deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-23395
Published: 2021-06-15
Description: This affects all versions of package nedb. The library could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor.prototype payload.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321
References: https://snyk.io/vuln/SNYK-JS-NEDB-1305279; https://snyk.io/vuln/SNYK-JS-NEDB-1305279
CVE: CVE-2021-27388
Published: 2021-06-15
Description: SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or execution of limited configuration modifications and/or execution of limited control commands on the SINAMICS Medium Voltage Products, Remote Access (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-131-04; https://us-cert.cisa.gov/ics/advisories/icsa-21-131-04
CVE: CVE-2021-32683
Published: 2021-06-15
Description: wire-webapp is the web version of Wire, an open-source messenger. A cross-site scripting vulnerability exists in wire-webapp prior to version 2021-06-01-production.0. If a user is instructed to open an image in a new tab (right click -> open in new tab, or copy the URL and paste it in the URL bar), an the image payload is executed on the domain hosting the app (app.wire.com). In particular, if an image contains malicious code in addition to the actual picture, this code is executed on app.wire.com. This allows the attacker to fully control the user account. The vulnerability was patched in version 2021-06-01-production.0. As a workaround, users should not try to open image URLs.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/wireapp/wire-webapp/commit/056e39d327bb10c1b0958dfbea0c39752692a1b0; https://github.com/wireapp/wire-webapp/security/advisories/GHSA-382j-mmc8-m5rw; https://github.com/wireapp/wire-webapp/commit/056e39d327bb10c1b0958dfbea0c39752692a1b0
CVE: CVE-2021-33622
Published: 2021-06-15
Description: Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-754
References: https://medium.com/sylabs; https://support.sylabs.io/support/solutions/articles/[PII_REDACTED]0-3-5-8-security-release-cve-2021-33622-; https://medium.com/sylabs
CVE: CVE-2021-33887
Published: 2021-06-15
Description: Insufficient verification of data authenticity in Peloton TTR01 up to and including PTV55G allows an attacker with physical access to boot into a modified kernel/ramdisk without unlocking the bootloader.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-345
References: https://fccid.io/2AA3N-TTR01; https://www.mcafee.com/blogs/consumer/mobile-and-iot-security/is-your-peloton-spinning-up-malware/; https://youtu.be/RLjXfvb0ADw
CVE: CVE-2021-34128
Published: 2021-06-15
Description: LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP archive containing a .php file, as demonstrated by the ../../../../phpinfo.php pathname.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/bettershop/LaikeTui/issues/8; https://github.com/bettershop/LaikeTui/issues/8
CVE: CVE-2021-34129
Published: 2021-06-15
Description: LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall the product in an attacker-controlled manner. This deletion is possible via directory traversal in the uploadImg, oldpic, or imgurl parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://github.com/bettershop/LaikeTui/issues/9; https://github.com/bettershop/LaikeTui/issues/9
CVE: CVE-2021-34170
Published: 2021-06-15
Description: Bandai Namco FromSoftware Dark Souls III allows remote attackers to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
References: https://www.reddit.com/r/darksouls3/comments/n1235k/potential_pc_security_exploit_spreading/; https://www.reddit.com/r/darksouls3/comments/n1235k/potential_pc_security_exploit_spreading/
CVE: CVE-2021-3592
Published: 2021-06-15
Description: An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the bootp_input() function and could occur while processing a udp packet that is smaller than the size of the 'bootp_t' structure. A malicious guest could use this flaw to leak 10 bytes of uninitialized heap memory from the host. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.
CVSS Score: 3.8 (LOW)
CWE: CWE-824, CWE-824
References: https://bugzilla.redhat.com/show_bug.cgi?id=1970484; https://lists.debian.org/debian-lts-announce/2021/09/msg00000.html; https://lists.debian.org/debian-lts-announce/2021/09/msg00004.html
CVE: CVE-2021-3593
Published: 2021-06-15
Description: An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp6_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.
CVSS Score: 3.8 (LOW)
CWE: CWE-824, CWE-824
References: https://bugzilla.redhat.com/show_bug.cgi?id=1970487; https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html
CVE: CVE-2021-3594
Published: 2021-06-15
Description: An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the udp_input() function and could occur while processing a udp packet that is smaller than the size of the 'udphdr' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.
CVSS Score: 3.8 (LOW)
CWE: CWE-824
References: https://bugzilla.redhat.com/show_bug.cgi?id=1970491; https://lists.debian.org/debian-lts-announce/2021/09/msg00000.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html
CVE: CVE-2021-3595
Published: 2021-06-15
Description: An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftp_input() function and could occur while processing a udp packet that is smaller than the size of the 'tftp_t' structure. This issue may lead to out-of-bounds read access or indirect host memory disclosure to the guest. The highest threat from this vulnerability is to data confidentiality. This flaw affects libslirp versions prior to 4.6.0.
