yahoo-inc/cve-impacts huggingface dataset:
CVE-2021-26722: LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found for" message in the search bar.
Key phrases: reflected XSS via /query because of mishandling of, xss
CVE-2021-26723: Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.
Key phrases: /ics?tool=search&query= XSS, xss
CVE-2021-26724: OS Command Injection vulnerability when changing date settings or hostname using web GUI of Nozomi Networks Guardian and CMC allows authenticated administrators to perform remote code execution. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions.
Key phrases: perform remote code execution, os command injection
CVE-2021-26725: Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected system files. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions.
Key phrases: read-protected system files, path traversal
CVE-2021-26726: A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012 until Collection 2021.
Key phrases: execute commands with SYSTEM privileges This issue affects, remote code execution
CVE-2021-26727: Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Key phrases: execute arbitrary code, execute arbitrary code with the same privileges as, command injections, stack-based buffer overflows, stack based buffer overflow
CVE-2021-26728: Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Key phrases: execute arbitrary code, execute arbitrary code with the same privileges as, command injection, stack-based buffer overflow, stack based buffer overflow
CVE-2021-26729: Command injection and multiple stack-based buffer overflows vulnerabilities in the Login_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Key phrases: execute arbitrary code, execute arbitrary code with the same privileges as, command injection, stack-based buffer overflows, stack based buffer overflow
CVE-2021-26730: A stack-based buffer overflow vulnerability in a subfunction of the Login_handler_func function of spx_restservice allows an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Key phrases: execute arbitrary code, execute arbitrary code with the same privileges as, stack-based buffer overflow, stack based buffer overflow
CVE-2021-26731: Command injection and multiple stack-based buffer overflows vulnerabilities in the modifyUserb_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Key phrases: execute arbitrary code, execute arbitrary code with the same privileges as, command injection, stack-based buffer overflows, stack based buffer overflow
CVE-2021-26732: A broken access control vulnerability in the First_network_func function of spx_restservice allows an attacker to arbitrarily change the network configuration of the BMC. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Key phrases: arbitrarily change the network configuration of the BMC, access control
CVE-2021-26733: A broken access control vulnerability in the FirstReset_handler_func function of spx_restservice allows an attacker to arbitrarily send reboot commands to the BMC, causing a Denial-of-Service (DoS) condition. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0.
Key phrases: arbitrarily send reboot commands to the BMC, access control, denial-of-service (dos) condition
CVE-2021-26734: Zscaler Client Connector Installer on Windows before version 3.4.0.124 improperly handled directory junctions during uninstallation. A local adversary may be able to delete folders in an elevated context.
Key phrases: directory junctions, elevated context
CVE-2021-26735: The Zscaler Client Connector Installer and Unsintallers for Windows prior to 3.6 had an unquoted search path vulnerability. A local adversary may be able to execute code with SYSTEM privileges.
Key phrases: unquoted search path, system privileges, execute code
CVE-2021-26736: Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries from a low privileged path. A local adversary may be able to execute code with SYSTEM privileges.
Key phrases: multiple, system privileges, execute code
CVE-2021-26737: The Zscaler Client Connector for macOS prior to 3.6 did not sufficiently validate RPC clients. A local adversary without sufficient privileges may be able to shutdown the Zscaler tunnel by exploiting a race condition.
Key phrases: race condition
CVE-2021-26738: Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local adversary may be able to execute code with root privileges.
Key phrases: unquoted search path, execute code, root privilege
CVE-2021-26739: SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter.
Key phrases: execute arbitrary code, sql injection
CVE-2021-26740: Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code.
Key phrases: execute arbitrary code, arbitrary file upload
CVE-2021-26746: Chamilo 1.11.14 allows XSS via a main/calendar/agenda_list.php?type= URI.
Key phrases: XSS via a main/calendar/agenda_list.php?type=, xss
CVE-2021-26747: Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.
