deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-30501
Published: 2021-05-27
Description: An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service (abort) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-617
References: https://bugzilla.redhat.com/show_bug.cgi?id=1948696; https://github.com/upx/upx/commit/28e761cd42211dfe0124b7a29b2f74730f453e46; https://github.com/upx/upx/issues/486
CVE: CVE-2021-3509
Published: 2021-05-27
Description: A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used in the body of the HTTP response for the documentation, which again makes it available to XSS.The greatest threat to the system is for confidentiality, integrity, and availability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=1950116; https://github.com/ceph/ceph/blob/f1557e8f62d31883d3d34ae241a1a26af11d923f/src/pybind/mgr/dashboard/controllers/docs.py#L394-L409; https://github.com/ceph/ceph/commit/7a1ca8d372da3b6a4fc3d221a0e5f72d1d61c27b
CVE: CVE-2021-31920
Published: 2021-05-27
Description: Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio authorization policy when path based authorization rules are used.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-706
References: https://istio.io/latest/news/security/istio-security-2021-005/; https://istio.io/latest/news/security/istio-security-2021-005/
CVE: CVE-2021-33586
Published: 2021-05-27
Description: InspIRCd 3.8.0 through 3.9.x before 3.10.0 allows any user (able to connect to the server) to access recently deallocated memory, aka the "malformed PONG" issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-732
References: https://docs.inspircd.org/security/2021-01/; https://github.com/inspircd/inspircd/commit/4350a11c663b0d75f8119743bffb7736d87abd4d; https://security.gentoo.org/glsa/202107-22
CVE: CVE-2021-20727
Published: 2021-05-27
Description: Cross-site scripting vulnerability in Zettlr from 0.20.0 to 1.8.8 allows an attacker to execute an arbitrary script by loading a file or code snippet containing an invalid iframe into Zettlr.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Zettlr/Zettlr; https://jvn.jp/en/jp/JVN98239374/index.html; https://www.zettlr.com/
CVE: CVE-2021-32458
Published: 2021-05-27
Description: Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow an attacker to issue a specially crafted iotcl which could lead to code execution on affected devices. An attacker must first obtain the ability to execute low-privileged code on the target device in order to exploit this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-10337; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1231; https://helpcenter.trendmicro.com/en-us/article/TMKA-10337
CVE: CVE-2021-32459
Published: 2021-05-27
Description: Trend Micro Home Network Security version 6.6.604 and earlier contains a hard-coded password vulnerability in the log collection server which could allow an attacker to use a specially crafted network request to lead to arbitrary authentication. An attacker must first obtain the ability to execute high-privileged code on the target device in order to exploit this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-798
References: https://helpcenter.trendmicro.com/en-us/article/TMKA-10337; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1241; https://helpcenter.trendmicro.com/en-us/article/TMKA-10337
CVE: CVE-2021-33558
Published: 2021-05-27
Description: Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration involving backup.html, preview.html, js/log.js, log.html, email.html, online-users.html, and config.js. NOTE: multiple third parties report that this is a site-specific issue because those files are not part of Boa.
CVSS Score: 7.5 (HIGH)
References: https://github.com/mdanzaruddin/CVE-2021-33558.; https://github.com/mdanzaruddin/CVE-2021-33558./issues/1; https://sourceforge.net/projects/boa/files/boa/0.94.13/
CVE: CVE-2021-33590
Published: 2021-05-27
Description: GattLib 0.3-rc1 has a stack-based buffer over-read in get_device_path_from_mac in dbus/gattlib.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/labapart/gattlib/issues/219; https://github.com/labapart/gattlib/issues/219
CVE: CVE-2020-17514
Published: 2021-05-27
Description: Apache Fineract prior to 1.5.0 disables HTTPS hostname verification in ProcessorHelper in the configureClient method. Under typical deployments, a man in the middle attack could be successful.
