rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-45083 
An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain some sensitive information that can be exposed to a local user who has non-privileged access to the server. The users.digest file contains the sha2-512 digest of users in a Cobbler local installation. In the case of an easy-to-guess password, it's trivial to obtain the plaintext string. The settings.yaml file contains secrets such as the hashed default password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-20T17:56:11.000Z
CVE-2021-45085 
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-16T02:19:08.000Z
CVE-2021-45086 
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's suggested_filename is used as the pdf_name value in PDF.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-16T02:19:35.000Z
CVE-2021-45087 
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by a a page title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-16T02:19:26.000Z
CVE-2021-45088 
XSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-16T02:19:17.000Z
CVE-2021-45089 
Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-21T15:15:02.000Z
CVE-2021-45090 
Stormshield Endpoint Security before 2.1.2 allows remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-21T15:17:04.000Z
CVE-2021-45091 
Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-21T15:10:57.000Z
CVE-2021-45092 
Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-16T03:07:32.000Z
CVE-2021-45094 
Imprivata Privileged Access Management (formally Xton Privileged Access Management) 2.3.202112051108 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-20T00:00:00.000Z
CVE-2021-45095 
pep_sock_accept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-16T03:37:50.000Z
CVE-2021-45096 
KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:C/UI:R
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 4.7
baseSeverity: MEDIUM
Published: 2021-12-16T00:00:00.000Z
CVE-2021-45097 
KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without appropriate file access controls, allowing all local users to read its content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:H/AV:L/A:N/C:L/I:N/PR:N/S:U/UI:N
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 2.9
baseSeverity: LOW
Published: 2021-12-16T00:00:00.000Z
CVE-2021-45098 
An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option. Then, the client can send an HTTP GET request with a forbidden URL. The server will ignore the RST ACK and send the response HTTP packet for the client's request. These packets will not trigger a Suricata reject action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-16T04:07:57.000Z
CVE-2021-45099 
The addon.stdin service in addon-ssh (aka Home Assistant Community Add-on: SSH & Web Terminal) before 10.0.0 has an attack surface that requires social engineering. NOTE: the vendor does not agree that this is a vulnerability; however, addon.stdin was removed as a defense-in-depth measure against complex social engineering situations
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-16T04:20:38.000Z
CVE-2021-45100 
The ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2_GLOBAL_CAP_ENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol specification. When Windows 10 detects this protocol violation, it disables encryption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-16T04:37:02.000Z
CVE-2021-45101 
An issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2. Using standard command-line tools, a user with only READ access to an HTCondor SchedD or Collector daemon can discover secrets that could allow them to control other users' jobs and/or read their data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-16T04:46:42.000Z
CVE-2021-45102 
An issue was discovered in HTCondor 9.0.x before 9.0.4 and 9.1.x before 9.1.2. When authenticating to an HTCondor daemon using a SciToken, a user may be granted authorizations beyond what the token should allow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-16T04:46:58.000Z
CVE-2021-45103 
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-06T00:55:20.000Z
CVE-2021-45104 
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-06T01:04:19.000Z
CVE-2021-45105 Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
cwe_id: CWE-674
description: CWE-674: Uncontrolled Recursion
Affected products: vendor: Apache Software Foundation
product: Apache Log4j2
Credits: lang: en
value: Independently discovered by Hideki Okamoto of Akamai Technologies, Guy Lederfein of Trend Micro Research working with Trend Micro’s Zero Day Initiative, and another anonymous vulnerability researcher
Published: 2021-12-18T11:55:08.000Z
CVE-2021-45106 
A vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use a circumventable access control within a database service. This could allow an attacker to access the database.
Problem types: cwe_id: CWE-798
description: CWE-798: Use of Hard-coded Credentials
Affected products: vendor: Siemens
product: SICAM TOOLBOX II
Published: 2022-02-09T15:17:12.000Z
CVE-2021-45111 
Improper access control in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows remote authenticated users to trigger the creation of demonstration data, including user accounts with known credentials.