Key phrases: remote code execution, shell metacharacter injection
CVE-2021-26750: DLL hijacking in Panda Agent <=1.16.11 in Panda Security, S.L.U. Panda Adaptive Defense 360 <= 8.0.17 allows attacker to escalate privileges via maliciously crafted DLL file.
Key phrases: escalate privileges via maliciously crafted DLL file, dll hijacking
CVE-2021-26751: NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php via the det HTTP GET parameter. This allows an attacker to access all the data in the database and obtain access to the NeDi application.
Key phrases: obtain access, perform a SQL Injection in the Monitoring History, access all the data in the database and, sql injection
CVE-2021-26752: NeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic function on the endpoint /Nodes-Traffic.php via the md or ag HTTP GET parameter. This allows an attacker to obtain access to the operating system where NeDi is installed and to all application data.
Key phrases: obtain access, execute operating system commands in the Nodes Traffic, obtain access to the operating system where NeDi
CVE-2021-26753: NeDi 1.9C allows an authenticated user to inject PHP code in the System Files function on the endpoint /System-Files.php via the txt HTTP POST parameter. This allows an attacker to obtain access to the operating system where NeDi is installed and to all application data.
Key phrases: obtain access, inject PHP code in the System Files function, obtain access to the operating system where NeDi, txt http post parameter
CVE-2021-26754: wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php?action=get_wdtable order[0][dir] SQL injection.
Key phrases: sql injection
CVE-2021-26758: Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root terminal access and execute commands on the host system.
Key phrases: gain root terminal access, gain root terminal access and execute commands on, privilege escalation
CVE-2021-26762: SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php.
Key phrases: execute arbitrary SQL statements, sql injection
CVE-2021-26764: SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit-std.php.
Key phrases: execute arbitrary SQL statements, sql injection
CVE-2021-26765: SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php.
Key phrases: execute arbitrary SQL statements, sql injection
CVE-2021-26776: CSZ CMS 1.2.9 is affected by a cross-site scripting (XSS) vulnerability in multiple pages through the field name.
Key phrases: cross-site scripting (xss), multiple pages
CVE-2021-26777: Buffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC smart metering concentrator Firwmare version CIR_CDC_v1.2.17, allows attackers to execute arbitrary code.
Key phrases: execute arbitrary code, buffer overflow
CVE-2021-26786: An issue was discoverered in in customercentric-selling-poland PlayTube, allows authenticated attackers to execute arbitrary code via the purchace code to the config.php.
Key phrases: execute arbitrary code, execute arbitrary code via the purchace code to
CVE-2021-26787: A cross site scripting (XSS) vulnerability in Genesys Workforce Management 8.5.214.20 can occur (during record deletion) via the Time-off parameter.
Key phrases: cross site scripting (xss)
CVE-2021-26788: Oryx Embedded CycloneTCP 1.7.6 to 2.0.0, fixed in 2.0.2, is affected by incorrect input validation, which may cause a denial of service (DoS). To exploit the vulnerability, an attacker needs to have TCP connectivity to the target system. Receiving a maliciously crafted TCP packet from an unauthenticated endpoint is sufficient to trigger the bug.
Key phrases: denial of service (DoS), incorrect input validation, denial of service (dos)
CVE-2021-26794: Privilege escalation in 'upload.php' in FrogCMS SentCMS v0.9.5 allows attacker to execute arbitrary code via crafted php file.
Key phrases: execute arbitrary code, execute arbitrary code via crafted php file, privilege escalation
CVE-2021-26795: A SQL Injection vulnerability in /appliance/shiftmgn.php in TalariaX sendQuick Alert Plus Server Admin 4.3 before 8HF11 allows attackers to obtain sensitive information via a Roster Time to Roster Management.
Key phrases: obtain sensitive information, obtain sensitive information via a Roster Time to, sql injection
CVE-2021-26797: An access control vulnerability in Hame SD1 Wi-Fi firmware <=V.20140224154640 allows an attacker to get system administrator through an open Telnet service.
