yahoo-inc/cve-impacts huggingface dataset:
CVE-2021-46644: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. Crafted data in a DGN file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15530.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Bentley, execute code
CVE-2021-46645: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. Crafted data in a BMP image can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15531.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Bentley, execute code
CVE-2021-46646: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. Crafted data in a DGN file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15532.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Bentley, execute code
CVE-2021-46647: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15533.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Bentley, execute code
CVE-2021-46648: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15534.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Bentley, execute code
CVE-2021-46649: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15535.
Key phrases: execute arbitrary code, disclose sensitive information on affected installations of Bentley
CVE-2021-46650: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15536.
Key phrases: execute arbitrary code, disclose sensitive information on affected installations of Bentley
CVE-2021-46651: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15537.
Key phrases: execute arbitrary code, disclose sensitive information on affected installations of Bentley
CVE-2021-46652: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. Crafted data in a DGN file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15538.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Bentley, execute code
CVE-2021-46653: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP images. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15539.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Bentley, execute code
CVE-2021-46654: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-15540.
Key phrases: execute arbitrary code, disclose sensitive information on affected installations of Bentley
CVE-2021-46655: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15630.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Bentley, execute code
CVE-2021-46656: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT files. Crafted data in a JT file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-15631.
Key phrases: execute arbitrary code, execute arbitrary code on affected installations of Bentley, execute code
CVE-2021-46657: get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.
Key phrases: an application crash via certain subquery uses of
CVE-2021-46658: save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.
Key phrases: an application crash because of incorrect handling of
CVE-2021-46659: MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.
Key phrases: each VIEW, application crash
CVE-2021-46660: Signiant Manager+Agents before 15.1 allows XML External Entity (XXE) attacks.
Key phrases: XML External Entity (XXE) attacks, xml external entity (xxe)
CVE-2021-46661: MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE).
Key phrases: an application crash in find_field_in_tables and find_order_in_list via, unused common table expression (cte)
CVE-2021-46662: MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery.
Key phrases: a set_var.cc application crash via certain uses of
CVE-2021-46663: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.
Key phrases: a ha_maria::extra application crash via certain SELECT statements
CVE-2021-46664: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.
Key phrases: an application crash in sub_select_postjoin_aggr for a NULL
CVE-2021-46665: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations.
Key phrases: a sql_parse.cc application crash because of incorrect used_tables
CVE-2021-46666: MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause.
Key phrases: a WHERE clause, application crash, pushdown
CVE-2021-46667: MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.
Key phrases: sql_lex.cc integer overflow, application crash
CVE-2021-46668: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures.
Key phrases: an application crash via certain long SELECT DISTINCT
CVE-2021-46669: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.
Key phrases: trigger a convert_const_to_int use-after-free, use after free
CVE-2021-46671: options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data to a remote client.
CVE-2021-46676: A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the transactional maps name field.
Key phrases: perform javascript code executions via the transactional maps, xss
CVE-2021-46677: A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the event filter name field.
Key phrases: perform javascript code executions via the event filter, xss
CVE-2021-46678: A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the service name field.
Key phrases: perform javascript code executions via the service name, xss
CVE-2021-46679: A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via service elements.
Key phrases: perform javascript code executions via service elements, xss
CVE-2021-46680: A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the module form name field.
Key phrases: perform javascript code executions via the module form, xss
CVE-2021-46681: A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via module massive operation name field.
Key phrases: perform javascript code executions via module massive operation, xss
CVE-2021-46687: JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Administrator REST API. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.31.10 versions prior to 7.x; JFrog Artifactory versions before 6.23.38 versions prior to 6.x.
Key phrases: sensitive data exposure
CVE-2021-46699: A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.1). Affected application contains a stack based buffer overflow vulnerability while parsing specially crafted BDF files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15061)
Key phrases: execute code in the context of the current, stack based buffer overflow
CVE-2021-46700: In libsixel 1.8.6, sixel_encoder_output_without_macro (called from sixel_encoder_encode_frame in encoder.c) has a double free.
Key phrases: double free
CVE-2021-46701: PreMiD 2.2.0 allows unintended access via the websocket transport. An attacker can receive events from a socket and emit events to a socket, potentially interfering with a victim's "now playing" status on Discord.
