stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2021-26825 (severity: HIGH, weakness: CWE-190)
An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::load_image() function at line: const size_t buffer_size = (tga_header.image_width * tga_header.image_height) * pixel_size; The bug leads to Dynamic stack buffer overflow. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash.
CVE-2021-26826 (severity: HIGH, weakness: CWE-787)
A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash.
CVE-2021-26827 (severity: HIGH, weakness: CWE-120)
Buffer Overflow in TP-Link WR2041 v1 firmware for the TL-WR2041+ router allows remote attackers to cause a Denial-of-Service (DoS) by sending an HTTP request with a very long "ssid" parameter to the "/userRpm/popupSiteSurveyRpm.html" webpage, which crashes the router.
CVE-2021-26828 (severity: HIGH, weakness: CWE-434)
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.
CVE-2021-26829 (severity: MEDIUM, weakness: CWE-79)
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.
CVE-2021-26830 (severity: CRITICAL, weakness: CWE-89)
SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the `ID` input field of ajax.php in the `Pugin library - delete` module.
CVE-2021-26832 (severity: MEDIUM, weakness: CWE-79)
Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victim to a malicious site.
CVE-2021-26833 (severity: MEDIUM, weakness: CWE-459)
Cleartext Storage in a File or on Disk in TimelyBills <= 1.7.0 for iOS and versions <= 1.21.115 for Android allows attacker who can locally read user's files obtain JWT tokens for user's account due to insufficient cache clearing mechanisms. A threat actor can obtain sensitive user data by decoding the tokens as JWT is signed and encoded, not encrypted.
CVE-2021-26834 (severity: MEDIUM, weakness: CWE-79)
A cross-site scripting (XSS) vulnerability exists in Znote 0.5.2. An attacker can insert payloads, and the code execution will happen immediately on markdown view mode.
CVE-2021-26835 (severity: MEDIUM, weakness: CWE-79)
No filtering of cross-site scripting (XSS) payloads in the markdown-editor in Zettlr 1.8.7 allows attackers to perform remote code execution via a crafted file.
CVE-2021-26837 (severity: CRITICAL, weakness: CWE-89)
SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information.
CVE-2021-26843 (severity: HIGH, weakness: CWE-119)
An issue was discovered in sthttpd through 2.27.1. On systems where the strcpy function is implemented with memcpy, the de_dotdot function may cause a Denial-of-Service (daemon crash) due to overlapping memory ranges being passed to memcpy. This can triggered with an HTTP GET request for a crafted filename. NOTE: this is similar to CVE-2017-10671, but occurs in a different part of the de_dotdot function.
CVE-2021-26844 (severity: MEDIUM, weakness: CWE-79)
A cross-site scripting (XSS) vulnerability in Power Admin PA Server Monitor 8.2.1.1 allows remote attackers to inject arbitrary web script or HTML via Console.exe.
CVE-2021-26845 (severity: HIGH, weakness: CWE-863)
Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report data if the URL used to access the report is discovered. This issue affects: Hitachi ABB Power Grids eSOMS 6.0 versions prior to 6.0.4.2.2; 6.1 versions prior to 6.1.4; 6.3 versions prior to 6.3.
