alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2021-33513 (published 2021-05-21)
Plone through 5.2.4 allows XSS via the inline_diff methods in Products.CMFDiffTool.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: plone
Affected products: plone
CVE-2021-33514 (published 2021-05-21)
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/libsal.so.0.0 library used by a CGI application, as demonstrated by setup.cgi?token=';$HTTP_USER_AGENT;' with an OS command in the User-Agent field. This affects GC108P before 1.0.7.3, GC108PP before 1.0.7.3, GS108Tv3 before 7.0.6.3, GS110TPPv1 before 7.0.6.3, GS110TPv3 before 7.0.6.3, GS110TUPv1 before 1.0.4.3, GS710TUPv1 before 1.0.4.3, GS716TP before 1.0.2.3, GS716TPP before 1.0.2.3, GS724TPPv1 before 2.0.4.3, GS724TPv2 before 2.0.4.3, GS728TPPv2 before 6.0.6.3, GS728TPv2 before 6.0.6.3, GS752TPPv1 before 6.0.6.3, GS752TPv2 before 6.0.6.3, MS510TXM before 1.0.2.3, and MS510TXUP before 1.0.2.3.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: netgear
Affected products: gc108p, gc108p_firmware, gc108pp, gc108pp_firmware, gs108t_firmware, gs108tv3, gs110tp, gs110tp_firmware, gs110tpp, gs110tpp_firmware, gs110tup, gs110tup_firmware, gs710tup, gs710tup_firmware, gs716tp, gs716tp_firmware, gs716tpp, gs716tpp_firmware, gs724tp, gs724tp_firmware, gs724tpp, gs724tpp_firmware, gs728tp, gs728tp_firmware, gs728tpp
CVE-2021-33515 (published 2021-06-28)
The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-77
Affected vendors: debian, dovecot, fedoraproject
Affected products: debian_linux, dovecot, fedora
CVE-2021-33516 (published 2021-05-24)
An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to trick a victim's browser into triggering actions against local UPnP services implemented using this library. Depending on the affected service, this could be used for data exfiltration, data tempering, etc.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)
Affected vendors: gnome
Affected products: gupnp
CVE-2021-3352 (published 2021-08-13)
The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and 9.0.0.0 through 9.3.1.0 could allow an unauthenticated attacker to access (view and modify) user data without authorization due to improper handling of tokens.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Affected vendors: mitel
Affected products: micontact_center_business
CVE-2021-33523 (published 2022-03-30)
MashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin console, to upload a new JDBC driver that can execute arbitrary commands on the underlying host. This occurs in com.idsscheer.ppmmashup.business.jdbc.DriverUploadController.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: softwareag
Affected products: mashzone_nextgen
CVE-2021-33525 (published 2021-05-24)
EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in the nagios_path parameter to lilac/export.php, as demonstrated by %26%26+curl to insert an "&& curl" substring for the shell.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: eyesofnetwork
Affected products: eyesofnetwork
CVE-2021-33526 (published 2021-08-02)
In MB connect line mbDIALUP versions <= 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privileges of the service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: mbconnectline
Affected products: mbdialup
CVE-2021-33527 (published 2021-08-02)
In MB connect line mbDIALUP versions <= 3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the privileges of the service.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: mbconnectline
Affected products: mbdialup
CVE-2021-33528 (published 2021-06-25)
In Weidmueller Industrial WLAN devices in multiple versions an exploitable privilege escalation vulnerability exists in the iw_console functionality. A specially crafted menu selection string can cause an escape from the restricted console, resulting in system access as the root user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-710
Affected vendors: weidmueller
Affected products: ie-wl-bl-ap-cl-eu, ie-wl-bl-ap-cl-eu_firmware, ie-wl-bl-ap-cl-us, ie-wl-bl-ap-cl-us_firmware, ie-wl-vl-ap-br-cl-eu, ie-wl-vl-ap-br-cl-eu_firmware, ie-wl-vl-ap-br-cl-us, ie-wl-vl-ap-br-cl-us_firmware, ie-wlt-bl-ap-cl-eu, ie-wlt-bl-ap-cl-eu_firmware, ie-wlt-bl-ap-cl-us, ie-wlt-bl-ap-cl-us_firmware, ie-wlt-vl-ap-br-cl-eu, ie-wlt-vl-ap-br-cl-eu_firmware, ie-wlt-vl-ap-br-cl-us, ie-wlt-vl-ap-br-cl-us_firmware
CVE-2021-33529 (published 2021-06-25)
In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured traffic across the network from or to the device.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-798
Affected vendors: weidmueller
