alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2021-25678 (published 2021-04-22)
A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12529)
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: siemens
Affected products: solid_edge_se2020, solid_edge_se2021
CVE-2021-25679 (published 2021-04-20)
The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be confirmed during primary research. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: adtran
Affected products: netvanta_7060, netvanta_7100, personal_phone_manager
CVE-2021-25680 (published 2021-04-20)
The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be confirmed during primary research. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: adtran
Affected products: netvanta_7060, netvanta_7100, personal_phone_manager
CVE-2021-25681 (published 2021-04-20)
AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: adtran
Affected products: netvanta_7060, netvanta_7100, personal_phone_manager
CVE-2021-25682 (published 2021-06-11)
It was discovered that the get_pid_info() function in data/apport did not properly parse the /proc/pid/status file from the kernel.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: canonical
Affected products: apport
CVE-2021-25683 (published 2021-06-11)
It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from the kernel.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: canonical
Affected products: apport
CVE-2021-25684 (published 2021-06-11)
It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: canonical
Affected products: apport
CVE-2021-25688 (published 2021-02-11)
Under certain conditions, Teradici PCoIP Agents for Windows prior to version 20.10.0 and Teradici PCoIP Agents for Linux prior to version 21.01.0 may log parts of a user's password in the application logs.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-532
Affected vendors: teradici
Affected products: pcoip_graphics_agent, pcoip_standard_agent
CVE-2021-25689 (published 2021-02-11)
An out of bounds write in Teradici PCoIP soft client versions prior to version 20.10.1 could allow an attacker to remotely execute code.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: teradici
Affected products: pcoip_soft_client
CVE-2021-25690 (published 2021-02-11)
A null pointer dereference in Teradici PCoIP Soft Client versions prior to 20.07.3 could allow an attacker to crash the software.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: teradici
Affected products: pcoip_soft_client
CVE-2021-25692 (published 2021-04-06)
Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-312
Affected vendors: teradici
Affected products: pcoip_connection_manager_and_security_gateway
CVE-2021-25693 (published 2021-05-13)
An attacker may cause a Denial of Service (DoS) in multiple versions of Teradici PCoIP Agent via a null pointer dereference.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: teradici
Affected products: pcoip_agent
CVE-2021-25694 (published 2021-05-13)
Teradici PCoIP Graphics Agent for Windows prior to 21.03 does not validate NVENC.dll. An attacker could replace the .dll and redirect pixels elsewhere.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-427
Affected vendors: teradici
Affected products: pcoip_graphics_agent
CVE-2021-25695 (published 2021-07-21)
The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attacker to elevate privileges by changing the flow of program execution within the vHub driver.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-782
Affected vendors: teradici
Affected products: pcoip
CVE-2021-25698 (published 2021-07-21)
The OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0 was compiled without the no-autoload-config option, which allowed an attacker to elevate to the privileges of the running process via placing a specially crafted dll in a build configuration directory.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-426
Affected vendors: teradici
Affected products: pcoip_standard_agent
CVE-2021-25699 (published 2021-07-21)
The OpenSSL component of the Teradici PCoIP Software Client prior to version 21.07.0 was compiled without the no-autoload-config option, which allowed an attacker to elevate to the privileges of the running process via placing a specially crafted dll in a build configuration directory.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-426
Affected vendors: teradici
Affected products: pcoip_client
CVE-2021-25701 (published 2021-07-21)
The fUSBHub driver in the PCoIP Software Client prior to version 21.07.0 had an error in object management during the handling of a variety of IOCTLs, which allowed an attacker to cause a denial of service.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: teradici
Affected products: pcoip_client
CVE-2021-25735 (published 2021-09-06)
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-372
Affected vendors: kubernetes
Affected products: kubernetes
CVE-2021-25736 (published 2023-10-30)
Kube-proxy
 on Windows can unintentionally forward traffic to local processes 
listening on the same port (“spec.ports[*].port”) as a LoadBalancer 
Service when the LoadBalancer controller
