rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-37412 
The TechRadar app 1.1 for Confluence Server allows XSS via the Title field of a Radar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-15T16:26:03.000Z
CVE-2021-37413 
GRANDCOM DynWEB before 4.2 contains a SQL Injection vulnerability in the admin login interface. A remote unauthenticated attacker can exploit this vulnerability to obtain administrative access to the webpage, access the user database, modify web content and upload custom files. The backend login script does not verify and sanitize user-provided strings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-19T14:59:45.000Z
CVE-2021-37414 
Zoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-10T14:27:21.000Z
CVE-2021-37415 
Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-01T05:29:11.000Z
CVE-2021-37416 
Zoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to reflected XSS on the loadframe page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-30T18:18:14.000Z
CVE-2021-37417 
Zoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper parameter validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-30T18:25:43.000Z
CVE-2021-37419 
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-21T12:53:52.000Z
CVE-2021-37420 
Zoho ManageEngine ADSelfService Plus before 6112 is vulnerable to mail spoofing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-21T12:52:25.000Z
CVE-2021-37421 
Zoho ManageEngine ADSelfService Plus 6103 and prior is vulnerable to admin portal access-restriction bypass.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-30T18:30:22.000Z
CVE-2021-37422 
Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking the databases.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-10T15:06:01.000Z
CVE-2021-37423 
Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-10T14:55:33.000Z
CVE-2021-37424 
ManageEngine ADSelfService Plus before 6112 is vulnerable to domain user account takeover.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-21T12:50:36.000Z
CVE-2021-37425 
Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-10T21:16:31.000Z
CVE-2021-37436 
Amazon Echo Dot devices through 2021-07-02 sometimes allow attackers, who have physical access to a device after a factory reset, to obtain sensitive information via a series of complex hardware and software attacks. NOTE: reportedly, there were vendor marketing statements about safely removing personal content via a factory reset. Also, the vendor has reportedly indicated that they are working on mitigations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-24T22:46:21.000Z
CVE-2021-37439 
NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:14:38.000Z
CVE-2021-37440 
NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:14:28.000Z
CVE-2021-37441 
NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:14:17.000Z
CVE-2021-37442 
NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:14:05.000Z
CVE-2021-37443 
NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:13:45.000Z
CVE-2021-37444 
NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive. This can lead to code execution if a ZIP element's pathname is set to a Windows startup folder, a file for the inbuilt Out-Going Message function, or a file for the the inbuilt Autodial function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:13:36.000Z
CVE-2021-37445 
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:13:20.000Z
CVE-2021-37446 
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:13:10.000Z
CVE-2021-37447 
In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:12:55.000Z
CVE-2021-37448 
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via the Mailbox name (stored).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:12:46.000Z
CVE-2021-37449 
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= (reflected).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:12:33.000Z
CVE-2021-37450 
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /ogmprop?id= (reflected).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:12:22.000Z
CVE-2021-37451 
Cross Site Scripting (XSS) exists in NCH IVM Attendant v5.12 and earlier via /msglist?mbx= (reflected).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:12:13.000Z
CVE-2021-37452 
NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:12:03.000Z
CVE-2021-37453 
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the extension name (stored).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:11:53.000Z
CVE-2021-37454 
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:11:44.000Z
CVE-2021-37455 
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the outbound dialing plan (stored).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:11:32.000Z
CVE-2021-37456 
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the blacklist IP address (stored).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:11:22.000Z
CVE-2021-37457 
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the SipRule field (stored).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:11:10.000Z
CVE-2021-37458 
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the primary phone field (stored).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:10:44.000Z
