rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-35327 
A vulnerability in TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to start the Telnet service, then login with the default credentials via a crafted POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-05T20:39:17.000Z
CVE-2021-35331 
In Tcl 8.6.11, a format string vulnerability in nmakehlp.c might allow code execution via a crafted file. NOTE: multiple third parties dispute the significance of this finding
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-05T14:59:29.000Z
CVE-2021-35336 
Tieline IP Audio Gateway 2.6.4.8 and below is affected by Incorrect Access Control. A vulnerability in the Tieline Web Administrative Interface could allow an unauthenticated user to access a sensitive part of the system with a high privileged account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-01T12:33:42.000Z
CVE-2021-35337 
Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will be able to see the invoices of different users by changing the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-01T13:15:26.000Z
CVE-2021-35342 
The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender Enterprise 2.6.x before 2.6.1) allows users to access the system with their JWT token after logout, because of missing invalidation (if the JWT verification cache is enabled).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-27T09:52:16.000Z
CVE-2021-35343 
Cross-Site Request Forgery (CSRF) vulnerability in the /op/op.Ajax.php in SeedDMS v5.1.x<5.1.23 and v6.0.x<6.0.16 allows a remote attacker to edit document name without victim's knowledge, by enticing an authenticated user to visit an attacker's web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-03T18:07:58.000Z
CVE-2021-35344 
tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function BitStreamReader::getCurVal in bitStream.h.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-03T19:36:15.000Z
CVE-2021-35346 
tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::short_term_ref_pic_set(int) in hevc.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-03T19:36:16.000Z
CVE-2021-35358 
A stored cross site scripting (XSS) vulnerability in dotAdmin/#/c/c_Images of dotCMS 21.05.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the 'Title' and 'Filename' parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-09T21:55:49.000Z
CVE-2021-35360 
A reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/containers of dotCMS 21.05.1 allows attackers to execute arbitrary commands or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-09T21:55:47.000Z
CVE-2021-35361 
A reflected cross site scripting (XSS) vulnerability in dotAdmin/#/c/links of dotCMS 21.05.1 allows attackers to execute arbitrary commands or HTML via a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-09T21:55:48.000Z
CVE-2021-35368 
OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is affected by a Request Body Bypass via a trailing pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-05T00:00:00.000Z
CVE-2021-35369 
Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filtering_get_contents function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-24T00:00:00.000Z
CVE-2021-35370 
An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-24T00:00:00.000Z
CVE-2021-35377 
Cross Site Scripting vulnerability found in VICIdial v2.14-610c and v.2.10-415c allows attackers execute arbitrary code via the /agc/vicidial.php, agc/vicidial-greay.php, and /vicidial/KHOMP_admin.php parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-03-06T00:00:00.000Z
CVE-2021-35380 
A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the file they want to download (http://url:port/file?valore).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-15T21:17:02.000Z
CVE-2021-35387 
Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-28T00:00:00.000Z
CVE-2021-35388 
Hospital Management System v 4.0 is vulnerable to Cross Site Scripting (XSS) via /hospital/hms/admin/patient-search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-28T00:00:00.000Z
CVE-2021-35391 
Server Side Request Forgery vulnerability found in Deskpro Support Desk v2021.21.6 allows attackers to execute arbitrary code via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-21T00:00:00.000Z
CVE-2021-35392 
Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The server is vulnerable to a heap buffer overflow that is present due to unsafe crafting of SSDP NOTIFY messages from received M-SEARCH messages ST header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-16T11:07:53.000Z
CVE-2021-35393 
Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd and is the successor to miniigd. The server is vulnerable to a stack buffer overflow vulnerability that is present due to unsafe parsing of the UPnP SUBSCRIBE/UNSUBSCRIBE Callback header. Successful exploitation of this vulnerability allows remote unauthenticated attackers to gain arbitrary code execution on the affected device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-16T11:07:46.000Z
CVE-2021-35394 
Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called 'MP Daemon' that is usually compiled as 'UDPServer' binary. The binary is affected by multiple memory corruption vulnerabilities and an arbitrary command injection vulnerability that can be exploited by remote unauthenticated attackers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-16T11:07:38.000Z
CVE-2021-35395 
Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure the access point. Two versions of this management interface exists: one based on Go-Ahead named webs and another based on Boa named boa. Both of them are affected by these vulnerabilities. Specifically, these binaries are vulnerable to the following issues: - stack buffer overflow in formRebootCheck due to unsafe copy of submit-url parameter - stack buffer overflow in formWsc due to unsafe copy of submit-url parameter - stack buffer overflow in formWlanMultipleAP due to unsafe copy of submit-url parameter - stack buffer overflow in formWlSiteSurvey due to unsafe copy of ifname parameter - stack buffer overflow in formStaticDHCP due to unsafe copy of hostname parameter - stack buffer overflow in formWsc due to unsafe copy of 'peerPin' parameter - arbitrary command execution in formSysCmd via the sysCmd parameter - arbitrary command injection in formWsc via the 'peerPin' parameter Exploitability of identified issues will differ based on what the end vendor/manufacturer did with the Realtek SDK webserver. Some vendors use it as-is, others add their own authentication implementation, some kept all the features from the server, some remove some of them, some inserted their own set of features. However, given that Realtek SDK implementation is full of insecure calls and that developers tends to re-use those examples in their custom code, any binary based on Realtek SDK webserver will probably contains its own set of issues on top of the Realtek ones (if kept). Successful exploitation of these issues allows remote attackers to gain arbitrary code execution on the device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-16T11:07:29.000Z
CVE-2021-35397 
A path traversal vulnerability in the static router for Drogon from 1.0.0-beta14 to 1.6.0 could allow an unauthenticated, remote attacker to arbitrarily read files. The vulnerability is due to lack of proper input validation for requested path. An attacker could exploit this vulnerability by sending crafted HTTP request with specific path to read. Successful exploitation could allow the attacker to read files that should be restricted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-04T10:41:07.000Z
CVE-2021-35402 
PROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command injection via shell metacharacters in the ip parameter (for satellite_status).
Problem types: cwe_id: CWE-78
description: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products: vendor: PROLiNK
product: PRC2402M
default_status: unknown
CVSS v3.1: version: 3.1
baseScore: 10
baseSeverity: CRITICAL
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Published: 2026-02-20T00:00:00.000Z
CVE-2021-35413 
A remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-03T21:07:04.000Z
CVE-2021-35414 
Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-03T21:07:06.000Z
CVE-2021-35415 
A stored cross-site scripting (XSS) vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the course "Title" and "Content" fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-03T21:07:07.000Z
CVE-2021-35437 
SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-11-16T00:00:00.000Z
CVE-2021-35438 
phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets/ipcalc-result.php and app/tools/ip-calculator/result.php of the IP calculator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-23T14:20:08.000Z
CVE-2021-35440 
Smashing 1.3.4 is vulnerable to Cross Site Scripting (XSS). A URL for a widget can be crafted and used to execute JavaScript on the victim's computer. The JavaScript code can then steal data available in the session/cookies depending on the user environment (e.g. if re-using internal URL's for deploying, or cookies that are very permissive) private information may be retrieved by the attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-06T14:44:39.000Z
CVE-2021-35448 
Emote Interactive Remote Mouse 3.008 on Windows allows attackers to execute arbitrary programs as Administrator by using the Image Transfer Folder feature to navigate to cmd.exe. It binds to local ports to listen for incoming connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-24T19:43:50.000Z
CVE-2021-35449 
The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing during the add printer process, resulting in escalation of privileges to SYSTEM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-19T14:16:42.000Z
CVE-2021-35450 
A Server Side Template Injection in the Entando Admin Console 6.3.9 and before allows a user with privileges to execute FreeMarker template with command execution via freemarker.template.utility.Execute
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-02T19:03:30.000Z
CVE-2021-35451 
In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text into user browser via the Web application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-07T13:30:23.000Z
CVE-2021-35452 
An Incorrect Access Control vulnerability exists in libde265 v1.0.8 due to a SEGV in slice.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-10T00:00:00.000Z
CVE-2021-35456 
Online Pet Shop We App 1.0 is vulnerable to remote SQL injection and shell upload
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-28T14:27:42.000Z
CVE-2021-35458 
Online Pet Shop We App 1.0 is vulnerable to Union SQL Injection in products.php (aka p=products) via the c or s parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T05:24:58.000Z
CVE-2021-35463 
Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 allows remote attackers to inject arbitrary web script or HTML into the management toolbar search via the `keywords` parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-04T13:21:32.000Z
CVE-2021-35464 
ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* request to the server. The vulnerability exists due to the usage of Sun ONE Application Framework (JATO) found in versions of Java 8 or earlier
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-22T17:10:18.000Z
CVE-2021-35465 
Certain Arm products before 2021-08-23 do not properly consider the effect of exceptions on a VLLDM instruction. A Non-secure handler may have read or write access to part of a Secure context. This affects Arm Cortex-M33 r0p0 through r1p0, Arm Cortex-M35P r0, Arm Cortex-M55 r0p0 through r1p0, and Arm China STAR-MC1 (in the STAR SE configuration).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-23T12:44:08.000Z
CVE-2021-35469 
The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due to a registry entry that has an unquoted service path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-14T11:43:07.000Z