Key phrases: get system administrator through an open Telnet service, access control
CVE-2021-26799: Cross Site Scripting (XSS) vulnerability in admin/files/edit in Omeka Classic <=2.7 allows remote attackers to inject arbitrary web script or HTML.
Key phrases: inject arbitrary web script or HTML, cross site scripting (xss)
CVE-2021-26800: Cross Site Request Forgery (CSRF) vulnerability in Change-password.php in phpgurukul user management system in php using stored procedure V1.0, allows attackers to change the password to an arbitrary account.
Key phrases: change the password to an arbitrary account, cross site request forgery (csrf)
CVE-2021-26804: Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extension to ".gif", then uploading it in the "Administration/ Parameters/ Images" section of the application.
Key phrases: bypass validation, bypass validation by changing any file extension to, insecure permissions
CVE-2021-26805: Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a malicious WAV file.
Key phrases: Denial of Service (DoS), cause a Denial of Service (DoS), buffer overflow, denial of service (dos)
CVE-2021-26807: GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PATH, which allows an attacker to potentially run code locally through unsigned DLL loading.
Key phrases: potentially run code locally through unsigned DLL loading, unsigned dlls, unsigned dll loading
CVE-2021-26809: PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php.
Key phrases: remote shell upload
CVE-2021-26810: D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dir_setWanWifi, which can lead to command injection via shell metacharacters in the statuscheckpppoeuser parameter.
Key phrases: remote code injection, command injection, shell metacharacters
CVE-2021-26812: Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application.
Key phrases: craft a malicious URL, cross site scripting (xss)
CVE-2021-26813: markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string, it can make markdown2 processing difficult or delayed for an extended period of time.
Key phrases: regular expression denial of service, delayed for an extended period of time
CVE-2021-26814: Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI. An authenticated user to the service may exploit incomplete input validation on the /manager/files API to inject arbitrary code within the API service script.
Key phrases: execute arbitrary code, execute arbitrary code with administrative privileges via /manager, incomplete input validation
CVE-2021-26822: Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php. This vulnerability can be exploited by a remote unauthenticated attacker to leak sensitive information and perform code execution attacks.
Key phrases: sql injection, leak sensitive information, code execution
CVE-2021-26824: DM FingerTool v1.19 in the DM PD065 Secure USB is susceptible to improper authentication by a replay attack, allowing local attackers to bypass user authentication and access all features and data on the USB.
Key phrases: bypass user authentication, bypass user authentication and access all features and, improper authentication, replay
CVE-2021-26825: An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::load_image() function at line: const size_t buffer_size = (tga_header.image_width * tga_header.image_height) * pixel_size; The bug leads to Dynamic stack buffer overflow. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash.
Key phrases: integer overflow, dynamic stack buffer overflow, code execution, system crash
CVE-2021-26826: A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash.
Key phrases: stack overflow issue, attack vector, code execution, system crash
CVE-2021-26827: Buffer Overflow in TP-Link WR2041 v1 firmware for the TL-WR2041+ router allows remote attackers to cause a Denial-of-Service (DoS) by sending an HTTP request with a very long "ssid" parameter to the "/userRpm/popupSiteSurveyRpm.html" webpage, which crashes the router.
Key phrases: cause a Denial-of-Service (, buffer overflow, denial-of-service (dos), crashes the router
CVE-2021-26828: OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.
Key phrases: execute arbitrary JSP files, upload and execute arbitrary JSP files via view_edit.shtm, arbitrary jsp files
CVE-2021-26829: OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.
Key phrases: stored XSS via system_settings.shtm, xss
CVE-2021-26830: SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the `ID` input field of ajax.php in the `Pugin library - delete` module.
Key phrases: access the database or delete the plugin, sql injection
CVE-2021-26832: Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victim to a malicious site.
Key phrases: execute javascript on behalf of the victim by, cross site scripting (xss)
CVE-2021-26833: Cleartext Storage in a File or on Disk in TimelyBills <= 1.7.0 for iOS and versions <= 1.21.115 for Android allows attacker who can locally read user's files obtain JWT tokens for user's account due to insufficient cache clearing mechanisms. A threat actor can obtain sensitive user data by decoding the tokens as JWT is signed and encoded, not encrypted.