CVE-2021-26854 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26855 (severity: CRITICAL, weakness: CWE-918)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26857 (severity: HIGH, weakness: CWE-502)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26858 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26859 (severity: MEDIUM, weakness: NVD-CWE-Other)
Microsoft Power BI Information Disclosure Vulnerability
CVE-2021-26860 (severity: HIGH, weakness: NVD-CWE-Other)
Windows App-V Overlay Filter Elevation of Privilege Vulnerability
CVE-2021-26861 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Graphics Component Remote Code Execution Vulnerability
CVE-2021-26862 (severity: HIGH, weakness: CWE-59)
Windows Installer Elevation of Privilege Vulnerability
CVE-2021-26863 (severity: HIGH, weakness: CWE-269)
Windows Win32k Elevation of Privilege Vulnerability
CVE-2021-26864 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Virtual Registry Provider Elevation of Privilege Vulnerability
CVE-2021-26865 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Container Execution Agent Elevation of Privilege Vulnerability
CVE-2021-26866 (severity: MEDIUM, weakness: CWE-59)
Windows Update Service Elevation of Privilege Vulnerability
CVE-2021-26867 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2021-26868 (severity: HIGH, weakness: CWE-119)
Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2021-26869 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows ActiveX Installer Service Information Disclosure Vulnerability
CVE-2021-26870 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Projected File System Elevation of Privilege Vulnerability
CVE-2021-26871 (severity: HIGH, weakness: NVD-CWE-Other)
Windows WalletService Elevation of Privilege Vulnerability
CVE-2021-26872 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-26873 (severity: HIGH, weakness: CWE-59)
Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2021-26874 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2021-26875 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Win32k Elevation of Privilege Vulnerability
CVE-2021-26876 (severity: HIGH, weakness: NVD-CWE-Other)
OpenType Font Parsing Remote Code Execution Vulnerability
CVE-2021-26877 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-26878 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-26879 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVE-2021-26880 (severity: HIGH, weakness: NVD-CWE-Other)
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-26881 (severity: HIGH, weakness: NVD-CWE-Other)
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2021-26882 (severity: HIGH, weakness: NVD-CWE-Other)
Remote Access API Elevation of Privilege Vulnerability
CVE-2021-26884 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Media Photo Codec Information Disclosure Vulnerability
CVE-2021-26885 (severity: HIGH, weakness: NVD-CWE-Other)
Windows WalletService Elevation of Privilege Vulnerability
CVE-2021-26886 (severity: MEDIUM, weakness: NVD-CWE-Other)
User Profile Service Denial of Service Vulnerability
CVE-2021-26887 (severity: HIGH, weakness: CWE-59)
<p>An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting another user's personal data to a created folder.</p> <p>To exploit the vulnerability, an attacker can create a new folder under the Folder Redirection root path and create a junction on a newly created User folder. When the new user logs in, Folder Redirection would start redirecting to the folder and copying personal data.</p> <p>This elevation of privilege vulnerability can only be addressed by reconfiguring Folder Redirection with Offline files and restricting permissions, and NOT via a security update for affected Windows Servers. See the <strong>FAQ</strong> section of this CVE for configuration guidance.</p>
CVE-2021-26889 (severity: HIGH, weakness: CWE-59)
Windows Update Stack Elevation of Privilege Vulnerability
CVE-2021-26890 (severity: HIGH, weakness: NVD-CWE-Other)
Application Virtualization Remote Code Execution Vulnerability
CVE-2021-26891 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Container Execution Agent Elevation of Privilege Vulnerability
CVE-2021-26892 (severity: MEDIUM, weakness: NVD-CWE-Other)
Windows Extensible Firmware Interface Security Feature Bypass Vulnerability
CVE-2021-26893 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-26894 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-26895 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-26896 (severity: HIGH, weakness: NVD-CWE-Other)
Windows DNS Server Denial of Service Vulnerability
CVE-2021-26897 (severity: CRITICAL, weakness: NVD-CWE-Other)
Windows DNS Server Remote Code Execution Vulnerability
CVE-2021-26898 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-26899 (severity: HIGH, weakness: NVD-CWE-Other)
Windows UPnP Device Host Elevation of Privilege Vulnerability
CVE-2021-26900 (severity: HIGH, weakness: CWE-416)
Windows Win32k Elevation of Privilege Vulnerability
CVE-2021-26901 (severity: HIGH, weakness: NVD-CWE-Other)
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-26902 (severity: HIGH, weakness: NVD-CWE-Other)
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-26903 (severity: MEDIUM, weakness: CWE-79)
LMA ISIDA Retriever 5.2 is vulnerable to XSS via query['text'].
CVE-2021-26904 (severity: CRITICAL, weakness: CWE-89)
LMA ISIDA Retriever 5.2 allows SQL Injection.
CVE-2021-26905 (severity: MEDIUM, weakness: CWE-287)
1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure of a TLS private key.
CVE-2021-26906 (severity: MEDIUM, weakness: CWE-404)
An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through 18.2.0, and Certified Asterisk through 16.8-cert5. An SDP negotiation vulnerability in PJSIP allows a remote server to potentially crash Asterisk by sending specific SIP responses that cause an SDP negotiation failure.