CVE-2021-37459 
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the customer name field (stored).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:10:33.000Z
CVE-2021-37460 
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /planprop?id= (reflected).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:10:22.000Z
CVE-2021-37461 
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /extensionsinstruction?id= (reflected).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:10:12.000Z
CVE-2021-37462 
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via /ipblacklist?errorip= (reflected).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:10:02.000Z
CVE-2021-37463 
In NCH Quorum v2.03 and earlier, XSS exists via User Display Name (stored).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:09:53.000Z
CVE-2021-37464 
In NCH Quorum v2.03 and earlier, XSS exists via Conference Description (stored).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:09:41.000Z
CVE-2021-37465 
In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= (reflected).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:09:33.000Z
CVE-2021-37466 
In NCH Quorum v2.03 and earlier, XSS exists via /conference?id= (reflected).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:09:19.000Z
CVE-2021-37467 
In NCH Quorum v2.03 and earlier, XSS exists via /conferencebrowseuploadfile?confid= (reflected).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:09:07.000Z
CVE-2021-37468 
NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:08:47.000Z
CVE-2021-37469 
In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path traversal to read files on the filesystem.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:08:26.000Z
CVE-2021-37470 
In NCH WebDictate v2.13, persistent Cross Site Scripting (XSS) exists in the Recipient Name field. An authenticated user can add or modify the affected field to inject arbitrary JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-25T20:08:15.000Z
CVE-2021-37471 
Cradlepoint IBR900-600 devices running versions < 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-07T15:25:13.000Z
CVE-2021-37473 
In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `products-order` through a post request, which results in arbitrary sql query execution in the backend database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T17:11:12.000Z
CVE-2021-37475 
In NavigateCMS version 2.9.4 and below, function in `templates.php` is vulnerable to sql injection on parameter `template-properties-order`, which results in arbitrary sql query execution in the backend database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T17:15:06.000Z
CVE-2021-37476 
In NavigateCMS version 2.9.4 and below, function in `product.php` is vulnerable to sql injection on parameter `id` through a post request, which results in arbitrary sql query execution in the backend database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T17:16:55.000Z
CVE-2021-37477 
In NavigateCMS version 2.9.4 and below, function in `structure.php` is vulnerable to sql injection on parameter `children_order`, which results in arbitrary sql query execution in the backend database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T17:17:56.000Z
CVE-2021-37478 
In NavigateCMS version 2.9.4 and below, function `block` is vulnerable to sql injection on parameter `block-order`, which results in arbitrary sql query execution in the backend database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T17:18:39.000Z
CVE-2021-37491 
An issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogecoin Core 1.14.3 and earlier allows attackers to view sensitive information via CWallet::CreateTransaction() function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-07T00:00:00.000Z
CVE-2021-37492 
An issue discovered in src/wallet/wallet.cpp in Ravencoin Core 4.3.2.1 and earlier allows attackers to view sensitive information via CWallet::CreateTransactionAll() function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-07T00:00:00.000Z
CVE-2021-37497 
SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-03T00:00:00.000Z
CVE-2021-37498 
An SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outbound requests to intranet servers, conduct port scans via the actserver parameter in License Activation function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-20T00:00:00.000Z
CVE-2021-37499 
CRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote attackers to inject arbitrary HTTP headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-20T00:00:00.000Z
CVE-2021-37500 
Directory traversal vulnerability in Reprise License Manager (RLM) web interface before 14.2BL4 in the diagnostics function that allows RLM users with sufficient privileges to overwrite any file the on the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-01-20T00:00:00.000Z
CVE-2021-37501 
Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools_str_sprint in /hdf5/tools/lib/h5tools_str.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-03T00:00:00.000Z
CVE-2021-37502 
Cross Site Scripting (XSS) vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user name field when adding a user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-03T00:00:00.000Z