 does not set the “status.loadBalancer.ingress[].ip” field. Clusters 
where the LoadBalancer controller sets the 
“status.loadBalancer.ingress[].ip” field are unaffected.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)
Weakness: CWE-114
Affected vendors: kubernetes, microsoft
Affected products: kubernetes, windows
CVE-2021-25737 (published 2021-09-06)
A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-184
Affected vendors: kubernetes
Affected products: kubernetes
CVE-2021-25738 (published 2021-10-11)
Loading specially-crafted yaml with the Kubernetes Java Client library can lead to code execution.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: kubernetes
Affected products: java
CVE-2021-25740 (published 2021-09-20)
A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-441
Affected vendors: kubernetes
Affected products: kubernetes
CVE-2021-25741 (published 2021-09-20)
A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-20
Affected vendors: kubernetes
Affected products: kubernetes
CVE-2021-25742 (published 2021-10-29)
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the custom snippets feature to obtain all secrets in the cluster.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)
Weakness: CWE-20
Affected vendors: kubernetes, netapp
Affected products: ingress-nginx, trident
CVE-2021-25743 (published 2022-01-07)
kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N)
Weakness: CWE-150
Affected vendors: kubernetes
Affected products: kubernetes
CVE-2021-25745 (published 2022-05-06)
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use the spec.rules[].http.paths[].path field of an Ingress object (in the networking.k8s.io or extensions API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-20
Affected vendors: kubernetes
Affected products: ingress-nginx
CVE-2021-25746 (published 2022-05-06)
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use .metadata.annotations in an Ingress object (in the networking.k8s.io or extensions API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)
Weakness: CWE-20
Affected vendors: kubernetes
Affected products: ingress-nginx
CVE-2021-25748 (published 2023-05-24)
A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the `spec.rules[].http.paths[].path` field of an Ingress object (in the `networking.k8s.io` or `extensions` API group) to obtain the credentials of the ingress-nginx controller. In the default configuration, that credential has access to all secrets in the cluster.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-20
Affected vendors: kubernetes
Affected products: ingress-nginx
CVE-2021-25749 (published 2023-05-24)
Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-284
Affected vendors: kubernetes
Affected products: kubernetes
CVE-2021-25755 (published 2021-02-03)
In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: jetbrains
Affected products: code_with_me
CVE-2021-25756 (published 2021-02-03)
In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: jetbrains
Affected products: intellij_idea
CVE-2021-25757 (published 2021-02-03)
In JetBrains Hub before 2020.1.12629, an open redirect was possible.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-601
Affected vendors: jetbrains
Affected products: hub
CVE-2021-25758 (published 2021-02-03)
In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: jetbrains
Affected products: intellij_idea
CVE-2021-25759 (published 2021-02-03)
In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: jetbrains
Affected products: hub
CVE-2021-25760 (published 2021-02-03)
In JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: jetbrains
Affected products: hub
CVE-2021-25761 (published 2021-02-03)
In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-326
Affected vendors: jetbrains
Affected products: ktor
CVE-2021-25762 (published 2021-02-03)
In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-444
Affected vendors: jetbrains
Affected products: ktor
CVE-2021-25763 (published 2021-02-03)
In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-327
Affected vendors: jetbrains
Affected products: ktor
CVE-2021-25764 (published 2021-03-18)
In JetBrains PhpStorm before 2020.3, source code could be added to debug logs.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: jetbrains
Affected products: phpstorm
CVE-2021-25765 (published 2021-02-03)
In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-352
Affected vendors: jetbrains
Affected products: youtrack
CVE-2021-25766 (published 2021-02-03)
In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: jetbrains
Affected products: youtrack
CVE-2021-25767 (published 2021-02-03)
In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: jetbrains
Affected products: youtrack
CVE-2021-25768 (published 2021-02-03)
In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: jetbrains
Affected products: youtrack
CVE-2021-25769 (published 2021-02-03)
In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: jetbrains
Affected products: youtrack
CVE-2021-25770 (published 2021-02-03)
In JetBrains YouTrack before 2020.5.3123, server-side template injection (SSTI) was possible, which could lead to code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: jetbrains