CVSS Score: 7.4 (HIGH)
References: http://www.openwall.com/lists/oss-security/2021/05/27/2; https://issues.apache.org/jira/browse/FINERACT-1211; https://lists.apache.org/thread.html/rc011b25289c8a6e14f8bc6d07e727382a1df3c8cf2aa5369598bbf64%40%3Cdev.fineract.apache.org%3E
CVE: CVE-2021-22885
Published: 2021-05-27
Description: A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or `polymorphic_url`helper with untrusted user input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-209, CWE-209
References: https://hackerone.com/reports/1106652; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.debian.org/security/2021/dsa-4929
CVE: CVE-2021-22891
Published: 2021-05-27
Description: A missing authorization vulnerability exists in Citrix ShareFile Storage Zones Controller before 5.7.3, 5.8.3, 5.9.3, 5.10.1 and 5.11.18 may allow unauthenticated remote compromise of the Storage Zones Controller.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862, CWE-862
References: https://support.citrix.com/article/CTX310780; https://support.citrix.com/article/CTX310780
CVE: CVE-2021-22892
Published: 2021-05-27
Description: An information disclosure vulnerability exists in the Rocket.Chat server fixed v3.13, v3.12.2 & v3.11.3 that allowed email addresses to be disclosed by enumeration and validation checks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-203
References: https://hackerone.com/reports/1089116; https://hackerone.com/reports/1089116
CVE: CVE-2021-22894
Published: 2021-05-27
Description: A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as the root user via maliciously crafted meeting room.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-119
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/?kA23Z000000boUWSAY; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/?kA23Z000000boUWSAY; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22894
CVE: CVE-2021-22899
Published: 2021-05-27
Description: A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/?kA23Z000000boUWSAY; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/?kA23Z000000boUWSAY; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22899
CVE: CVE-2021-22900
Published: 2021-05-27
Description: A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94, CWE-669
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/?kA23Z000000boUWSAY; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/?kA23Z000000boUWSAY; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22900
CVE: CVE-2021-22907
Published: 2021-05-27
Description: An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR versions prior to 2105 and 1912 LTSR prior to CU4.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://support.citrix.com/article/CTX307794; https://support.citrix.com/article/CTX307794
CVE: CVE-2021-22908
Published: 2021-05-27
Description: A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user. As of version 9.1R3, this permission is not enabled by default.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44800/; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44800/; https://www.kb.cert.org/vuls/id/667933
CVE: CVE-2021-22909
Published: 2021-05-27
Description: A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to execute a man-in-the-middle (MitM) attack during a firmware update. This vulnerability is fixed in EdgeMAX EdgeRouter V2.0.9-hotfix.1 and later.
CVSS Score: 7.5 (HIGH)
CWE: CWE-300, CWE-295
References: https://community.ui.com/releases/Security-Advisory-Bulletin-018-018/cfa1566b-4bf8-427b-8cc7-8cffba3a93a4; https://community.ui.com/releases/Security-Advisory-Bulletin-018-018/cfa1566b-4bf8-427b-8cc7-8cffba3a93a4
CVE: CVE-2021-22911
Published: 2021-05-27
Description: A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injection, resulting potentially in RCE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-75
References: http://packetstormsecurity.com/files/162997/Rocket.Chat-3.12.1-NoSQL-Injection-Code-Execution.html; http://packetstormsecurity.com/files/163419/Rocket.Chat-3.12.1-NoSQL-Injection-Code-Execution.html; https://blog.sonarsource.com/nosql-injections-in-rocket-chat
CVE: CVE-2021-28651
Published: 2021-05-27
Description: An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a buffer-management bug, it allows a denial of service. When resolving a request with the urn: scheme, the parser leaks a small amount of memory. However, there is an unspecified attack methodology that can easily trigger a large amount of memory consumption.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://seclists.org/fulldisclosure/2023/Oct/14; http://www.openwall.com/lists/oss-security/2023/10/11/3; https://bugs.squid-cache.org/show_bug.cgi?id=5104
CVE: CVE-2021-28652
Published: 2021-05-27
Description: An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service attack against the Cache Manager API. This allows a trusted client to trigger memory leaks that. over time, lead to a Denial of Service via an unspecified short query string. This attack is limited to clients with Cache Manager API access privilege.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-401
References: http://seclists.org/fulldisclosure/2023/Oct/14; http://www.openwall.com/lists/oss-security/2023/10/11/3; https://bugs.squid-cache.org/show_bug.cgi?id=5106