Affected products: ie-wl-bl-ap-cl-eu, ie-wl-bl-ap-cl-eu_firmware, ie-wl-bl-ap-cl-us, ie-wl-bl-ap-cl-us_firmware, ie-wl-vl-ap-br-cl-eu, ie-wl-vl-ap-br-cl-eu_firmware, ie-wl-vl-ap-br-cl-us, ie-wl-vl-ap-br-cl-us_firmware, ie-wlt-bl-ap-cl-eu, ie-wlt-bl-ap-cl-eu_firmware, ie-wlt-bl-ap-cl-us, ie-wlt-bl-ap-cl-us_firmware, ie-wlt-vl-ap-br-cl-eu, ie-wlt-vl-ap-br-cl-eu_firmware, ie-wlt-vl-ap-br-cl-us, ie-wlt-vl-ap-br-cl-us_firmware
CVE-2021-33530 (published 2021-06-25)
In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the devices. A specially crafted diagnostic script file can cause arbitrary busybox commands to be executed, resulting in remote control over the device. An attacker can send diagnostic while authenticated as a low privilege user to trigger this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: weidmueller
Affected products: ie-wl-bl-ap-cl-eu, ie-wl-bl-ap-cl-eu_firmware, ie-wl-bl-ap-cl-us, ie-wl-bl-ap-cl-us_firmware, ie-wl-vl-ap-br-cl-eu, ie-wl-vl-ap-br-cl-eu_firmware, ie-wl-vl-ap-br-cl-us, ie-wl-vl-ap-br-cl-us_firmware, ie-wlt-bl-ap-cl-eu, ie-wlt-bl-ap-cl-eu_firmware, ie-wlt-bl-ap-cl-us, ie-wlt-bl-ap-cl-us_firmware, ie-wlt-vl-ap-br-cl-eu, ie-wlt-vl-ap-br-cl-eu_firmware, ie-wlt-vl-ap-br-cl-us, ie-wlt-vl-ap-br-cl-us_firmware
CVE-2021-33531 (published 2021-06-25)
In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts. An attacker can send diagnostic scripts while authenticated as a low privilege user to trigger this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: weidmueller
Affected products: ie-wl-bl-ap-cl-eu, ie-wl-bl-ap-cl-eu_firmware, ie-wl-bl-ap-cl-us, ie-wl-bl-ap-cl-us_firmware, ie-wl-vl-ap-br-cl-eu, ie-wl-vl-ap-br-cl-eu_firmware, ie-wl-vl-ap-br-cl-us, ie-wl-vl-ap-br-cl-us_firmware, ie-wlt-bl-ap-cl-eu, ie-wlt-bl-ap-cl-eu_firmware, ie-wlt-bl-ap-cl-us, ie-wlt-bl-ap-cl-us_firmware, ie-wlt-vl-ap-br-cl-eu, ie-wlt-vl-ap-br-cl-eu_firmware, ie-wlt-vl-ap-br-cl-us, ie-wlt-vl-ap-br-cl-us_firmware
CVE-2021-33532 (published 2021-06-25)
In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. A specially crafted diagnostic script file name can cause user input to be reflected in a subsequent iw_system call, resulting in remote control over the device. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: weidmueller
Affected products: ie-wl-bl-ap-cl-eu, ie-wl-bl-ap-cl-eu_firmware, ie-wl-bl-ap-cl-us, ie-wl-bl-ap-cl-us_firmware, ie-wl-vl-ap-br-cl-eu, ie-wl-vl-ap-br-cl-eu_firmware, ie-wl-vl-ap-br-cl-us, ie-wl-vl-ap-br-cl-us_firmware, ie-wlt-bl-ap-cl-eu, ie-wlt-bl-ap-cl-eu_firmware, ie-wlt-bl-ap-cl-us, ie-wlt-bl-ap-cl-us_firmware, ie-wlt-vl-ap-br-cl-eu, ie-wlt-vl-ap-br-cl-eu_firmware, ie-wlt-vl-ap-br-cl-us, ie-wlt-vl-ap-br-cl-us_firmware
CVE-2021-33533 (published 2021-06-25)
In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the iw_webs functionality. A specially crafted iw_serverip parameter can cause user input to be reflected in a subsequent iw_system call, resulting in remote control over the device. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: weidmueller
Affected products: ie-wl-bl-ap-cl-eu, ie-wl-bl-ap-cl-eu_firmware, ie-wl-bl-ap-cl-us, ie-wl-bl-ap-cl-us_firmware, ie-wl-vl-ap-br-cl-eu, ie-wl-vl-ap-br-cl-eu_firmware, ie-wl-vl-ap-br-cl-us, ie-wl-vl-ap-br-cl-us_firmware, ie-wlt-bl-ap-cl-eu, ie-wlt-bl-ap-cl-eu_firmware, ie-wlt-bl-ap-cl-us, ie-wlt-bl-ap-cl-us_firmware, ie-wlt-vl-ap-br-cl-eu, ie-wlt-vl-ap-br-cl-eu_firmware, ie-wlt-vl-ap-br-cl-us, ie-wlt-vl-ap-br-cl-us_firmware
CVE-2021-33534 (published 2021-06-25)
In Weidmueller Industrial WLAN devices in multiple versions an exploitable command injection vulnerability exists in the hostname functionality. A specially crafted entry to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send various requests while authenticated as a high privilege user to trigger this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: weidmueller
Affected products: ie-wl-bl-ap-cl-eu, ie-wl-bl-ap-cl-eu_firmware, ie-wl-bl-ap-cl-us, ie-wl-bl-ap-cl-us_firmware, ie-wl-vl-ap-br-cl-eu, ie-wl-vl-ap-br-cl-eu_firmware, ie-wl-vl-ap-br-cl-us, ie-wl-vl-ap-br-cl-us_firmware, ie-wlt-bl-ap-cl-eu, ie-wlt-bl-ap-cl-eu_firmware, ie-wlt-bl-ap-cl-us, ie-wlt-bl-ap-cl-us_firmware, ie-wlt-vl-ap-br-cl-eu, ie-wlt-vl-ap-br-cl-eu_firmware, ie-wlt-vl-ap-br-cl-us, ie-wlt-vl-ap-br-cl-us_firmware
CVE-2021-33535 (published 2021-06-25)
In Weidmueller Industrial WLAN devices in multiple versions an exploitable format string vulnerability exists in the iw_console conio_writestr functionality. A specially crafted time server entry can cause an overflow of the time server buffer, resulting in remote code execution. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-134
Affected vendors: weidmueller
Affected products: ie-wl-bl-ap-cl-eu, ie-wl-bl-ap-cl-eu_firmware, ie-wl-bl-ap-cl-us, ie-wl-bl-ap-cl-us_firmware, ie-wl-vl-ap-br-cl-eu, ie-wl-vl-ap-br-cl-eu_firmware, ie-wl-vl-ap-br-cl-us, ie-wl-vl-ap-br-cl-us_firmware, ie-wlt-bl-ap-cl-eu, ie-wlt-bl-ap-cl-eu_firmware, ie-wlt-bl-ap-cl-us, ie-wlt-bl-ap-cl-us_firmware, ie-wlt-vl-ap-br-cl-eu, ie-wlt-vl-ap-br-cl-eu_firmware, ie-wlt-vl-ap-br-cl-us, ie-wlt-vl-ap-br-cl-us_firmware
