rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-3631 
A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.
Problem types: cwe_id: CWE-732
description: CWE-732
Affected products: vendor: n/a
product: libvirt
Published: 2022-03-02T00:00:00.000Z
CVE-2021-3632 
A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is not a device already registered for any user by using the WebAuthn password-less login flow.
Problem types: cwe_id: CWE-287
description: CWE-287 - Improper Authentication
Affected products: vendor: n/a
product: keycloak
Published: 2022-08-26T15:25:41.000Z
CVE-2021-3633 
A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow privilege escalation.
Problem types: cwe_id: CWE-347
description: CWE-347 Improper Verification of Cryptographic Signature
Affected products: vendor: Lenovo
product: Driver Management
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Lenovo thanks Guangdong Network Security Emergency Response Center and Sangfor QianLiMu Security Lab – Terminal Security Team for identifying this issue.
Published: 2021-08-17T16:25:30.000Z
CVE-2021-3634 
A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the same, but after key re-exchange, previous session_id is kept and used as an input to new secret_hash. Historically, both of these buffers had shared length variable, which worked as long as these buffers were same. But the key re-exchange operation can also change the key exchange method, which can be based on hash of different size, eventually creating "secret_hash" of different size than the session_id has. This becomes an issue when the session_id memory is zeroed or when it is used again during second key re-exchange.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: n/a
product: libssh
Published: 2021-08-31T00:00:00.000Z
CVE-2021-3635 
A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_ADMIN) access is able to panic the system when issuing netfilter netflow commands.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: kernel
Published: 2021-08-13T13:22:05.000Z
CVE-2021-3636 
It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The Service CA is automatically mounted into all pods, allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. The incorrect inclusion of additional CAs in this certificate would allow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service.
Problem types: cwe_id: CWE-295
description: CWE-295->CWE-287
Affected products: vendor: n/a
product: openshift
Published: 2021-07-30T19:27:06.000Z
CVE-2021-3637 
A flaw was found in keycloak-model-infinispan in keycloak versions before 14.0.0 where authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly which could lead to a DoS attack.
Problem types: cwe_id: CWE-770
description: CWE-770
Affected products: vendor: n/a
product: keycloak-model-infinispan
Published: 2021-07-09T10:33:23.000Z
CVE-2021-3638 
An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.
Problem types: cwe_id: CWE-787
description: CWE-787 - Out-of-bounds Write
Affected products: vendor: n/a
product: QEMU
Published: 2022-03-03T00:00:00.000Z
CVE-2021-3639 
A flaw was found in mod_auth_mellon where it does not sanitize logout URLs properly. This issue could be used by an attacker to facilitate phishing attacks by tricking users into visiting a trusted web application URL that redirects to an external and potentially malicious server. The highest threat from this liability is to confidentiality and integrity.
Problem types: cwe_id: CWE-601
description: CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
Affected products: vendor: n/a
product: mod_auth_mellon
Published: 2022-08-22T14:49:03.000Z
CVE-2021-3640 
A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable faulting memory page. A privileged local user could use this flaw to crash the system or escalate their privileges on the system.
Problem types: cwe_id: CWE-362
description: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'), CWE-416 - Use After Free.
Affected products: vendor: n/a
product: kernel
Published: 2022-03-03T22:04:15.000Z
CVE-2021-3641 Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921)
Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions.
Problem types: cwe_id: CWE-59
description: CWE-59 Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: Bitdefender
product: GravityZone
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
version: 3.1
Credits: lang: en
value: @Kharosx0 working with Trend Micro Zero Day Initiative
Published: 2021-11-09T14:10:14.024Z
CVE-2021-3642 
A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.
Problem types: cwe_id: CWE-203
description: CWE-203
Affected products: vendor: n/a
product: wildfly-elytron
Published: 2021-08-05T20:48:01.000Z
CVE-2021-3643 
A flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global-buffer-overflow. This flaw allows an attacker to input a malicious file, leading to the disclosure of sensitive information.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: n/a
product: sox
Published: 2022-05-02T18:46:26.000Z
CVE-2021-3644 
A flaw was found in wildfly-core in all versions. If a vault expression is in the form of a single attribute that contains multiple expressions, a user who was granted access to the management interface can potentially access a vault expression they should not be able to access and possibly retrieve the item which was stored in the vault. The highest threat from this vulnerability is data confidentiality and integrity.
