deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-42105
Published: 2021-10-21
Description: Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-42104, 42106 and 42107.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://success.trendmicro.com/solution/000289229; https://success.trendmicro.com/solution/000289230; https://www.zerodayinitiative.com/advisories/ZDI-21-1215/
CVE: CVE-2021-42106
Published: 2021-10-21
Description: Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-42104, 42105 and 42107.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://success.trendmicro.com/solution/000289229; https://success.trendmicro.com/solution/000289230; https://www.zerodayinitiative.com/advisories/ZDI-21-1218/
CVE: CVE-2021-42107
Published: 2021-10-21
Description: Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-42104, 42105 and 42106.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://success.trendmicro.com/solution/000289229; https://success.trendmicro.com/solution/000289230; https://www.zerodayinitiative.com/advisories/ZDI-21-1214/
CVE: CVE-2021-42108
Published: 2021-10-21
Description: Unnecessary privilege vulnerabilities in the Web Console of Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://success.trendmicro.com/solution/000289229; https://success.trendmicro.com/solution/000289230; https://www.zerodayinitiative.com/advisories/ZDI-21-1217/
CVE: CVE-2021-41790
Published: 2021-10-21
Description: An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2. Script Action execution allows executing scripts uploaded outside of the Data Dictionary. This could allow a logged-in attacker to execute arbitrary code inside a sandboxed environment.
CVSS Score: 8.8 (HIGH)
References: https://github.com/Alfresco/acs-packaging/blob/master/DISCLOSURES.md; https://www.themissinglink.com.au/; https://github.com/Alfresco/acs-packaging/blob/master/DISCLOSURES.md
CVE: CVE-2021-41791
Published: 2021-10-21
Description: An issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community-share through 7.0. An evasion of the XSS filter for HTML input validation in the Alfresco Share User Interface leads to stored XSS that could be exploited by an attacker (given that he has privileges on the content collaboration features).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Alfresco/acs-packaging/blob/master/DISCLOSURES.md; https://www.themissinglink.com.au/; https://github.com/Alfresco/acs-packaging/blob/master/DISCLOSURES.md
CVE: CVE-2021-41792
Published: 2021-10-21
Description: An issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org.alfresco:alfresco-transform-services through 1.3. A crafted HTML file, once uploaded, could trigger an unexpected request by the transformation engine. The response to the request is not available to the attacker, i.e., this is blind SSRF.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/Alfresco/acs-packaging/blob/master/DISCLOSURES.md; https://www.themissinglink.com.au/; https://github.com/Alfresco/acs-packaging/blob/master/DISCLOSURES.md
CVE: CVE-2021-35512
Published: 2021-10-21
Description: An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://www.esecforte.com/server-side-request-forgery-india-ssrf-rvd-manage-engine/; https://www.manageengine.com/products/applications_manager/; https://www.manageengine.com/products/applications_manager/release-notes.html
CVE: CVE-2021-42740
Published: 2021-10-21
Description: The shell-quote package before 1.7.3 for Node.js allows command injection. An attacker can inject unescaped shell metacharacters through a regex designed to support Windows drive letters. If the output of this package is passed to a real shell as a quoted argument to a command with exec(), an attacker can inject arbitrary commands. This is because the Windows drive letter regex character class is {A-z] instead of the correct {A-Za-z]. Several shell metacharacters exist in the space between capital letter Z and lower case letter a, such as the backtick character.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/substack/node-shell-quote/blob/master/CHANGELOG.md#173; https://github.com/substack/node-shell-quote/commit/5799416ed454aa4ec9afafc895b4e31760ea1abe; https://www.npmjs.com/package/shell-quote