CVE-2021-33536 (published 2021-06-25)
In Weidmueller Industrial WLAN devices in multiple versions an exploitable denial-of-service vulnerability exists in ServiceAgent functionality. A specially crafted packet can cause an integer underflow, triggering a large memcpy that will access unmapped or out-of-bounds memory. An attacker can send this packet while unauthenticated to trigger this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-191
Affected vendors: weidmueller
Affected products: ie-wl-bl-ap-cl-eu, ie-wl-bl-ap-cl-eu_firmware, ie-wl-bl-ap-cl-us, ie-wl-bl-ap-cl-us_firmware, ie-wl-vl-ap-br-cl-eu, ie-wl-vl-ap-br-cl-eu_firmware, ie-wl-vl-ap-br-cl-us, ie-wl-vl-ap-br-cl-us_firmware, ie-wlt-bl-ap-cl-eu, ie-wlt-bl-ap-cl-eu_firmware, ie-wlt-bl-ap-cl-us, ie-wlt-bl-ap-cl-us_firmware, ie-wlt-vl-ap-br-cl-eu, ie-wlt-vl-ap-br-cl-eu_firmware, ie-wlt-vl-ap-br-cl-us, ie-wlt-vl-ap-br-cl-us_firmware
CVE-2021-33537 (published 2021-06-25)
In Weidmueller Industrial WLAN devices in multiple versions an exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality. A specially crafted user name entry can cause an overflow of an error message buffer, resulting in remote code execution. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: weidmueller
Affected products: ie-wl-bl-ap-cl-eu, ie-wl-bl-ap-cl-eu_firmware, ie-wl-bl-ap-cl-us, ie-wl-bl-ap-cl-us_firmware, ie-wl-vl-ap-br-cl-eu, ie-wl-vl-ap-br-cl-eu_firmware, ie-wl-vl-ap-br-cl-us, ie-wl-vl-ap-br-cl-us_firmware, ie-wlt-bl-ap-cl-eu, ie-wlt-bl-ap-cl-eu_firmware, ie-wlt-bl-ap-cl-us, ie-wlt-bl-ap-cl-us_firmware, ie-wlt-vl-ap-br-cl-eu, ie-wlt-vl-ap-br-cl-eu_firmware, ie-wlt-vl-ap-br-cl-us, ie-wlt-vl-ap-br-cl-us_firmware
CVE-2021-33538 (published 2021-06-25)
In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: weidmueller
Affected products: ie-wl-bl-ap-cl-eu, ie-wl-bl-ap-cl-eu_firmware, ie-wl-bl-ap-cl-us, ie-wl-bl-ap-cl-us_firmware, ie-wl-vl-ap-br-cl-eu, ie-wl-vl-ap-br-cl-eu_firmware, ie-wl-vl-ap-br-cl-us, ie-wl-vl-ap-br-cl-us_firmware, ie-wlt-bl-ap-cl-eu, ie-wlt-bl-ap-cl-eu_firmware, ie-wlt-bl-ap-cl-us, ie-wlt-bl-ap-cl-us_firmware, ie-wlt-vl-ap-br-cl-eu, ie-wlt-vl-ap-br-cl-eu_firmware, ie-wlt-vl-ap-br-cl-us, ie-wlt-vl-ap-br-cl-us_firmware
CVE-2021-33539 (published 2021-06-25)
In Weidmueller Industrial WLAN devices in multiple versions an exploitable authentication bypass vulnerability exists in the hostname processing. A specially configured device hostname can cause the device to interpret selected remote traffic as local traffic, resulting in a bypass of web authentication. An attacker can send authenticated SNMP requests to trigger this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-287
Affected vendors: weidmueller
Affected products: ie-wl-bl-ap-cl-eu, ie-wl-bl-ap-cl-eu_firmware, ie-wl-bl-ap-cl-us, ie-wl-bl-ap-cl-us_firmware, ie-wl-vl-ap-br-cl-eu, ie-wl-vl-ap-br-cl-eu_firmware, ie-wl-vl-ap-br-cl-us, ie-wl-vl-ap-br-cl-us_firmware, ie-wlt-bl-ap-cl-eu, ie-wlt-bl-ap-cl-eu_firmware, ie-wlt-bl-ap-cl-us, ie-wlt-bl-ap-cl-us_firmware, ie-wlt-vl-ap-br-cl-eu, ie-wlt-vl-ap-br-cl-eu_firmware, ie-wlt-vl-ap-br-cl-us, ie-wlt-vl-ap-br-cl-us_firmware
CVE-2021-33540 (published 2021-06-25)
In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Weakness: CWE-798
Affected vendors: phoenixcontact
Affected products: axl_f_bk_eip, axl_f_bk_eip_ef, axl_f_bk_eip_ef_firmware, axl_f_bk_eip_firmware, axl_f_bk_eth, axl_f_bk_eth_firmware, axl_f_bk_eth_net2, axl_f_bk_eth_net2_firmware, axl_f_bk_eth_xc, axl_f_bk_eth_xc_firmware, axl_f_bk_pn, axl_f_bk_pn_firmware, axl_f_bk_pn_tps, axl_f_bk_pn_tps_firmware, axl_f_bk_pn_tps_xc, axl_f_bk_pn_tps_xc_firmware, axl_f_bk_pn_xc, axl_f_bk_pn_xc_firmware, axl_f_bk_s35, axl_f_bk_s35_firmware, axl_f_bk_sas, axl_f_bk_sas_firmware, il_eip_bk_di8_do4_2tx-pac, il_eip_bk_di8_do4_2tx-pac_firmware, il_eth_bk_di8_do4_2tx-pac
CVE-2021-33541 (published 2021-06-25)
Phoenix Contact Classic Line Controllers ILC1x0 and ILC1x1 in all versions/variants are affected by a Denial-of-Service vulnerability. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packets to cause a denial of service on the PLC's network communication module. A successful attack stops all network communication. To restore the network connectivity the device needs to be restarted. The automation task is not affected.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-770
Affected vendors: phoenixcontact
Affected products: ilc1x0, ilc1x0_firmware, ilc1x1, ilc1x1_firmware
CVE-2021-33542 (published 2021-06-25)
