deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-34716
Published: 2021-08-18
Description: A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system as the root user. This vulnerability is due to incorrect handling of certain crafted software images that are uploaded to the affected device. An attacker could exploit this vulnerability by authenticating to the system as an administrative user and then uploading specific crafted software images to the affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the root user.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-460, CWE-755
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewrce-QPynNCjh; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewrce-QPynNCjh
CVE: CVE-2021-34730
Published: 2021-08-18
Description: A vulnerability in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of incoming UPnP traffic. An attacker could exploit this vulnerability by sending a crafted UPnP request to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a DoS condition. Cisco has not released software updates that address this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-sb-rv-overflow-htpymMB5; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-sb-rv-overflow-htpymMB5
CVE: CVE-2021-34734
Published: 2021-08-18
Description: A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for the Cisco Video Surveillance 7000 Series IP Cameras firmware could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper management of memory resources, referred to as a double free. An attacker could exploit this vulnerability by sending crafted LLDP packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-415, CWE-415
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipcamera-lldp-dos-OFP7j9j; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipcamera-lldp-dos-OFP7j9j
CVE: CVE-2021-34745
Published: 2021-08-18
Description: A vulnerability in the AppDynamics .NET Agent for Windows could allow an attacker to leverage an authenticated, local user account to gain SYSTEM privileges. This vulnerability is due to the .NET Agent Coordinator Service executing code with SYSTEM privileges. An attacker with local access to a device that is running the vulnerable agent could create a custom process that would be launched with those SYSTEM privileges. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system. This vulnerability is fixed in AppDynamics .NET Agent Release 21.7.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://docs.appdynamics.com/display/PAA/Security+Advisory%3A+AppDynamics+.NET+Agent+Privilege+Escalation+Vulnerability; https://docs.appdynamics.com/display/PAA/Security+Advisory%3A+AppDynamics+.NET+Agent+Privilege+Escalation+Vulnerability
CVE: CVE-2021-34749
Published: 2021-08-18
Description: A vulnerability in Server Name Identification (SNI) request filtering of Cisco Web Security Appliance (WSA), Cisco Firepower Threat Defense (FTD), and the Snort detection engine could allow an unauthenticated, remote attacker to bypass filtering technology on an affected device and exfiltrate data from a compromised host. This vulnerability is due to inadequate filtering of the SSL handshake. An attacker could exploit this vulnerability by using data from the SSL client hello packet to communicate with an external server. A successful exploit could allow the attacker to execute a command-and-control attack on a compromised host and perform additional data exfiltration attacks.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://lists.debian.org/debian-lts-announce/2023/02/msg00011.html; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sni-data-exfil-mFgzXqLN; https://www.debian.org/security/2023/dsa-5354
CVE: CVE-2020-22345
Published: 2021-08-18
Description: /graphStatus/displayServiceStatus.php in Centreon 19.10.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the RRDdatabase_path parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://engindemirbilek.github.io/centreon-19.10-rce; https://github.com/centreon/centreon/pull/8467#event[PII_REDACTED]; https://engindemirbilek.github.io/centreon-19.10-rce
CVE: CVE-2021-32588
Published: 2021-08-18
Description: A use of hard-coded credentials (CWE-798) vulnerability in FortiPortal versions 5.2.5 and below, 5.3.5 and below, 6.0.4 and below, versions 5.1.x and 5.0.x may allow a remote and unauthenticated attacker to execute unauthorized commands as root by uploading and deploying malicious web application archive files using the default hard-coded Tomcat Manager username and password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://fortiguard.com/advisory/FG-IR-21-077; https://fortiguard.com/advisory/FG-IR-21-077
CVE: CVE-2021-32602
Published: 2021-08-19
Description: An improper neutralization of input during web page generation vulnerability (CWE-79) in FortiPortal GUI 6.0.4 and below, 5.3.6 and below, 5.2.6 and below, 5.1.2 and below, 5.0.3 and below, 4.2.2 and below, 4.1.2 and below, 4.0.4 and below may allow a remote and unauthenticated attacker to perform an XSS attack via sending a crafted request with an invalid lang parameter or with an invalid org.springframework.web.servlet.i18n.CookieLocaleResolver.LOCALE value.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-20-066; https://fortiguard.com/advisory/FG-IR-20-066
