deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-21706
Published: 2021-10-04
Description: In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS permissions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-24, CWE-22
References: https://bugs.php.net/bug.php?id=81420; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://bugs.php.net/bug.php?id=81420
CVE: CVE-2021-40323
Published: 2021-10-04
Description: Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/cobbler/cobbler/commit/d8f60bbf14a838c8c8a1dba98086b223e35fe70a; https://github.com/cobbler/cobbler/releases/tag/v3.3.0; https://github.com/cobbler/cobbler/commit/d8f60bbf14a838c8c8a1dba98086b223e35fe70a
CVE: CVE-2021-40324
Published: 2021-10-04
Description: Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://github.com/cobbler/cobbler/commit/d8f60bbf14a838c8c8a1dba98086b223e35fe70a; https://github.com/cobbler/cobbler/releases/tag/v3.3.0; https://github.com/cobbler/cobbler/commit/d8f60bbf14a838c8c8a1dba98086b223e35fe70a
CVE: CVE-2021-40325
Published: 2021-10-04
Description: Cobbler before 3.3.0 allows authorization bypass for modification of settings.
CVSS Score: 7.5 (HIGH)
References: https://github.com/cobbler/cobbler/commit/d8f60bbf14a838c8c8a1dba98086b223e35fe70a; https://github.com/cobbler/cobbler/releases/tag/v3.3.0; https://github.com/cobbler/cobbler/commit/d8f60bbf14a838c8c8a1dba98086b223e35fe70a
CVE: CVE-2021-41285
Published: 2021-10-04
Description: Ballistix MOD Utility through 2.0.2.5 is vulnerable to privilege escalation in the MODAPI.sys driver component. The vulnerability is triggered by sending a specific IOCTL request that allows low-privileged users to directly interact with physical memory via the MmMapIoSpace function call (mapping physical memory into a virtual address space). Attackers could exploit this issue to achieve local privilege escalation to NT AUTHORITY\SYSTEM.
CVSS Score: 7.8 (HIGH)
References: https://github.com/VoidSec/Exploit-Development/blob/master/windows/x64/kernel/crucial_Ballistix_MOD_Utility_v.2.0.2.5/crucial_Ballistix_MOD_Utility_v.2.0.2.5_memory_dump_PoC.cpp; https://voidsec.com/crucial-mod-utility-lpe-cve-2021-41285/; https://github.com/VoidSec/Exploit-Development/blob/master/windows/x64/kernel/crucial_Ballistix_MOD_Utility_v.2.0.2.5/crucial_Ballistix_MOD_Utility_v.2.0.2.5_memory_dump_PoC.cpp
CVE: CVE-2021-41322
Published: 2021-10-04
Description: Poly VVX 400/410 5.3.1 allows low-privileged users to change the Admin password by modifying a POST parameter to 120 during the password reset process.
CVSS Score: 8.8 (HIGH)
References: https://packetstormsecurity.com/files/140753/Polycom-VVX-Web-Interface-Privilege-Escalation.html; https://support.polycom.com/content/support.html; https://packetstormsecurity.com/files/140753/Polycom-VVX-Web-Interface-Privilege-Escalation.html
CVE: CVE-2021-41869
Published: 2021-10-04
Description: SuiteCRM 7.10.x before 7.10.33 and 7.11.x before 7.11.22 is vulnerable to privilege escalation.