Phoenix Contact Classic Automation Worx Software Suite in Version 1.87 and below is affected by a remote code execution vulnerability. Manipulated PC Worx or Config+ projects could lead to a remote code execution when unallocated memory is freed because of incompletely initialized data. The attacker needs to get access to an original bus configuration file (*.bcp) to be able to manipulate data inside. After manipulation the attacker needs to exchange the original file by the manipulated one on the application programming workstation. Availability, integrity, or confidentiality of an application programming workstation might be compromised by attacks using these vulnerabilities. Automated systems in operation which were programmed with one of the above-mentioned products are not affected.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-824
Affected vendors: phoenixcontact
Affected products: config\+, pc_worx, pc_worx_express
CVE-2021-33543 (published 2021-09-13)
Multiple camera devices by UDP Technology, Geutebrück and other vendors allow unauthenticated remote access to sensitive files due to default user authentication settings. This can lead to manipulation of the device and denial of service.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-306
Affected vendors: geutebrueck
Affected products: g-cam_ebc-2110, g-cam_ebc-2110_firmware, g-cam_ebc-2111, g-cam_ebc-2111_firmware, g-cam_ebc-2112, g-cam_ebc-2112_firmware, g-cam_efd-2241, g-cam_efd-2241_firmware, g-cam_efd-2250, g-cam_efd-2250_firmware, g-cam_efd-2251, g-cam_efd-2251_firmware, g-cam_ethc-2230, g-cam_ethc-2230_firmware, g-cam_ethc-2239, g-cam_ethc-2239_firmware, g-cam_ethc-2240, g-cam_ethc-2240_firmware, g-cam_ethc-2249, g-cam_ethc-2249_firmware, g-cam_ewpc-2270, g-cam_ewpc-2270_firmware, g-cam_ewpc-2271, g-cam_ewpc-2271_firmware, g-cam_ewpc-2275
CVE-2021-33544 (published 2021-09-13)
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: geutebrueck
Affected products: g-cam_ebc-2110, g-cam_ebc-2110_firmware, g-cam_ebc-2111, g-cam_ebc-2111_firmware, g-cam_ebc-2112, g-cam_ebc-2112_firmware, g-cam_efd-2241, g-cam_efd-2241_firmware, g-cam_efd-2250, g-cam_efd-2250_firmware, g-cam_efd-2251, g-cam_efd-2251_firmware, g-cam_ethc-2230, g-cam_ethc-2230_firmware, g-cam_ethc-2239, g-cam_ethc-2239_firmware, g-cam_ethc-2240, g-cam_ethc-2240_firmware, g-cam_ethc-2249, g-cam_ethc-2249_firmware, g-cam_ewpc-2270, g-cam_ewpc-2270_firmware, g-cam_ewpc-2271, g-cam_ewpc-2271_firmware, g-cam_ewpc-2275
CVE-2021-33545 (published 2021-09-13)
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the counter parameter which may allow an attacker to remotely execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: geutebrueck
Affected products: g-cam_ebc-2110, g-cam_ebc-2110_firmware, g-cam_ebc-2111, g-cam_ebc-2111_firmware, g-cam_ebc-2112, g-cam_ebc-2112_firmware, g-cam_efd-2241, g-cam_efd-2241_firmware, g-cam_efd-2250, g-cam_efd-2250_firmware, g-cam_efd-2251, g-cam_efd-2251_firmware, g-cam_ethc-2230, g-cam_ethc-2230_firmware, g-cam_ethc-2239, g-cam_ethc-2239_firmware, g-cam_ethc-2240, g-cam_ethc-2240_firmware, g-cam_ethc-2249, g-cam_ethc-2249_firmware, g-cam_ewpc-2270, g-cam_ewpc-2270_firmware, g-cam_ewpc-2271, g-cam_ewpc-2271_firmware, g-cam_ewpc-2275
CVE-2021-33546 (published 2021-09-13)
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the name parameter, which may allow an attacker to remotely execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: geutebrueck
Affected products: g-cam_ebc-2110, g-cam_ebc-2110_firmware, g-cam_ebc-2111, g-cam_ebc-2111_firmware, g-cam_ebc-2112, g-cam_ebc-2112_firmware, g-cam_efd-2241, g-cam_efd-2241_firmware, g-cam_efd-2250, g-cam_efd-2250_firmware, g-cam_efd-2251, g-cam_efd-2251_firmware, g-cam_ethc-2230, g-cam_ethc-2230_firmware, g-cam_ethc-2239, g-cam_ethc-2239_firmware, g-cam_ethc-2240, g-cam_ethc-2240_firmware, g-cam_ethc-2249, g-cam_ethc-2249_firmware, g-cam_ewpc-2270, g-cam_ewpc-2270_firmware, g-cam_ewpc-2271, g-cam_ewpc-2271_firmware, g-cam_ewpc-2275
CVE-2021-33547 (published 2021-09-13)
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the profile parameter which may allow an attacker to remotely execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: geutebrueck
Affected products: g-cam_ebc-2110, g-cam_ebc-2110_firmware, g-cam_ebc-2111, g-cam_ebc-2111_firmware, g-cam_ebc-2112, g-cam_ebc-2112_firmware, g-cam_efd-2241, g-cam_efd-2241_firmware, g-cam_efd-2250, g-cam_efd-2250_firmware, g-cam_efd-2251, g-cam_efd-2251_firmware, g-cam_ethc-2230, g-cam_ethc-2230_firmware, g-cam_ethc-2239, g-cam_ethc-2239_firmware, g-cam_ethc-2240, g-cam_ethc-2240_firmware, g-cam_ethc-2249, g-cam_ethc-2249_firmware, g-cam_ewpc-2270, g-cam_ewpc-2270_firmware, g-cam_ewpc-2271, g-cam_ewpc-2271_firmware, g-cam_ewpc-2275
CVE-2021-33548 (published 2021-09-13)
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: geutebrueck