Key phrases: a socket, unintended access, interfering
CVE-2021-46702: Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allow local attackers to bypass the intended anonymity feature and obtain information regarding the onion services visited by a local user. This can be accomplished by analyzing RAM memory even several hours after the local user used the product. This occurs because the product doesn't properly free memory.
Key phrases: bypass the intended anonymity feature and obtain information, information disclosure
CVE-2021-46703: In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Key phrases: execute arbitrary
CVE-2021-46704: In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument (lib/ui/api.ts and lib/ping.ts). The vulnerability arises from insufficient input validation combined with a missing authorization check.
Key phrases: unauthenticated os command injection, insufficient input validation, missing authorization check
CVE-2021-46705: A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2 versions prior to 2.06-18.1.
Key phrases: truncate arbitrary files, insecure temporary file
CVE-2021-46708: The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
Key phrases: hijack the clicking action of the victim
CVE-2021-46709: phpLiteAdmin through 1.9.8.2 allows XSS via the index.php newRows parameter (aka num or number).
Key phrases: XSS via the index.php newRows parameter (aka, xss
CVE-2021-46740: The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnerability may affect data confidentiality.
Key phrases: defect, data confidentiality
CVE-2021-46741: The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity.
Key phrases: defects, affect system integrity
CVE-2021-46742: The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this vulnerability may affect the availability.
Key phrases: multi-window module, unauthorized insertion, availability
CVE-2021-46743: In Firebase PHP-JWT before 6.0.0, an algorithm-confusion issue (e.g., RS256 / HS256) exists via the kid (aka Key ID) header, when multiple types of keys are loaded in a key ring. This allows an attacker to forge tokens that validate under the incorrect key. NOTE: this provides a straightforward way to use the PHP-JWT library unsafely, but might not be considered a vulnerability in the library itself.
Key phrases: forge tokens that validate under the incorrect key, algorithm-confusion issue
CVE-2021-46744: An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time.
Key phrases: malicious hypervisor, sev guest
CVE-2021-46748: Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service.
Key phrases: access memory outside the bounds of what is, insufficient bounds checking, denial of service
CVE-2021-46749: Insufficient bounds checking in ASP (AMD SecureProcessor) may allow for an out of bounds read in SMI (System ManagementInterface) mailbox checksum calculation triggering a data abort, resulting in apotential denial of service.
Key phrases: for an out of bounds read in SMI, insufficient bounds checking, denial of service
CVE-2021-46753: Failure to validate the length fields of the ASP(AMD Secure Processor) sensor fusion hub headers may allow an attacker with amalicious Uapp or ABL to map the ASP sensor fusion hub region and overwritedata structures leading to a potential loss of confidentiality and integrity.
Key phrases: map the ASP sensor fusion hub region and, loss of confidentiality and integrity
CVE-2021-46754: Insufficient input validation in the ASP (AMDSecure Processor) bootloader may allow an attacker with a compromised Uapp orABL to coerce the bootloader into exposing sensitive information to the SMU(System Management Unit) resulting in a potential loss of confidentiality andintegrity.
Key phrases: coerce the bootloader into exposing sensitive information to, insufficient input validation, confidentiality
CVE-2021-46755: Failure to unmap certain SysHub mappings inerror paths of the ASP (AMD Secure Processor) bootloader may allow an attackerwith a malicious bootloader to exhaust the SysHub resources resulting in apotential denial of service.
Key phrases: exhaust the SysHub resources resulting in apotential denial, denial of service
CVE-2021-46756: Insufficient validation of inputs inSVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow anattacker with a malicious Uapp or ABL to send malformed or invalid syscall tothe bootloader resulting in a potential denial of service and loss ofintegrity.
Key phrases: send malformed or invalid syscall tothe bootloader resulting, denial of service
CVE-2021-46758: Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.
Key phrases: read data in memory mapped beyond SPI flash, loss of availability, integrity
CVE-2021-46759: Improper syscall input validation in AMD TEE(Trusted Execution Environment) may allow an attacker with physical access andcontrol of a Uapp that runs under the bootloader to reveal the contents of theASP (AMD Secure Processor) bootloader accessible memory to a serial port,resulting in a potential loss of integrity.