Key phrases: obtain JWT tokens for user's account due, obtain sensitive user data, insufficient cache clearing mechanisms, cleartext storage
CVE-2021-26834: A cross-site scripting (XSS) vulnerability exists in Znote 0.5.2. An attacker can insert payloads, and the code execution will happen immediately on markdown view mode.
Key phrases: cross-site scripting (xss), payloads, code execution
CVE-2021-26835: No filtering of cross-site scripting (XSS) payloads in the markdown-editor in Zettlr 1.8.7 allows attackers to perform remote code execution via a crafted file.
Key phrases: perform remote code execution via a crafted file, cross-site scripting (xss)
CVE-2021-26837: SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information.
Key phrases: execute arbitrary code, gain sensitive information, sql injection, escalate privileges
CVE-2021-26843: An issue was discovered in sthttpd through 2.27.1. On systems where the strcpy function is implemented with memcpy, the de_dotdot function may cause a Denial-of-Service (daemon crash) due to overlapping memory ranges being passed to memcpy. This can triggered with an HTTP GET request for a crafted filename. NOTE: this is similar to CVE-2017-10671, but occurs in a different part of the de_dotdot function.
Key phrases: denial-of-service, daemon crash
CVE-2021-26844: A cross-site scripting (XSS) vulnerability in Power Admin PA Server Monitor 8.2.1.1 allows remote attackers to inject arbitrary web script or HTML via Console.exe.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via Console.exe, cross-site scripting (xss)
CVE-2021-26845: Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report data if the URL used to access the report is discovered. This issue affects: Hitachi ABB Power Grids eSOMS 6.0 versions prior to 6.0.4.2.2; 6.1 versions prior to 6.1.4; 6.3 versions prior to 6.3.
Key phrases: gain access, gain access to report data if the URL, information exposure
CVE-2021-26854: Microsoft Exchange Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-26855: Microsoft Exchange Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-26857: Microsoft Exchange Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-26858: Microsoft Exchange Server Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-26859: Microsoft Power BI Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2021-26860: Windows App-V Overlay Filter Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-26861: Windows Graphics Component Remote Code Execution Vulnerability
Key phrases: windows graphics component remote code execution
CVE-2021-26862: Windows Installer Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-26863: Windows Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26875, CVE-2021-26900, CVE-2021-27077.
Key phrases: windows elevation of privilege
CVE-2021-26864: Windows Virtual Registry Provider Elevation of Privilege Vulnerability
Key phrases: windows virtual registry provider elevation of privilege
CVE-2021-26865: Windows Container Execution Agent Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26891.
Key phrases: elevation of privilege
CVE-2021-26866: Windows Update Service Elevation of Privilege Vulnerability
Key phrases: windows update service elevation of privilege
CVE-2021-26867: Windows Hyper-V Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-26868: Windows Graphics Component Elevation of Privilege Vulnerability
Key phrases: windows graphics component elevation of privilege
CVE-2021-26869: Windows ActiveX Installer Service Information Disclosure Vulnerability
Key phrases: windows activex installer service information disclosure
CVE-2021-26870: Windows Projected File System Elevation of Privilege Vulnerability
Key phrases: windows projected file system elevation of privilege
CVE-2021-26871: Windows WalletService Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26885.
Key phrases: elevation of privilege
CVE-2021-26872: Windows Event Tracing Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26898, CVE-2021-26901.
Key phrases: windows event tracing elevation of privilege
CVE-2021-26873: Windows User Profile Service Elevation of Privilege Vulnerability
Key phrases: windows user profile service elevation of privilege
CVE-2021-26874: Windows Overlay Filter Elevation of Privilege Vulnerability
Key phrases: windows overlay filter elevation of privilege
CVE-2021-26875: Windows Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26863, CVE-2021-26900, CVE-2021-27077.