Affected products: g-cam_ebc-2110, g-cam_ebc-2110_firmware, g-cam_ebc-2111, g-cam_ebc-2111_firmware, g-cam_ebc-2112, g-cam_ebc-2112_firmware, g-cam_efd-2241, g-cam_efd-2241_firmware, g-cam_efd-2250, g-cam_efd-2250_firmware, g-cam_efd-2251, g-cam_efd-2251_firmware, g-cam_ethc-2230, g-cam_ethc-2230_firmware, g-cam_ethc-2239, g-cam_ethc-2239_firmware, g-cam_ethc-2240, g-cam_ethc-2240_firmware, g-cam_ethc-2249, g-cam_ethc-2249_firmware, g-cam_ewpc-2270, g-cam_ewpc-2270_firmware, g-cam_ewpc-2271, g-cam_ewpc-2271_firmware, g-cam_ewpc-2275
CVE-2021-33549 (published 2021-09-13)
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to a stack-based buffer overflow condition in the action parameter, which may allow an attacker to remotely execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-121
Affected vendors: geutebrueck
Affected products: g-cam_ebc-2110, g-cam_ebc-2110_firmware, g-cam_ebc-2111, g-cam_ebc-2111_firmware, g-cam_ebc-2112, g-cam_ebc-2112_firmware, g-cam_efd-2241, g-cam_efd-2241_firmware, g-cam_efd-2250, g-cam_efd-2250_firmware, g-cam_efd-2251, g-cam_efd-2251_firmware, g-cam_ethc-2230, g-cam_ethc-2230_firmware, g-cam_ethc-2239, g-cam_ethc-2239_firmware, g-cam_ethc-2240, g-cam_ethc-2240_firmware, g-cam_ethc-2249, g-cam_ethc-2249_firmware, g-cam_ewpc-2270, g-cam_ewpc-2270_firmware, g-cam_ewpc-2271, g-cam_ewpc-2271_firmware, g-cam_ewpc-2275
CVE-2021-3355 (published 2021-02-24)
A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/SensitiveWords.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: lightcms_project
Affected products: lightcms
CVE-2021-33550 (published 2021-09-13)
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: geutebrueck
Affected products: g-cam_ebc-2110, g-cam_ebc-2110_firmware, g-cam_ebc-2111, g-cam_ebc-2111_firmware, g-cam_ebc-2112, g-cam_ebc-2112_firmware, g-cam_efd-2241, g-cam_efd-2241_firmware, g-cam_efd-2250, g-cam_efd-2250_firmware, g-cam_efd-2251, g-cam_efd-2251_firmware, g-cam_ethc-2230, g-cam_ethc-2230_firmware, g-cam_ethc-2239, g-cam_ethc-2239_firmware, g-cam_ethc-2240, g-cam_ethc-2240_firmware, g-cam_ethc-2249, g-cam_ethc-2249_firmware, g-cam_ewpc-2270, g-cam_ewpc-2270_firmware, g-cam_ewpc-2271, g-cam_ewpc-2271_firmware, g-cam_ewpc-2275
CVE-2021-33551 (published 2021-09-13)
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: geutebrueck
Affected products: g-cam_ebc-2110, g-cam_ebc-2110_firmware, g-cam_ebc-2111, g-cam_ebc-2111_firmware, g-cam_ebc-2112, g-cam_ebc-2112_firmware, g-cam_efd-2241, g-cam_efd-2241_firmware, g-cam_efd-2250, g-cam_efd-2250_firmware, g-cam_efd-2251, g-cam_efd-2251_firmware, g-cam_ethc-2230, g-cam_ethc-2230_firmware, g-cam_ethc-2239, g-cam_ethc-2239_firmware, g-cam_ethc-2240, g-cam_ethc-2240_firmware, g-cam_ethc-2249, g-cam_ethc-2249_firmware, g-cam_ewpc-2270, g-cam_ewpc-2270_firmware, g-cam_ewpc-2271, g-cam_ewpc-2271_firmware, g-cam_ewpc-2275
CVE-2021-33552 (published 2021-09-13)
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: geutebrueck
Affected products: g-cam_ebc-2110, g-cam_ebc-2110_firmware, g-cam_ebc-2111, g-cam_ebc-2111_firmware, g-cam_ebc-2112, g-cam_ebc-2112_firmware, g-cam_efd-2241, g-cam_efd-2241_firmware, g-cam_efd-2250, g-cam_efd-2250_firmware, g-cam_efd-2251, g-cam_efd-2251_firmware, g-cam_ethc-2230, g-cam_ethc-2230_firmware, g-cam_ethc-2239, g-cam_ethc-2239_firmware, g-cam_ethc-2240, g-cam_ethc-2240_firmware, g-cam_ethc-2249, g-cam_ethc-2249_firmware, g-cam_ewpc-2270, g-cam_ewpc-2270_firmware, g-cam_ewpc-2271, g-cam_ewpc-2271_firmware, g-cam_ewpc-2275
CVE-2021-33553 (published 2021-09-13)
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: geutebrueck
Affected products: g-cam_ebc-2110, g-cam_ebc-2110_firmware, g-cam_ebc-2111, g-cam_ebc-2111_firmware, g-cam_ebc-2112, g-cam_ebc-2112_firmware, g-cam_efd-2241, g-cam_efd-2241_firmware, g-cam_efd-2250, g-cam_efd-2250_firmware, g-cam_efd-2251, g-cam_efd-2251_firmware, g-cam_ethc-2230, g-cam_ethc-2230_firmware, g-cam_ethc-2239, g-cam_ethc-2239_firmware, g-cam_ethc-2240, g-cam_ethc-2240_firmware, g-cam_ethc-2249, g-cam_ethc-2249_firmware, g-cam_ewpc-2270, g-cam_ewpc-2270_firmware, g-cam_ewpc-2271, g-cam_ewpc-2271_firmware, g-cam_ewpc-2275
CVE-2021-33554 (published 2021-09-13)
Multiple camera devices by UDP Technology, Geutebrück and other vendors are vulnerable to command injection, which may allow an attacker to remotely execute arbitrary code.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-78
Affected vendors: geutebrueck
Affected products: g-cam_ebc-2110, g-cam_ebc-2110_firmware, g-cam_ebc-2111, g-cam_ebc-2111_firmware, g-cam_ebc-2112, g-cam_ebc-2112_firmware, g-cam_efd-2241, g-cam_efd-2241_firmware, g-cam_efd-2250, g-cam_efd-2250_firmware, g-cam_efd-2251, g-cam_efd-2251_firmware, g-cam_ethc-2230, g-cam_ethc-2230_firmware, g-cam_ethc-2239, g-cam_ethc-2239_firmware, g-cam_ethc-2240, g-cam_ethc-2240_firmware, g-cam_ethc-2249, g-cam_ethc-2249_firmware, g-cam_ewpc-2270, g-cam_ewpc-2270_firmware, g-cam_ewpc-2271, g-cam_ewpc-2271_firmware, g-cam_ewpc-2275