CVSS Score: 3.8 (LOW)
CWE: CWE-824
References: https://bugzilla.redhat.com/show_bug.cgi?id=1970489; https://lists.debian.org/debian-lts-announce/2021/09/msg00000.html; https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html
CVE: CVE-2021-24037
Published: 2021-06-15
Description: A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-416
References: https://github.com/facebook/hermes/commit/d86e185e485b6330216dee8e854455c694e3a36e; https://www.facebook.com/security/advisories/CVE-2021-24037; https://github.com/facebook/hermes/commit/d86e185e485b6330216dee8e854455c694e3a36e
CVE: CVE-2021-28857
Published: 2021-06-15
Description: TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://yunus-shn.medium.com/tp-links-tl-wpa4220-v4-0-cleartext-credentials-in-cookie-7516a2649394; https://yunus-shn.medium.com/tp-links-tl-wpa4220-v4-0-cleartext-credentials-in-cookie-7516a2649394
CVE: CVE-2021-28858
Published: 2021-06-15
Description: TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312
References: https://yunus-shn.medium.com/tp-links-tl-wpa4220-v4-0-cleartext-transmission-of-sensitive-information-40357c778b84; https://yunus-shn.medium.com/tp-links-tl-wpa4220-v4-0-cleartext-transmission-of-sensitive-information-40357c778b84
CVE: CVE-2021-30544
Published: 2021-06-15
Description: Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html; https://crbug.com/1212618; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE: CVE-2021-30545
Published: 2021-06-15
Description: Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html; https://crbug.com/1201031; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE: CVE-2021-30546
Published: 2021-06-15
Description: Use after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html; https://crbug.com/1206911; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE: CVE-2021-30547
Published: 2021-06-15
Description: Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html; https://crbug.com/1210414; https://lists.debian.org/debian-lts-announce/2021/07/msg00009.html
CVE: CVE-2021-30548
Published: 2021-06-15
Description: Use after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html; https://crbug.com/1210487; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE: CVE-2021-30549
Published: 2021-06-15
Description: Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html; https://crbug.com/1212498; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE: CVE-2021-30550
Published: 2021-06-15
Description: Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html; https://crbug.com/1212500; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE: CVE-2021-30551
Published: 2021-06-15
Description: Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html; https://crbug.com/1216437; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE: CVE-2021-30552
Published: 2021-06-15
Description: Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html; https://crbug.com/1200679; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE: CVE-2021-30553
Published: 2021-06-15
Description: Use after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/06/stable-channel-update-for-desktop.html; https://crbug.com/1209769; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE: CVE-2021-32623
Published: 2021-06-16
Description: Opencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a (seemingly permanent) denial of service attack, essentially taking down Opencast using a single HTTP request. To exploit this, users need to have ingest privileges, limiting the group of potential attackers The problem has been fixed in Opencast 9.6. There is no known workaround for this issue.
CVSS Score: 8.1 (HIGH)
CWE: CWE-776
References: https://github.com/opencast/opencast/commit/8ae27da5a6f658011a5741b3210e715b0dc6213e; https://github.com/opencast/opencast/security/advisories/GHSA-9gwx-9cwp-5c2m; https://github.com/opencast/opencast/commit/8ae27da5a6f658011a5741b3210e715b0dc6213e
CVE: CVE-2021-32676
Published: 2021-06-16
Description: Nextcloud Talk is a fully on-premises audio/video and chat communication service. Password protected shared chats in Talk before version 9.0.10, 10.0.8 and 11.2.2 did not rotate the session cookie after a successful authentication event. It is recommended that the Nextcloud Talk App is upgraded to 9.0.10, 10.0.8 or 11.2.2. No workarounds for this vulnerability are known to exist.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-384
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-p6h7-84v4-827r; https://hackerone.com/reports/1181962; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-p6h7-84v4-827r
CVE: CVE-2021-32685
Published: 2021-06-16
Description: tEnvoy contains the PGP, NaCl, and PBKDF2 in node.js and the browser (hashing, random, encryption, decryption, signatures, conversions), used by TogaTech.org. In versions prior to 7.0.3, the `verifyWithMessage` method of `tEnvoyNaClSigningKey` always returns `true` for any signature that has a SHA-512 hash matching the SHA-512 hash of the message even if the signature was invalid. This issue is patched in version 7.0.3. As a workaround: In `tenvoy.js` under the `verifyWithMessage` method definition within the `tEnvoyNaClSigningKey` class, ensure that the return statement call to `this.verify` ends in `.verified`.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347
References: https://github.com/TogaTech/tEnvoy/commit/a121b34a45e289d775c62e[PII_REDACTED]1dee686b; https://github.com/TogaTech/tEnvoy/releases/tag/v7.0.3; https://github.com/TogaTech/tEnvoy/security/advisories/GHSA-7r96-8g3x-g36m
CVE: CVE-2021-3535
Published: 2021-06-16