Affected products: youtrack
CVE-2021-25771 (published 2021-02-03)
In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: jetbrains
Affected products: youtrack
CVE-2021-25772 (published 2021-02-03)
In JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Affected vendors: jetbrains
Affected products: teamcity
CVE-2021-25773 (published 2021-02-03)
JetBrains TeamCity before 2020.2 was vulnerable to reflected XSS on several pages.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: jetbrains
Affected products: teamcity
CVE-2021-25774 (published 2021-02-03)
In JetBrains TeamCity before 2020.2.1, a user could get access to the GitHub access token of another user.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-863
Affected vendors: jetbrains
Affected products: teamcity
CVE-2021-25775 (published 2021-02-03)
In JetBrains TeamCity before 2020.2.1, the server admin could create and see access tokens for any other users.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N)
Affected vendors: jetbrains
Affected products: teamcity
CVE-2021-25776 (published 2021-02-03)
In JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-922
Affected vendors: jetbrains
Affected products: teamcity
CVE-2021-25777 (published 2021-02-03)
In JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-863
Affected vendors: jetbrains
Affected products: teamcity
CVE-2021-25778 (published 2021-02-03)
In JetBrains TeamCity before 2020.2.1, permissions during user deletion were checked improperly.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: jetbrains
Affected products: teamcity
CVE-2021-25779 (published 2021-02-17)
Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: janobe
Affected products: baby_care_system
CVE-2021-25780 (published 2021-02-17)
An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-434
Affected vendors: janobe
Affected products: baby_care_system
CVE-2021-25783 (published 2021-12-02)
Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Article Search.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: taogogo
Affected products: taocms
CVE-2021-25784 (published 2021-12-02)
Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Edit Article.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: taogogo
Affected products: taocms
CVE-2021-25785 (published 2021-12-02)
Taocms v2.5Beta5 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Management column.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: taogogo
Affected products: taocms
CVE-2021-25786 (published 2023-08-11)
An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to Pl_ASCII85Decoder::write parameter in libqpdf.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)
Weakness: CWE-416
Affected vendors: qpdf_project
Affected products: qpdf
CVE-2021-25790 (published 2021-07-23)
Multiple stored cross site scripting (XSS) vulnerabilities in the "Register" module of House Rental and Property Listing 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in all text fields except for Phone Number and Alternate Phone Number.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: house_rental_and_property_listing_php_project
Affected products: house_rental_and_property_listing_php
CVE-2021-25791 (published 2021-07-23)
Multiple stored cross site scripting (XSS) vulnerabilities in the "Update Profile" module of Online Doctor Appointment System 1.0 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads in the First Name, Last Name, and Address text fields.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: online_doctor_appointment_system_php_full_source_code_project
Affected products: online_doctor_appointment_system_php_full_source_code
CVE-2021-25801 (published 2021-07-26)
A buffer overflow vulnerability in the __Parse_indx component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: videolan
Affected products: vlc_media_player
CVE-2021-25802 (published 2021-07-26)
A buffer overflow vulnerability in the AVI_ExtractSubtitle component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: videolan
Affected products: vlc_media_player
CVE-2021-25803 (published 2021-07-26)
A buffer overflow vulnerability in the vlc_input_attachment_New component of VideoLAN VLC Media Player 3.0.11 allows attackers to cause an out-of-bounds read via a crafted .avi file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H)
Weakness: CWE-190
Affected vendors: videolan
Affected products: vlc_media_player
CVE-2021-25804 (published 2021-07-26)
A NULL-pointer dereference in "Open" in avi.c of VideoLAN VLC Media Player 3.0.11 can a denial of service (DOS) in the application.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: videolan
Affected products: vlc_media_player
CVE-2021-25808 (published 2021-07-23)
A code injection vulnerability in backup/plugin.php of Bludit 3.13.1 allows attackers to execute arbitrary code via a crafted ZIP file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: bludit
Affected products: bludit
CVE-2021-25809 (published 2021-07-23)
UCMS 1.5.0 was discovered to contain a physical path leakage via an error message returned by the adminchannelscache() function in top.php.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-209
