stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2021-40418 (severity: CRITICAL, weakness: CWE-457)
When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the uninitialized member will be dereferenced and then destroyed using the object’s virtual destructor. Due to the object property being uninitialized, this can result in dereferencing an arbitrary pointer for the object’s virtual method table, which can result in code execution under the context of the application.
CVE-2021-40419 (severity: CRITICAL, weakness: CWE-489)
A firmware update vulnerability exists in the 'factory' binary of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted series of network requests can lead to arbitrary firmware update. An attacker can send a sequence of requests to trigger this vulnerability.
CVE-2021-40420 (severity: HIGH, weakness: CWE-416)
A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted, malicious site if the browser plugin extension is enabled.
CVE-2021-40422 (severity: CRITICAL, weakness: CWE-798)
An authentication bypass vulnerability exists in the device password generation functionality of Swift Sensors Gateway SG3-1010. A specially-crafted network request can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.
CVE-2021-40423 (severity: HIGH, weakness: CWE-20)
A denial of service vulnerability exists in the cgiserver.cgi API command parser functionality of Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted series of HTTP requests can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2021-40424 (severity: HIGH, weakness: CWE-125)
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4. A specially-crafted executable can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability. An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4. The GetProcessCommandLine IOCTL request could cause an out-of-bounds read in the device driver WRCore_x64. An attacker can issue an ioctl to trigger this vulnerability.
CVE-2021-40425 (severity: HIGH, weakness: CWE-125)
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4. A specially-crafted executable can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability. An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and B_03 of Webroot Secure Anywhere 21.4. An IOCTL_B03 request with specific invalid data causes a similar issue in the device driver WRCore_x64. An attacker can issue an ioctl to trigger this vulnerability.
CVE-2021-40426 (severity: CRITICAL, weakness: CWE-122)
A heap-based buffer overflow vulnerability exists in the sphere.c start_read() functionality of Sound Exchange libsox 14.4.2 and master commit 42b3557e. A specially-crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2021-4043 (severity: MEDIUM, weakness: CWE-476)
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.
CVE-2021-40438 (severity: CRITICAL, weakness: CWE-918)
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVE-2021-40439 (severity: MEDIUM, weakness: CWE-611)
Apache OpenOffice has a dependency on expat software. Versions prior to 2.1.0 were subject to CVE-2013-0340 a "Billion Laughs" entity expansion denial of service attack and exploit via crafted XML files. ODF files consist of a set of XML files. All versions of Apache OpenOffice up to 4.1.10 are subject to this issue. expat in version 4.1.11 is patched.
CVE-2021-4044 (severity: HIGH, weakness: CWE-835)
Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server. That function may return a negative return value to indicate an internal error (for example out of memory). Such a negative return value is mishandled by OpenSSL and will cause an IO function (such as SSL_connect() or SSL_do_handshake()) to not indicate success and a subsequent call to SSL_get_error() to return the value SSL_ERROR_WANT_RETRY_VERIFY. This return value is only supposed to be returned by OpenSSL if the application has previously called SSL_CTX_set_cert_verify_callback(). Since most applications do not do this the SSL_ERROR_WANT_RETRY_VERIFY return value from SSL_get_error() will be totally unexpected and applications may not behave correctly as a result. The exact behaviour will depend on the application but it could result in crashes, infinite loops or other similar incorrect responses. This issue is made more serious in combination with a separate bug in OpenSSL 3.0 that will cause X509_verify_cert() to indicate an internal error when processing a certificate chain. This will occur where a certificate does not include the Subject Alternative Name extension but where a Certificate Authority has enforced name constraints. This issue can occur even with valid chains. By combining the two issues an attacker could induce incorrect, application dependent behaviour. Fixed in OpenSSL 3.0.1 (Affected 3.0.0).