CVE-2021-35472 
An issue was discovered in LemonLDAP::NG before 2.0.12. Session cache corruption can lead to authorization bypass or spoofing. By running a loop that makes many authentication attempts, an attacker might alternately be authenticated as one of two different users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T05:32:26.000Z
CVE-2021-35473 
An issue was discovered in LemonLDAP::NG before 2.0.12. There is a missing expiration check in the OAuth2.0 handler, i.e., it does not verify access token validity. An attacker can use a expired access token from an OIDC client to access the OAuth2 handler The earliest affected version is 2.0.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2024-11-10T00:00:00.000Z
CVE-2021-35474 Dynamic stack buffer overflow in cachekey plugin
Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
Problem types: cwe_id: CWE-121
description: CWE-121 Stack-based Buffer Overflow
Affected products: vendor: Apache Software Foundation
product: Apache Traffic Server
Published: 2021-06-30T07:15:22.000Z
CVE-2021-35475 
SAS Environment Manager 2.5 allows XSS through the Name field when creating/editing a server. The XSS will prompt when editing the Configuration Properties.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-25T10:01:35.000Z
CVE-2021-35477 
In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation does not necessarily occur before a store operation that has an attacker-controlled value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-02T03:57:24.000Z
CVE-2021-35478 
Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used for filtering are affected. This affects users who open a crafted link or third-party web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T11:44:58.000Z
CVE-2021-35479 
Nagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert history and audit log function through the affected pp parameter. This affects users who open a crafted link or third-party web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T11:47:41.000Z
CVE-2021-35482 
An issue was discovered in Barco MirrorOp Windows Sender before 2.5.4.70. An attacker in the local network is able to achieve Remote Code Execution (with user privileges of the local user) on any device that tries to connect to a WePresent presentation system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-21T17:29:04.000Z
CVE-2021-35483 
The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload JavaScript files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the editing of an existing one. If an authenticated user visits the web page where the file is published, the JavaScript code is executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-03-03T00:00:00.000Z
CVE-2021-35484 
Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-proxy/campaign/statistic (for the View Campaign page) via the sortColumn HTTP GET parameter. This allows an attacker to access sensitive data from the database and obtain access to the database user, database name, and database version information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-03-03T00:00:00.000Z
CVE-2021-35485 
The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the /ui/rest-proxy/application fileupload parameter. This can occur during the adding of a new application, or during the editing of an existing one.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-03-03T00:00:00.000Z
CVE-2021-35486 
A Cross-Site Request Forgery (CSRF) vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import and overwrite the entire application configuration. Specifically, in /ui/rest-proxy/entity/import, neither the X-CSRF-NONCE HTTP header nor the CSRF-NONCE cookie is validated.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-03-03T00:00:00.000Z
CVE-2021-35487 
Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates (for the Manage Alerts page) via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user, database name, and database version information, and potentially database data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-25T13:41:38.000Z
CVE-2021-35488 
Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter. An attacker could inject arbitrary JavaScript into status.cgi. The payload would be triggered every time an authenticated user browses the page containing it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-09T22:29:41.000Z
CVE-2021-35489 
Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={SERVICENAME]&backend={BACKEND] Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browses the page containing it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-09T22:28:52.000Z
CVE-2021-35490 
Thruk before 2.44 allows XSS for a quick command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-15T19:49:49.000Z
CVE-2021-35491 
A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5 allows a remote attacker to delete a user account via the /enginemanager/server/user/delete.htm userName parameter. The application does not implement a CSRF token for the GET request. This issue was resolved in Wowza Streaming Engine release 4.8.14.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-05T15:10:37.000Z
CVE-2021-35492 
Wowza Streaming Engine through 4.8.11+5 could allow an authenticated, remote attacker to exhaust filesystem resources via the /enginemanager/server/vhost/historical.jsdata vhost parameter. This is due to the insufficient management of available filesystem resources. An attacker could exploit this vulnerability through the Virtual Host Monitoring section by requesting random virtual-host historical data and exhausting available filesystem resources. A successful exploit could allow the attacker to cause database errors and cause the device to become unresponsive to web-based management. (Manual intervention is required to free filesystem resources and return the application to an operational state.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-05T15:12:22.000Z