CVE-2021-33555 (published 2021-08-31)
In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.7 the filename parameter is vulnerable to unauthenticated path traversal attacks, enabling read access to arbitrary files on the server.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-22
Affected vendors: pepperl-fuchs
Affected products: wha-gw-f2d2-0-as-_z2-eth.eip, wha-gw-f2d2-0-as-_z2-eth.eip_firmware, wha-gw-f2d2-0-as-z2-eth, wha-gw-f2d2-0-as-z2-eth_firmware
CVE-2021-33557 (published 2021-06-17)
An XSS issue was discovered in manage_custom_field_edit_page.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: mantisbt
Affected products: mantisbt
CVE-2021-33558 (published 2021-05-27)
Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration involving backup.html, preview.html, js/log.js, log.html, email.html, online-users.html, and config.js. NOTE: multiple third parties report that this is a site-specific issue because those files are not part of Boa.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: boa
Affected products: boa
CVE-2021-33560 (published 2021-06-08)
Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen appropriately. This, for example, affects use of ElGamal in OpenPGP.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-203
Affected vendors: debian, fedoraproject, gnupg, oracle
Affected products: communications_cloud_native_core_binding_support_function, communications_cloud_native_core_network_function_cloud_native_environment, communications_cloud_native_core_network_repository_function, communications_cloud_native_core_network_slice_selection_function, communications_cloud_native_core_service_communication_proxy, debian_linux, fedora, libgcrypt
CVE-2021-33561 (published 2021-05-24)
A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when information is fetched from the backend, e.g., in admin/customers/list.html.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: shopizer
Affected products: shopizer
CVE-2021-33562 (published 2021-05-24)
A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, e.g., a product/insert-product-name-here.html/ref= URL.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: shopizer
Affected products: shopizer
CVE-2021-33563 (published 2021-05-24)
Koel before 5.1.4 lacks login throttling, lacks a password strength policy, and shows whether a failed login attempt had a valid username. This might make brute-force attacks easier.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-916
Affected vendors: koel
Affected products: koel
CVE-2021-33564 (published 2021-05-29)
An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verify_url option is disabled. This may lead to code execution. The problem occurs because the generate and process features mishandle use of the ImageMagick convert utility.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-88
Affected vendors: dragonfly_project
Affected products: dragonfly
CVE-2021-33570 (published 2021-05-25)
Postbird 0.8.4 allows stored XSS via the onerror attribute of an IMG element in any PostgreSQL database table. This can result in reading local files via vectors involving XMLHttpRequest and open of a file:/// URL, or discovering PostgreSQL passwords via vectors involving Window.localStorage and savedConnections.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: postbird_project
Affected products: postbird
CVE-2021-33571 (published 2021-06-08)
In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validate_ipv4_address, and validate_ipv46_address do not prohibit leading zero characters in octal literals. This may allow a bypass of access control that is based on IP addresses. (validate_ipv4_address and validate_ipv46_address are unaffected with Python 3.9.5+..) .
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-918
Affected vendors: djangoproject, fedoraproject
Affected products: django, fedora
CVE-2021-33572 (published 2021-06-21)
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the FSAVD component used in certain F-Secure products can crash while scanning larger packages/fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service (DoS) of the Anti-Virus engine.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-476
Affected vendors: f-secure
Affected products: cloud_protection_for_salesforce, elements_for_microsoft_365, endpoint_protection, linux_security
CVE-2021-33574 (published 2021-05-25)
The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-416
Affected vendors: debian, fedoraproject, gnu, netapp
Affected products: cloud_backup, debian_linux, e-series_santricity_os_controller, fedora, glibc, h300e, h300e_firmware, h300s, h300s_firmware, h410s, h410s_firmware, h500e, h500e_firmware, h500s, h500s_firmware, h700e, h700e_firmware, h700s, h700s_firmware, solidfire_baseboard_management_controller_firmware