CVSS Score: 8.8 (HIGH)
References: https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_33; https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_22; https://github.com/ach-ing/cves/blob/main/CVE-2021-41869.md
CVE: CVE-2021-22557
Published: 2021-10-04
Description: SLO generator allows for loading of YAML files that if crafted in a specific format can allow for code execution within the context of the SLO Generator. We recommend upgrading SLO Generator past https://github.com/google/slo-generator/pull/173
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-94, CWE-78
References: http://packetstormsecurity.com/files/164426/Google-SLO-Generator-2.0.0-Code-Execution.html; https://github.com/google/slo-generator/pull/173; http://packetstormsecurity.com/files/164426/Google-SLO-Generator-2.0.0-Code-Execution.html
CVE: CVE-2021-24465
Published: 2021-10-04
Description: The Meow Gallery WordPress plugin before 4.1.9 does not sanitise, validate or escape the ids attribute of its gallery shortcode (available for users as low as Contributor) before using it in an SQL statement, leading to an authenticated SQL Injection issue. The injection also allows the returned values to be manipulated in a way that could lead to data disclosure and arbitrary objects to be deserialized.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/08dbe202-0136-4502-87e7-5e984dc27b16; https://wpscan.com/vulnerability/08dbe202-0136-4502-87e7-5e984dc27b16
CVE: CVE-2021-24654
Published: 2021-10-04
Description: The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url value when submitted directly via the user_registration_update_profile_details AJAX action. This could allow any authenticated user, such as subscriber, to perform Stored Cross-Site attacks when their profile is viewed
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/5c7a9473-d32e-47d6-9f8e-15b96fe758f2; https://wpscan.com/vulnerability/5c7a9473-d32e-47d6-9f8e-15b96fe758f2
CVE: CVE-2021-24673
Published: 2021-10-04
Description: The Appointment Hour Booking WordPress plugin before 1.3.16 does not escape some of the Calendar Form settings, allowing high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/75a67932-d831-4dfb-a70d-a07650eaa755; https://wpscan.com/vulnerability/75a67932-d831-4dfb-a70d-a07650eaa755
CVE: CVE-2021-24676
Published: 2021-10-04
Description: The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/59589e74-f901-4f4d-81de-26ad19d1b7fd; https://wpscan.com/vulnerability/59589e74-f901-4f4d-81de-26ad19d1b7fd
CVE: CVE-2021-24678
Published: 2021-10-04
Description: The CM Tooltip Glossary WordPress plugin before 3.9.21 does not escape some glossary_tooltip shortcode attributes, which could allow users a role as low as Contributor to perform Stored Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/b83880f7-8614-4409-9305-d059b5df15dd; https://wpscan.com/vulnerability/b83880f7-8614-4409-9305-d059b5df15dd
CVE: CVE-2021-24679
Published: 2021-10-04
Description: The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/7c6c0aac-1733-4abc-8e95-05416636a127; https://wpscan.com/vulnerability/7c6c0aac-1733-4abc-8e95-05416636a127
CVE: CVE-2021-24687
Published: 2021-10-04
Description: The Modern Events Calendar Lite WordPress plugin before 5.22.2 does not escape some of its settings before outputting them in attributes, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/300ba418-63ed-4c03-9031-263742ed522e; https://wpscan.com/vulnerability/300ba418-63ed-4c03-9031-263742ed522e
CVE: CVE-2021-41878
Published: 2021-10-04
Description: A reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console and it is possible to insert a vulnerable malicious button.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/164519/i-Panel-Administration-System-2.0-Cross-Site-Scripting.html; https://cybergroot.com/cve_submission/2021-1/XSS_i-Panel_2.0.html; https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41878
CVE: CVE-2021-41511
Published: 2021-10-04
Description: The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/164366/Lodging-Reservation-Management-System-1.0-SQL-Injection.html; https://github.com/Ni7inSharma/CVE-2021-41511; https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41511
CVE: CVE-2021-36051
Published: 2021-10-04
Description: XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-crafted .cpp file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-120
References: https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html; https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html; https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html
CVE: CVE-2021-37330
Published: 2021-10-04
Description: Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting (XSS). The Avatar upload in the My Profile section could be exploited to upload a malicious SVG file which contains Javascript. Now if another user/admin views the profile and clicks to view his avatar, an XSS will trigger.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.navidkagalwalla.com/booking-core-vulnerabilities; https://www.navidkagalwalla.com/booking-core-vulnerabilities
CVE: CVE-2021-37331
Published: 2021-10-04
Description: Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control. On the Verifications page, after uploading an ID Card or Trade License and viewing it, ID Cards and Trade Licenses of other vendors/users can be viewed by changing the URL.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639
References: https://www.navidkagalwalla.com/booking-core-vulnerabilities; https://www.navidkagalwalla.com/booking-core-vulnerabilities
CVE: CVE-2021-37333
Published: 2021-10-04
Description: Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.org/user/profile/change-password does not invalidate a session that is opened in a different browser.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613
References: https://www.navidkagalwalla.com/booking-core-vulnerabilities; https://www.navidkagalwalla.com/booking-core-vulnerabilities
CVE: CVE-2021-37777
Published: 2021-10-04
