deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-34774
Published: 2021-11-04
Description: A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to a specific API request. An attacker could exploit the vulnerability by sending a crafted HTTP request to the affected application. A successful exploit could allow the attacker to obtain sensitive information about the users of the application, including security questions and answers. To exploit this vulnerability an attacker would need valid Administrator credentials. Cisco expects to release software updates that address this vulnerability.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cspc-info-disc-KM3bGVL; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cspc-info-disc-KM3bGVL
CVE: CVE-2021-34784
Published: 2021-11-04
Description: A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-xss-U2JK537j; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-xss-U2JK537j
CVE: CVE-2021-34795
Published: 2021-11-04
Description: Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol is enabled Perform command injection Modify the configuration For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-284, CWE-1188
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catpon-multivulns-CE3DSYGr; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catpon-multivulns-CE3DSYGr
CVE: CVE-2021-40112
Published: 2021-11-04
Description: Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol is enabled Perform command injection Modify the configuration For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-284
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catpon-multivulns-CE3DSYGr; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catpon-multivulns-CE3DSYGr
CVE: CVE-2021-40113
Published: 2021-11-04
Description: Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol is enabled Perform command injection Modify the configuration For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-284, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catpon-multivulns-CE3DSYGr; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catpon-multivulns-CE3DSYGr
CVE: CVE-2021-40115
Published: 2021-11-04
Description: A vulnerability in Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-videomesh-xss-qjm2BDQf; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-videomesh-xss-qjm2BDQf
CVE: CVE-2021-40119
Published: 2021-11-04
Description: A vulnerability in the key-based SSH authentication mechanism of Cisco Policy Suite could allow an unauthenticated, remote attacker to log in to an affected system as the root user. This vulnerability is due to the re-use of static SSH keys across installations. An attacker could exploit this vulnerability by extracting a key from a system under their control. A successful exploit could allow the attacker to log in to an affected system as the root user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-321, CWE-798
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cps-static-key-JmS92hNv; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cps-static-key-JmS92hNv
CVE: CVE-2021-40120
Published: 2021-11-04
Description: A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject arbitrary commands into the underlying operating system and execute them using root-level privileges. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending malicious input to a specific field in the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system as a user with root-level privileges.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbrv-cmdinjection-Z5cWFdK; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbrv-cmdinjection-Z5cWFdK
CVE: CVE-2021-40124
Published: 2021-11-04
Description: A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to incorrect privilege assignment to scripts executed before user logon. An attacker could exploit this vulnerability by configuring a script to be executed before logon. A successful exploit could allow the attacker to execute arbitrary code with SYSTEM privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-266, CWE-269
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-nam-priv-yCsRNUGT; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-nam-priv-yCsRNUGT
CVE: CVE-2021-40126
Published: 2021-11-04
Description: A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to perform an email enumeration attack against the Umbrella infrastructure. This vulnerability is due to an overly descriptive error message on the dashboard that appears when a user attempts to modify their email address when the new address already exists in the system. An attacker could exploit this vulnerability by attempting to modify the user's email address. A successful exploit could allow the attacker to enumerate email addresses of users in the system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-210, CWE-209
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-user-enum-S7XfJwDE; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-user-enum-S7XfJwDE
CVE: CVE-2021-40127
Published: 2021-11-04
Description: A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an unauthenticated, remote attacker to render the web-based management interface unusable, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause a permanent invalid redirect for requests sent to the web-based management interface of the device, resulting in a DoS condition.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-switches-web-dos-xMyFFkt8; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-switches-web-dos-xMyFFkt8
CVE: CVE-2021-40128
Published: 2021-11-04
Description: A vulnerability in the account activation feature of Cisco Webex Meetings could allow an unauthenticated, remote attacker to send an account activation email with an activation link that points to an arbitrary domain. This vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by sending a crafted HTTP request to the account activation page of Cisco Webex Meetings. A successful exploit could allow the attacker to send to any recipient an account activation email that contains a tampered activation link, which could direct the user to an attacker-controlled website.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-183
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-activation-3sdNFxcy; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-activation-3sdNFxcy
CVE: CVE-2021-21685
Published: 2021-11-04
Description: Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not check agent-to-controller access to create parent directories in FilePath#mkdirs.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2021/11/04/3; https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455; http://www.openwall.com/lists/oss-security/2021/11/04/3
CVE: CVE-2021-21686
Published: 2021-11-04
Description: File path filters in the agent-to-controller security subsystem of Jenkins 2.318 and earlier, LTS 2.303.2 and earlier do not canonicalize paths, allowing operations to follow symbolic links to outside allowed directories.
