rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-41374 Azure Sphere Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Azure Sphere
cpes: cpe:2.3:a:microsoft:azure_sphere:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 6.7
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C
Published: 2021-11-10T00:46:48.000Z
CVE-2021-41375 Azure Sphere Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Azure Sphere
cpes: cpe:2.3:a:microsoft:azure_sphere:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.4
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Published: 2021-11-10T00:46:49.000Z
CVE-2021-41376 Azure Sphere Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Azure Sphere
cpes: cpe:2.3:a:microsoft:azure_sphere:*:*:*:*:*:*:*:*
CVSS v3.1: version: 3.1
baseSeverity: LOW
baseScore: 2.3
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C
Published: 2021-11-10T00:46:51.000Z
CVE-2021-41378 Windows NTFS Remote Code Execution Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Windows 10 Version 1809
cpes: cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.2300:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.2300:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.2300:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows Server 2019
cpes: cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.2300:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
cpes: cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.2300:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 1909
cpes: cpe:2.3:o:microsoft:windows_10_1909:10.0.18363.1916:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1909:10.0.18363.1916:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:10.0.18363.1916:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows 10 Version 21H1
cpes: cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1348:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1348:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_21H1:10.0.19043.1348:*:*:*:*:*:x86:*
vendor: Microsoft
product: Windows Server 2022
cpes: cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.350:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 2004
cpes: cpe:2.3:o:microsoft:windows_10_1809:10.0.19041.1348:*:*:*:*:*:x64:*
vendor: Microsoft
product: Windows Server version 2004
cpes: cpe:2.3:o:microsoft:windows_server_2004:10.0.19041.1348:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 10 Version 20H2
cpes: cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1348:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_20H2:10.0.19042.1348:*:*:*:*:*:arm64:*
vendor: Microsoft
product: Windows Server version 20H2
cpes: cpe:2.3:o:microsoft:windows_server_20H2:10.0.19041.1348:*:*:*:*:*:*:*
vendor: Microsoft
product: Windows 11 version 21H2
cpes: cpe:2.3:o:microsoft:windows_11_21H2:10.0.22000.318:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_11_21H2:10.0.22000.318:*:*:*:*:*:arm64:*
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Published: 2021-11-10T00:46:54.000Z
CVE-2021-41380 
RealVNC Viewer 6.21.406 allows remote VNC servers to cause a denial of service (application crash) via crafted RFB protocol data. NOTE: It is asserted that this issue requires social engineering a user into connecting to a fake VNC Server. The VNC Viewer application they are using will then hang, until terminated, but no memory leak occurs - the resources are freed once the hung process is terminated and the resource usage is constant during the hang. Only the process that is connected to the fake Server is affected. This is an application bug, not a security issue
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-17T19:14:44.000Z
CVE-2021-41381 
Payara Micro Community 5.2021.6 and below allows Directory Traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-23T00:00:00.000Z
CVE-2021-41382 
Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-21T23:11:25.000Z
CVE-2021-41383 
setup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin to execute arbitrary shell commands via shell metacharacters in the ntp_server field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-17T19:53:03.000Z
CVE-2021-41385 
The third party intelligence connector in Securonix SNYPR 6.3.1 Build 184295_0302 allows an authenticated user to obtain access to server configuration details via SSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-27T05:49:56.000Z
CVE-2021-41387 
seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-17T20:36:29.000Z
CVE-2021-41388 
Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementation of nsAuxiliarySvc process does not perform validation on new connections before accepting the connection. Thus any low privileged user can connect and call external methods defined in XPC service as root, elevating their privilege to the highest level.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-04T21:34:44.000Z
CVE-2021-41390 
In Ericsson ECM before 18.0, it was observed that Security Provider Endpoint in the User Profile Management Section is vulnerable to CSV Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-17T20:55:54.000Z
CVE-2021-41391 
In Ericsson ECM before 18.0, it was observed that Security Management Endpoint in User Profile Management Section is vulnerable to stored XSS via a name, leading to session hijacking and full account takeover.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-17T20:56:21.000Z
CVE-2021-41392 
static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal Electron API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-17T21:24:02.000Z
CVE-2021-41393 
Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows forgery of SSH host certificates in some situations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-18T15:15:14.000Z
CVE-2021-41394 
Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows alteration of build artifacts in some situations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-18T15:14:43.000Z
CVE-2021-41395 
Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-18T15:15:01.000Z
CVE-2021-41396 
Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-handling module, in which a heap-based buffer overflow happens. An attacker can leverage this to launch a DoS attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-11T11:38:05.000Z
CVE-2021-41402 
flatCore-CMS v2.0.8 has a code execution vulnerability, which could let a remote malicious user execute arbitrary PHP code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T09:35:27.000Z
CVE-2021-41403 
flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T21:11:33.000Z
CVE-2021-41408 
VoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the "api.php" file and "user" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-17T10:09:04.000Z
CVE-2021-41411 
drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, resulting in the XXE injection vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T09:52:01.000Z
CVE-2021-41413 
ok-file-formats master 2021-9-12 is affected by a buffer overflow in ok_jpg_convert_data_unit_grayscale and ok_jpg_convert_YCbCr_to_RGB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T11:19:06.000Z
CVE-2021-41415 
Subscription-Manager v1.0 /main.js has a cross-site scripting (XSS) vulnerability in the machineDetail parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T20:00:53.000Z
CVE-2021-41418 
AriaNg v0.1.0~v1.2.2 is affected by an incorrect access control vulnerability through not authenticating visitors' access rights.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-15T19:40:18.000Z
CVE-2021-41419 
QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-07-17T23:23:21.000Z
CVE-2021-41420 