Description: Gila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visible by another site owner just by knowing the other site name and fuzzing for picture names. This leads to sensitive information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: https://www.navidkagalwalla.com/gila-cms-vulnerabilities; https://www.navidkagalwalla.com/gila-cms-vulnerabilities
CVE: CVE-2021-38822
Published: 2021-10-04
Description: A Stored Cross Site Scripting vulnerability via Malicious File Upload exists in multiple pages of IceHrm 30.0.0.OS that allows for arbitrary execution of JavaScript commands.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.navidkagalwalla.com/icehrm-vulnerabilities; https://www.navidkagalwalla.com/icehrm-vulnerabilities
CVE: CVE-2021-38823
Published: 2021-10-04
Description: The IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an admin account does not invalidate an admin session that is opened in a different browser.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613
References: https://www.navidkagalwalla.com/icehrm-vulnerabilities; https://www.navidkagalwalla.com/icehrm-vulnerabilities
CVE: CVE-2021-39486
Published: 2021-10-04
Description: A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.navidkagalwalla.com/gila-cms-vulnerabilities; https://www.navidkagalwalla.com/gila-cms-vulnerabilities
CVE: CVE-2021-41867
Published: 2021-10-04
Description: An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/onionshare/onionshare/compare/v2.3.3...v2.4; https://www.ihteam.net/advisory/onionshare/; https://github.com/onionshare/onionshare/compare/v2.3.3...v2.4
CVE: CVE-2021-41868
Published: 2021-10-04
Description: OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/onionshare/onionshare/compare/v2.3.3...v2.4; https://www.ihteam.net/advisory/onionshare/; https://github.com/onionshare/onionshare/compare/v2.3.3...v2.4
CVE: CVE-2021-25964
Published: 2021-10-04
Description: In “Calibre-web” application, v0.6.0 to v0.6.12, are vulnerable to Stored XSS in “Metadata”. An attacker that has access to edit the metadata information, can inject JavaScript payload in the description field. When a victim tries to open the file, XSS will be triggered.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/janeczku/calibre-web/commit/32e27712f0f71fdec646add20cd78b4ce75acfce; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25964; https://github.com/janeczku/calibre-web/commit/32e27712f0f71fdec646add20cd78b4ce75acfce
CVE: CVE-2020-28119
Published: 2021-10-04
Description: Cross site scripting vulnerability in 53KF < 2.0.0.2 that allows for arbitrary code to be executed via crafted HTML statement inserted into chat window.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/i900008/panexiang.github.io/blob/gh-pages/CVE-2020-28119.md; https://github.com/i900008/panexiang.github.io/blob/gh-pages/CVE-2020-28119.md
CVE: CVE-2021-22259
Published: 2021-10-04
Description: A potential DOS vulnerability was discovered in GitLab EE starting with version 12.6 due to lack of pagination in dependencies API.
CVSS Score: 4.3 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22259.json; https://gitlab.com/gitlab-org/gitlab/-/issues/335146; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22259.json
CVE: CVE-2021-35296
Published: 2021-10-04
Description: An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via modification of the cookie value and Response Path.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/afaq1337/CVE-2021-35296; https://github.com/afaq1337/CVE-2021-35296
CVE: CVE-2021-36850
Published: 2021-10-04
Description: Cross-Site Request Forgery (CSRF) vulnerability in WordPress Media File Renamer – Auto & Manual Rename plugin (versions <= 5.1.9). Affected parameters "post_title", "filename", "lock". This allows changing the uploaded media title, media file name, and media locking state.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/media-file-renamer/wordpress-media-file-renamer-plugin-5-1-9-multiple-cross-site-request-forgery-csrf-vulnerabilities; https://wordpress.org/plugins/media-file-renamer/#developers; https://patchstack.com/database/vulnerability/media-file-renamer/wordpress-media-file-renamer-plugin-5-1-9-multiple-cross-site-request-forgery-csrf-vulnerabilities
CVE: CVE-2021-39868
Published: 2021-10-04
Description: In all versions of GitLab CE/EE since version 8.12, an authenticated low-privileged malicious user may create a project with unlimited repository size by modifying values in a project export.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-732
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39868.json; https://gitlab.com/gitlab-org/gitlab/-/issues/24649; https://hackerone.com/reports/420258
CVE: CVE-2021-39871
Published: 2021-10-04
Description: In all versions of GitLab CE/EE since version 13.0, an instance that has the setting to disable Bitbucket Server import enabled is bypassed by an attacker making a crafted API call.
CVSS Score: 4.3 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39871.json; https://gitlab.com/gitlab-org/gitlab/-/issues/340782; https://hackerone.com/reports/630263
CVE: CVE-2021-39873
Published: 2021-10-04
Description: In all versions of GitLab CE/EE, there exists a content spoofing vulnerability which may be leveraged by attackers to trick users into visiting a malicious website by spoofing the content in an error response.
CVSS Score: 4.3 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39873.json; https://gitlab.com/gitlab-org/gitlab/-/issues/27241; https://hackerone.com/reports/504961
CVE: CVE-2021-39874
Published: 2021-10-04
Description: In all versions of GitLab CE/EE since version 11.0, the requirement to enforce 2FA is not honored when using git commands.
CVSS Score: 4.3 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39874.json; https://gitlab.com/gitlab-org/gitlab/-/issues/222527; https://hackerone.com/reports/898477
CVE: CVE-2021-39877
Published: 2021-10-04
Description: A vulnerability was discovered in GitLab starting with version 12.2 that allows an attacker to cause uncontrolled resource consumption with a specially crafted file.