CVE-2021-40440 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVE-2021-40441 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Media Center Elevation of Privilege Vulnerability
CVE-2021-40442 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-40443 (severity: HIGH, weakness: CWE-269)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-40444 (severity: HIGH, weakness: CWE-22)
<p>Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents.</p> <p>An attacker could craft a malicious ActiveX control to be used by a Microsoft Office document that hosts the browser rendering engine. The attacker would then have to convince the user to open the malicious document. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>Microsoft Defender Antivirus and Microsoft Defender for Endpoint both provide detection and protections for the known vulnerability. Customers should keep antimalware products up to date. Customers who utilize automatic updates do not need to take additional action. Enterprise customers who manage updates should select the detection build 1.349.22.0 or newer and deploy it across their environments. Microsoft Defender for Endpoint alerts will be displayed as: “Suspicious Cpl File Execution”.</p> <p>Upon completion of this investigation, Microsoft will take the appropriate action to help protect our customers. This may include providing a security update through our monthly release process or providing an out-of-cycle security update, depending on customer needs.</p> <p>Please see the <strong>Mitigations</strong> and <strong>Workaround</strong> sections for important information about steps you can take to protect your system from this vulnerability.</p> <p><strong>UPDATE</strong> September 14, 2021: Microsoft has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. Please see the FAQ for important information about which updates are applicable to your system.</p>
CVE-2021-40447 (severity: HIGH, weakness: CWE-269)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-40448 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Accessibility Insights for Android Information Disclosure Vulnerability
CVE-2021-40449 (severity: HIGH, weakness: CWE-416)
Win32k Elevation of Privilege Vulnerability
CVE-2021-4045 (severity: CRITICAL, weakness: CWE-77)
TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera.
CVE-2021-40450 (severity: HIGH, weakness: NVD-CWE-Other)
Win32k Elevation of Privilege Vulnerability
CVE-2021-40452 (severity: HIGH, weakness: NVD-CWE-Other)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-40453 (severity: HIGH, weakness: NVD-CWE-Other)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-40454 (severity: MEDIUM, weakness: CWE-312)
Rich Text Edit Control Information Disclosure Vulnerability
CVE-2021-40455 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Installer Spoofing Vulnerability
CVE-2021-40456 (severity: HIGH, weakness: CWE-863)
Windows AD FS Security Feature Bypass Vulnerability
CVE-2021-40457 (severity: MEDIUM, weakness: CWE-79)
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
CVE-2021-4046 (severity: MEDIUM, weakness: CWE-79)
The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability could be used to carry out a number of browser-based attacks including browser hijacking or theft of sensitive data.
CVE-2021-40460 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability
CVE-2021-40461 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2021-40462 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability
CVE-2021-40463 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2021-40464 (severity: HIGH, weakness: CWE-269)
Windows Nearby Sharing Elevation of Privilege Vulnerability
CVE-2021-40465 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Text Shaping Remote Code Execution Vulnerability
CVE-2021-40466 (severity: HIGH, weakness: CWE-269)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-40467 (severity: HIGH, weakness: CWE-269)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-40468 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Bind Filter Driver Information Disclosure Vulnerability
CVE-2021-40469 (severity: HIGH, weakness: NVD-CWE-Other)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-4047 (severity: HIGH, weakness: CWE-20)
The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 was missing. This issue only affects Red Hat OpenShift 4.9.
CVE-2021-40470 (severity: HIGH, weakness: CWE-269)
DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2021-40471 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-40472 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Excel Information Disclosure Vulnerability
CVE-2021-40473 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-40474 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-40475 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
CVE-2021-40476 (severity: HIGH, weakness: CWE-522)
Windows AppContainer Elevation Of Privilege Vulnerability
CVE-2021-40477 (severity: HIGH, weakness: CWE-269)
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-40478 (severity: HIGH, weakness: CWE-269)
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-40479 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-4048 (severity: CRITICAL, weakness: CWE-125)
An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.