Affected vendors: ucms_project
Affected products: ucms
CVE-2021-25810 (published 2021-04-29)
Cross site Scripting (XSS) vulnerability in MERCUSYS Mercury X18G 1.0.5 devices, via crafted values to the 'src_dport_start', 'src_dport_end', and 'dest_port' parameters.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: mercusys
Affected products: mercury_x18g, mercury_x18g_firmware
CVE-2021-25811 (published 2021-04-29)
MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listen_http_lan parameter. Upon subsequent device restarts after this vulnerability is exploted the device will not be able to access the webserver unless the listen_http_lan parameter to uhttpd.json is manually fixed.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: mercusys
Affected products: mercury_x18g, mercury_x18g_firmware
CVE-2021-25812 (published 2021-04-29)
Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with a POST request to /api/ZRQos/set_online_client.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-77
Affected vendors: chinamobile
Affected products: an_lianbao_wf-1, an_lianbao_wf-1_firmware
CVE-2021-25827 (published 2023-06-28)
Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-290
Affected vendors: emby
Affected products: emby
CVE-2021-25828 (published 2023-06-28)
Emby Server versions < 4.6.0.50 is vulnerable to Cross Site Scripting (XSS) vulnerability via a crafted GET request to /web.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: emby
Affected products: emby
CVE-2021-25829 (published 2021-03-01)
An improper binary stream data handling issue was found in the [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. Using this bug, an attacker is able to produce a denial of service attack that can eventually shut down the target server.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: onlyoffice
Affected products: document_server
CVE-2021-25830 (published 2021-03-01)
A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. Using the chain of two other bugs related to improper string handling, an attacker can achieve remote code execution on DocumentServer.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: onlyoffice
Affected products: document_server
CVE-2021-25831 (published 2021-03-01)
A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. An attacker must request the conversion of the crafted file from PPTT into PPTX format. Using the chain of two other bugs related to improper string handling, a remote attacker can obtain remote code execution on DocumentServer.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: onlyoffice
Affected products: document_server
CVE-2021-25832 (published 2021-03-01)
A heap buffer overflow vulnerability inside of BMP image processing was found at [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v6.0.0. Using this vulnerability, an attacker is able to gain remote code executions on DocumentServer.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: onlyoffice
Affected products: document_server
CVE-2021-25833 (published 2021-03-01)
A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21. The file extension is controlled by an attacker through the request data and leads to arbitrary file overwriting. Using this vulnerability, a remote attacker can obtain remote code execution on DocumentServer.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: onlyoffice
Affected products: document_server
CVE-2021-25834 (published 2021-02-08)
Cosmos Network Ethermint <= v0.4.0 is affected by a transaction replay vulnerability in the EVM module. If the victim sends a very large nonce transaction, the attacker can replay the transaction through the application.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-294
Affected vendors: chainsafe
Affected products: ethermint
CVE-2021-25835 (published 2021-02-08)
Cosmos Network Ethermint <= v0.4.0 is affected by a cross-chain transaction replay vulnerability in the EVM module. Since ethermint uses the same chainIDEpoch and signature schemes with ethereum for compatibility, a verified signature in ethereum is still valid in ethermint with the same msg content and chainIDEpoch, which enables "cross-chain transaction replay" attack.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-294
Affected vendors: chainsafe
Affected products: ethermint
CVE-2021-25836 (published 2021-02-08)
Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. The bytecode set in a FAILED transaction wrongfully remains in memory(stateObject.code) and is further written to persistent store at the Endblock stage, which may be utilized to build honeypot contracts.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: chainsafe
Affected products: ethermint
CVE-2021-25837 (published 2021-02-08)
Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. Due to the inconsistency between the Storage caching cycle and the Tx processing cycle, Storage changes caused by a failed transaction are improperly reserved in memory. Although the bad storage cache data will be discarded at EndBlock, it is still valid in the current block, which enables many possible attacks such as an "arbitrary mint token".
