deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-32456
Published: 2021-05-17
Description: SITEL CAP/PRX firmware version 5.2.01 allows an attacker with access to the local network of the device to obtain the authentication passwords by analysing the network traffic.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://www.incibe.es/en/incibe-cert/notices/aviso-sci/sitel-capprx-cleartext-transmission-sensitive-information; https://www.incibe.es/en/incibe-cert/notices/aviso-sci/sitel-capprx-cleartext-transmission-sensitive-information
CVE: CVE-2021-32617
Published: 2021-05-17
Description: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An inefficient algorithm (quadratic complexity) was found in Exiv2 versions v0.27.3 and earlier. The inefficient algorithm is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. The bug is fixed in version v0.27.4. Note that this bug is only triggered when _writing_ the metadata, which is a less frequently used Exiv2 operation than _reading_ the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `rm`.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-400
References: https://github.com/Exiv2/exiv2/pull/1657; https://github.com/Exiv2/exiv2/security/advisories/GHSA-w8mv-g8qq-36mj; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5I3RRZUGSBIUYZ5TIHLN55PKMAWCSJ5G/
CVE: CVE-2021-32618
Published: 2021-05-17
Description: The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-Security-Too allow redirects after many successful views (e.g. /login) by honoring the ?next query param. There is code in FS to validate that the url specified in the next parameter is either relative OR has the same netloc (network location) as the requesting URL. This check utilizes Pythons urlsplit library. However many browsers are very lenient on the kind of URL they accept and 'fill in the blanks' when presented with a possibly incomplete URL. As a concrete example - setting http://login?next=\\\github.com will pass FS's relative URL check however many browsers will gladly convert this to http://github.com. Thus an attacker could send such a link to an unwitting user, using a legitimate site and have it redirect to whatever site they want. This is considered a low severity due to the fact that if Werkzeug is used (which is very common with Flask applications) as the WSGI layer, it by default ALWAYS ensures that the Location header is absolute - thus making this attack vector mute. It is possible for application writers to modify this default behavior by setting the 'autocorrect_location_header=False`.
CVSS Score: 3.1 (LOW)
CWE: CWE-601
References: https://github.com/Flask-Middleware/flask-security/issues/486; https://github.com/Flask-Middleware/flask-security/security/advisories/GHSA-6qmf-fj6m-686c; https://github.com/Flask-Middleware/flask-security/issues/486
CVE: CVE-2020-21814
Published: 2021-05-17
Description: A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://gnu.com; https://github.com/LibreDWG/libredwg/issues/182#issuecomment-572891083; http://gnu.com
CVE: CVE-2020-21815
Published: 2021-05-17
Description: A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114, which causes a denial of service (application crash).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://gnu.com; https://github.com/LibreDWG/libredwg/issues/182#issuecomment-572890932; http://gnu.com
CVE: CVE-2020-21816
Published: 2021-05-17
Description: A heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:46.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://gnu.com; https://github.com/LibreDWG/libredwg/issues/182#issuecomment-572890865; http://gnu.com
CVE: CVE-2020-21817
Published: 2021-05-17
Description: A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which causes a denial of service (application crash).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://gnu.com; https://github.com/LibreDWG/libredwg/issues/182#issue-547887727; http://gnu.com
CVE: CVE-2020-21818
Published: 2021-05-17
Description: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:48.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://gnu.com; https://github.com/LibreDWG/libredwg/issues/182#issuecomment-572891053; http://gnu.com
CVE: CVE-2020-21819
Published: 2021-05-17
Description: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641via htmlescape ../../programs/escape.c:51.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://gnu.com; https://github.com/LibreDWG/libredwg/issues/182#issuecomment-572890901; http://gnu.com
CVE: CVE-2020-24992
Published: 2021-05-17
Description: There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when an administrator accesses the content management module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/arterli/CmsWing/issues/54; https://github.com/arterli/CmsWing/issues/54
CVE: CVE-2020-24993
Published: 2021-05-17
Description: There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when visitors access the article module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/arterli/CmsWing/issues/54; https://github.com/arterli/CmsWing/issues/54
CVE: CVE-2020-29205
Published: 2021-05-17
