rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-38834 
easy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary system commands through special js code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T10:13:09.000Z
CVE-2021-38840 
SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the water_refilling/classes/Login.php username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T05:12:14.000Z
CVE-2021-38841 
Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the system_info page in classes/SystemSettings.php with an update_settings action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T05:17:09.000Z
CVE-2021-38847 
S-Cart v6.4.1 and below was discovered to contain an arbitrary file upload vulnerability in the Editor module on the Admin panel. This vulnerability allows attackers to execute arbitrary code via a crafted IMG file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-11-01T14:32:48.000Z
CVE-2021-38859 IBM Security Verify Privilege information disclosure

IBM Security Verify Privilege On-Premises 11.5 could allow a user to obtain version number information using a specially crafted HTTP request that could be used in further attacks against the system.  IBM X-Force ID:  207899.


Problem types: cwe_id: CWE-200
description: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Affected products: vendor: IBM
product: Security Verify Privilege
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2023-10-17T01:15:31.784Z
CVE-2021-38862 
IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 207980.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Data Risk Manager
Published: 2021-10-12T18:55:11.531Z
CVE-2021-38863 
IBM Security Verify Bridge 1.0.5.0 stores user credentials in plain clear text which can be read by a locally authenticated user. IBM X-Force ID: 208154.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Verify Bridge
Published: 2021-09-23T16:05:33.818Z
CVE-2021-38864 
IBM Security Verify Bridge 1.0.5.0 could allow a user to obtain sensitive information due to improper certificate validation. IBM X-Force ID: 208155.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Verify Bridge
Published: 2021-09-23T17:10:38.832Z
CVE-2021-38868 
IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force Id: 208310.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Engineering Requirements Quality Assistant On-Premises
Published: 2022-07-18T17:00:34.389Z
CVE-2021-38869 
IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle timeout. IBM X-Force ID: 208341.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2022-04-27T15:20:29.807Z
CVE-2021-38870 
IBM Aspera Cloud is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208343.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Aspera
Published: 2021-09-23T17:40:11.665Z
CVE-2021-38871 
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208345.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Jazz Team Server
Published: 2022-06-24T16:15:42.719Z
CVE-2021-38872 
IBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a denial of service by consuming resources with multiple requests. IBM X-Force ID: 208348.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: DataPower Gateway
Published: 2022-05-17T16:25:21.862Z
CVE-2021-38873 
IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 208396.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Planning Analytics
Published: 2021-11-24T16:15:12.881Z
CVE-2021-38874 
IBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant and domain boundaries in some situations. IBM X-Force ID: 208397.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2022-04-27T15:20:31.307Z
CVE-2021-38875 
IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an error processing messages. IBM X-Force ID: 208398.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: MQ
Published: 2021-11-23T19:15:31.816Z
CVE-2021-38876 
IBM i 7.2, 7.3, and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208404.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: i
Published: 2021-12-30T17:10:10.485Z
CVE-2021-38877 
IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208405.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Jazz for Service Management
Published: 2021-09-23T18:05:51.826Z
CVE-2021-38878 
IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication. IBM X-Force ID: 208756.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2022-04-27T15:20:33.608Z
CVE-2021-38879 
IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 209057.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Jazz Team Server
Published: 2022-06-24T16:15:44.246Z
CVE-2021-38882 
IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privileged admin to destroy filesystem audit logging records before expiration time. IBM X-Force ID: 209164.
Problem types: description: File Manipulation
Affected products: vendor: IBM
product: Spectrum Scale
Published: 2021-11-16T16:55:16.824Z
CVE-2021-38883 
IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209165.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Business Process Manager
vendor: IBM
product: Business Automation Workflow
Published: 2021-12-17T17:05:11.690Z
CVE-2021-38886 
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 209399.
Problem types: description: Gain Access
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2022-04-22T16:30:32.670Z
CVE-2021-38887 
IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information from application response requests that could be used in further attacks against the system. IBM X-Force ID: 209401.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: InfoSphere Information Server
Published: 2021-11-10T14:55:10.882Z
CVE-2021-38890 
IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 209507.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Connect:Direct Web Services
Published: 2021-11-23T19:15:33.262Z
CVE-2021-38891 
IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 209508.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Connect:Direct Web Services
Published: 2021-11-23T19:15:34.650Z
CVE-2021-38893 
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209512.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Cloud Pak for Automation
vendor: IBM
product: Business Process Manager Standard
Published: 2021-12-21T19:10:14.320Z
CVE-2021-38894 
IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 209515.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Verify Access
Published: 2022-01-07T17:55:20.249Z
CVE-2021-38895 
IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209563.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Security Verify Access
Published: 2022-01-07T17:55:21.811Z
CVE-2021-38896 
IBM QRadar Advisor 2.5 through 2.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209566.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Qradar Advisor
Published: 2021-10-20T18:35:10.768Z
CVE-2021-38899 
IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information. IBM X-Force ID: 209575.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cloud Pak for Data
Published: 2021-09-20T16:45:59.667Z
CVE-2021-38900 