CVE: CVE-2021-28662
Published: 2021-05-27
Description: An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6. If a remote server sends a certain response header over HTTP or HTTPS, there is a denial of service. This header can plausibly occur in benign network traffic.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-116
References: http://seclists.org/fulldisclosure/2023/Oct/14; http://www.openwall.com/lists/oss-security/2023/10/11/3; http://www.squid-cache.org/Versions/v6/changesets/squid-6-051824924c709bd6162a378f746fb859454c674e.patch
CVE: CVE-2008-2544
Published: 2021-05-27
Description: Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-668
References: https://bugzilla.redhat.com/show_bug.cgi?id=213135; https://bugzilla.redhat.com/show_bug.cgi?id=213135
CVE: CVE-2021-22358
Published: 2021-05-27
Description: There is an insufficient input validation vulnerability in FusionCompute 8.0.0. Due to the input validation is insufficient, an attacker can exploit this vulnerability to upload any files to the device. Successful exploit may cause the service abnormal.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210506-01-inputvalidate-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210506-01-inputvalidate-en
CVE: CVE-2021-22359
Published: 2021-05-27
Description: There is a denial of service vulnerability in the verisions V200R005C00SPC500 of S5700 and V200R005C00SPC500 of S6700. An attacker could exploit this vulnerability by sending specific message to a targeted device. Due to insufficient input validation, successful exploit can cause the service abnormal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210519-02-dos-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210519-02-dos-en
CVE: CVE-2021-22360
Published: 2021-05-27
Description: There is a resource management error vulnerability in the verisions V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 of USG9500. An authentication attacker needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper resource management of the function, the vulnerability can be exploited to cause service abnormal on affected devices.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-770
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210519-01-resource-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210519-01-resource-en
CVE: CVE-2021-22362
Published: 2021-05-27
Description: There is an out of bounds write vulnerability in some Huawei products. An attacker can exploit this vulnerability by sending crafted data in the packet to the target device. Due to insufficient validation of message, successful exploit can cause certain service abnormal.Affected product versions include:CloudEngine 12800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800;CloudEngine 5800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800@;CloudEngine 6800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R005C20SPC800,V200R019C00SPC800,V200R019C10SPC800;CloudEngine 7800 versions V200R002C50SPC800,V200R003C00SPC810,V200R005C00SPC800,V200R005C10SPC800,V200R019C00SPC800,V200R019C10SPC800.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-787
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210519-01-cloudengine-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210519-01-cloudengine-en
CVE: CVE-2021-22364
Published: 2021-05-27
Description: There is a denial of service vulnerability in the versions 10.1.0.126(C00E125R5P3) of HUAWEI Mate 30 and 10.1.0.152(C00E136R7P2) of HUAWEI Mate 30 (5G) . A module does not verify certain parameters sufficiently and it leads to some exceptions. Successful exploit could cause a denial of service condition.
CVSS Score: 5.5 (MEDIUM)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210519-04-dos-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210519-04-dos-en
CVE: CVE-2021-22411
Published: 2021-05-27
Description: There is an out-of-bounds write vulnerability in some Huawei products. The code of a module have a bad judgment logic. Attackers can exploit this vulnerability by performing multiple abnormal activities to trigger the bad logic and cause out-of-bounds write. This may compromise the normal service of the module.Affected product versions include: NGFW Module versions V500R005C00SPC100,V500R005C00SPC200;Secospace USG6300 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6500 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200;USG9500 versions V500R001C60SPC500,V500R005C00SPC100,V500R005C00SPC200.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210506-02-outofbounds-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210506-02-outofbounds-en
CVE: CVE-2021-30465
Published: 2021-05-27
Description: runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.
CVSS Score: 8.5 (HIGH)
CWE: CWE-362
References: http://www.openwall.com/lists/oss-security/2021/05/19/2; http://www.openwall.com/lists/oss-security/2021/05/19/2; https://bugzilla.opensuse.org/show_bug.cgi?id=1185405
CVE: CVE-2021-31153
Published: 2021-05-27
Description: please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the search_path function, the --check option, or the -d option.