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: chainsafe
Affected products: ethermint
CVE-2021-25838 (published 2021-04-26)
The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting (XSS) payload in file-upload.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: minthcm
Affected products: minthcm
CVE-2021-25839 (published 2021-04-26)
A weak password requirement vulnerability exists in the Create New User function of MintHCM RELEASE 3.0.8, which could lead an attacker to easier password brute-forcing.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-521
Affected vendors: minthcm
Affected products: minthcm
CVE-2021-25845 (published 2021-05-10)
Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a NULL pointer dereference via a crafted lldp packet.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: moxa
Affected products: vport_06ec-2v26m, vport_06ec-2v26m_firmware, vport_06ec-2v36m-ct, vport_06ec-2v36m-ct-t, vport_06ec-2v36m-ct-t_firmware, vport_06ec-2v36m-ct_firmware, vport_06ec-2v36m-t, vport_06ec-2v36m-t_firmware, vport_06ec-2v42m, vport_06ec-2v42m-ct, vport_06ec-2v42m-ct-t, vport_06ec-2v42m-ct-t_firmware, vport_06ec-2v42m-ct_firmware, vport_06ec-2v42m-t, vport_06ec-2v42m-t_firmware, vport_06ec-2v42m_firmware, vport_06ec-2v60m, vport_06ec-2v60m-ct, vport_06ec-2v60m-ct-t, vport_06ec-2v60m-ct-t_firmware, vport_06ec-2v60m-ct_firmware, vport_06ec-2v60m-t, vport_06ec-2v60m-t_firmware, vport_06ec-2v60m_firmware, vport_06ec-2v80m
CVE-2021-25846 (published 2021-05-10)
Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a negative number passed to the memcpy function via a crafted lldp packet.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-191
Affected vendors: moxa
Affected products: vport_06ec-2v26m, vport_06ec-2v26m_firmware, vport_06ec-2v36m-ct, vport_06ec-2v36m-ct-t, vport_06ec-2v36m-ct-t_firmware, vport_06ec-2v36m-ct_firmware, vport_06ec-2v36m-t, vport_06ec-2v36m-t_firmware, vport_06ec-2v42m, vport_06ec-2v42m-ct, vport_06ec-2v42m-ct-t, vport_06ec-2v42m-ct-t_firmware, vport_06ec-2v42m-ct_firmware, vport_06ec-2v42m-t, vport_06ec-2v42m-t_firmware, vport_06ec-2v42m_firmware, vport_06ec-2v60m, vport_06ec-2v60m-ct, vport_06ec-2v60m-ct-t, vport_06ec-2v60m-ct-t_firmware, vport_06ec-2v60m-ct_firmware, vport_06ec-2v60m-t, vport_06ec-2v60m-t_firmware, vport_06ec-2v60m_firmware, vport_06ec-2v80m
CVE-2021-25847 (published 2021-05-10)
Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to controllable loop counter variable via a crafted lldp packet.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: moxa
Affected products: vport_06ec-2v26m, vport_06ec-2v26m_firmware, vport_06ec-2v36m-ct, vport_06ec-2v36m-ct-t, vport_06ec-2v36m-ct-t_firmware, vport_06ec-2v36m-ct_firmware, vport_06ec-2v36m-t, vport_06ec-2v36m-t_firmware, vport_06ec-2v42m, vport_06ec-2v42m-ct, vport_06ec-2v42m-ct-t, vport_06ec-2v42m-ct-t_firmware, vport_06ec-2v42m-ct_firmware, vport_06ec-2v42m-t, vport_06ec-2v42m-t_firmware, vport_06ec-2v42m_firmware, vport_06ec-2v60m, vport_06ec-2v60m-ct, vport_06ec-2v60m-ct-t, vport_06ec-2v60m-ct-t_firmware, vport_06ec-2v60m-ct_firmware, vport_06ec-2v60m-t, vport_06ec-2v60m-t_firmware, vport_06ec-2v60m_firmware, vport_06ec-2v80m
CVE-2021-25848 (published 2021-05-10)
Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available length via a crafted lldp packet.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-125
Affected vendors: moxa
Affected products: vport_06ec-2v26m, vport_06ec-2v26m_firmware, vport_06ec-2v36m-ct, vport_06ec-2v36m-ct-t, vport_06ec-2v36m-ct-t_firmware, vport_06ec-2v36m-ct_firmware, vport_06ec-2v36m-t, vport_06ec-2v36m-t_firmware, vport_06ec-2v42m, vport_06ec-2v42m-ct, vport_06ec-2v42m-ct-t, vport_06ec-2v42m-ct-t_firmware, vport_06ec-2v42m-ct_firmware, vport_06ec-2v42m-t, vport_06ec-2v42m-t_firmware, vport_06ec-2v42m_firmware, vport_06ec-2v60m, vport_06ec-2v60m-ct, vport_06ec-2v60m-ct-t, vport_06ec-2v60m-ct-t_firmware, vport_06ec-2v60m-ct_firmware, vport_06ec-2v60m-t, vport_06ec-2v60m-t_firmware, vport_06ec-2v60m_firmware, vport_06ec-2v80m
CVE-2021-25849 (published 2021-05-10)
An integer underflow was discovered in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, improper validation of the PortID TLV leads to Denial of Service via a crafted lldp packet.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-191
Affected vendors: moxa