CVE: CVE-2021-31226
Published: 2021-08-19
Description: An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to lack of size validation. This vulnerability requires the attacker to send a crafted HTTP POST request with a URI longer than 50 bytes. This leads to a heap overflow in wbs_post() via an strcpy() call.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/; https://www.kb.cert.org/vuls/id/608209; https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/
CVE: CVE-2021-31227
Published: 2021-08-19
Description: An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to an incorrect signed integer comparison. This vulnerability requires the attacker to send a malformed HTTP packet with a negative Content-Length, which bypasses the size checks and results in a large heap overflow in the wbs_multidata buffer copy.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/; https://www.kb.cert.org/vuls/id/608209; https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/
CVE: CVE-2021-31228
Published: 2021-08-19
Description: An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS query's source port in order to send forged DNS response packets that will be accepted as valid answers to the DNS client's requests (without sniffing the specific request). Data is predictable because it is based on the time of day, and has too few bits.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/; https://www.kb.cert.org/vuls/id/608209; https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/
CVE: CVE-2021-31400
Published: 2021-08-19
Description: An issue was discovered in tcp_pulloutofband() in tcp_in.c in HCC embedded InterNiche 4.0.1. The TCP out-of-band urgent-data processing function invokes a panic function if the pointer to the end of the out-of-band data points outside of the TCP segment's data. If the panic function hadn't a trap invocation removed, it will enter an infinite loop and therefore cause DoS (continuous loop or a device reset).
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/; https://www.kb.cert.org/vuls/id/608209; https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/
CVE: CVE-2020-35683
Published: 2021-08-19
Description: An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the ICMP checksum. When the IP payload size is set to be smaller than the size of the IP header, the ICMP checksum computation function may read out of bounds, causing a Denial-of-Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-789208.pdf; https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/; https://www.hcc-embedded.com
CVE: CVE-2020-35684
Published: 2021-08-19
Description: An issue was discovered in HCC Nichestack 3.0. The code that parses TCP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the length of the TCP payload within the TCP checksum computation function. When the IP payload size is set to be smaller than the size of the IP header, the TCP checksum computation function may read out of bounds (a low-impact write-out-of-bounds is also possible).
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-789208.pdf; https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/; https://www.hcc-embedded.com
CVE: CVE-2020-35685
Published: 2021-08-19
Description: An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of current and future TCP connections and either hijack existing ones or spoof future ones. (Proper ISN generation should aim to follow at least the specifications outlined in RFC 6528.)
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-330
References: https://cert-portal.siemens.com/productcert/pdf/ssa-789208.pdf; https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/; https://www.hcc-embedded.com
CVE: CVE-2021-27565
Published: 2021-08-19
Description: The web server in InterNiche NicheStack through 4.0.1 allows remote attackers to cause a denial of service (infinite loop and networking outage) via an unexpected valid HTTP request such as OPTIONS. This occurs because the HTTP request handler enters a miscoded wbs_loop() debugger hook.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/; https://www.hcc-embedded.com/; https://www.hcc-embedded.com/about/about-interniche
CVE: CVE-2021-31401
Published: 2021-08-19
Description: An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn't sanitize the value of the IP total length field (header length + data length). With a crafted IP packet, an integer overflow occurs whenever the value of the IP data length is calculated by subtracting the length of the header from the total length of the IP packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-789208.pdf; https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/; https://www.kb.cert.org/vuls/id/608209
CVE: CVE-2021-36762
Published: 2021-08-19
Description: An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd():tftpsrv.c TFTP packet processing function doesn't ensure that a filename is adequately '\0' terminated; therefore, a subsequent call to strlen for the filename might read out of bounds of the protocol packet buffer (if no '\0' byte exists within a reasonable range).