CVSS Score: 8.1 (HIGH)
CWE: CWE-59
References: https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455; https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455
CVE: CVE-2021-21687
Published: 2021-11-04
Description: Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not check agent-to-controller access to create symbolic links when unarchiving a symbolic link in FilePath#untar.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-862
References: https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455; https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455
CVE: CVE-2021-21688
Published: 2021-11-04
Description: The agent-to-controller security check FilePath#reading(FileVisitor) in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not reject any operations, allowing users to have unrestricted read access using certain operations (creating archives, FilePath#copyRecursiveTo).
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455; https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455
CVE: CVE-2021-21689
Published: 2021-11-04
Description: FilePath#unzip and FilePath#untar were not subject to any agent-to-controller access control in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.
CVSS Score: 9.1 (CRITICAL)
References: https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455; https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455
CVE: CVE-2021-21690
Published: 2021-11-04
Description: Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455; https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455
CVE: CVE-2021-21691
Published: 2021-11-04
Description: Creating symbolic links is possible without the 'symlink' agent-to-controller access control permission in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-59
References: https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455; https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455
CVE: CVE-2021-21692
Published: 2021-11-04
Description: FilePath#renameTo and FilePath#moveAllChildrenTo in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier only check 'read' agent-to-controller access permission on the source path, instead of 'delete'.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455; https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455
CVE: CVE-2021-21693
Published: 2021-11-04
Description: When creating temporary files, agent-to-controller access to create those files is only checked after they've been created in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863
References: https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455; https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455
CVE: CVE-2021-21694
Published: 2021-11-04
Description: FilePath#toURI, FilePath#hasSymlink, FilePath#absolutize, FilePath#isDescendant, and FilePath#get*DiskSpace do not check any permissions in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455; https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455
CVE: CVE-2021-21695
Published: 2021-11-04
Description: FilePath#listFiles lists files outside directories that agents are allowed to access when following symbolic links in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier.
CVSS Score: 8.8 (HIGH)
CWE: CWE-59
References: http://www.openwall.com/lists/oss-security/2021/11/04/3; https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2455; http://www.openwall.com/lists/oss-security/2021/11/04/3
CVE: CVE-2021-21696
Published: 2021-11-04
Description: Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not limit agent read/write access to the libs/ directory inside build directories when using the FilePath APIs, allowing attackers in control of agent processes to replace the code of a trusted library with a modified variant. This results in unsandboxed code execution in the Jenkins controller process.
CVSS Score: 9.8 (CRITICAL)
References: http://www.openwall.com/lists/oss-security/2021/11/04/3; https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2423; http://www.openwall.com/lists/oss-security/2021/11/04/3
CVE: CVE-2021-21697
Published: 2021-11-04
Description: Jenkins 2.318 and earlier, LTS 2.303.2 and earlier allows any agent to read and write the contents of any build directory stored in Jenkins with very few restrictions.
CVSS Score: 9.1 (CRITICAL)
References: http://www.openwall.com/lists/oss-security/2021/11/04/3; https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2428; http://www.openwall.com/lists/oss-security/2021/11/04/3
CVE: CVE-2021-21698
Published: 2021-11-04
Description: Jenkins Subversion Plugin 2.15.0 and earlier does not restrict the name of a file when looking up a subversion key file on the controller from an agent.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2021/11/04/3; https://www.jenkins.io/security/advisory/2021-11-04/#SECURITY-2506; http://www.openwall.com/lists/oss-security/2021/11/04/3
CVE: CVE-2021-41247
Published: 2021-11-04
Description: JupyterHub is an open source multi-user server for Jupyter notebooks. In affected versions users who have multiple JupyterLab tabs open in the same browser session, may see incomplete logout from the single-user server, as fresh credentials (for the single-user server only, not the Hub) reinstated after logout, if another active JupyterLab session is open while the logout takes place. Upgrade to JupyterHub 1.5. For distributed deployments, it is jupyterhub in the _user_ environment that needs patching. There are no patches necessary in the Hub environment. The only workaround is to make sure that only one JupyterLab tab is open when you log out.