Key phrases: reveal the contents of theASP (AMD Secure, improper syscall input validation, loss of integrity
CVE-2021-46760: A malicious or compromised UApp or ABL can senda malformed system call to the bootloader, which may result in an out-of-boundsmemory access that may potentially lead to an attacker leaking sensitiveinformation or achieving code execution.
Key phrases: out-of-boundsmemory access, leaking sensitiveinformation, code execution
CVE-2021-46762: Insufficient input validation in the SMU mayallow an attacker to corrupt SMU SRAM potentially leading to a loss ofintegrity or denial of service.
Key phrases: insufficient input validation, denial of service
CVE-2021-46763: Insufficient input validation in the SMU mayenable a privileged attacker to write beyond the intended bounds of a sharedmemory buffer potentially leading to a loss of integrity.
Key phrases: insufficient input validation, loss of integrity
CVE-2021-46764: Improper validation of DRAM addresses in SMU mayallow an attacker to overwrite sensitive memory locations within the ASPpotentially resulting in a denial of service.
Key phrases: improper validation, denial of service
CVE-2021-46765: Insufficient input validation in ASP may allowan attacker with a compromised SMM to induce out-of-bounds memory reads withinthe ASP, potentially leading to a denial of service.
Key phrases: insufficient input validation, compromised smm, out-of-bounds memory reads, denial of service, out of bounds memory
CVE-2021-46766: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.
Key phrases: improper clearing of sensitive data, loss of confidentiality
CVE-2021-46767: Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory potentially leading to a loss of integrity or denial of service.
Key phrases: memory potentially leading to a loss of integrity, insufficient input validation, physical access, unauthorized write access, denial of service
CVE-2021-46768: Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentially leading to a denial of service.
Key phrases: perform out-of-bounds memory reads, insufficient input validation, denial of service, out of bounds memory
CVE-2021-46769: Insufficient syscall input validation in the ASPBootloader may allow a privileged attacker to execute arbitrary DMA copies,which can lead to code execution. 
Key phrases: execute arbitrary DMA copies, insufficient syscall input validation, code execution
CVE-2021-46771: Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a compromised user application.
Key phrases: insufficient validation of addresses, arbitrary code execution
CVE-2021-46773: Insufficient input validation in ABL may enablea privileged attacker to corrupt ASP memory, potentially resulting in a loss ofintegrity or code execution.
Key phrases: insufficient input validation, code execution
CVE-2021-46774: Insufficient DRAM address validation in SystemManagement Unit (SMU) may allow an attacker to read/write from/to an invalidDRAM address, potentially resulting in denial-of-service.
Key phrases: read/write from/to an invalidDRAM, invaliddram address, denial-of-service, denial of service
CVE-2021-46775: Improper input validation in ABL may enable anattacker with physical access, to perform arbitrary memory overwrites,potentially leading to a loss of integrity and code execution. 
Key phrases: perform arbitrary memory overwrites, improper input validation, loss of integrity, code execution
CVE-2021-46778: Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed Zen 1, Zen 2 and Zen 3 that use simultaneous multithreading (SMT). By measuring the contention level on scheduler queues an attacker may potentially leak sensitive information.
Key phrases: side channel, sensitive information
CVE-2021-46779: Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AMD Secure Processor) OS memory which may lead to potential loss of integrity and availability.
Key phrases: corrupt ASP (AMD Secure Processor) OS, insufficient input validation, loss of integrity and availability
CVE-2021-46780: The Easy Google Maps WordPress plugin before 1.9.32 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting
Key phrases: reflected cross-site scripting
CVE-2021-46781: The Coming Soon by Supsystic WordPress plugin before 1.7.6 does not sanitise and escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting
Key phrases: reflected cross-site scripting
CVE-2021-46782: The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting
Key phrases: reflected cross-site scripting
CVE-2021-46784: In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses.
Key phrases: denial of service
CVE-2021-46785: The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.
Key phrases: obtain the unique device identifier., property module, permission control
CVE-2021-46786: The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerability may cause out-of-bounds memory access.
Key phrases: out-of-bounds memory access, out of bounds memory
CVE-2021-46787: The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash.
Key phrases: ams module, improper permission control, crash, improper permissions
CVE-2021-46788: Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-up window may be covered to mislead users to perform incorrect operations.