CVE-2021-40480 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2021-40481 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2021-40482 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2021-40483 (severity: LOW, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-40484 (severity: LOW, weakness: NVD-CWE-Other)
Microsoft SharePoint Server Spoofing Vulnerability
CVE-2021-40485 (severity: HIGH, weakness: CWE-94)
Microsoft Excel Remote Code Execution Vulnerability
CVE-2021-40486 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Word Remote Code Execution Vulnerability
CVE-2021-40487 (severity: HIGH, weakness: CWE-94)
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2021-40488 (severity: HIGH, weakness: CWE-269)
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-40489 (severity: HIGH, weakness: CWE-269)
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-4049 (severity: MEDIUM, weakness: CWE-352)
livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-40490 (severity: HIGH, weakness: CWE-362)
A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.
CVE-2021-40491 (severity: MEDIUM, weakness: CWE-345)
The ftp client in GNU Inetutils before 2.2 does not validate addresses returned by PASV/LSPV responses to make sure they match the server address. This is similar to CVE-2020-8284 for curl.
CVE-2021-40492 (severity: MEDIUM, weakness: CWE-79)
A reflected XSS vulnerability exists in multiple pages in version 22 of the Gibbon application that allows for arbitrary execution of JavaScript (gibbonCourseClassID, gibbonPersonID, subpage, currentDate, or allStudents to index.php).
CVE-2021-40493 (severity: CRITICAL, weakness: CWE-89)
Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API.
CVE-2021-40494 (severity: CRITICAL, weakness: CWE-798)
A Hardcoded JWT Secret Key in metadata.py in AdaptiveScale LXDUI through 2.1.3 allows attackers to gain admin access to the host system.
CVE-2021-40495 (severity: MEDIUM, weakness: NVD-CWE-Other)
There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application Server ABAP and ABAP Platform.
CVE-2021-40496 (severity: MEDIUM, weakness: CWE-668)
SAP Internet Communication framework (ICM) - versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 785, allows an attacker with logon functionality, to exploit the authentication function by using POST and form field to repeat executions of the initial command by a GET request and exposing sensitive data. This vulnerability is normally exposed over the network and successful exploitation can lead to exposure of data like system details.
CVE-2021-40497 (severity: MEDIUM, weakness: CWE-668)
SAP BusinessObjects Analysis (edition for OLAP) - versions 420, 430, allows an attacker to exploit certain application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation could lead to exposure of some system specific data like its version.
CVE-2021-40498 (severity: MEDIUM, weakness: NVD-CWE-Other)
A vulnerability has been identified in SAP SuccessFactors Mobile Application for Android - versions older than 2108, which allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service, which can lead to denial of service. The vulnerability is related to Android implementation methods that are widely used across Android mobile applications, and such methods are embedded into the SAP SuccessFactors mobile application. These Android methods begin executing once the user accesses their profile on the mobile application. While executing, it can also pick up the activities from other Android applications that are running in the background of the users device and are using the same types of methods in the application. Such vulnerability can also lead to phishing attacks that can be used for staging other types of attacks.
CVE-2021-40499 (severity: CRITICAL, weakness: CWE-94)
Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70, 7.70 PI, 7.70 BYD, allow an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application.
CVE-2021-4050 (severity: MEDIUM, weakness: CWE-79)
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-40500 (severity: HIGH, weakness: CWE-611)
SAP BusinessObjects Business Intelligence Platform (Crystal Reports) - versions 420, 430, allows an unauthenticated attacker to exploit missing XML validations at endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can enable the attacker to retrieve arbitrary files from the server.
CVE-2021-40501 (severity: HIGH, weakness: CWE-862)
SAP ABAP Platform Kernel - versions 7.77, 7.81, 7.85, 7.86, does not perform necessary authorization checks for an authenticated business user, resulting in escalation of privileges. That means this business user is able to read and modify data beyond the vulnerable system. However, the attacker can neither significantly reduce the performance of the system nor stop the system.
CVE-2021-40502 (severity: HIGH, weakness: CWE-862)
SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. Authenticated attackers will be able to access and edit data from b2b units they do not belong to.
