote attacker to gain access to the database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database, or execute SQL statements that alter or delete database elements, via crafted strings sent to unique MOVEit Transfer transaction types. The fixed versions are 2019.0.8 (11.0.8), 2019.1.7 (11.1.7), 2019.2.4 (11.2.4), 2020.0.7 (12.0.7), 2020.1.6 (12.1.6), and 2021.0.4 (13.0.4).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-07T16:05:08.000Z
CVE-2021-38160 
In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in any existing use case; the length validation was added solely for robustness in the face of anomalous host OS behavior
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-07T03:31:12.000Z
CVE-2021-38161 Not validating origin TLS certificate
Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server allows for man in the middle attacks. This issue affects Apache Traffic Server 8.0.0 to 8.0.8.
Problem types: cwe_id: CWE-287
description: CWE-287 Improper Authentication
Affected products: vendor: Apache Software Foundation
product: Apache Traffic Server
Published: 2021-11-03T15:20:24.000Z
CVE-2021-38162 
SAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49, KRNL64UC -7.22, 7.22EXT, 7.49, 7.53, KERNEL - 7.22, 7.49, 7.53, 7.77, 7.81, 7.83 processes allow an unauthenticated attacker to submit a malicious crafted request over a network to a front-end server which may, over several attempts, result in a back-end server confusing the boundaries of malicious and legitimate messages. This can result in the back-end server executing a malicious payload which can be used to read or modify any information on the server or consume server resources making it temporarily unavailable.
Problem types: cwe_id: CWE-444
description: CWE-444
Affected products: vendor: SAP SE
product: SAP Web Dispatcher
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 8.9
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
version: 3.1
Published: 2021-09-14T11:15:37.000Z
CVE-2021-38163 
SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and trigger its processing, which is capable of running operating system commands with the privilege of the Java Server process. These commands can be used to read or modify any information on the server or shut the server down making it unavailable.
Problem types: description: Unrestricted File Upload
Affected products: vendor: SAP SE
product: SAP NetWeaver (Visual Composer 7.0 RT)
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.9
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
version: 3.1
Published: 2021-09-14T11:21:36.000Z
CVE-2021-38164 
SAP ERP Financial Accounting (RFOPENPOSTING_FR) versions - SAP_APPL - 600, 602, 603, 604, 605, 606, 616, SAP_FIN - 617, 618, 700, 720, 730, SAPSCORE - 125, S4CORE, 100, 101, 102, 103, 104, 105, allows a registered attacker to invoke certain functions that would otherwise be restricted to specific users. These functions are normally exposed over the network and once exploited the attacker may be able to view and modify financial accounting data that only a specific user should have access to.
Problem types: cwe_id: CWE-862
description: CWE-862: Missing Authorization
Affected products: vendor: SAP SE
product: SAP ERP Financial Accounting (RFOPENPOSTING_FR)
Published: 2021-09-14T11:19:00.000Z
CVE-2021-38165 
Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-07T17:33:54.000Z
CVE-2021-38166 
In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-07T17:50:52.000Z
CVE-2021-38167 
Roxy-WI through 5.2.2.0 allows SQL Injection via check_login. An unauthenticated attacker can extract a valid uuid to bypass authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-07T18:00:36.000Z
CVE-2021-38168 
Roxy-WI through 5.2.2.0 allows authenticated SQL injection via select_servers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-07T18:00:54.000Z
CVE-2021-38169 
Roxy-WI through 5.2.2.0 allows command injection via /app/funct.py and /api/api_funct.py.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-07T18:00:45.000Z
CVE-2021-38171 
adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return value, which is a necessary step because the second argument to init_get_bits can be crafted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-21T00:00:00.000Z
CVE-2021-38172 
perM 0.4.0 has a Buffer Overflow related to strncpy. (Debian initially fixed this in 0.4.0-7.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-05T17:26:21.000Z
CVE-2021-38173 
Btrbk before 0.31.2 allows command execution because of the mishandling of remote hosts filtering SSH commands using ssh_filter_btrbk.sh in authorized_keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-07T18:58:19.000Z
CVE-2021-38174 
When a user opens manipulated files received from untrusted sources in SAP 3D Visual Enterprise Viewer version - 9, the application crashes and becomes temporarily unavailable to the user until restart of the application.
Problem types: description: Improper Input Validation
Affected products: vendor: SAP SE
product: SAP 3D Visual Enterprise Viewer
Published: 2021-09-14T11:25:02.000Z
CVE-2021-38175 
SAP Analysis for Microsoft Office - version 2.8, allows an attacker with high privileges to read sensitive data over the network, and gather or change information in the current system without user interaction. The attack would not lead to an impact on the availability of the system, but there would be an impact on integrity and confidentiality.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Analysis for Microsoft Office
Published: 2021-09-14T11:21:42.000Z
CVE-2021-38176 
Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could completely compromise confidentiality, integrity, and availability of the system.