CVSS Score: 7.5 (HIGH)
References: https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/; https://www.hcc-embedded.com/about/about-interniche; https://www.kb.cert.org/vuls/id/608209
CVE: CVE-2021-39273
Published: 2021-08-19
Description: In XeroSecurity Sn1per 9.0 (free version), insecure permissions (0777) are set upon application execution, allowing an unprivileged user to modify the application, modules, and configuration files. This leads to arbitrary code execution with root privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://github.com/1N3/Sn1per/issues/358; https://github.com/1N3/Sn1per/releases; https://github.com/nikip72/CVE-2021-39273-CVE-2021-39274
CVE: CVE-2021-39274
Published: 2021-08-19
Description: In XeroSecurity Sn1per 9.0 (free version), insecure directory permissions (0777) are set during installation, allowing an unprivileged user to modify the main application and the application configuration file. This results in arbitrary code execution with root privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://github.com/1N3/Sn1per/issues/357; https://github.com/1N3/Sn1per/releases; https://github.com/nikip72/CVE-2021-39273-CVE-2021-39274
CVE: CVE-2021-27822
Published: 2021-08-19
Description: A persistent cross site scripting (XSS) vulnerability in the Add Categories module of Vehicle Parking Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Category field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49595; https://www.exploit-db.com/exploits/49595
CVE: CVE-2021-27999
Published: 2021-08-19
Description: A SQL injection vulnerability was discovered in the editid parameter in Local Services Search Engine Management System Project 1.0. This vulnerability gives admin users the ability to dump all data from the database.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89
References: https://medium.com/%40tusharvaidya16/authenticated-blind-error-based-sql-injection-on-local-services-search-engine-management-system-3e99779f0850; https://medium.com/%40tusharvaidya16/authenticated-blind-error-based-sql-injection-on-local-services-search-engine-management-system-3e99779f0850
CVE: CVE-2021-28000
Published: 2021-08-19
Description: A persistent cross-site scripting vulnerability was discovered in Local Services Search Engine Management System Project 1.0 which allows remote attackers to execute arbitrary code via crafted payloads entered into the Name and Address fields.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://tusharvaidya16.medium.com/local-services-search-engine-management-system-project-lssmes-1-0-af2cae7cbbf; https://tusharvaidya16.medium.com/local-services-search-engine-management-system-project-lssmes-1-0-af2cae7cbbf
CVE: CVE-2021-28001
Published: 2021-08-19
Description: A cross-site scripting vulnerability was discovered in the Comments parameter in Textpattern CMS 4.8.4 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting https://site.com/articles/welcome-to-your-site#comments-head.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49616; https://www.exploit-db.com/exploits/49616
CVE: CVE-2021-28002
Published: 2021-08-19
Description: A persistent cross-site scripting vulnerability was discovered in the Excerpt parameter in Textpattern CMS 4.9.0 which allows remote attackers to execute arbitrary code via a crafted payload entered into the URL field. The vulnerability is triggered by users visiting the 'Articles' page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/49617; https://www.linkedin.com/in/tushar-vaidya-2111s5/; https://www.exploit-db.com/exploits/49617
CVE: CVE-2013-0344
Published: 2021-08-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2013. Notes: none
CVE: CVE-2013-1791
Published: 2021-08-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2013. Notes: none
CVE: CVE-2013-1837
Published: 2021-08-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-18748
Published: 2021-08-19
Description: Cross Site Scripting (XSS) in Typora v0.9.65 allows attackers to execute arbitrary code via mathjax syntax due to a mathjax configuration error in the mathematical formula blocks. This is a different vulnerability from CVE-2020-18221.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/typora; https://github.com/typora/typora-issues/issues/2226; https://github.com/typora
CVE: CVE-2021-24038
Published: 2021-08-19
Description: Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to local privilege escalation. This issue affects Oculus Desktop versions after 1.39 and prior to 31.1.0.67.507.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://www.facebook.com/security/advisories/cve-2021-24038; https://www.facebook.com/security/advisories/cve-2021-24038
CVE: CVE-2021-29280
Published: 2021-08-19
Description: In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-668