Problem types: cwe_id: CWE-284
description: Improper Access Control
Affected products: vendor: Odoo
product: Odoo Community
default_status: unaffected
vendor: Odoo
product: Odoo Enterprise
default_status: unaffected
Credits: lang: eng
value: Nils Hamerlinck
lang: eng
value: Yenthe Van Ginneken
Published: 2023-04-25T18:33:00.392Z
CVE-2021-45115 
An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. UserAttributeSimilarityValidator incurred significant overhead in evaluating a submitted password that was artificially large in relation to the comparison values. In a situation where access to user registration was unrestricted, this provided a potential vector for a denial-of-service attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-04T23:16:00.000Z
CVE-2021-45116 
An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language's variable resolution logic, the dictsort template filter was potentially vulnerable to information disclosure, or an unintended method call, if passed a suitably crafted key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-04T23:12:43.000Z
CVE-2021-45117 
The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T14:05:45.000Z
CVE-2021-45222 
An issue was discovered in COINS Construction Cloud 11.12. Due to logical flaws in the human ressources interface, it is vulnerable to privilege escalation by HR personnel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T19:55:30.000Z
CVE-2021-45223 
An issue was discovered in COINS Construction Cloud 11.12. Due to insufficient input neutralization, it is vulnerable to denial of service attacks via forced server crashes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T19:57:31.000Z
CVE-2021-45224 
An issue was discovered in COINS Construction Cloud 11.12. In several locations throughout the application, JavaScript code is passed as a URL parameter. Attackers can trivially alter this code to cause malicious behaviour. The application is therefore vulnerable to reflected XSS via malicious URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T19:58:24.000Z
CVE-2021-45225 
An issue was discovered in COINS Construction Cloud 11.12. Due to improper input neutralization, it is vulnerable to reflected cross-site scripting (XSS) via malicious links (affecting the search window and activity view window).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T19:58:04.000Z
CVE-2021-45226 
An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause it to send password-reset e-mails pointing to arbitrary websites.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T19:57:39.000Z
CVE-2021-45227 
An issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML IFRAME elements, the file upload functionality is vulnerable to a persistent Cross-Site Scripting (XSS) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-14T14:12:35.000Z
CVE-2021-45228 
An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task, it is possible to store malicious JavaScript code in the task description. This is later executed when it is reflected back to the user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-14T14:00:53.000Z
CVE-2021-45229 Apache Airflow: Reflected XSS via Origin Query Argument in URL
It was discovered that the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument. This issue affects Apache Airflow versions 2.2.3 and below.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Credits: lang: en
value: The Apache Airflow PMC would like to thank both Bogdan Kurinnoy of the Samsung R&D Institute Ukraine (SRK) and Ali Al-Habsi of Accellion for independently discovering and reporting this issue.
Published: 2022-02-25T08:30:15.000Z
CVE-2021-45230 Apache Airflow: Creating DagRuns didn't respect Dag-level permissions in the Webserver
In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has "can_create" permissions on DAG Runs can create Dag Runs for dags that they don't have "edit" permissions for.
Problem types: description: Permission checks were limited.
Affected products: vendor: Apache Software Foundation
product: Apache Airflow
Credits: lang: en
value: Apache Airflow PMC would like to thank Franco Cano Erazo for reporting this issue.
Published: 2022-01-20T10:25:10.000Z
CVE-2021-45231 
A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to create a specially crafted file with arbitrary content which could grant local privilege escalation on the affected system. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Problem types: description: Link Following Privilege Escalation
Affected products: vendor: Trend Micro
product: Trend Micro Apex One
vendor: Trend Micro
product: Trend Micro Worry-Free Business Security
Published: 2022-01-08T15:51:05.000Z
CVE-2021-45232 security vulnerability on unauthorized access.
In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework `droplet` on the basis of framework `gin`, all APIs and authentication middleware are developed based on framework `droplet`, but some API directly use the interface of framework `gin` thus bypassing the authentication.
Problem types: cwe_id: CWE-306
description: CWE-306 Missing Authentication for Critical Function
Affected products: vendor: Apache Software Foundation
product: Apache APISIX Dashboard
Credits: lang: en
value: Independently discovered by ZHU Yucheng of YuanbaoTeach Security Team.