Problem types: description: Improper Input Sanitization
Affected products: vendor: SAP SE
product: SAP S/4HANA
vendor: SAP SE
product: SAP LT Replication Server
vendor: SAP SE
product: SAP LTRS for S/4HANA
vendor: SAP SE
product: SAP Test Data Migration Server
vendor: SAP SE
product: SAP Landscape Transformation
Published: 2021-09-14T11:19:07.000Z
CVE-2021-38177 
SAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference vulnerability when an unauthenticated attacker sends crafted malicious data in the HTTP requests over the network, this causes the SAP application to crash and has high impact on the availability of the SAP system.
Problem types: description: Null Pointer Dereference
Affected products: vendor: SAP SE
product: SAP CommonCryptoLib
Published: 2021-09-14T11:24:27.000Z
CVE-2021-38178 
The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious code can reach quality and production, and can compromise the confidentiality, integrity, and availability of the system and its data.
Problem types: description: Improper Authorization
Affected products: vendor: SAP SE
product: SAP NetWeaver AS ABAP and ABAP Platform
Published: 2021-10-12T14:03:34.000Z
CVE-2021-38179 
Debug function of Admin UI of SAP Business One Integration is enabled by default. This allows Admin User to see the captured packet contents which may include User credentials.
Problem types: description: Information Disclosure
Affected products: vendor: SAP SE
product: SAP Business One
Published: 2021-10-12T14:03:06.000Z
CVE-2021-38180 
SAP Business One - version 10.0, allows an attacker to inject formulas when exporting data to Excel (CSV injection) due to improper sanitation during the data export. An attacker could thereby execute arbitrary commands on the victim's computer but only if the victim allows to execute macros while opening the file and the security settings of Excel allow for command execution.
Problem types: cwe_id: CWE-1236
description: CWE-1236
Affected products: vendor: SAP SE
product: SAP Business One
default_status: unaffected
Published: 2021-10-12T14:03:41.000Z
CVE-2021-38181 
SAP NetWeaver AS ABAP and ABAP Platform - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
Problem types: description: Denial of Service
Affected products: vendor: SAP SE
product: SAP NetWeaver AS ABAP and ABAP Platform
Published: 2021-10-12T14:03:13.000Z
CVE-2021-38182 
Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster.
Problem types: description: Header Manipulation
Affected products: vendor: SAP SE
product: Kyma
Published: 2021-12-14T15:44:13.000Z
CVE-2021-38183 
SAP NetWeaver - versions 700, 701, 702, 730, does not sufficiently encode user-controlled inputs, allowing an attacker to cause a potential victim to supply a malicious content to a vulnerable web application, which is then reflected to the victim and executed by the web browser, resulting in Cross-Site Scripting vulnerability.
Problem types: description: Cross Site Scripting
Affected products: vendor: SAP SE
product: SAP NetWeaver
Published: 2021-10-12T14:04:07.000Z
CVE-2021-38185 
GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_fgetstr integer overflow that triggers an out-of-bounds heap write. NOTE: it is unclear whether there are common cases where the pattern file, associated with the -E option, is untrusted data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-07T00:00:00.000Z
CVE-2021-38186 
An issue was discovered in the comrak crate before 0.10.1 for Rust. It mishandles & characters, leading to XSS via &# HTML entities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:10:53.000Z
CVE-2021-38187 
An issue was discovered in the anymap crate through 0.12.1 for Rust. It violates soundness via conversion of a *u8 to a *u64.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:10:41.000Z
CVE-2021-38188 
An issue was discovered in the iced-x86 crate through 1.10.3 for Rust. In Decoder::new(), slice.get_unchecked(slice.length()) is used unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:10:26.000Z
CVE-2021-38189 
An issue was discovered in the lettre crate before 0.9.6 for Rust. In an e-mail message body, an attacker can place a . character after two <CR><LF> sequences and then inject arbitrary SMTP commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:10:12.000Z
CVE-2021-38190 
An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:09:59.000Z
CVE-2021-38191 
An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the wrong thread.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:09:27.000Z
CVE-2021-38192 
An issue was discovered in the prost-types crate before 0.8.0 for Rust. An overflow can occur during conversion from Timestamp to SystemTime.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:09:14.000Z
CVE-2021-38193 
An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:09:01.000Z
CVE-2021-38194 
An issue was discovered in the ark-r1cs-std crate before 0.3.1 for Rust. It does not enforce any constraints in the FieldVar::mul_by_inverse method. Thus, a prover can produce a proof that is unsound but is nonetheless verified.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:08:44.000Z
CVE-2021-38195 
An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to be larger than the curve order, aka an overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:07:36.000Z
CVE-2021-38196 
An issue was discovered in the better-macro crate through 2021-07-22 for Rust. It intentionally demonstrates that remote attackers can execute arbitrary code via proc-macros, and otherwise has no legitimate purpose.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:07:14.000Z