Key phrases: third-party pop-up window coverage, incorrect operations
CVE-2021-46789: Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability.
Key phrases: configuration defects, availability
CVE-2021-46790: ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck is deprecated; however, it is shipped by some Linux distributions.
Key phrases: heap-based buffer overflow, heap based buffer overflow
CVE-2021-46791: Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binary to corrupt Dynamic Root of Trust for Measurement (DRTM) user application memory that may result in a potential denial of service.
Key phrases: corrupt Dynamic Root of Trust for Measurement (, insufficient input validation, denial of service
CVE-2021-46792: Time-of-check Time-of-use (TOCTOU) in theBIOS2PSP command may allow an attacker with a malicious BIOS to create a racecondition causing the ASP bootloader to perform out-of-bounds SRAM reads uponan S3 resume event potentially leading to a denial of service.
Key phrases: create a racecondition causing the ASP bootloader to, denial of service
CVE-2021-46794: Insufficient bounds checking in ASP (AMD SecureProcessor) may allow for an out of bounds read in SMI (System ManagementInterface) mailbox checksum calculation triggering a data abort, resulting in apotential denial of service.
Key phrases: for an out of bounds read in SMI, insufficient bounds checking, denial of service
CVE-2021-46795: A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service.
Key phrases: toctou, denial of service
CVE-2021-46811: HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information.
Key phrases: hwseserviceapp, permission management, disclosure of the card production life cycle (cplc) information
CVE-2021-46812: The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity.
Key phrases: multi-device interaction, data integrity
CVE-2021-46813: Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may affect availability.
Key phrases: vulnerability of residual files, availability
CVE-2021-46814: The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability.
Key phrases: out-of-bounds memory read write, system availability, out of bounds memory
CVE-2021-46816: Adobe Premiere Pro version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file.
Key phrases: achieve arbitrary code execution, memory corruption
CVE-2021-46817: Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file.
Key phrases: achieve arbitrary code execution, memory corruption
CVE-2021-46818: Adobe Media Encoder version 15.4 (and earlier) are affected by a memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious M4A file.
Key phrases: achieve arbitrary code execution, memory corruption
CVE-2021-46820: Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_system 1.0.9 via current_manufacturer_image parameter to /shop/admin/categories.php
Key phrases: arbitrary file deletion
CVE-2021-46822: The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the get_word_rgb_row function in rdppm.c.
Key phrases: heap-based buffer overflow, heap based buffer overflow
CVE-2021-46823: python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service (ReDoS) flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this vulnerability to cause a denial of service condition.
Key phrases: denial of service (ReDoS), denial of service condition
CVE-2021-46824: Cross Site Scripting (XSS) vulnerability in sourcecodester School File Management System 1.0 via the Lastname parameter to the Update Account form in student_profile.php.
Key phrases: cross site scripting (xss)
CVE-2021-46825: Symantec Advanced Secure Gateway (ASG) and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker and other web clients communicate through the proxy with the same web server, the attacker can send crafted HTTP requests and cause the proxy to forward web server responses to unintended clients. Severity/CVSSv3: High / 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Key phrases: http desync
CVE-2021-46827: An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in search terms proposals (in online documentation generated using Oxygen XML WebHelp) allows attackers to execute JavaScript by convincing a user to type specific text in the WebHelp output search field.
Key phrases: execute JavaScript by convincing a user to type, xss, convince
CVE-2021-46828: In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connections.
Key phrases: idle tcp connections, svc_run infinite loop
CVE-2021-46829: GNOME GdkPixbuf (aka GDK-PixBuf) before 2.42.8 allows a heap-based buffer overflow when compositing or clearing frames in GIF files, as demonstrated by io-gif-animation.c composite_frame. This overflow is controllable and could be abused for code execution, especially on 32-bit systems.
Key phrases: a heap-based buffer overflow when compositing, heap based buffer overflow, code execution
CVE-2021-46830: A path traversal vulnerability exists within GoAnywhere MFT before 6.8.3 that utilize self-registration for the GoAnywhere Web Client. This vulnerability could potentially allow an external user who self-registers with a specific username and/or profile information to gain access to files at a higher directory level than intended.