CVE-2021-33575 (published 2021-05-25)
The Pixar ruby-jss gem before 1.6.0 allows remote attackers to execute arbitrary code because of the Plist gem's documented behavior of using Marshal.load during XML document processing.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: pixar
Affected products: ruby-jss
CVE-2021-33576 (published 2021-06-18)
An issue was discovered in Cleo LexiCom 5.5.0.0. Within the AS2 message, the sender can specify a filename. This filename can include path-traversal characters, allowing the file to be written to an arbitrary location on disk.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-22
Affected vendors: cleo
Affected products: lexicom
CVE-2021-33577 (published 2021-06-18)
An issue was discovered in Cleo LexiCom 5.5.0.0. The requirement for the sender of an AS2 message to identify themselves (via encryption and signing of the message) can be bypassed by changing the Content-Type of the message to text/plain.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected vendors: cleo
Affected products: lexicom
CVE-2021-33578 (published 2021-07-13)
Echo ShareCare 8.15.5 is susceptible to SQL injection vulnerabilities when processing remote input from both authenticated and unauthenticated users, leading to the ability to bypass authentication, exfiltrate Structured Query Language (SQL) records, and manipulate data.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: echobh
Affected products: sharecare
CVE-2021-33580 (published 2021-08-18)
User controlled `request.getHeader("Referer")`, `request.getRequestURL()` and `request.getQueryString()` are used to build and run a regex expression. The attacker doesn't have to use a browser and may send a specially crafted Referer header programmatically. Since the attacker controls the string and the regex pattern he may cause a ReDoS by regex catastrophic backtracking on the server side. This problem has been fixed in Roller 6.0.2.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-400
Affected vendors: apache
Affected products: roller
CVE-2021-33581 (published 2022-03-30)
MashZone NextGen through 10.7 GA has an SSRF vulnerability that allows an attacker to interact with arbitrary TCP services, by abusing the feature to check the availability of a PPM connection. This occurs in com.idsscheer.ppmmashup.web.webservice.impl.ZPrestoAdminWebService.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-918
Affected vendors: softwareag
Affected products: mashzone_nextgen
CVE-2021-33582 (published 2021-09-01)
Cyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute daemon hang) via input that is mishandled during hash-table interaction. Because there are many insertions into a single bucket, strcmp becomes slow. This is fixed in 3.4.2, 3.2.8, and 3.0.16.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-407
Affected vendors: cyrus, debian, fedoraproject
Affected products: debian_linux, fedora, imap
CVE-2021-33583 (published 2021-09-30)
REINER timeCard 6.05.07 installs a Microsoft SQL Server with an sa password that is hardcoded in the TCServer.jar file.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-798
Affected vendors: reiner-sct
Affected products: timecard
CVE-2021-33586 (published 2021-05-27)
InspIRCd 3.8.0 through 3.9.x before 3.10.0 allows any user (able to connect to the server) to access recently deallocated memory, aka the "malformed PONG" issue.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-732
Affected vendors: inspircd
Affected products: inspircd
CVE-2021-33587 (published 2021-05-28)
The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: css-what_project, netapp
Affected products: css-what, e-series_performance_analyzer
CVE-2021-33589 (published 2023-04-21)
Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of the algorithm.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-522
Affected vendors: ribose
Affected products: rnp
CVE-2021-33590 (published 2021-05-27)
GattLib 0.3-rc1 has a stack-based buffer over-read in get_device_path_from_mac in dbus/gattlib.c.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-125
Affected vendors: labapart
Affected products: gattlib
CVE-2021-33591 (published 2021-05-28)
An exposed remote debugging port in Naver Comic Viewer prior to 1.0.15.0 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-489
Affected vendors: naver
Affected products: comic_viewer
CVE-2021-33592 (published 2021-07-19)
NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in filename parameter can be the cause of bypassing code signing check function.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: naver
Affected products: toolbar
CVE-2021-33593 (published 2021-11-02)
Whale browser for iOS before 1.14.0 has an inconsistent user interface issue that allows an attacker to obfuscate the address bar which may lead to address bar spoofing.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-451