Description: XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/projectworldsofficial/online-examination-systen-in-php; https://nikhilkumar01.medium.com/cve-2020-29205-a7ab5cbcd156; https://www.exploit-db.com/exploits/48969
CVE: CVE-2021-29023
Published: 2021-05-17
Description: InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-307
References: https://github.com/InvoicePlane/InvoicePlane/pull/767; https://notnnor.github.io/research/2021/03/16/weak-password-recovery-mechanism-in-invoiceplane.html; https://github.com/InvoicePlane/InvoicePlane/pull/767
CVE: CVE-2021-29024
Published: 2021-05-17
Description: In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download. Allowing an attacker to directory traversal and download files suppose to be private without authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://github.com/InvoicePlane/InvoicePlane/pull/754; https://notnnor.github.io/research/2021/03/17/files-or-directories-accessible-to-external-parties-in-invoiceplane.html; https://github.com/InvoicePlane/InvoicePlane/pull/754
CVE: CVE-2020-21827
Published: 2021-05-17
Description: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2379.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://gnu.com; https://cwe.mitre.org/data/definitions/122.html; https://github.com/LibreDWG/libredwg/issues/183
CVE: CVE-2021-32622
Published: 2021-05-17
Description: Matrix-React-SDK is a react-based SDK for inserting a Matrix chat/voip client into a web page. Before version 3.21.0, when uploading a file, the local file preview can lead to execution of scripts embedded in the uploaded file. This can only occur after several user interactions to open the preview in a separate tab. This only impacts the local user while in the process of uploading. It cannot be exploited remotely or by other users. This vulnerability is patched in version 3.21.0.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-74, CWE-434
References: https://github.com/matrix-org/matrix-react-sdk/pull/5981; https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-8796-gc9j-63rv; https://github.com/matrix-org/matrix-react-sdk/pull/5981
CVE: CVE-2020-21830
Published: 2021-05-17
Description: A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bit_calc_CRC ../../src/bits.c:2213.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://gnu.com; https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493134; http://gnu.com
CVE: CVE-2020-21832
Published: 2021-05-17
Description: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2417.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://gnu.com; https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574492612; http://gnu.com
CVE: CVE-2020-21833
Published: 2021-05-17
Description: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_classes ../../src/decode.c:2440.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://gnu.com; http://libredwg.com; https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493364
CVE: CVE-2020-21834
Published: 2021-05-17
Description: A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://gnu.com; https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574492468; http://gnu.com
CVE: CVE-2020-21835
Published: 2021-05-17
Description: A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://gnu.com; https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493046; http://gnu.com
CVE: CVE-2020-21836
Published: 2021-05-17
Description: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_preview ../../src/decode.c:3175.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://gnu.com; https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493437; http://gnu.com
CVE: CVE-2020-21838
Published: 2021-05-17
Description: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_appinfo ../../src/decode.c:2842.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://gnu.com; http://libredwg.com; https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574492816
CVE: CVE-2020-21839
Published: 2021-05-17
Description: An issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in dwg_decode_eed ../../src/decode.c:3638.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: http://gnu.com; https://cwe.mitre.org/data/definitions/401.html; https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574492707
CVE: CVE-2020-21840
Published: 2021-05-17
Description: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://gnu.com; http://libredwg.com; https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493513
CVE: CVE-2020-21841
Published: 2021-05-17
Description: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_B ../../src/bits.c:135.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://gnu.com; http://libredwg.com; https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493775
CVE: CVE-2020-18194
Published: 2021-05-17
Description: Cross Site Scripting (XSS) in emlog v6.0.0 allows remote attackers to execute arbitrary code by adding a crafted script as a link to a new blog post.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.lurbk.com/lur1823.html; https://www.lurbk.com/lur1823.html
CVE: CVE-2020-18195
Published: 2021-05-17
Description: Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete a specific article via the component " /admin.php?action=page."