References: https://github.com/deadlysnowman3308/upgraded-ARP-Poisoning; https://hackingvila.wordpress.com/2021/04/28/upgraded-arp-poisoning-tool/; https://github.com/deadlysnowman3308/upgraded-ARP-Poisoning
CVE: CVE-2021-31338
Published: 2021-08-19
Description: A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.0 SP1). Affected devices allow to modify configuration settings over an unauthenticated channel. This could allow a local attacker to escalate privileges and execute own code on the device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-15
References: https://cert-portal.siemens.com/productcert/pdf/ssa-816035.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-816035.pdf
CVE: CVE-2021-31868
Published: 2021-08-19
Description: Rapid7 Nexpose version 6.6.95 and earlier allows authenticated users of the Security Console to view and edit any ticket in the legacy ticketing feature, regardless of the assignment of the ticket. This issue was resolved in version 6.6.96, released on August 4, 2021.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-306, CWE-306
References: https://docs.rapid7.com/release-notes/nexpose/20210804/; https://docs.rapid7.com/release-notes/nexpose/20210804/
CVE: CVE-2021-34645
Published: 2021-08-19
Description: The Shopping Cart & eCommerce Store WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_currency_settings function found in the ~/admin/inc/wp_easycart_admin_initial_setup.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.1.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://plugins.trac.wordpress.org/browser/wp-easycart/trunk/admin/inc/wp_easycart_admin_initial_setup.php?rev=2463792#L240; https://wordfence.com/vulnerability-advisories/#CVE-2021-34645; https://plugins.trac.wordpress.org/browser/wp-easycart/trunk/admin/inc/wp_easycart_admin_initial_setup.php?rev=2463792#L240
CVE: CVE-2021-37698
Published: 2021-08-19
Description: Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. In versions 2.5.0 through 2.13.0, ElasticsearchWriter, GelfWriter, InfluxdbWriter and Influxdb2Writer do not verify the server's certificate despite a certificate authority being specified. Icinga 2 instances which connect to any of the mentioned time series databases (TSDBs) using TLS over a spoofable infrastructure should immediately upgrade to version 2.13.1, 2.12.6, or 2.11.11 to patch the issue. Such instances should also change the credentials (if any) used by the TSDB writer feature to authenticate against the TSDB. There are no workarounds aside from upgrading.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295, CWE-295
References: https://github.com/Icinga/icinga2/releases/tag/v2.11.11; https://github.com/Icinga/icinga2/releases/tag/v2.12.6; https://github.com/Icinga/icinga2/releases/tag/v2.13.1
CVE: CVE-2021-39138
Published: 2021-08-19
Description: Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Developers can use the REST API to signup users and also allow users to login anonymously. Prior to version 4.5.1, when an anonymous user is first signed up using REST, the server creates session incorrectly. Particularly, the `authProvider` field in `_Session` class under `createdWith` shows the user logged in creating a password. If a developer later depends on the `createdWith` field to provide a different level of access between a password user and anonymous user, the server incorrectly classified the session type as being created with a `password`. The server does not currently use `createdWith` to make decisions about internal functions, so if a developer is not using `createdWith` directly, they are not affected. The vulnerability only affects users who depend on `createdWith` by using it directly. The issue is patched in Parse Server version 4.5.1. As a workaround, do not use the `createdWith` Session field to make decisions if one allows anonymous login.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-287, CWE-863
References: https://github.com/parse-community/parse-server/commit/147bd9a3dc43391e92c36e05d5db860b04ca27db; https://github.com/parse-community/parse-server/releases/tag/4.5.1; https://github.com/parse-community/parse-server/security/advisories/GHSA-23r4-5mxp-c7g5
CVE: CVE-2021-39302
Published: 2021-08-19
Description: MISP 2.4.148, in certain configurations, allows SQL injection via the app/Model/Log.php $conditions['org'] value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/MISP/MISP/commit/20d9020b76d1f6790c4d84e020d0cc97c929f66b; https://github.com/MISP/MISP/commit/20d9020b76d1f6790c4d84e020d0cc97c929f66b
CVE: CVE-2020-20642
Published: 2021-08-19
Description: Cross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admin&c=Filemanager&a=newfile&lang=cn.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/eyoucms/eyoucms/issues/5; https://github.com/eyoucms/eyoucms/issues/5