CVE-2021-40503 (severity: HIGH, weakness: CWE-522)
An information disclosure vulnerability exists in SAP GUI for Windows - versions < 7.60 PL13, 7.70 PL4, which allows an attacker with sufficient privileges on the local client-side PC to obtain an equivalent of the user’s password. With this highly sensitive data leaked, the attacker would be able to logon to the backend system the SAP GUI for Windows was connected to and launch further attacks depending on the authorizations of the user.
CVE-2021-40504 (severity: MEDIUM, weakness: CWE-863)
A certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, contains transport authorizations, which exceed expected display only permissions.
CVE-2021-40506 (severity: CRITICAL, weakness: CWE-287)
An issue was discovered in the ALU unit of the OR1200 (aka OpenRISC 1200) processor 2011-09-10 through 2015-11-11. The overflow flag is not being updated for the msb and mac instructions, which results in an incorrect value in the overflow flag. Any software that relies on this flag may experience corruption in execution.
CVE-2021-40507 (severity: CRITICAL, weakness: CWE-287)
An issue was discovered in the ALU unit of the OR1200 (aka OpenRISC 1200) processor 2011-09-10 through 2015-11-11. The overflow flag is not being updated correctly for the subtract instruction, which results in an incorrect value in the overflow flag. Any software that relies on this flag may experience corruption in execution.
CVE-2021-40509 (severity: MEDIUM, weakness: CWE-79)
ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature.
CVE-2021-40510 (severity: HIGH, weakness: CWE-611)
XML eXternal Entity (XXE) in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs.
CVE-2021-40511 (severity: HIGH, weakness: CWE-776)
OBDA systems’ Mastro 1.0 is vulnerable to XML Entity Expansion (aka “billion laughs”) attack allowing denial of service.
CVE-2021-40516 (severity: HIGH, weakness: CWE-125)
WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin.
CVE-2021-40517 (severity: MEDIUM, weakness: CWE-79)
Airangel HSMX Gateway devices through 5.2.04 is vulnerable to stored Cross Site Scripting. XSS Payload is placed in the name column of the updates table using database access.
CVE-2021-40518 (severity: MEDIUM, weakness: CWE-352)
Airangel HSMX Gateway devices through 5.2.04 allow CSRF.
CVE-2021-40519 (severity: CRITICAL, weakness: CWE-798)
Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials.
CVE-2021-4052 (severity: HIGH, weakness: CWE-416)
Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
CVE-2021-40520 (severity: CRITICAL, weakness: CWE-521)
Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials.
CVE-2021-40521 (severity: CRITICAL, weakness: NVD-CWE-Other)
Airangel HSMX Gateway devices through 5.2.04 allow Remote Code Execution.
CVE-2021-40523 (severity: HIGH, weakness: CWE-754)
In Contiki 3.0, Telnet option negotiation is mishandled. During negotiation between a server and a client, the server may fail to give the WILL/WONT or DO/DONT response for DO and WILL commands because of improper handling of exception condition, which leads to property violations and denial of service. Specifically, a server sometimes sends no response, because a fixed buffer space is available for all responses and that space may have been exhausted.
CVE-2021-40524 (severity: HIGH, weakness: CWE-434)
In Pure-FTPd before 1.0.50, an incorrect max_filesize quota mechanism in the server allows attackers to upload files of unbounded size, which may lead to denial of service or a server hang. This occurs because a certain greater-than-zero test does not anticipate an initial -1 value. (Versions 1.0.23 through 1.0.49 are affected.)
CVE-2021-40525 (severity: CRITICAL, weakness: CWE-22)
Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path traversal, allowing reading and writing any file. This vulnerability had been patched in Apache James 3.6.1 and higher. We recommend the upgrade. Distributed and Cassandra based products are also not impacted.
CVE-2021-40526 (severity: MEDIUM, weakness: CWE-131)
Incorrect calculation of buffer size vulnerability in Peleton TTR01 up to and including PTV55G allows a remote attacker to trigger a Denial of Service attack through the GymKit daemon process by exploiting a heap overflow in the network server handling the Apple GymKit communication. This can lead to an Apple MFI device not being able to authenticate with the Peleton Bike