Key phrases: windows elevation of privilege
CVE-2021-26876: OpenType Font Parsing Remote Code Execution Vulnerability
Key phrases: opentype font parsing remote code execution
CVE-2021-26877: Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26893, CVE-2021-26894, CVE-2021-26895, CVE-2021-26897.
Key phrases: remote code execution
CVE-2021-26878: Windows Print Spooler Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1640.
Key phrases: windows print spooler elevation of privilege
CVE-2021-26879: Windows NAT Denial of Service Vulnerability
Key phrases: windows nat denial of service
CVE-2021-26880: Storage Spaces Controller Elevation of Privilege Vulnerability
Key phrases: storage spaces controller elevation of privilege
CVE-2021-26881: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-26882: Remote Access API Elevation of Privilege Vulnerability
Key phrases: remote access api elevation of privilege
CVE-2021-26884: Windows Media Photo Codec Information Disclosure Vulnerability
Key phrases: information disclosure
CVE-2021-26885: Windows WalletService Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26871.
Key phrases: elevation of privilege
CVE-2021-26886: User Profile Service Denial of Service Vulnerability
Key phrases: denial of service
CVE-2021-26887: Microsoft Windows Folder Redirection Elevation of Privilege Vulnerability
Key phrases: elevation of privilege
CVE-2021-26889: Windows Update Stack Elevation of Privilege Vulnerability
Key phrases: windows update stack elevation of privilege
CVE-2021-26890: Application Virtualization Remote Code Execution Vulnerability
Key phrases: remote code execution
CVE-2021-26891: Windows Container Execution Agent Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26865.
Key phrases: elevation of privilege
CVE-2021-26892: Windows Extensible Firmware Interface Security Feature Bypass Vulnerability
Key phrases: Security Feature Bypass, windows extensible firmware interface security feature bypass
CVE-2021-26893: Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26877, CVE-2021-26894, CVE-2021-26895, CVE-2021-26897.
Key phrases: remote code execution
CVE-2021-26894: Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26877, CVE-2021-26893, CVE-2021-26895, CVE-2021-26897.
Key phrases: remote code execution
CVE-2021-26895: Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26877, CVE-2021-26893, CVE-2021-26894, CVE-2021-26897.
Key phrases: remote code execution
CVE-2021-26896: Windows DNS Server Denial of Service Vulnerability This CVE ID is unique from CVE-2021-27063.
Key phrases: denial of service
CVE-2021-26897: Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26877, CVE-2021-26893, CVE-2021-26894, CVE-2021-26895.
Key phrases: remote code execution
CVE-2021-26898: Windows Event Tracing Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26872, CVE-2021-26901.
Key phrases: windows event tracing elevation of privilege
CVE-2021-26899: Windows UPnP Device Host Elevation of Privilege Vulnerability
Key phrases: windows upnp device host elevation of privilege
CVE-2021-26900: Windows Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26863, CVE-2021-26875, CVE-2021-27077.
Key phrases: windows elevation of privilege
CVE-2021-26901: Windows Event Tracing Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26872, CVE-2021-26898.
Key phrases: windows event tracing elevation of privilege
CVE-2021-26902: HEVC Video Extensions Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-24089, CVE-2021-24110, CVE-2021-27047, CVE-2021-27048, CVE-2021-27049, CVE-2021-27050, CVE-2021-27051, CVE-2021-27061, CVE-2021-27062.
Key phrases: hevc video extensions remote code execution
CVE-2021-26903: LMA ISIDA Retriever 5.2 is vulnerable to XSS via query['text'].
Key phrases: xss
CVE-2021-26904: LMA ISIDA Retriever 5.2 allows SQL Injection.
Key phrases: SQL Injection, sql injection
CVE-2021-26905: 1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure of a TLS private key.
Key phrases: disclosure
CVE-2021-26906: An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through 18.2.0, and Certified Asterisk through 16.8-cert5. An SDP negotiation vulnerability in PJSIP allows a remote server to potentially crash Asterisk by sending specific SIP responses that cause an SDP negotiation failure.