CVE: CVE-2020-27304
Published: 2021-10-21
Description: The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web applications that use the file upload form handler, and use parts of the user-controlled filename in the output path, are susceptible to directory traversal
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-23, CWE-22
References: https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://groups.google.com/g/civetweb/c/yPBxNXdGgJQ
CVE: CVE-2021-28975
Published: 2021-10-21
Description: WP Mailster 1.6.18.0 allows XSS when a victim opens a mail server's details in the mst_servers page, for a crafted server_host, server_name, or connection_parameter parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.compass-security.com/en/research/advisories/; https://www.compass-security.com/fileadmin/Research/Advisories/2021-18_CSNC-2021-018-WPMailster_XSS_CSRF.txt; https://www.compass-security.com/en/research/advisories/
CVE: CVE-2020-14263
Published: 2021-10-21
Description: "HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"
CVSS Score: 3.9 (LOW)
CWE: CWE-732
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0091691; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0091691
CVE: CVE-2021-20120
Published: 2021-10-21
Description: The administration web interface for the Arris Surfboard SB8200 lacks any protections against cross-site request forgery attacks. This means that an attacker could make configuration changes (such as changing the administrative password) without the consent of the user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.tenable.com/security/research/tra-2021-45; https://www.tenable.com/security/research/tra-2021-45
CVE: CVE-2021-28496
Published: 2021-10-21
Description: On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by BiDirectional Forwarding Detection (BFD) will be leaked when displaying output over eAPI or other JSON outputs to other authenticated users on the device. The affected EOS Versions are: all releases in 4.22.x train, 4.23.9 and below releases in the 4.23.x train, 4.24.7 and below releases in the 4.24.x train, 4.25.4 and below releases in the 4.25.x train, 4.26.1 and below releases in the 4.26.x train
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-311, CWE-522
References: https://www.arista.com/en/support/advisories-notices/security-advisories/13243-security-advisory-0069; https://www.arista.com/en/support/advisories-notices/security-advisories/13243-security-advisory-0069
CVE: CVE-2021-29873
Published: 2021-10-21
Description: IBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restricted shell escape vulnerability. IBM X-Force ID: 206229.
CVSS Score: 8.1 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/206229; https://www.ibm.com/support/pages/node/6497111; https://www.ibm.com/support/pages/node/6507091
CVE: CVE-2021-29883
Published: 2021-10-21
Description: IBM Standards Processing Engine (IBM Transformation Extender Advanced 9.0 and 10.0) does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 207090.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-311
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/207090; https://www.ibm.com/support/pages/node/6507077; https://exchange.xforce.ibmcloud.com/vulnerabilities/207090
CVE: CVE-2021-42327
Published: 2021-10-21
Description: dp_link_settings_write in drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c in the Linux kernel through 5.14.14 allows a heap-based buffer overflow by an attacker who can write a string to the AMD GPU display drivers debug filesystem. There are no checks on size within parse_write_buffer_into_params when it uses the size of copy_from_user to copy a userspace buffer into a 40-byte heap buffer.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f23750b5b3d98653b31d[PII_REDACTED]ef6364ad67; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDEW4APTYKJK365HC2JZIVXYUV7ZRN7/
CVE: CVE-2021-35225
Published: 2021-10-21
Description: Each authenticated Orion Platform user in a MSP (Managed Service Provider) environment can view and browse all NetPath Services from all that MSP's customers. This can lead to any user having a limited insight into other customer's infrastructure and potential data cross-contamination.