CVE-2021-37504 
A cross-site scripting (XSS) vulnerability in the fileNameStr parameter of jQuery-Upload-File v4.0.11 allows attackers to execute arbitrary web scripts or HTML via a crafted file with a Javascript payload in the file name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-25T18:15:47.000Z
CVE-2021-37517 
An Access Control vulnerability exists in Dolibarr ERP/CRM 13.0.2, fixed version is 14.0.0,in the forgot-password function becuase the application allows email addresses as usernames, which can cause a Denial of Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-31T18:06:03.000Z
CVE-2021-37518 
Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via omnibar feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-03T00:00:00.000Z
CVE-2021-37519 
Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-02-03T00:00:00.000Z
CVE-2021-37522 
SQL injection vulnerability in HKing2802 Locke-Bot 2.0.2 allows remote attackers to run arbitrary SQL commands via crafted string to /src/db.js, /commands/mute.js, /modules/event/messageDelete.js.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2023-07-18T00:00:00.000Z
CVE-2021-37524 
Cross Site Scripting (XSS) vulnerability in FusionPBX 4.5.26 allows remote unauthenticated users to inject arbitrary web script or HTML via an unsanitized "path" parameter in resources/login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-01T17:16:07.000Z
CVE-2021-37529 
A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which could cause a denial of service (context-dependent).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-12T20:12:04.000Z
CVE-2021-37530 
A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-12T20:18:32.000Z
CVE-2021-37531 
SAP NetWeaver Knowledge Management XML Forms versions - 7.10, 7.11, 7.30, 7.31, 7.40, 7.50, contains an XSLT vulnerability which allows a non-administrative authenticated attacker to craft a malicious XSL stylesheet file containing a script with OS-level commands, copy it into a location to be accessed by the system and then create a file which will trigger the XSLT engine to execute the script contained within the malicious XSL file. This can result in a full compromise of the confidentiality, integrity, and availability of the system.
Problem types: description: Code Injection
Affected products: vendor: SAP SE
product: SAP NetWeaver Knowledge Management XML Forms
Published: 2021-09-14T11:15:08.000Z
CVE-2021-37532 
SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the directory, which would otherwise be restricted to high privileged User.
Problem types: cwe_id: CWE-22
description: CWE-22
Affected products: vendor: SAP SE
product: SAP Business One
Published: 2021-09-14T11:15:27.000Z
CVE-2021-37533 Apache Commons Net's FTP client trusts the host from PASV response by default
Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: Apache Software Foundation
product: Apache Commons Net
Credits: lang: en
value: Apache Commons would like to thank ZeddYu Lu for reporting this issue.
Published: 2022-12-03T00:00:00.000Z
CVE-2021-37534 
app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-26T13:16:25.000Z
CVE-2021-37535 
SAP NetWeaver Application Server Java (JMS Connector Service) - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges.
Problem types: description: Missing Authorization Check
Affected products: vendor: SAP SE
product: SAP NetWeaver Application Server Java (JMS Connector Service)
Published: 2021-09-14T11:21:27.000Z
CVE-2021-37538 
Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop before 4.06 allow a remote unauthenticated attacker to execute arbitrary SQL commands via the day, month, or year parameter to the controllers/front/archive.php archive controller, or the id_category parameter to the controllers/front/category.php category controller.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-24T12:45:07.000Z
CVE-2021-37539 
Zoho ManageEngine ADManager Plus before 7111 is vulnerable to unrestricted file which leads to Remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-27T14:05:37.000Z
CVE-2021-37540 
In JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment feature was used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T13:20:09.000Z
CVE-2021-37541 
In JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T13:21:06.000Z
CVE-2021-37542 
In JetBrains TeamCity before 2020.2.3, XSS was possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T13:22:54.000Z
CVE-2021-37543 
In JetBrains RubyMine before 2021.1.1, code execution without user confirmation was possible for untrusted projects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T13:21:46.000Z
CVE-2021-37544 
In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T13:23:39.000Z
CVE-2021-37545 
In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T13:24:10.000Z
CVE-2021-37546 
In JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted properties was used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T13:24:39.000Z
CVE-2021-37547 
In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T13:25:19.000Z
CVE-2021-37548 
In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T13:26:13.000Z
CVE-2021-37549 
In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-06T13:26:43.000Z