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/pluck-cms/pluck/issues/69; https://github.com/pluck-cms/pluck/issues/69
CVE: CVE-2020-18198
Published: 2021-05-17
Description: Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete specific images via the component " /admin.php?action=images."
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/pluck-cms/pluck/issues/69; https://github.com/pluck-cms/pluck/issues/69
CVE: CVE-2020-21831
Published: 2021-05-17
Description: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:2637.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://gnu.com; https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493267; http://gnu.com
CVE: CVE-2020-21842
Published: 2021-05-17
Description: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_revhistory ../../src/decode.c:3051.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://gnu.com; https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493684; http://gnu.com
CVE: CVE-2020-21843
Published: 2021-05-17
Description: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src/bits.c:318.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://gnu.com; https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493857; http://gnu.com
CVE: CVE-2020-21844
Published: 2021-05-17
Description: GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code (remote). The component is: read_2004_section_header ../../src/decode.c:2580.
CVSS Score: 8.8 (HIGH)
References: http://gnu.com; https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493607; http://gnu.com
CVE: CVE-2020-24755
Published: 2021-05-17
Description: In Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in the current directory. This allows the impersonation and modification of the library to execute code on the system. This was tested in (Windows 7 x64/Windows 10 x64).
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.youtube.com/watch?v=T41h4yeh9dk; https://www.youtube.com/watch?v=T41h4yeh9dk
CVE: CVE-2020-15279
Published: 2021-05-18
Description: An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn the scanning exclusion paths. This issue was discovered during external security research.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-284
References: https://www.bitdefender.com/support/security-advisories/scanning-exclusion-paths-disclosure-in-best-for-windows-va-9380; https://www.bitdefender.com/support/security-advisories/scanning-exclusion-paths-disclosure-in-best-for-windows-va-9380
CVE: CVE-2021-3423
Published: 2021-05-18
Description: Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Security allows an attacker to load a third party DLL to elevate privileges. This issue affects Bitdefender GravityZone Business Security versions prior to 6.6.23.329.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://www.bitdefender.com/support/security-advisories/privilege-escalation-in-bitdefender-gravityzone-business-security-va-9557; https://www.bitdefender.com/support/security-advisories/privilege-escalation-in-bitdefender-gravityzone-business-security-va-9557
CVE: CVE-2002-2438
Published: 2021-05-18
Description: TCP firewalls could be circumvented by sending a SYN Packets with other flags (like e.g. RST flag) set, which was not correctly discarded by the Linux TCP stack after firewalling.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.openwall.com/lists/oss-security/2012/02/03/7; http://www.openwall.com/lists/oss-security/2012/05/29/8; http://www.openwall.com/lists/oss-security/2012/05/30/11
CVE: CVE-2020-25709
Published: 2021-05-18
Description: A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to trigger an assertion failure. The highest threat from this vulnerability is to system availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://seclists.org/fulldisclosure/2021/Feb/14; https://bugzilla.redhat.com/show_bug.cgi?id=1899675; https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
CVE: CVE-2021-31827
Published: 2021-05-18
Description: In Progress MOVEit Transfer before 2021.0 (13.0), a SQL injection vulnerability has been found in the MOVEit Transfer web app that could allow an authenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database in addition to executing SQL statements that alter or destroy database elements. This is in MOVEit.DMZ.WebApp in SILHuman.vb.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://community.progress.com/s/article/MOVEit-Transfer-Vulnerability-April-2021; https://docs.ipswitch.com/MOVEit/Transfer2021/ReleaseNotes/en/index.htm; https://www.progress.com/moveit
CVE: CVE-2021-3518
Published: 2021-05-18