CVSS Score: 5.0 (MEDIUM)
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm; https://support.solarwinds.com/SuccessCenter/s/article/NPM-2020-2-6-Hotfix-2?language=en_US; https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35225
CVE: CVE-2021-35227
Published: 2021-10-21
Description: The HTTP interface was enabled for RabbitMQ Plugin in ARM 2020.2.6 and the ability to configure HTTPS was not available.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79, CWE-502
References: https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2021-4_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35227; https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2021-4_release_notes.htm
CVE: CVE-2021-35228
Published: 2021-10-21
Description: This vulnerability occurred due to missing input sanitization for one of the output fields that is extracted from headers on specific section of page causing a reflective cross site scripting attack. An attacker would need to perform a Man in the Middle attack in order to change header for a remote victim.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2021-3-7438_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35228; https://documentation.solarwinds.com/en/success_center/dpa/content/release_notes/dpa_2021-3-7438_release_notes.htm
CVE: CVE-2021-41146
Published: 2021-10-21
Description: qutebrowser is an open source keyboard-focused browser with a minimal GUI. Starting with qutebrowser v1.7.0, the Windows installer for qutebrowser registers a `qutebrowserurl:` URL handler. With certain applications, opening a specially crafted `qutebrowserurl:...` URL can lead to execution of qutebrowser commands, which in turn allows arbitrary code execution via commands such as `:spawn` or `:debug-pyeval`. Only Windows installs where qutebrowser is registered as URL handler are affected. The issue has been fixed in qutebrowser v2.4.0. The fix also adds additional hardening for potential similar issues on Linux (by adding the new --untrusted-args flag to the .desktop file), though no such vulnerabilities are known.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-88, CWE-641, CWE-77
References: https://github.com/qutebrowser/qutebrowser/commit/8f46ba3f6dc7b18375f7aa63c48a1fe461190430; https://github.com/qutebrowser/qutebrowser/security/advisories/GHSA-vw27-fwjf-5qxm; https://github.com/qutebrowser/qutebrowser/commit/8f46ba3f6dc7b18375f7aa63c48a1fe461190430
CVE: CVE-2021-41159
Published: 2021-10-21
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. All FreeRDP clients prior to version 2.4.1 using gateway connections (`/gt:rpc`) fail to validate input data. A malicious gateway might allow client memory to be written out of bounds. This issue has been resolved in version 2.4.1. If you are unable to update then use `/gt:http` rather than /gt:rdp connections if possible or use a direct connection without a gateway.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-vh34-m9h7-95xq; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DWJXQOWKNR7O5HM2HFJOM4GBUFPTE3RG/; https://security.gentoo.org/glsa/202210-24
CVE: CVE-2021-41160
Published: 2021-10-21
Description: FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send `0` width/height or out of bound rectangles to trigger out of bound writes. With `0` width or heigth the memory allocation will be `0` but the missing bounds checks allow writing to the pointer at this (not allocated) region. This issue has been patched in FreeRDP 2.4.1.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-7c9r-6r2q-93qg; https://lists.debian.org/debian-lts-announce/2023/11/msg00010.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DWJXQOWKNR7O5HM2HFJOM4GBUFPTE3RG/
CVE: CVE-2021-42715
Published: 2021-10-21
Description: An issue was discovered in stb stb_image.h 1.33 through 2.27. The HDR loader parsed truncated end-of-file RLE scanlines as an infinite sequence of zero-length runs. An attacker could potentially have caused denial of service in applications using stb_image by submitting crafted HDR files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/nothings/stb/issues/1224; https://github.com/nothings/stb/pull/1223; https://lists.debian.org/debian-lts-announce/2023/01/msg00045.html
CVE: CVE-2021-42716
Published: 2021-10-21
Description: An issue was discovered in stb stb_image.h 2.27. The PNM loader incorrectly interpreted 16-bit PGM files as 8-bit when converting to RGBA, leading to a buffer overflow when later reinterpreting the result as a 16-bit buffer. An attacker could potentially have crashed a service using stb_image, or read up to 1024 bytes of non-consecutive heap data without control over the read location.
CVSS Score: 7.1 (HIGH)
CWE: CWE-120
References: https://github.com/nothings/stb/issues/1166; https://github.com/nothings/stb/issues/1225; https://github.com/nothings/stb/pull/1223
CVE: CVE-2021-22034
Published: 2021-10-21
Description: Releases prior to VMware vRealize Operations Tenant App 8.6 contain an Information Disclosure Vulnerability.