CVSS Score: 3.5 (LOW)
CWE: CWE-613, CWE-613
References: https://github.com/jupyterhub/jupyterhub/commit/5ac9e7f73a6e1020ffddc40321fc53336829fe27; https://github.com/jupyterhub/jupyterhub/security/advisories/GHSA-cw7p-q79f-m2v7; https://github.com/jupyterhub/jupyterhub/commit/5ac9e7f73a6e1020ffddc40321fc53336829fe27
CVE: CVE-2021-43281
Published: 2021-11-04
Description: MyBB before 1.8.29 allows Remote Code Injection by an admin with the "Can manage settings?" permission. The Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type "php" with PHP code, executed on Change Settings pages.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/mybb/mybb/security/advisories/GHSA-8gxx-vmr9-h39p; https://github.com/mybb/mybb/security/advisories/GHSA-8gxx-vmr9-h39p
CVE: CVE-2021-43293
Published: 2021-11-04
Description: Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery (SSRF).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]003; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]003
CVE: CVE-2021-43389
Published: 2021-11-04
Description: An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2021/11/05/1; https://bugzilla.redhat.com/show_bug.cgi?id=2013180; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.14.15
CVE: CVE-2020-21139
Published: 2021-11-04
Description: EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/Ryan0lb/EC-cloud-e-commerce-system-CVE-application/blob/master/README.md; https://github.com/Ryan0lb/EC-cloud-e-commerce-system-CVE-application/blob/master/README.md
CVE: CVE-2021-41249
Published: 2021-11-04
Description: GraphQL Playground is a GraphQL IDE for development of graphQL focused applications. All versions of graphql-playground-react older than graphql-playground-react@1.7.28 are vulnerable to compromised HTTP schema introspection responses or schema prop values with malicious GraphQL type names, exposing a dynamic XSS attack surface that can allow code injection on operation autocomplete. In order for the attack to take place, the user must load a malicious schema in graphql-playground. There are several ways this can occur, including by specifying the URL to a malicious schema in the endpoint query parameter. If a user clicks on a link to a GraphQL Playground installation that specifies a malicious server, arbitrary JavaScript can run in the user's browser, which can be used to exfiltrate user credentials or other harmful goals. If you are using graphql-playground-react directly in your client app, upgrade to version 1.7.28 or later.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/graphql/graphiql/security/advisories/GHSA-x4r7-m2q9-69c8; https://github.com/graphql/graphql-playground/commit/b8a[PII_REDACTED]92f12c46b90384a79ab82bcadad; https://github.com/graphql/graphql-playground/security/advisories/GHSA-59r9-6jp6-jcm7
CVE: CVE-2021-43396
Published: 2021-11-04
Description: In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data integrity in certain iconv() use cases. NOTE: the vendor states "the bug cannot be invoked through user input and requires iconv to be invoked with a NULL inbuf, which ought to require a separate application bug to do so unintentionally. Hence there's no security impact to the bug.
CVSS Score: 7.5 (HIGH)
References: https://blog.tuxcare.com/vulnerability/vulnerability-in-iconv-identified-by-tuxcare-team-cve-2021-43396; https://sourceware.org/bugzilla/show_bug.cgi?id=28524; https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=ff012870b2c02a62598c04daa1e54632e020fd7d
CVE: CVE-2021-3896
Published: 2021-11-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-43389. Reason: This candidate is a reservation duplicate of CVE-2021-43389. Notes: All CVE users should reference CVE-2021-43389 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2021-41248
Published: 2021-11-04
Description: GraphiQL is the reference implementation of this monorepo, GraphQL IDE, an official project under the GraphQL Foundation. All versions of graphiql older than graphiql@1.4.7 are vulnerable to compromised HTTP schema introspection responses or schema prop values with malicious GraphQL type names, exposing a dynamic XSS attack surface that can allow code injection on operation autocomplete. In order for the attack to take place, the user must load a vulnerable schema in graphiql. There are a number of ways that can occur. By default, the schema URL is not attacker-controllable in graphiql or in its suggested implementations or examples, leaving only very complex attack vectors. If a custom implementation of graphiql's fetcher allows the schema URL to be set dynamically, such as a URL query parameter like ?endpoint= in graphql-playground, or a database provided value, then this custom graphiql implementation is vulnerable to phishing attacks, and thus much more readily available, low or no privelege level xss attacks. The URLs could look like any generic looking graphql schema URL. It should be noted that desktop clients such as Altair, Insomnia, Postwoman, do not appear to be impacted by this. This vulnerability does not impact codemirror-graphql, monaco-graphql or other dependents, as it exists in onHasCompletion.ts in graphiql. It does impact all forks of graphiql, and every released version of graphiql.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://github.com/graphql/graphiql/commit/cb237eeeaf7333c4954c752122261db7520f7bf4; https://github.com/graphql/graphiql/security/advisories/GHSA-x4r7-m2q9-69c8; https://github.com/graphql/graphql-playground/security/advisories/GHSA-59r9-6jp6-jcm7