A stored XSS vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker for arbitrary JavaScript code execution in the context of authenticated and unauthenticated users through the MaianAffiliate admin panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T16:43:03.000Z
CVE-2021-41421 
A PHP code injection vulnerability in MaianAffiliate v.1.0 allows an authenticated attacker to gain RCE through the MaianAffiliate admin panel.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T16:51:18.000Z
CVE-2021-41426 
Beeline Smart box 2.0.38 is vulnerable to Cross Site Request Forgery (CSRF) via mgt_end_user.htm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T15:43:18.000Z
CVE-2021-41427 
Beeline Smart Box 2.0.38 is vulnerable to Cross Site Scripting (XSS) via the choose_mac parameter to setup.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-10T15:38:26.000Z
CVE-2021-41432 
A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-22T18:21:51.000Z
CVE-2021-41433 
SQL Injection vulnerability exists in version 1.0 of the Resumes Management and Job Application Website application login form by EGavilan Media that allows authentication bypass through login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-27T19:10:37.000Z
CVE-2021-41434 
A stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management System application that allows for arbitrary execution of JavaScript commands through index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-28T16:39:40.000Z
CVE-2021-41435 
A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote attacker to attempt any number of login attempts via sending a specific HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-19T11:26:30.000Z
CVE-2021-41436 
An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote unauthenticated attacker to DoS via sending a specially crafted HTTP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-19T11:14:09.000Z
CVE-2021-41437 
An HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558 allows an attacker to craft a specific URL that if an authenticated victim visits it, the URL will give access to the cloud storage of the attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-09-26T13:18:38.000Z
CVE-2021-41441 
A DoS attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to reboot the router via sending a specially crafted URL to an authenticated victim. The authenticated victim need to visit this URL, for the router to reboot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-09T16:55:47.000Z
CVE-2021-41442 
An HTTP smuggling attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-09T19:04:28.000Z
CVE-2021-41445 
A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated victim.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-10T16:36:36.000Z
CVE-2021-41449 
A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted HTTP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-09T13:05:13.000Z
CVE-2021-41450 
An HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-08T15:35:00.000Z
CVE-2021-41451 
A misconfiguration in HTTP/1.0 and HTTP/1.1 of the web interface in TP-Link AX10v1 before V1_211117 allows a remote unauthenticated attacker to send a specially crafted HTTP request and receive a misconfigured HTTP/0.9 response, potentially leading into a cache poisoning attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-17T14:32:24.000Z
CVE-2021-41456 
There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1004 in the nhmldmx_send_sample() function szXmlTo parameter which leads to a denial of service vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-01T00:00:00.000Z
CVE-2021-41457 
There is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmx_nhml.c in nhmldmx_init_parsing which leads to a denial of service vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-01T00:00:00.000Z
CVE-2021-41458 
In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T09:19:53.000Z
CVE-2021-41459 
There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1008 in the nhmldmx_send_sample() function szXmlFrom parameter which leads to a denial of service vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-01T00:00:00.000Z
CVE-2021-41460 
ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-28T12:28:32.000Z
CVE-2021-41461 
Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the mode parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-01T15:42:14.000Z
CVE-2021-41462 
Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the ctID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-01T15:42:15.000Z
CVE-2021-41463 
Cross-site scripting (XSS) vulnerability in toos/permissions/dialogs/access/entity/types/group_combination.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the cID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-01T15:42:15.000Z
CVE-2021-41464 
Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the rel parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-01T15:42:16.000Z
CVE-2021-41465 
Cross-site scripting (XSS) vulnerability in concrete/elements/collection_theme.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the rel parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-01T15:42:16.000Z
CVE-2021-41467 
Cross-site scripting (XSS) vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-01T15:42:17.000Z
CVE-2021-41471 
SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T15:34:11.000Z
CVE-2021-41472 
SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T15:54:44.000Z
CVE-2021-41487 
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T17:24:47.000Z
CVE-2021-41490 
Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-17T10:39:10.000Z
CVE-2021-41492 
Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System (POS) 1.0 via the (1) Product Code in the pos page in cashiering. (2) id parameter in manage_products and the (3) t paramater in actions.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-03T19:11:44.000Z
CVE-2021-41495 
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays. NOTE: While correct that validation is missing, an error can only occur due to an exhaustion of memory. If the user can exhaust memory, they are already privileged. Further, it should be practically impossible to construct an attack which can target the memory exhaustion to occur at exactly this place
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-17T19:25:19.000Z
CVE-2021-41496 
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-17T19:56:35.000Z
CVE-2021-41497 
Null pointer reference in CMS_Conservative_increment_obj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denial of Service attacks by inputting a huge width of hash bucket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-17T20:08:52.000Z
CVE-2021-41498 
Buffer overflow in ajaxsoundstudio.com Pyo &lt and 1.03 in the Server_jack_init function. which allows attackers to conduct Denial of Service attacks by arbitrary constructing a overlong server name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-17T20:16:06.000Z
CVE-2021-41499 
Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo < 1.03 in the Server_debug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-17T20:36:19.000Z
CVE-2021-41500 
Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve), which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-12-17T20:44:24.000Z
CVE-2021-41502 
An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by modifying the name of the uploaded image, closing the html tag, or adding the onerror attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-11T13:55:45.000Z
CVE-2021-41503 
DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The use of the basic authentication for the devices command interface allows attack vectors that may compromise the cameras configuration and allow malicious users on the LAN to access the device. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-24T19:26:55.000Z