Affected products: vport_06ec-2v26m, vport_06ec-2v26m_firmware, vport_06ec-2v36m-ct, vport_06ec-2v36m-ct-t, vport_06ec-2v36m-ct-t_firmware, vport_06ec-2v36m-ct_firmware, vport_06ec-2v36m-t, vport_06ec-2v36m-t_firmware, vport_06ec-2v42m, vport_06ec-2v42m-ct, vport_06ec-2v42m-ct-t, vport_06ec-2v42m-ct-t_firmware, vport_06ec-2v42m-ct_firmware, vport_06ec-2v42m-t, vport_06ec-2v42m-t_firmware, vport_06ec-2v42m_firmware, vport_06ec-2v60m, vport_06ec-2v60m-ct, vport_06ec-2v60m-ct-t, vport_06ec-2v60m-ct-t_firmware, vport_06ec-2v60m-ct_firmware, vport_06ec-2v60m-t, vport_06ec-2v60m-t_firmware, vport_06ec-2v60m_firmware, vport_06ec-2v80m
CVE-2021-25856 (published 2023-08-11)
An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: supermicro-cms_project
Affected products: supermicro-cms
CVE-2021-25857 (published 2023-08-11)
An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code via the font_type parameter to setup.php.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: supermicro-cms_project
Affected products: supermicro-cms
CVE-2021-25863 (published 2021-01-26)
Open5GS 2.1.3 listens on 0.0.0.0:3000 and has a default password of 1423 for the admin account.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: open5gs
Affected products: open5gs
CVE-2021-25864 (published 2021-01-26)
node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: dgtl
Affected products: huemagic
CVE-2021-25874 (published 2021-11-01)
AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter which allows a remote unauthenticated attacker to retrieve databases information such as application passwords hashes.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: youphptube
Affected products: youphptube
CVE-2021-25875 (published 2021-11-01)
AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the searchPhrase parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: youphptube
Affected products: youphptube
CVE-2021-25876 (published 2021-11-01)
AVideo/YouPHPTube 10.0 and prior has multiple reflected Cross Script Scripting vulnerabilities via the u parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: youphptube
Affected products: youphptube
CVE-2021-25877 (published 2021-11-01)
AVideo/YouPHPTube 10.0 and prior is affected by Insecure file write. An administrator privileged user is able to write files on filesystem using flag and code variables in file save.php.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: youphptube
Affected products: youphptube
CVE-2021-25878 (published 2021-11-01)
AVideo/YouPHPTube 10.0 and prior is affected by multiple reflected Cross Script Scripting vulnerabilities via the videoName parameter which allows a remote attacker to steal administrators' session cookies or perform actions as an administrator.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: youphptube
Affected products: youphptube
CVE-2021-25893 (published 2021-04-02)
Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the setText parameter of /magnoliaAuthor/.magnolia/.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: magnolia-cms
Affected products: magnolia_cms
CVE-2021-25894 (published 2021-04-02)
Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the /magnoliaPublic/travel/members/login.html mgnlUserId parameter.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: magnolia-cms
Affected products: magnolia_cms
CVE-2021-25898 (published 2021-04-23)
An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. Passwords are stored in unencrypted source-code text files. This was noted when accessing the svc-login.php file. The value is used to authenticate a high-privileged user upon authenticating with the server.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-312
Affected vendors: void
Affected products: aural_rec_monitor
CVE-2021-25899 (published 2021-04-23)
An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. An unauthenticated attacker can send a crafted HTTP request to perform a blind time-based SQL Injection. The vulnerable parameter is param1.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-89
Affected vendors: void
Affected products: aurall_rec_monitor
CVE-2021-25900 (published 2021-01-26)
An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insert_many.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: servo
Affected products: smallvec
CVE-2021-25901 (published 2021-01-26)
An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. Lazy lacks a Send bound, leading to a data race.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-125