Key phrases: gain access, gain access to files at a higher directory, path traversal
CVE-2021-46834: A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected product versions include:JAD-AL50 versions 102.0.0.225(C00E220R3P4).
Key phrases: permission bypass, access certain resource in the attacked devices
CVE-2021-46835: There is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers.
Key phrases: traffic hijacking
CVE-2021-46836: Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
Key phrases: information disclosure, data confidentiality
CVE-2021-46837: res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows an attacker to trigger a crash by sending an m=image line and zero port in a response to a T.38 re-invite initiated by Asterisk. This is a re-occurrence of the CVE-2019-15297 symptoms but not for exactly the same reason. The crash occurs because there is an append operation relative to the active topology, but this should instead be a replace operation.
Key phrases: trigger a crash by sending an m=
CVE-2021-46839: The HW_KEYMASTER module has a vulnerability of missing bounds check on length.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
Key phrases: out-of-bounds access, out of bounds access
CVE-2021-46840: The HW_KEYMASTER module has an out-of-bounds access vulnerability in parameter set verification.Successful exploitation of this vulnerability may cause malicious construction of data, which results in out-of-bounds access.
Key phrases: out-of-bounds access, malicious construction of data, out of bounds access
CVE-2021-46841: This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.5.0 for Android. An attacker in a privileged network position can track a user's activity.
Key phrases: users activity
CVE-2021-46846: Cross Site Scripting vulnerability in Hewlett Packard Enterprise Integrated Lights-Out 5.
Key phrases: cross site scripting
CVE-2021-46848: GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
CVE-2021-46850: myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection. An authenticated and remote administrative user can execute arbitrary commands via the v_sftp_license parameter when sending HTTP POST requests to the /edit/server endpoint.
Key phrases: execute arbitrary commands, command injection
CVE-2021-46851: The DRM module has a vulnerability in verifying the secure memory attributes. Successful exploitation of this vulnerability may cause abnormal video playback.
Key phrases: abnormal video playback
CVE-2021-46852: The memory management module has the logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
Key phrases: logic bypass, data confidentiality
CVE-2021-46853: Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.
Key phrases: denial of service (application crash), cause a denial of service (application crash, list, lsub
CVE-2021-46854: mod_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies blocks of 16 characters.
Key phrases: RADIUS servers because it copies blocks of 16, memory disclosure
CVE-2021-46856: The multi-screen collaboration module has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
Key phrases: path traversal, data confidentiality
CVE-2021-46867: The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access.
Key phrases: out-of-bounds memory access, out of bounds memory
CVE-2021-46868: The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access.
Key phrases: out-of-bounds memory access, out of bounds memory
CVE-2021-46871: tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes.
Key phrases: XSS in HEEx class attributes, xss
CVE-2021-46872: An issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used in NimForum and other products, permits the javascript: URI scheme and thus can lead to XSS in some applications. (Nim versions 1.6.2 and later are fixed; there may be backports of the fix to some earlier versions. NimForum 2.2.0 is fixed.)
Key phrases: xss
CVE-2021-46873: WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's system time to a future value, e.g., because unauthenticated NTP is used. This can lead to an outcome in which one static private key becomes permanently useless.
Key phrases: unauthenticated ntp, permanently useless
CVE-2021-46875: An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can be uploaded in a .html or .js file.
Key phrases: xss
CVE-2021-46876: An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determine account existence.
Key phrases: user sessions endpoint
CVE-2021-46877: jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.
Key phrases: denial of service (2 GB transient heap usage per read), cause a denial of service (2 GB
CVE-2021-46878: An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in flb_pack_msgpack_to_json_format leads to type confusion bug that interprets whatever is on the stack as msgpack maps and arrays, leading to use-after-free. This can be used by an attacker to craft a specially craft file and trick the victim opening it using the affect software, triggering use-after-free and execute arbitrary code on the target system.
Key phrases: execute arbitrary code, type confusion bug, use-after-free, specially craft file, use after free
CVE-2021-46879: An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the msgpack data resulting in a heap overflow in flb_msgpack_gelf_value_ext. An attacker can craft a malicious file and tick the victim to open the file with the software, triggering a heap overflow and execute arbitrary code on the target system.