CVSS Score: 7.5 (HIGH)
References: https://www.vmware.com/security/advisories/VMSA-2021-0024.html; https://www.vmware.com/security/advisories/VMSA-2021-0024.html
CVE: CVE-2021-39321
Published: 2021-10-21
Description: Version 3.3.23 of the Sassy Social Share WordPress plugin is vulnerable to PHP Object Injection via the wp_ajax_heateor_sss_import_config AJAX action due to deserialization of unvalidated user supplied inputs via the import_config function found in the ~/admin/class-sassy-social-share-admin.php file. This can be exploited by underprivileged authenticated users due to a missing capability check on the import_config function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-863
References: https://plugins.trac.wordpress.org/changeset/2600464/sassy-social-share/trunk/admin/class-sassy-social-share-admin.php; https://www.wordfence.com/blog/2021/10/vulnerability-patched-in-sassy-social-share-plugin/; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39321
CVE: CVE-2021-39328
Published: 2021-10-21
Description: The Simple Job Board WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $job_board_privacy_policy_label variable echo'd out via the ~/admin/settings/class-simple-job-board-settings-privacy.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 2.9.4. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/BigTiger2020/word-press/blob/main/Simple%20Job%20Board%E2%80%94Stored%20Cross-Site%20Scripting%20-%202.md; https://plugins.trac.wordpress.org/changeset/2617364/simple-job-board/trunk/admin/settings/class-simple-job-board-settings-privacy.php; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39328
CVE: CVE-2021-39348
Published: 2021-10-21
Description: The LearnPress WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping on the $custom_profile parameter found in the ~/inc/admin/views/backend-user-profile.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 4.1.3.1. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled. Please note that this is seperate from CVE-2021-24702.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-80, CWE-79
References: https://github.com/BigTiger2020/word-press/blob/main/LearnPress.md; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2614592%40learnpress&new=2614592%40learnpress&sfp_email=&sfph_mail=; https://wordfence.com/vulnerability-advisories/#CVE-2021-39348
CVE: CVE-2021-39352
Published: 2021-10-21
Description: The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the ~/inc/CatchThemesDemoImport.php file, in versions up to and including 1.7, due to insufficient file type validation. This makes it possible for an attacker with administrative privileges to upload malicious files that can be used to achieve remote code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: http://packetstormsecurity.com/files/165207/WordPress-Catch-Themes-Demo-Import-1.6.1-Shell-Upload.html; http://packetstormsecurity.com/files/165463/WordPress-Catch-Themes-Demo-Import-Shell-Upload.html; https://github.com/BigTiger2020/word-press/blob/main/Catch%20Themes%20Demo%20Import.md
CVE: CVE-2021-39354
Published: 2021-10-21
Description: The Easy Digital Downloads WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the $start_date and $end_date parameters found in the ~/includes/admin/payments/class-payments-table.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.11.2.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/BigTiger2020/word-press/blob/main/Easy%20Digital%20Downloads.md; https://plugins.trac.wordpress.org/changeset/2616149/easy-digital-downloads/trunk/includes/admin/payments/class-payments-table.php; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39354
CVE: CVE-2021-39356
Published: 2021-10-21
Description: The Content Staging WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via several parameters that are echo'd out via the ~/templates/settings.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 2.0.1. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/BigTiger2020/word-press/blob/main/Content%20Staging.md; https://plugins.trac.wordpress.org/browser/content-staging/trunk/templates/settings.php; https://wordfence.com/vulnerability-advisories/#CVE-2021-39356
CVE: CVE-2021-39357
Published: 2021-10-21
Description: The Leaky Paywall WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the ~/class.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 4.16.5. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/BigTiger2020/word-press/blob/main/Leaky%20Paywall.md; https://plugins.trac.wordpress.org/changeset/2615195/leaky-paywall/trunk/class.php; https://wordfence.com/vulnerability-advisories/#CVE-2021-39357
CVE: CVE-2021-40719
Published: 2021-10-21
Description: Adobe Connect version 11.2.3 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary method invocation when AMF messages are deserialized on an Adobe Connect server. An attacker can leverage this to execute remote code execution on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://helpx.adobe.com/security/products/connect/apsb21-91.html; https://helpx.adobe.com/security/products/connect/apsb21-91.html