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtain highly sensitive information due to improper access controls. IBM X-Force ID: 209607.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Business Automation Workflow
vendor: IBM
product: Cloud Pak for Automation
Published: 2021-12-21T19:10:16.020Z
CVE-2021-38901 
IBM Spectrum Protect Operations Center 7.1, under special configurations, could allow a local user to obtain highly sensitive information. IBM X-Force ID: 209610.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Spectrum Protect Operations Center
Published: 2021-12-13T18:35:30.543Z
CVE-2021-38903 
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 209691.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2022-04-22T16:30:34.144Z
CVE-2021-38904 
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings. IBM X-Force ID: 209693.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2022-04-22T16:30:35.618Z
CVE-2021-38905 
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report pages that they should not have access to. IBM X-Force ID: 209697.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2022-04-22T16:30:37.161Z
CVE-2021-38909 
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209706.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Cognos Analytics
Published: 2021-12-03T17:00:31.456Z
CVE-2021-38910 
IBM DataPower Gateway V10CD, 10.0.1, and 2108.4.1 could allow a remote attacker to bypass security restrictions, caused by the improper validation of input. By sending a specially crafted JSON message, an attacker could exploit this vulnerability to modify structure and fields. IBM X-Force ID: 209824.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: DataPower Gateway
Published: 2022-03-10T19:50:22.002Z
CVE-2021-38911 
IBM Security Risk Manager on CP4S 1.7.0.0 stores user credentials in plain clear text which can be read by a an authenticatedl privileged user. IBM X-Force ID: 209940.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Cloud Pak for Security
Published: 2021-10-19T15:15:16.168Z
CVE-2021-38915 
IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 209947.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Data Risk Manager
Published: 2021-10-12T18:55:13.061Z
CVE-2021-38917 
IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures. IBM X-Force ID: 210018.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: PowerVM Hypervisor
Published: 2021-12-10T17:50:11.461Z
CVE-2021-38918 
IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could lead to a violation of the isolation between peer VMs. IBM X-Force ID: 210019.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: PowerVM Hypervisor
Published: 2022-01-05T16:30:11.969Z
CVE-2021-38919 
IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users. IBM X-Force ID: 210021
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2022-04-27T15:20:35.235Z
CVE-2021-38921 
IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210067.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Security Verify Access
Published: 2022-01-07T17:55:23.252Z
CVE-2021-38923 
IBM PowerVM Hypervisor FW1010 could allow a privileged user to gain access to another VM due to assigning duplicate WWPNs. IBM X-Force ID: 210162.
Problem types: description: Bypass Security
Affected products: vendor: IBM
product: PowerVM Hypervisor
Published: 2021-10-06T17:50:17.792Z
CVE-2021-38924 
IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 210163.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2022-09-14T16:20:11.857Z
CVE-2021-38925 
IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210171.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Sterling B2B Integrator
Published: 2021-10-06T17:10:45.850Z
CVE-2021-38926 
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privileges due to allowing modification of columns of existing tasks. IBM X-Force ID: 210321.
Problem types: description: Gain Privileges
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2021-12-09T17:00:27.785Z
CVE-2021-38927 IBM Aspera Console cross-site scripting
IBM Aspera Console 3.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  210322.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products: vendor: IBM
product: Aspera Console
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
version: 3.1
Published: 2023-12-25T02:20:43.600Z
CVE-2021-38928 IBM Sterling B2B Integrator Standard Edition cross-origin resource sharing
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.  IBM X-Force ID:  210323.
Problem types: description: 942 Overly Permissive Cross-domain Whitelist
Affected products: vendor: IBM
product: Sterling B2B Integrator Standard Edition
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
version: 3.1
Published: 2023-01-04T17:26:59.970Z
CVE-2021-38929 
IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remote attacker to obtain sensitive information through unpublished URLs. IBM X-Force ID: 210330.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Hardware Management Console
Published: 2022-04-11T18:17:05.229Z
CVE-2021-38930 
IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remote attacker to obtain sensitive information through unpublished URLs. IBM X-Force ID: 210331.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Hardware Management Console
Published: 2022-04-11T18:17:07.108Z
CVE-2021-38931 
IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user having indirect read access to a table where they are not authorized to select from. IBM X-Force ID: 210418.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: DB2 for Linux, UNIX and Windows
Published: 2021-12-09T17:00:29.251Z
CVE-2021-38933 IBM Sterling Connect:Express for UNIX information disclosure
IBM Sterling Connect:Direct for UNIX 1.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.  IBM X-Force ID:  210574.
Problem types: cwe_id: CWE-327
description: CWE-327 Use of a Broken or Risky Cryptographic Algorithm
Affected products: vendor: IBM
product: Sterling Connect:Express for UNIX
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
version: 3.1
Published: 2023-07-19T01:22:12.736Z
CVE-2021-38934 
IBM Engineering Test Management 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 210671.
Problem types: description: Cross-Site Scripting
Affected products: vendor: IBM
product: Engineering Test Management
Published: 2022-08-29T21:10:09.490Z
CVE-2021-38935 
IBM Maximo Asset Management 7.6.1.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 210892.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: Maximo Asset Management
Published: 2022-02-18T17:35:17.263Z
CVE-2021-38936 
IBM QRadar SIEM 7.3, 7.4, and 7.5 could disclose highly sensitive information to a privileged user. IBM X-Force ID: 210893.
Problem types: description: Obtain Information
Affected products: vendor: IBM
product: QRadar SIEM
Published: 2022-07-20T17:35:17.315Z
CVE-2021-38937 
IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to cause the system to crash using a specially crafted IBMi Hypervisor call. IBM X-Force ID: 210894.
Problem types: description: Denial of Service
Affected products: vendor: IBM
product: PowerVM Hypervisor
Published: 2021-12-10T17:50:13.044Z