CVE-2021-26908 (severity: LOW, weakness: CWE-532)
Automox Agent prior to version 31 logs potentially sensitive information in local log files, which could be used by a locally-authenticated attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent.
CVE-2021-26909 (severity: MEDIUM, weakness: CWE-284)
Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forced by an attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent.
CVE-2021-26910 (severity: HIGH, weakness: CWE-367)
Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat operation and an OverlayFS mount operation.
CVE-2021-26911 (severity: HIGH, weakness: CWE-295)
core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for IMAP in STARTTLS mode.
CVE-2021-26912 (severity: HIGH, weakness: CWE-502)
NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in SupportRpcServlet.
CVE-2021-26913 (severity: HIGH, weakness: CWE-502)
NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in RpcServlet.
CVE-2021-26914 (severity: HIGH, weakness: CWE-502)
NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in MvcUtil valueStringToObject.
CVE-2021-26915 (severity: HIGH, weakness: CWE-502)
NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in webrepdb StatusServlet.
CVE-2021-26916 (severity: MEDIUM, weakness: CWE-79)
In nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary web script or HTML through the Filters/CheckDiscountCouponAttribute.cs discountcode parameter.
CVE-2021-26917 (severity: MEDIUM, weakness: NVD-CWE-Other)
PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via a crafted apinotifypath value. NOTE: the discoverer states "security mitigation may not be necessary as there is no evidence yet that these screen intercepts are actually transported away from the local host." NOTE: it is unclear whether there are any common use cases in which apinotifypath is controlled by an attacker
CVE-2021-26918 (severity: CRITICAL, weakness: CWE-434)
The ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of the "Send an image when a user joins the server" feature (or possibly have unspecified other impact) because the uploader web service allows double extensions (such as .html.jpg) with the text/html content type. NOTE: there may not be cases in which an uploader web service is customer controlled; however, the nature of the issue has substantial interaction with customer controlled configuration. NOTE: the vendor states "This is just an uploader (like any other one) which uploads files to cloud storage and accepts various file types. There is no kind of vulnerability and it won't compromise either the client side or the server side.
CVE-2021-26919 (severity: HIGH, weakness: NVD-CWE-Other)
Apache Druid allows users to read data from other database systems using JDBC. This functionality is to allow trusted users with the proper permissions to set up lookups or submit ingestion tasks. The MySQL JDBC driver supports certain properties, which, if left unmitigated, can allow an attacker to execute arbitrary code from a hacker-controlled malicious MySQL server within Druid server processes. This issue was addressed in Apache Druid 0.20.2
CVE-2021-26920 (severity: MEDIUM, weakness: CWE-610)
In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of the Druid server process. This is not an elevation of privilege when users access Druid directly, since Druid also provides the Local InputSource, which allows the same level of access. But it is problematic when users interact with Druid indirectly through an application that allows users to specify the HTTP InputSource, but not the Local InputSource. In this case, users could bypass the application-level restriction by passing a file URL to the HTTP InputSource.
CVE-2021-26921 (severity: MEDIUM, weakness: CWE-613)
In util/session/sessionmanager.go in Argo CD before 1.8.4, tokens continue to work even when the user account is disabled.
CVE-2021-26923 (severity: HIGH, weakness: CWE-200)
An issue was discovered in Argo CD before 1.8.4. Accessing the endpoint /api/version leaks internal information for the system, and this endpoint is not protected with authentication.
CVE-2021-26924 (severity: MEDIUM, weakness: CWE-79)
An issue was discovered in Argo CD before 1.8.4. Browser XSS protection is not activated due to the missing XSS protection header.
CVE-2021-26925 (severity: MEDIUM, weakness: CWE-79)
Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.
CVE-2021-26926 (severity: HIGH, weakness: CWE-125)
A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.
CVE-2021-26927 (severity: MEDIUM, weakness: CWE-476)
A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service.
CVE-2021-26928 (severity: MEDIUM, weakness: CWE-306)
BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers. Because of this, products that use BIRD (which may, for example, include Tigera products in some configurations, as well as products of other vendors) may have been susceptible to route redirection for Denial of Service and/or Information Disclosure. NOTE: a researcher has asserted that the behavior is within Tigera’s area of responsibility; however, Tigera disagrees
CVE-2021-26929 (severity: MEDIUM, weakness: CWE-79)
An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke use of \x00\x00\x00 and \x01\x01\x01 interferes with XSS defenses.