Description: Rapid7 Nexpose is vulnerable to a non-persistent cross-site scripting vulnerability affecting the Security Console's Filtered Asset Search feature. A specific search criterion and operator combination in Filtered Asset Search could have allowed a user to pass code through the provided search field. This issue affects version 6.6.80 and prior, and is fixed in 6.6.81. If your Security Console currently falls on or within this affected version range, ensure that you update your Security Console to the latest version.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://docs.rapid7.com/release-notes/nexpose/20210505/; https://docs.rapid7.com/release-notes/nexpose/20210505/
CVE: CVE-2021-28815
Published: 2021-06-16
Description: Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link versions prior to 2.2.21 on QTS 4.5.3; versions prior to 2.2.21 on QuTS hero h4.5.2; versions prior to 2.2.21 on QuTScloud c4.5.4.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-922
References: https://www.qnap.com/zh-tw/security-advisory/qsa-21-26; https://www.qnap.com/zh-tw/security-advisory/qsa-21-26
CVE: CVE-2020-9493
Published: 2021-06-16
Description: A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: http://www.openwall.com/lists/oss-security/2021/06/16/1; http://www.openwall.com/lists/oss-security/2022/01/18/5; https://lists.apache.org/thread.html/r50d389c613ba6062a26aa57e163c09bfee4ff2d95d67331d75265b83%40%3Cannounce.apache.org%3E
CVE: CVE-2021-21441
Published: 2021-06-16
Description: There is a XSS vulnerability in the ticket overview screens. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any user intraction. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79, CWE-79
References: https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html; https://otrs.com/release-notes/otrs-security-advisory-2021-11/; https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
CVE: CVE-2021-20093
Published: 2021-06-16
Description: A buffer over-read vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to disclose heap memory contents or crash the CodeMeter Runtime Server.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/Advisory_WIBU-210423-01.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-675303.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-21-210-02
CVE: CVE-2021-20094
Published: 2021-06-16
Description: A denial of service vulnerability exists in Wibu-Systems CodeMeter versions < 7.21a. An unauthenticated remote attacker can exploit this issue to crash the CodeMeter Runtime Server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/Advisory_WIBU-210423-02.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-675303.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-21-210-02
CVE: CVE-2021-27481
Published: 2021-06-16
Description: ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-321, CWE-798
References: https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01; https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01
CVE: CVE-2021-27487
Published: 2021-06-16
Description: ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext. This could allow an attacker to gain access to sensitive information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312
References: https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01; https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01
CVE: CVE-2021-27489
Published: 2021-06-16
Description: ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file. This file could allow an attacker to remotely execute arbitrary commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01; https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01
CVE: CVE-2021-28979
Published: 2021-06-16
Description: SafeNet KeySecure Management Console 8.12.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-74
References: http://safenet.com; http://thales.com; https://www.gruppotim.it/redteam
CVE: CVE-2021-30468
Published: 2021-06-16
Description: A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thread getting stuck in an infinite loop, consuming CPU indefinitely. This issue affects Apache CXF versions prior to 3.4.4; Apache CXF versions prior to 3.3.11.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-835
References: http://cxf.apache.org/security-advisories.data/CVE-2021-30468.txt.asc; http://www.openwall.com/lists/oss-security/2021/06/16/2; https://lists.apache.org/thread.html/r3f46ae38e4a6e80c069cdb320e0ce831b0a21a12ef0cc92c0943f34a%40%3Ccommits.tomee.apache.org%3E
CVE: CVE-2021-32033
Published: 2021-06-16
Description: Protectimus SLIM NFC 70 10.01 devices allow a Time Traveler attack in which attackers can predict TOTP passwords in certain situations. The time value used by the device can be set independently from the used seed value for generating time-based one-time passwords, without authentication. Thus, an attacker with short-time physical access to a device can set the internal real-time clock (RTC) to the future, generate one-time passwords, and reset the clock to the current time. This allows the generation of valid future time-based one-time passwords without having further access to the hardware token.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-335
References: http://packetstormsecurity.com/files/163223/Protectimus-SLIM-NFC-Time-Manipulation.html; http://seclists.org/fulldisclosure/2021/Jun/39; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-007.txt
CVE: CVE-2021-32612
Published: 2021-06-16
Description: The VeryFitPro (com.veryfit2hr.second) application 3.2.8 for Android does all communication with the backend API over cleartext HTTP. This includes logins, registrations, and password change requests. This allows information theft and account takeover via network sniffing.
CVSS Score: 8.1 (HIGH)
CWE: CWE-319
References: http://seclists.org/fulldisclosure/2021/Jun/45; https://play.google.com/store/apps/details?id=com.veryfit2hr.second&hl=en_US&gl=US; https://trovent.github.io/security-advisories/TRSA-2105-01/TRSA-2105-01.txt