Description: There's a flaw in libxml2 in versions before 2.9.11. An attacker who is able to submit a crafted file to be processed by an application linked with libxml2 could trigger a use-after-free. The greatest impact from this flaw is to confidentiality, integrity, and availability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://seclists.org/fulldisclosure/2021/Jul/54; http://seclists.org/fulldisclosure/2021/Jul/55; http://seclists.org/fulldisclosure/2021/Jul/58
CVE: CVE-2021-3531
Published: 2021-05-18
Description: A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes it can cause the rgw to crash, resulting in a denial of service. The greatest threat to the system is of availability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-617
References: http://www.openwall.com/lists/oss-security/2021/05/14/5; http://www.openwall.com/lists/oss-security/2021/05/17/7; https://bugzilla.redhat.com/show_bug.cgi?id=1955326
CVE: CVE-2021-22117
Published: 2021-05-18
Description: RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94, CWE-732
References: https://tanzu.vmware.com/security/cve-2021-22117; https://tanzu.vmware.com/security/cve-2021-22117
CVE: CVE-2020-20253
Published: 2021-05-18
Description: Mikrotik RouterOs before 6.47 (stable tree) suffers from a divison by zero vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service due to a divide by zero error.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: http://seclists.org/fulldisclosure/2021/May/14; https://github.com/cq674350529/pocs_slides/blob/master/pocs/MikroTik/vul_lcdstat_4/README.md; http://seclists.org/fulldisclosure/2021/May/14
CVE: CVE-2020-20254
Published: 2021-05-18
Description: Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2021/May/14; http://seclists.org/fulldisclosure/2021/May/14; https://github.com/cq674350529/pocs_slides/blob/master/pocs/MikroTik/vul_lcdstat_2/README.md
CVE: CVE-2021-30145
Published: 2021-05-18
Description: A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-134
References: https://devel0pment.de/?p=2217; https://github.com/mpv-player/mpv/commit/d0c530919d8cd4d7a774e38ab064e0fabdae34e6; https://github.com/mpv-player/mpv/releases/tag/v0.33.1
CVE: CVE-2020-23851
Published: 2021-05-18
Description: A stack-based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c:513:28, which could cause a denial of service by submitting a malicious jpeg image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/rockcarry/ffjpeg/issues/27; https://github.com/rockcarry/ffjpeg/issues/27
CVE: CVE-2020-23852
Published: 2021-05-18
Description: A heap based buffer overflow vulnerability exists in ffjpeg through 2020-07-02 in the jfif_decode(void *ctxt, BMP *pb) function at ffjpeg/src/jfif.c (line 544 & line 545), which could cause a denial of service by submitting a malicious jpeg image.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/rockcarry/ffjpeg/issues/28; https://github.com/rockcarry/ffjpeg/issues/28
CVE: CVE-2020-23856
Published: 2021-05-18
Description: Use-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src/parser.c, which could cause a denial of service via the pointer variable caller->callee.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/yangjiageng/PoC/blob/master/PoC_cflow_uaf_parser_line1284; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BLSXGFK2NYPCJMPHSHE3W56ZU3ZO6RD7/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FZTTKZX274BVFZX7TMPEZG6UWL6UPMQF/
CVE: CVE-2020-24026
Published: 2021-05-18
Description: TinyShop, a free and open source mall based on RageFrame2, has a stored XSS vulnerability that affects version 1.2.0. TinyShop allows XSS via the explain_first and again_explain parameters of the /evaluate/index.php page. The vulnerability may be exploited remotely, resulting in cross-site scripting (XSS) or information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/jianyan74/TinyShop; https://github.com/jianyan74/TinyShop/issues/14; https://github.com/stavyan/TinyShop-UniApp
CVE: CVE-2021-32238
Published: 2021-05-18
Description: Epic Games / Psyonix Rocket League <=1.95 is affected by Buffer Overflow. Stack-based buffer overflow occurs when Rocket League handles UPK object files that can result in code execution and denial of service scenario.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/201129; https://www.zeroscience.mk/en/vulnerabilities/; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5651.php
CVE: CVE-2020-20951
Published: 2021-05-18
Description: In Pluck-4.7.10-dev2 admin background, a remote command execution vulnerability exists when uploading files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://cwe.mitre.org/data/definitions/434.html; https://github.com/pluck-cms/pluck/issues/84; https://cwe.mitre.org/data/definitions/434.html
CVE: CVE-2020-23861
Published: 2021-05-18
Description: A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/LibreDWG/libredwg/issues/248; https://github.com/LibreDWG/libredwg/issues/248