Affected vendors: navercorp
Affected products: whale
CVE-2021-33594 (published 2021-08-11)
An address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted a malicious URL, it appears like a legitimate one on the address bar, while the content comes from other domain and presented in a window, covering the original content. A remote attacker can leverage this to perform address bar spoofing attack.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N)
Affected vendors: f-secure
Affected products: safe
CVE-2021-33595 (published 2021-08-11)
A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. A remote attacker can leverage this to perform address bar spoofing attack.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N)
Affected vendors: f-secure
Affected products: safe
CVE-2021-33596 (published 2021-08-05)
Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. Exploiting the vulnerability requires the user to click on a specially crafted, seemingly legitimate URL containing an embedded malicious redirect while using F-Secure Safe Browser for iOS.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N)
Weakness: CWE-1021
Affected vendors: f-secure
Affected products: safe
CVE-2021-33597 (published 2021-08-05)
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service (DoS) of the Anti-Virus engine.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Affected vendors: apple, f-secure, microsoft
Affected products: business_suite, client_security, elements_endpoint_protection, linux_security, macos, windows
CVE-2021-33598 (published 2021-08-23)
A Denial-of-Service (DoS) vulnerability was discovered in all versions of F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service (DoS) of the Anti-Virus engine.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: apple, f-secure, microsoft
Affected products: atlant, elements_endpoint_protection, linux_security, macos, windows
CVE-2021-33599 (published 2021-09-07)
A vulnerability affecting F-Secure Antivirus engine was discovered whereby scanning WIM archive file can lead to denial-of-service (infinite loop and freezes AV engine scanner). The vulnerability can be exploit remotely by an attacker. A successful attack will result in Denial-of-Service of the Anti-Virus engine.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Weakness: CWE-835
Affected vendors: apple, f-secure, microsoft
Affected products: atlant, cloud_protection_for_salesforce, elements_endpoint_protection, linux_security, macos, windows
CVE-2021-33600 (published 2021-09-28)
A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs because of an attacker can trigger assertion via malformed HTTP packet to web interface. An unauthenticated attacker could exploit this vulnerability by sending a large username parameter. A successful exploitation could lead to a denial-of-service of the product.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-617
Affected vendors: f-secure
Affected products: internet_gatekeeper
CVE-2021-33601 (published 2021-09-28)
A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through the web user interface in a way that could lead to an arbitrary code execution on the F-Secure Internet Gatekeeper server.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: f-secure
Affected products: internet_gatekeeper
CVE-2021-33602 (published 2021-10-06)
A vulnerability affecting the F-Secure Antivirus engine was discovered when the engine tries to unpack a zip archive (LZW decompression method), and this can crash the scanning engine. The vulnerability can be exploited remotely by an attacker. A successful attack will result in Denial-of-Service of the Anti-Virus engine.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Affected vendors: f-secure
Affected products: atlant, cloud_protection, internet_gatekeeper, linux_security
CVE-2021-33603 (published 2021-10-08)
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVPACK module component used in certain F-Secure products can crash while scanning a fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service (DoS) of the Anti-Virus engine.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Affected vendors: apple, f-secure, microsoft
Affected products: atlant, cloud_protection_for_salesforce, elements_endpoint_detection_and_response, elements_endpoint_protection, elements_for_microsoft_365, internet_gatekeeper, linux_security, macos, windows
CVE-2021-33604 (published 2021-06-24)
URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows local user to execute arbitrary JavaScript code by opening crafted URL in browser.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)
Weakness: CWE-172
Affected vendors: vaadin
Affected products: flow-server, vaadin