Problem types: cwe_id: CWE-200
description: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: n/a
product: wildfly-core
Published: 2022-08-26T15:25:40.000Z
CVE-2021-3645 Prototype Pollution in viking04/merge
merge is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Problem types: cwe_id: CWE-1321
description: CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Affected products: vendor: viking04
product: viking04/merge
Published: 2021-09-10T11:04:25.000Z
CVE-2021-3646 Cross-site Scripting (XSS) - Reflected in btcpayserver/btcpayserver
btcpayserver is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: btcpayserver
product: btcpayserver/btcpayserver
Published: 2021-09-10T18:02:50.000Z
CVE-2021-3647 Open Redirect in medialize/URI.js
URI.js is vulnerable to URL Redirection to Untrusted Site
Problem types: cwe_id: CWE-601
description: CWE-601 URL Redirection to Untrusted Site
Affected products: vendor: medialize
product: medialize/URI.js
Published: 2021-07-16T10:11:17.000Z
CVE-2021-3649 Inefficient Regular Expression Complexity in chatwoot/chatwoot
chatwoot is vulnerable to Inefficient Regular Expression Complexity
Problem types: cwe_id: CWE-1333
description: CWE-1333 Inefficient Regular Expression Complexity
Affected products: vendor: chatwoot
product: chatwoot/chatwoot
Published: 2021-07-16T13:33:25.000Z
CVE-2021-3652 
A flaw was found in 389-ds-base. If an asterisk is imported as password hashes, either accidentally or maliciously, then instead of being inactive, any password will successfully match during authentication. This flaw allows an attacker to successfully authenticate as a user whose password was disabled.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: n/a
product: 389-ds-base
Published: 2022-04-18T00:00:00.000Z
CVE-2021-3653 
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: n/a
product: kernel
Published: 2021-09-29T19:41:01.000Z
CVE-2021-3654 
A vulnerability was found in openstack-nova's console proxy, noVNC. By crafting a malicious URL, noVNC could be made to redirect to any desired URL.
Problem types: cwe_id: CWE-601
description: CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')
Affected products: vendor: n/a
product: openstack-nova
Published: 2022-03-02T00:00:00.000Z
CVE-2021-3655 
A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory.
Problem types: cwe_id: CWE-909
description: CWE-909
Affected products: vendor: n/a
product: kernel
Published: 2021-08-05T20:48:04.000Z
CVE-2021-3656 
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape.
Problem types: cwe_id: CWE-862
description: CWE-862
Affected products: vendor: n/a
product: KVM
Published: 2022-03-04T18:41:26.000Z
CVE-2021-3657 
A flaw was found in mbsync versions prior to 1.4.4. Due to inadequate handling of extremely large (>=2GiB) IMAP literals, malicious or compromised IMAP servers, and hypothetically even external email senders, could cause several different buffer overflows, which could conceivably be exploited for remote code execution.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: isync
Published: 2022-02-18T17:50:56.000Z
CVE-2021-3658 
bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.
Problem types: cwe_id: CWE-863
description: CWE-863
Affected products: vendor: n/a
product: bluez
Published: 2022-03-02T22:11:05.000Z
CVE-2021-3659 
A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-252
description: CWE-252 - Unchecked Return Value, CWE-476 - NULL Pointer Dereference
Affected products: vendor: n/a
product: Kernel
Published: 2022-08-22T14:49:43.000Z
CVE-2021-3660 
Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an <iFrame> HTML entry. This may be used by a malicious website in clickjacking or similar attacks.
Problem types: cwe_id: CWE-1021
description: CWE-1021 - Improper Restriction of Rendered UI Layers or Frames
Affected products: vendor: n/a
product: cockpit
Published: 2022-03-07T13:59:18.000Z
CVE-2021-3661 
A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential vulnerability.
Problem types: description: n/a
Affected products: vendor: HP Inc.
product: HP Workstation BIOS
Published: 2022-11-21T21:19:42.950Z
CVE-2021-3662 
Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting (XSS).
Problem types: description: Stored cross site scripting (XSS)
Affected products: vendor: n/a
product: HP Enterprise LaserJet MFP; HP Enterprise PageWide MFPs; HP Digital Sender
Published: 2021-10-29T11:32:07.000Z
CVE-2021-3663 Improper Restriction of Excessive Authentication Attempts in firefly-iii/firefly-iii
firefly-iii is vulnerable to Improper Restriction of Excessive Authentication Attempts
Problem types: cwe_id: CWE-307
description: CWE-307 Improper Restriction of Excessive Authentication Attempts
Affected products: vendor: firefly-iii
product: firefly-iii/firefly-iii
Published: 2021-07-25T13:25:12.000Z
CVE-2021-3664 Open Redirect in unshiftio/url-parse
url-parse is vulnerable to URL Redirection to Untrusted Site
Problem types: cwe_id: CWE-601
description: CWE-601 URL Redirection to Untrusted Site
Affected products: vendor: unshiftio
product: unshiftio/url-parse
Published: 2021-07-26T00:00:00.000Z
CVE-2021-3666 Prototype Pollution in fiznool/body-parser-xml
body-parser-xml is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Problem types: cwe_id: CWE-1321
description: CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Affected products: vendor: fiznool
product: fiznool/body-parser-xml
Published: 2021-09-13T17:56:50.000Z
CVE-2021-3667 
An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited ACL permissions could use this flaw to acquire the lock and prevent other users from accessing storage pool/volume APIs, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability.
Problem types: cwe_id: CWE-667
description: CWE-667  (improper Locking)
Affected products: vendor: n/a
product: libvirt
Published: 2022-03-02T00:00:00.000Z
CVE-2021-3669 
A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts which could lead to resource exhaustion and DoS.