CVE-2021-26930 (severity: HIGH, weakness: NVD-CWE-Other)
An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be discarded by later processing, resulting in the caller assuming successful mapping, and hence subsequent operations trying to access space that wasn't mapped. In another case, internal state would be insufficiently updated, preventing safe recovery from the error. This affects drivers/block/xen-blkback/blkback.c.
CVE-2021-26931 (severity: MEDIUM, weakness: CWE-770)
An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI backends consider certain errors a plain bug, deliberately causing a kernel crash. For errors potentially being at least under the influence of guests (such as out of memory conditions), it isn't correct to assume a plain bug. Memory allocations potentially causing such crashes occur only when Linux is running in PV mode, though. This affects drivers/block/xen-blkback/blkback.c and drivers/xen/xen-scsiback.c.
CVE-2021-26932 (severity: MEDIUM, weakness: NVD-CWE-Other)
An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations often occur in batch hypercalls, where a number of operations are done in a single hypercall, the success or failure of each one is reported to the backend driver, and the backend driver then loops over the results, performing follow-up actions based on the success or failure of each operation. Unfortunately, when running in PV mode, the Linux backend drivers mishandle this: Some errors are ignored, effectively implying their success from the success of related batch elements. In other cases, errors resulting from one batch element lead to further batch elements not being inspected, and hence successful ones to not be possible to properly unmap upon error recovery. Only systems with Linux backends running in PV mode are vulnerable. Linux backends run in HVM / PVH modes are not vulnerable. This affects arch/*/xen/p2m.c and drivers/xen/gntdev.c.
CVE-2021-26933 (severity: MEDIUM, weakness: NVD-CWE-Other)
An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether memory accesses are bypassing the cache. This means that Xen needs to ensure that all writes (such as the ones during scrubbing) have reached the memory before handing over the page to a guest. Unfortunately, the operation to clean the cache is happening before checking if the page was scrubbed. Therefore there is no guarantee when all the writes will reach the memory.
CVE-2021-26934 (severity: HIGH, weakness: NVD-CWE-Other)
An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation (aka be-alloc) mode of the drm_xen_front drivers was not meant to be a supported configuration, but this wasn't stated accordingly in its support status entry.
CVE-2021-26935 (severity: HIGH, weakness: CWE-89)
In WoWonder < 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerability via the event_id parameter.
CVE-2021-26936 (severity: HIGH, weakness: CWE-269)
The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allows a local attacker to escalate privileges to root by specifying video output paths in privileged locations.
CVE-2021-26937 (severity: CRITICAL, weakness: CWE-88)
encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or possibly have unspecified other impact via a crafted UTF-8 character sequence.
CVE-2021-26938 (severity: MEDIUM, weakness: CWE-79)
A stored XSS issue exists in henriquedornas 5.2.17 via online live chat. NOTE: Third parties report that no such product exists. That henriquedornas is the web design agency and 5.2.17 is simply the PHP version running on this hosts
CVE-2021-26939 (severity: HIGH, weakness: NVD-CWE-Other)
An information disclosure issue exists in henriquedornas 5.2.17 because an attacker can dump phpMyAdmin SQL content. NOTE: third parties report that this is a site-specific problem
CVE-2021-26943 (severity: HIGH, weakness: NVD-CWE-Other)
The UX360CA BIOS through 303 on ASUS laptops allow an attacker (with the ring 0 privilege) to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM (issue 3 of 3).
CVE-2021-26945 (severity: MEDIUM, weakness: CWE-400)
An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR.
CVE-2021-26947 (severity: MEDIUM, weakness: CWE-79)
Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via a crafted link.
CVE-2021-26948 (severity: HIGH, weakness: CWE-479)
Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a crafted html file.
CVE-2021-26950 (severity: MEDIUM, weakness: CWE-125)
Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.
CVE-2021-26951 (severity: CRITICAL, weakness: CWE-787)
An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::set_len is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get.