Key phrases: potentially crash Asterisk by sending specific SIP responses, sdp negotiation, specific sip responses
CVE-2021-26908: Automox Agent prior to version 31 logs potentially sensitive information in local log files, which could be used by a locally-authenticated attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent.
Key phrases: sensitive information
CVE-2021-26909: Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forced by an attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent.
CVE-2021-26910: Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat operation and an OverlayFS mount operation.
Key phrases: bypass intended access restrictions, bypass intended access restrictions because there is a, toctou race condition
CVE-2021-26911: core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for IMAP in STARTTLS mode.
Key phrases: missing ssl certificate validation
CVE-2021-26912: NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in SupportRpcServlet.
Key phrases: execute arbitrary code, execute arbitrary code as SYSTEM because of Java, java deserialization
CVE-2021-26913: NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in RpcServlet.
Key phrases: execute arbitrary code, execute arbitrary code as SYSTEM because of Java, java deserialization
CVE-2021-26914: NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in MvcUtil valueStringToObject.
Key phrases: execute arbitrary code, execute arbitrary code as SYSTEM because of Java
CVE-2021-26915: NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in webrepdb StatusServlet.
Key phrases: execute arbitrary code, execute arbitrary code as SYSTEM because of Java, java deserialization
CVE-2021-26916: In nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary web script or HTML through the Filters/CheckDiscountCouponAttribute.cs discountcode parameter.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML through the, reflected xss issue
CVE-2021-26917: PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via a crafted apinotifypath value. NOTE: the discoverer states "security mitigation may not be necessary as there is no evidence yet that these screen intercepts are actually transported away from the local host." NOTE: it is unclear whether there are any common use cases in which apinotifypath is controlled by an attacker
Key phrases: write screen captures to Potentially Unwanted Directories via, potentially unwanted directories
CVE-2021-26918: The ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of the "Send an image when a user joins the server" feature (or possibly have unspecified other impact) because the uploader web service allows double extensions (such as .html.jpg) with the text/html content type. NOTE: there may not be cases in which an uploader web service is customer controlled; however, the nature of the issue has substantial interaction with customer controlled configuration. NOTE: the vendor states "This is just an uploader (like any other one) which uploads files to cloud storage and accepts various file types. There is no kind of vulnerability and it won't compromise either the client side or the server side.
Key phrases: interfere with the intended purpose of the ", cloud storage and accepts various file types, unspecified other impact, double extensions, unspecified impact
CVE-2021-26919: Apache Druid allows users to read data from other database systems using JDBC. This functionality is to allow trusted users with the proper permissions to set up lookups or submit ingestion tasks. The MySQL JDBC driver supports certain properties, which, if left unmitigated, can allow an attacker to execute arbitrary code from a hacker-controlled malicious MySQL server within Druid server processes. This issue was addressed in Apache Druid 0.20.2
Key phrases: execute arbitrary code, read data from other database systems using JDBC, set up lookups or submit ingestion tasks, execute arbitrary code from a hacker-controlled
CVE-2021-26920: In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of the Druid server process. This is not an elevation of privilege when users access Druid directly, since Druid also provides the Local InputSource, which allows the same level of access. But it is problematic when users interact with Druid indirectly through an application that allows users to specify the HTTP InputSource, but not the Local InputSource. In this case, users could bypass the application-level restriction by passing a file URL to the HTTP InputSource.
Key phrases: bypass the application-level restriction, read data from other sources than intended, specify the HTTP InputSource, file url, elevation privilege
CVE-2021-26921: In util/session/sessionmanager.go in Argo CD before 1.8.4, tokens continue to work even when the user account is disabled.
Key phrases: tokens
CVE-2021-26923: An issue was discovered in Argo CD before 1.8.4. Accessing the endpoint /api/version leaks internal information for the system, and this endpoint is not protected with authentication.
CVE-2021-26924: An issue was discovered in Argo CD before 1.8.4. Browser XSS protection is not activated due to the missing XSS protection header.