Key phrases: execute arbitrary code, heap overflow, malicious file
CVE-2021-46880: x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certificate chain is sometimes discarded.
Key phrases: bypass because an error for an unverified certificate chain, authentication bypass, authentication bypass because an error for an unverified
CVE-2021-46881: The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.
Key phrases: memory overwriting, addition overflow, availability
CVE-2021-46882: The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.
Key phrases: memory overwriting, addition overflow, availability
CVE-2021-46883: The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.
Key phrases: memory overwriting, addition overflow, availability
CVE-2021-46884: The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.
Key phrases: memory overwriting, addition overflow, availability
CVE-2021-46885: The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.
Key phrases: memory overwriting, addition overflow, availability
CVE-2021-46886: The video framework has memory overwriting caused by addition overflow. Successful exploitation of this vulnerability may affect availability.
Key phrases: memory overwriting, addition overflow, availability
CVE-2021-46887: Lack of length check vulnerability in the HW_KEYMASTER module. Successful exploitation of this vulnerability may cause out-of-bounds read.
Key phrases: length check, out-of-bounds read, out of bounds read
CVE-2021-46888: An issue was discovered in hledger before 1.23. A Stored Cross-Site Scripting (XSS) vulnerability exists in toBloodhoundJson that allows an attacker to execute JavaScript by encoding user-controlled values in a payload with base64 and parsing them with the atob function.
Key phrases: execute JavaScript by encoding user-controlled values, stored cross-site scripting (xss)
CVE-2021-46889: The 10Web Photo Gallery plugin through 1.5.69 for WordPress allows XSS via theme_id for bwg_frontend_data. NOTE: other parameters are covered by CVE-2021-24291, CVE-2021-25041, and CVE-2021-31693.
Key phrases: XSS via theme_id for bwg_frontend_data, xss
CVE-2021-46890: Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
Key phrases: incomplete read and write permission verification, service confidentiality, availability, confidentiality and integrity, integrity and availability
CVE-2021-46891: Vulnerability of incomplete read and write permission verification in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.
Key phrases: incomplete read and write permission verification, service confidentiality, availability, confidentiality and integrity, integrity and availability
CVE-2021-46892: Encryption bypass vulnerability in Maintenance mode. Successful exploitation of this vulnerability may affect service confidentiality.
Key phrases: Encryption bypass, encryption bypass, service confidentiality
CVE-2021-46893: Vulnerability of unstrict data verification and parameter check. Successful exploitation of this vulnerability may affect integrity.
Key phrases: integrity
CVE-2021-46894: Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escalation.
Key phrases: use after free (uaf), kernel privilege escalation
CVE-2021-46895: Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of this vulnerability will cause the hopped app to bypass the app lock and reset the device that initiates the hop.
Key phrases: bypass the app lock and reset the device, vulnerability of defects
CVE-2021-46896: Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332.
Key phrases: cause a denial of service via handler function, buffer overflow
CVE-2021-46897: views.py in Wagtail CRX CodeRed Extensions (formerly CodeRed CMS or coderedcms) before 0.22.3 allows upward protected/..%2f..%2f path traversal when serving protected media.
Key phrases: upward protected/..%2f..%2f path traversal
CVE-2021-46898: views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with startswith("/") but this does not consider a protocol-relative URL (e.g., //example.com) attack.
Key phrases: protocol-relative url
CVE-2021-46899: SyncTrayzor 1.1.29 enables CEF (Chromium Embedded Framework) remote debugging, allowing a local attacker to control the application.
Key phrases: control the application
CVE-2021-46900: Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an unpredictable value. Specifically, the cookie parameter is both a salt for stored passwords and an XSS protection mechanism.
CVE-2021-46901: examples/6lbr/apps/6lbr-webserver/httpd.c in CETIC-6LBR (aka 6lbr) 1.5.0 has a strcat stack-based buffer overflow via a request for a long URL over a 6LoWPAN network.
Key phrases: strcat stack-based buffer overflow, stack based buffer overflow
CVE-2022-0001: Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
Key phrases: potentially enable information disclosure via local access
CVE-2022-0002: Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
Key phrases: potentially enable information disclosure via local access
CVE-2022-0004: Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Key phrases: potentially enable escalation of privilege via physical access, escalation privilege