CVSS Score: 3.3 (LOW)
References: http://www.openwall.com/lists/oss-security/2021/05/18/1; https://gitlab.com/edneville/please/-/tree/master/src/bin; http://www.openwall.com/lists/oss-security/2021/05/18/1
CVE: CVE-2021-31154
Published: 2021-05-27
Description: pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack.
CVSS Score: 7.8 (HIGH)
CWE: CWE-668
References: https://gitlab.com/edneville/please/-/tree/master/src/bin; https://www.openwall.com/lists/oss-security/2021/05/18/1; https://gitlab.com/edneville/please/-/tree/master/src/bin
CVE: CVE-2021-31155
Published: 2021-05-27
Description: Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://gitlab.com/edneville/please/-/tree/master/src/bin; https://www.openwall.com/lists/oss-security/2021/05/18/1; https://gitlab.com/edneville/please/-/tree/master/src/bin
CVE: CVE-2021-31525
Published: 2021-05-27
Description: net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-674
References: https://github.com/golang/go/issues/45710; https://groups.google.com/g/golang-announce/c/cu9SP4eSXMc; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ISRZZ6NY5R2TBYE72KZFOCO25TEUQTBF/
CVE: CVE-2021-31535
Published: 2021-05-27
Description: LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request (intended for server-side color lookup) contains a flaw allowing a client to send color-name requests with a name longer than the maximum size allowed by the protocol (and also longer than the maximum packet size for normal-sized packets). The user-controlled data exceeding the maximum size is then interpreted by the server as additional X protocol requests and executed, e.g., to disable X server authorization completely. For example, if the victim encounters malicious terminal control sequences for color codes, then the attacker may be able to take full control of the running graphical session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://packetstormsecurity.com/files/162737/libX11-Insufficient-Length-Check-Injection.html; http://seclists.org/fulldisclosure/2021/May/52; http://www.openwall.com/lists/oss-security/2021/05/18/2
CVE: CVE-2021-31806
Published: 2021-05-27
Description: An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to a Denial of Service attack (against all clients using the proxy) via HTTP Range request processing.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-116
References: http://seclists.org/fulldisclosure/2023/Oct/14; http://www.openwall.com/lists/oss-security/2023/10/11/3; http://www.squid-cache.org/Versions/v4/changesets/squid-4-e7cf864f938f24eea8af0692c04d16790983c823.patch
CVE: CVE-2021-33200
Published: 2021-05-27
Description: kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, aka CID-bb01a1bba579. This can be abused to perform out-of-bounds reads and writes in kernel memory, leading to local privilege escalation to root. In particular, there is a corner case where the off reg causes a masking direction change, which then results in an incorrect final aux->alu_limit.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3d0220f6861d713213b015b582e9f21e5b28d2e0; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a[PII_REDACTED]f9fa68d92f2071ddc38c09b1e5ee5; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=bb01a1bba579b4b1c5566af24d95f[PII_REDACTED]e
CVE: CVE-2020-27832
Published: 2021-05-27
Description: A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notification. This flaw allows an attacker to trick a user into performing a malicious action to impersonate the target user. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=1905784; https://bugzilla.redhat.com/show_bug.cgi?id=1905784
CVE: CVE-2021-31808
Published: 2021-05-27
Description: An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug, it is vulnerable to a Denial of Service attack (against all clients using the proxy). A client sends an HTTP Range request to trigger this.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: http://seclists.org/fulldisclosure/2023/Oct/14; http://www.openwall.com/lists/oss-security/2023/10/11/3; http://www.squid-cache.org/Versions/v4/changesets/squid-4-e7cf864f938f24eea8af0692c04d16790983c823.patch
CVE: CVE-2021-22118
Published: 2021-05-27
Description: In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been uploaded to the WebFlux application, or overwrite arbitrary files with multipart request data.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-668
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://tanzu.vmware.com/security/cve-2021-22118; https://www.oracle.com//security-alerts/cpujul2021.html
CVE: CVE-2020-18229
Published: 2021-05-27
Description: Cross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by injecting scripts into the parameter "$cfg_copyright" of component " /admin/web_config.php".
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/PearlyNautilus/Security-Code-Review/issues/4; https://github.com/PearlyNautilus/Security-Code-Review/issues/4