Affected vendors: lazy-init_project
Affected products: lazy-init
CVE-2021-25902 (published 2021-01-26)
An issue was discovered in the glsl-layout crate before 0.4.0 for Rust. When a panic occurs, map_array can perform a double drop.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: glsl-layout_project
Affected products: glsl-layout
CVE-2021-25903 (published 2021-01-26)
An issue was discovered in the cache crate through 2021-01-01 for Rust. A raw pointer is dereferenced.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: cache_project
Affected products: cache
CVE-2021-25904 (published 2021-01-26)
An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: av-data_project
Affected products: av-data
CVE-2021-25905 (published 2021-01-26)
An issue was discovered in the bra crate before 0.1.1 for Rust. It lacks soundness because it can read uninitialized memory.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-908
Affected vendors: bra_project
Affected products: bra
CVE-2021-25906 (published 2021-01-26)
An issue was discovered in the basic_dsp_matrix crate before 0.9.2 for Rust. When a TransformContent panic occurs, a double drop can be performed.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: basic_dsp_matrix_project
Affected products: basic_dsp_matrix
CVE-2021-25907 (published 2021-01-26)
An issue was discovered in the containers crate before 0.9.11 for Rust. When a panic occurs, a util::{mutate,mutate2} double drop can be performed.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-415
Affected vendors: containers_project
Affected products: containers
CVE-2021-25908 (published 2021-01-26)
An issue was discovered in the fil-ocl crate through 2021-01-04 for Rust. From<EventList> can lead to a double free.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-415
Affected vendors: fil-ocl_project
Affected products: fil-ocl
CVE-2021-25909 (published 2021-01-29)
ZIV Automation 4CCT-EA6-334126BF firmware version 3.23.80.27.36371, allows an unauthenticated, remote attacker to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending specific packets to the port 7919.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: zivautomation
Affected products: 4cct-ea6-334126bf, 4cct-ea6-334126bf_firmware
CVE-2021-25910 (published 2021-01-29)
Improper Authentication vulnerability in the cookie parameter of ZIV AUTOMATION 4CCT-EA6-334126BF allows a local attacker to perform modifications in several parameters of the affected device as an authenticated user.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-287
Affected vendors: zivautomation
Affected products: 4cct-ea6-334126bf, 4cct-ea6-334126bf_firmware
CVE-2021-25912 (published 2021-02-02)
Prototype pollution vulnerability in 'dotty' versions 0.0.1 through 0.1.0 allows attackers to cause a denial of service and may lead to remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1321
Affected vendors: dotty_project
Affected products: dotty
CVE-2021-25913 (published 2021-02-08)
Prototype pollution vulnerability in 'set-or-get' version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1321
Affected vendors: set-or-get_project
Affected products: set-or-get
CVE-2021-25914 (published 2021-03-01)
Prototype pollution vulnerability in 'object-collider' versions 1.0.0 through 1.0.3 allows attacker to cause a denial of service and may lead to remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1321
Affected vendors: fireblink
Affected products: object-collider
CVE-2021-25915 (published 2021-03-09)
Prototype pollution vulnerability in 'changeset' versions 0.0.1 through 0.2.5 allows an attacker to cause a denial of service and may lead to remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1321
Affected vendors: changeset_project
Affected products: changeset
CVE-2021-25916 (published 2021-03-16)
Prototype pollution vulnerability in 'patchmerge' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-1321
Affected vendors: patchmerge_project
Affected products: patchmerge
CVE-2021-25917 (published 2021-03-22)
In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly and rendered in the U2F USB Device authentication method page. A highly privileged attacker could inject arbitrary code into input fields when creating a new user.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: open-emr
Affected products: openemr