CVE-2021-26925: Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering.
Key phrases: XSS via crafted Cascading Style Sheets (CSS, xss
CVE-2021-26926: A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.
Key phrases: out of bounds read issue, disclosure of information, program crash
CVE-2021-26927: A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service.
Key phrases: null pointer dereference, program crash, denial of service
CVE-2021-26928: BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers. Because of this, products that use BIRD (which may, for example, include Tigera products in some configurations, as well as products of other vendors) may have been susceptible to route redirection for Denial of Service and/or Information Disclosure. NOTE: a researcher has asserted that the behavior is within Tigera’s area of responsibility; however, Tigera disagrees
Key phrases: route redirection, denial of service, information disclosure
CVE-2021-26929: An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke use of \\\\x00\\\\x00\\\\x00 and \\\\x01\\\\x01\\\\x01 interferes with XSS defenses.
Key phrases: xss issue
CVE-2021-26930: An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be discarded by later processing, resulting in the caller assuming successful mapping, and hence subsequent operations trying to access space that wasn't mapped. In another case, internal state would be insufficiently updated, preventing safe recovery from the error. This affects drivers/block/xen-blkback/blkback.c.
CVE-2021-26931: An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI backends consider certain errors a plain bug, deliberately causing a kernel crash. For errors potentially being at least under the influence of guests (such as out of memory conditions), it isn't correct to assume a plain bug. Memory allocations potentially causing such crashes occur only when Linux is running in PV mode, though. This affects drivers/block/xen-blkback/blkback.c and drivers/xen/xen-scsiback.c.
Key phrases: crash
CVE-2021-26932: An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations often occur in batch hypercalls, where a number of operations are done in a single hypercall, the success or failure of each one is reported to the backend driver, and the backend driver then loops over the results, performing follow-up actions based on the success or failure of each operation. Unfortunately, when running in PV mode, the Linux backend drivers mishandle this: Some errors are ignored, effectively implying their success from the success of related batch elements. In other cases, errors resulting from one batch element lead to further batch elements not being inspected, and hence successful ones to not be possible to properly unmap upon error recovery. Only systems with Linux backends running in PV mode are vulnerable. Linux backends run in HVM / PVH modes are not vulnerable. This affects arch/*/xen/p2m.c and drivers/xen/gntdev.c.
CVE-2021-26933: An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether memory accesses are bypassing the cache. This means that Xen needs to ensure that all writes (such as the ones during scrubbing) have reached the memory before handing over the page to a guest. Unfortunately, the operation to clean the cache is happening before checking if the page was scrubbed. Therefore there is no guarantee when all the writes will reach the memory.
CVE-2021-26934: An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation (aka be-alloc) mode of the drm_xen_front drivers was not meant to be a supported configuration, but this wasn't stated accordingly in its support status entry.
CVE-2021-26935: In WoWonder < 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerability via the event_id parameter.
Key phrases: gain access, sql injection
CVE-2021-26936: The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allows a local attacker to escalate privileges to root by specifying video output paths in privileged locations.
Key phrases: escalate privileges to root by specifying video output, setuid-root configuration
CVE-2021-26937: encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or possibly have unspecified other impact via a crafted UTF-8 character sequence.
Key phrases: denial of service (invalid write access and application crash), cause a denial of service (invalid write, unspecified other impact, unspecified impact
CVE-2021-26938: A stored XSS issue exists in henriquedornas 5.2.17 via online live chat. NOTE: Third parties report that no such product exists. That henriquedornas is the web design agency and 5.2.17 is simply the PHP version running on this hosts
Key phrases: stored xss
CVE-2021-26939: An information disclosure issue exists in henriquedornas 5.2.17 because an attacker can dump phpMyAdmin SQL content. NOTE: third parties report that this is a site-specific problem
Key phrases: information disclosure issue, site-specific problem
CVE-2021-26943: The UX360CA BIOS through 303 on ASUS laptops allow an attacker (with the ring 0 privilege) to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM (issue 3 of 3).