CVSS Score: 7.7 (HIGH)
CWE: CWE-400
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39877.json; https://gitlab.com/gitlab-org/gitlab/-/issues/300095; https://hackerone.com/reports/1077021
CVE: CVE-2021-39879
Published: 2021-10-04
Description: Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim's session to disable two-factor authentication
CVSS Score: 2.2 (LOW)
CWE: CWE-306
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39879.json; https://gitlab.com/gitlab-org/gitlab/-/issues/338825; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39879.json
CVE: CVE-2021-39883
Published: 2021-10-04
Description: Improper authorization checks in all versions of GitLab EE starting from 13.11 before 14.1.7, all versions starting from 14.2 before 14.2.5, and all versions starting from 14.3 before 14.3.1 allows subgroup members to see epics from all parent subgroups.
CVSS Score: 4.3 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39883.json; https://gitlab.com/gitlab-org/gitlab/-/issues/334279; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39883.json
CVE: CVE-2021-39885
Published: 2021-10-04
Description: A Stored XSS in merge request creation page in all versions of Gitlab EE starting from 13.7 before 14.1.7, all versions starting from 14.2 before 14.2.5, and all versions starting from 14.3 before 14.3.1 allows an attacker to execute arbitrary JavaScript code on the victim's behalf via malicious approval rule names
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39885.json; https://gitlab.com/gitlab-org/gitlab/-/issues/341140; https://hackerone.com/reports/1342009
CVE: CVE-2021-39896
Published: 2021-10-04
Description: In all versions of GitLab CE/EE since version 8.0, when an admin uses the impersonate feature twice and stops impersonating, the admin may be logged in as the second user they impersonated, which may lead to repudiation issues.
CVSS Score: 3.8 (LOW)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39896.json; https://gitlab.com/gitlab-org/gitlab/-/issues/339362; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39896.json
CVE: CVE-2021-39899
Published: 2021-10-04
Description: In all versions of GitLab CE/EE, an attacker with physical access to a user’s machine may brute force the user’s password via the change password function. There is a rate limit in place, but the attack may still be conducted by stealing the session id from the physical compromise of the account and splitting the attack over several IP addresses and passing in the compromised session value from these various locations.
CVSS Score: 2.9 (LOW)
CWE: CWE-640
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39899.json; https://gitlab.com/gitlab-org/gitlab/-/issues/339154; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39899.json
CVE: CVE-2021-39900
Published: 2021-10-04
Description: Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in object-storage with a temporary availability via Rails logs.
CVSS Score: 2.0 (LOW)
CWE: CWE-532
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39900.json; https://gitlab.com/gitlab-org/gitlab/-/issues/325088; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39900.json
CVE: CVE-2021-40683
Published: 2021-10-04
Description: In Akamai EAA (Enterprise Application Access) Client before 2.3.1, 2.4.x before 2.4.1, and 2.5.x before 2.5.3, an unquoted path may allow an attacker to hijack the flow of execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-428
References: https://akamai.com/blog/news/eaa-client-escalation-of-privilege-vulnerability; https://www.akamai.com/products/enterprise-application-access; https://akamai.com/blog/news/eaa-client-escalation-of-privilege-vulnerability
CVE: CVE-2021-41103
Published: 2021-10-04
Description: containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission bits (such as setuid), unprivileged Linux users could discover and execute those programs. When the UID of an unprivileged Linux user on the host collided with the file owner or group inside a container, the unprivileged Linux user on the host could discover, read, and modify those files. This vulnerability has been fixed in containerd 1.4.11 and containerd 1.5.7. Users should update to these version when they are released and may restart containers or update directory permissions to mitigate the vulnerability. Users unable to update should limit access to the host to trusted users. Update directory permission on container bundles directories.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://cert-portal.siemens.com/productcert/pdf/ssa-222547.pdf; https://github.com/containerd/containerd/commit/5b46e404f6b9f661a205e28d59c982d3634148f8; https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq
CVE: CVE-2021-41530
Published: 2021-10-04
Description: Forcepoint NGFW Engine versions 6.5.11 and earlier, 6.8.6 and earlier, and 6.10.0 are vulnerable to TCP reflected amplification vulnerability, if HTTP User Response has been configured.
CVSS Score: 7.5 (HIGH)
References: https://help.forcepoint.com/security/CVE/CVE-2021-41530.html; https://help.forcepoint.com/security/CVE/CVE-2021-41530.html
CVE: CVE-2021-41591
Published: 2021-10-04
Description: ACINQ Eclair before 0.6.3 allows loss of funds because of dust HTLC exposure.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-770
References: https://bitcoinmagazine.com/technical/good-griefing-a-lingering-vulnerability-on-lightning-network-that-still-needs-fixing; https://github.com/ACINQ/eclair/pull/1985; https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-May/002714.html