Problem types: cwe_id: CWE-400
description: CWE-400 - Uncontrolled Resource Consumption
Affected products: vendor: n/a
product: kernel
Published: 2022-08-26T15:25:40.000Z
CVE-2021-3670 
MaxQueryDuration not honoured in Samba AD DC LDAP
Problem types: cwe_id: CWE-400
description: CWE-400 - Uncontrolled Resource Consumption
Affected products: vendor: n/a
product: samba
Published: 2022-08-23T15:50:25.000Z
CVE-2021-3671 
A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: n/a
product: Samba
Published: 2021-10-12T00:00:00.000Z
CVE-2021-3672 
A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: n/a
product: c-ares
Published: 2021-11-23T00:00:00.000Z
CVE-2021-3673 
A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can lead to resource exhaustion and DoS.
Problem types: cwe_id: CWE-20
description: CWE-20->CWE-400
Affected products: vendor: n/a
product: radare2
Published: 2021-08-02T18:09:40.000Z
CVE-2021-3674 
A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: n/a
product: rizin
Published: 2023-03-24T00:00:00.000Z
CVE-2021-3675 synaTEE.signed.dll Out-Of-Bounds Heap Write
Improper Input Validation vulnerability in synaTEE.signed.dll of Synaptics Fingerprint Driver allows a local authorized attacker to overwrite a heap tag, with potential loss of confidentiality. This issue affects: Synaptics Synaptics Fingerprint Driver 5.1.xxx.26 versions prior to xxx=340 on x86/64; 5.2.xxxx.26 versions prior to xxxx=3541 on x86/64; 5.2.2xx.26 versions prior to xx=29 on x86/64; 5.2.3xx.26 versions prior to xx=25 on x86/64; 5.3.xxxx.26 versions prior to xxxx=3543 on x86/64; 5.5.xx.1058 versions prior to xx=44 on x86/64; 5.5.xx.1102 versions prior to xx=34 on x86/64; 5.5.xx.1116 versions prior to xx=14 on x86/64; 6.0.xx.1104 versions prior to xx=50 on x86/64; 6.0.xx.1108 versions prior to xx=31 on x86/64; 6.0.xx.1111 versions prior to xx=58 on x86/64.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Synaptics
product: Synaptics Fingerprint Driver
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Credits: lang: en
value: Synaptics would like to thank Tobias Cloosters and Johannes Willbold for reporting this issue.
Published: 2022-06-16T16:15:00.966Z
CVE-2021-3677 
A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include max_worker_processes=0, the known versions of this attack are infeasible. However, undiscovered variants of the attack may be independent of that setting.
Problem types: cwe_id: CWE-200
description: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: n/a
product: postgresql
Published: 2022-03-02T00:00:00.000Z
CVE-2021-3678 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Problem types: cwe_id: CWE-338
description: CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Affected products: vendor: star7th
product: star7th/showdoc
Published: 2021-08-04T13:14:29.000Z
CVE-2021-3679 
A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causing denial of service.
Problem types: cwe_id: CWE-400
description: CWE-400
Affected products: vendor: n/a
product: kernel
Published: 2021-08-05T19:54:42.000Z
CVE-2021-3680 Missing Cryptographic Step in star7th/showdoc
showdoc is vulnerable to Missing Cryptographic Step
Problem types: cwe_id: CWE-325
description: CWE-325 Missing Cryptographic Step
Affected products: vendor: star7th
product: star7th/showdoc
Published: 2021-08-04T12:50:47.000Z
CVE-2021-3681 
A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directory that are not explicitly excluded via the ``build_ignore`` list in "galaxy.yml" include files in the ``.tar.gz`` file. This contains sensitive info, such as the user's Ansible Galaxy API key and any secrets in ``ansible`` or ``ansible-playbook`` verbose output without the``no_log`` redaction. Currently, there is no way to deprecate a Collection Or delete a Collection Version. Once published, anyone who downloads or installs the collection can view the secrets.
Problem types: cwe_id: CWE-522
description: CWE-522->CWE-212
Affected products: vendor: n/a
product: ansible
Published: 2022-04-18T16:20:37.000Z
CVE-2021-3682 
A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a SPICE client due to the packet queue being full. A malicious SPICE client could use this flaw to make QEMU call free() with faked heap chunk metadata, resulting in a crash of QEMU or potential code execution with the privileges of the QEMU process on the host.
Problem types: cwe_id: CWE-763
description: CWE-763
Affected products: vendor: n/a
product: QEMU
Published: 2021-08-05T19:51:26.000Z
CVE-2021-3683 Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: star7th
product: star7th/showdoc
Published: 2021-11-13T09:30:11.000Z
CVE-2021-3684 
A vulnerability was found in OpenShift Assisted Installer. During generation of the Discovery ISO, image pull secrets were leaked as plaintext in the installation logs. An authenticated user could exploit this by re-using the image pull secret to pull container images from the registry as the associated user.
Problem types: cwe_id: CWE-532
description: CWE-532
Affected products: vendor: n/a
product: assisted-installer
Published: 2023-03-24T00:00:00.000Z