Published: 2021-12-27T15:06:50.000Z
CVE-2021-45252 
Multiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For example on three applications which are manage_topic.php, manage_user.php, and ajax.php. The attacker can be retrieving all information from the database of this system by using this vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-21T11:04:26.000Z
CVE-2021-45253 
The id parameter in view_storage.php from Simple Cold Storage Management System 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's load_file function with a UNC file path that references a URL on an external domain. The application interacted with that domain, indicating that the injected SQL query was executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-21T11:23:30.000Z
CVE-2021-45255 
The email parameter from ajax.php of Video Sharing Website 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's load_file function with a UNC file path that references a URL on an external domain. The application interacted with that domain, indicating that the injected SQL query was executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-21T11:50:25.000Z
CVE-2021-45256 
A Null Pointer Dereference vulnerability existfs in nasm 2.16rc0 via asm/preproc.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T16:30:59.000Z
CVE-2021-45257 
An infinite loop vulnerability exists in nasm 2.16rc0 via the gpaste_tokens function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T16:37:12.000Z
CVE-2021-45258 
A stack overflow vulnerability exists in gpac 1.1.0 via the gf_bifs_dec_proto_list function, which causes a segmentation fault and application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T16:53:06.000Z
CVE-2021-45259 
An Invalid pointer reference vulnerability exists in gpac 1.1.0 via the gf_svg_node_del function, which causes a segmentation fault and application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T16:58:26.000Z
CVE-2021-45260 
A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentation fault and application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T17:04:36.000Z
CVE-2021-45261 
An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T17:12:19.000Z
CVE-2021-45262 
An invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which causes a segmentation fault and application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T00:00:00.000Z
CVE-2021-45263 
An invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function, which causes a segmentation fault and application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T00:00:00.000Z
CVE-2021-45266 
A null pointer dereference vulnerability exists in gpac 1.1.0 via the lsr_read_anim_values_ex function, which causes a segmentation fault and application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T17:53:40.000Z
CVE-2021-45267 
An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svg_node_start function, which causes a segmentation fault and application crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-22T00:00:00.000Z
CVE-2021-45268 
A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading a maliciously add-on with crafted PHP file. NOTE: the vendor disputes this because the attack requires a session cookie of a high-privileged authenticated user who is entitled to install arbitrary add-ons
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-03T21:46:03.000Z
CVE-2021-45281 
QuickBox Pro v2.4.8 contains a cross-site scripting (XSS) vulnerability at "adminuseredit.php?usertoedit=XSS", as the user supplied input for the value of this parameter is not properly sanitized.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-07T21:23:48.000Z
CVE-2021-45286 
Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1) index.php, 2) bottom.php, and 3) top_index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-09T19:34:03.000Z
CVE-2021-45288 
A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-21T16:55:31.000Z
CVE-2021-45289 
A vulnerability exists in GPAC 1.0.1 due to an omission of security-relevant Information, which could cause a Denial of Service. The program terminates with signal SIGKILL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-21T17:14:26.000Z
CVE-2021-45290 
A Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm::handle_unreachable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-21T17:25:05.000Z
CVE-2021-45291 
The gf_dump_setup function in GPAC 1.0.1 allows malicoius users to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-21T00:00:00.000Z
CVE-2021-45292 
The gf_isom_hint_rtp_read function in GPAC 1.0.1 allows attackers to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-21T00:00:00.000Z
CVE-2021-45293 
A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-21T17:54:31.000Z
CVE-2021-45297 
An infinite loop vulnerability exists in Gpac 1.0.1 in gf_get_bit_size.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-21T00:00:00.000Z
CVE-2021-45310 
Sangoma Technologies Corporation Switchvox Version 102409 is affected by an information disclosure vulnerability due to an improper access restriction. Users information such as first name, last name, acount id, server uuid, email address, profile image, number, timestamps, etc can be extracted by sending an unauthenticated HTTP GET request to the https://Switchvox-IP/main?cmd=invalid_browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-14T20:15:53.000Z
CVE-2021-45325 
Server Side Request Forgery (SSRF) vulneraility exists in Gitea before 1.7.0 using the OpenID URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-08T14:36:14.000Z
CVE-2021-45326 
Cross Site Request Forgery (CSRF) vulnerability exists in Gitea before 1.5.2 via API routes.This can be dangerous especially with state altering POST requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-08T14:48:50.000Z
CVE-2021-45327 
Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API. which could let a remote malisious user execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-08T14:57:36.000Z
CVE-2021-45328 
Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-08T15:14:10.000Z