Key phrases: execute arbitrary code, overwrite nearly arbitrary physical memory locations
CVE-2021-26945: An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR.
Key phrases: integer overflow, heap-buffer overflow, crash, heap buffer overflow
CVE-2021-26947: Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, via a crafted link.
Key phrases: inject arbitrary web script, inject arbitrary web script in the browser of, cross-site scripting (xss) issue
CVE-2021-26948: Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a crafted html file.
Key phrases: execute arbitrary code, execute arbitrary code and cause a denial of, null pointer dereference, denial of service
CVE-2021-26950: Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow an authenticated user to potentially enable denial of service via local access.
Key phrases: potentially enable denial of service via local access, out of bounds read
CVE-2021-26951: An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::set_len is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get.
Key phrases: overwrite heap-memory locations because Vec::set_len is, uninitialized memory
CVE-2021-26952: An issue was discovered in the ms3d crate before 0.1.3 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via IoReader::read.
Key phrases: obtain sensitive information, obtain sensitive information from uninitialized memory locations via
CVE-2021-26953: An issue was discovered in the postscript crate before 0.14.0 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via a user-provided Read implementation.
Key phrases: obtain sensitive information, obtain sensitive information from uninitialized memory locations via
CVE-2021-26954: An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insert_slice_clone can perform a double drop.
Key phrases: double drop
CVE-2021-26955: An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name() calls std::str::from_utf8_unchecked() on unvalidated bytes from an X server.
Key phrases: soundness violation
CVE-2021-26956: An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because bytes from an X server can be interpreted as any data type returned by xcb::xproto::GetPropertyReply::value.
Key phrases: soundness violation
CVE-2021-26957: An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because there is an out-of-bounds read in xcb::xproto::change_property(), as demonstrated by a format=32 T=u8 situation where out-of-bounds bytes are sent to an X server.
Key phrases: soundness violation, out-of-bounds read, out of bounds read
CVE-2021-26958: An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because transmutation to the wrong type can happen after xcb::base::cast_event uses std::mem::transmute to return a reference to an arbitrary type.
Key phrases: soundness violation
CVE-2021-26960: A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the AirWave web-based management interface could allow an unauthenticated remote attacker to conduct a CSRF attack against a vulnerable system. A successful exploit would consist of an attacker persuading an authorized user to follow a malicious link, resulting in arbitrary actions being carried out with the privilege level of the targeted user.
Key phrases: conduct a CSRF attack against a vulnerable system, remote unauthenticated cross-site request forgery (csrf), arbitrary actions, cross site request forgery
CVE-2021-26961: A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the AirWave web-based management interface could allow an unauthenticated remote attacker to conduct a CSRF attack against a vulnerable system. A successful exploit would consist of an attacker persuading an authorized user to follow a malicious link, resulting in arbitrary actions being carried out with the privilege level of the targeted user.
Key phrases: conduct a CSRF attack against a vulnerable system, remote unauthenticated cross-site request forgery (csrf), arbitrary actions, cross site request forgery
CVE-2021-26962: A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to full system compromise.
Key phrases: authenticated arbitrary command execution vulnerability, run arbitrary commands on the underlying host, execute arbitrary commands as root on the underlying, remote authenticated arbitrary command execution, full system compromise
CVE-2021-26963: A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to full system compromise.
Key phrases: authenticated arbitrary command execution vulnerability, run arbitrary commands on the underlying host, execute arbitrary commands as root on the underlying, remote authenticated arbitrary command execution, full system compromise
CVE-2021-26964: A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the AirWave web-based management interface could allow an authenticated remote attacker to improperly access and modify devices and management user details. A successful exploit would consist of an attacker using a lower privileged account to change management user or device details. This could allow the attacker to escalate privileges and/or change network details that they should not have access to.
Key phrases: remote authentication restriction bypass, improperly access and modify devices and management user, escalate privileges and/or change network details that they