admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-07-30 18:04:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

"-Synchronized-Data."

Browse Source
This commit is contained in:
CVE Team 2021-12-09 10:01:07 +00:00
parent de8a0ddc68
commit 19818a93a4
No known key found for this signature in database
GPG Key ID: 5708902F06FEF743
3 changed files with 21 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
2021/37xxx/CVE-2021-37253.json
View File

@ -57,10 +57,25 @@
"refsource": "MISC",
"name": "https://www.m-files.com/company/trust-center/vulnerability-disclosure/"
},
{
"refsource": "FULLDISC",
"name": "20211203 CVE-2021-37253: M-Files Web Improper Range Header Processing Denial of Services (DoS) Vulnerability",
"url": "http://seclists.org/fulldisclosure/2021/Dec/1"
},
{
"refsource": "MISC",
"name": "http://packetstormsecurity.com/files/165139/M-Files-Web-Denial-Of-Service.html",
"url": "http://packetstormsecurity.com/files/165139/M-Files-Web-Denial-Of-Service.html"
},
{
"refsource": "MISC",
"name": "https://www.tenable.com/cve/CVE-2021-37253",
"url": "https://www.tenable.com/cve/CVE-2021-37253"
},
{
"refsource": "MISC",
"name": "https://vulmon.com/vulnerabilitydetails?qid=CVE-2021-37253",
"url": "https://vulmon.com/vulnerabilitydetails?qid=CVE-2021-37253"
}
]
}

2
2021/43xxx/CVE-2021-43068.json
View File

@ -71,7 +71,7 @@
"description_data": [
{
"lang": "eng",
"value": "A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of\u00a0authentication\u00a0via a RADIUS login portal."
"value": "A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of authentication via a RADIUS login portal."
}
]
}

9
2021/43xxx/CVE-2021-43410.json
View File

@ -43,7 +43,7 @@
"description_data": [
{
"lang": "eng",
"value": "Apache Airavata Django Portal allows CRLF log injection because of lack of escaping log statements. In particular, some HTTP request parameters are logged without first being escaped.\n\nVersions affected:\nmaster branch before commit 3c5d8c7 [1] of airavata-django-portal\n\n[1] https://github.com/apache/airavata-django-portal/commit/3c5d8c72bfc3eb0af8693a655a5d60f9273f8170"
"value": "Apache Airavata Django Portal allows CRLF log injection because of lack of escaping log statements. In particular, some HTTP request parameters are logged without first being escaped. Versions affected: master branch before commit 3c5d8c7 [1] of airavata-django-portal [1] https://github.com/apache/airavata-django-portal/commit/3c5d8c72bfc3eb0af8693a655a5d60f9273f8170"
}
]
},
@ -70,12 +70,13 @@
"references": {
"reference_data": [
{
"refsource": "CONFIRM",
"url": "https://lists.apache.org/thread/q64h16ofdxk29soz3jj561nysnzcrl31"
"refsource": "MISC",
"url": "https://lists.apache.org/thread/q64h16ofdxk29soz3jj561nysnzcrl31",
"name": "https://lists.apache.org/thread/q64h16ofdxk29soz3jj561nysnzcrl31"
}
]
},
"source": {
"discovery": "UNKNOWN"
}
}
}