deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-39367
Published: 2021-08-23
Description: Canon Oce Print Exec Workgroup 1.3.2 allows Host header injection.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-116
References: https://github.com/IthacaLabs/Canon/tree/main/OCE_Print_Exec_Workgroup_Version_1_3_2/HHI; https://github.com/IthacaLabs/Canon/tree/main/OCE_Print_Exec_Workgroup_Version_1_3_2/HHI
CVE: CVE-2021-39368
Published: 2021-08-23
Description: Canon Oce Print Exec Workgroup 1.3.2 allows XSS via the lang parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/IthacaLabs/Canon/tree/main/OCE_Print_Exec_Workgroup_Version_1_3_2/XSS_HTMLi; https://github.com/IthacaLabs/Canon/tree/main/OCE_Print_Exec_Workgroup_Version_1_3_2/XSS_HTMLi
CVE: CVE-2021-39371
Published: 2021-08-23
Description: An XML external entity (XXE) injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://github.com/geopython/OWSLib/issues/790; https://github.com/geopython/pywps/pull/616; https://lists.debian.org/debian-lts-announce/2021/09/msg00001.html
CVE: CVE-2020-36475
Published: 2021-08-23
Description: An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). The calculations performed by mbedtls_mpi_exp_mod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-131
References: https://cert-portal.siemens.com/productcert/pdf/ssa-756638.pdf; https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.9; https://github.com/ARMmbed/mbedtls/releases/tag/v2.25.0
CVE: CVE-2020-36476
Published: 2021-08-23
Description: An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in mbedtls_ssl_read to erase unused application data from memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-212
References: https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8; https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0; https://github.com/ARMmbed/mbedtls/releases/tag/v2.7.17
CVE: CVE-2020-36477
Published: 2021-08-23
Description: An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name (the cn argument of mbedtls_x509_crt_verify) with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name is compared to any name in that extension regardless of its type. This means that an attacker could impersonate a 4-byte or 16-byte domain by getting a certificate for the corresponding IPv4 or IPv6 address (this would require the attacker to control that IP address, though).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://github.com/ARMmbed/mbedtls/issues/3498; https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0; https://security.gentoo.org/glsa/202301-08
CVE: CVE-2020-36478
Published: 2021-08-23
Description: An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://cert-portal.siemens.com/productcert/pdf/ssa-756638.pdf; https://github.com/ARMmbed/mbedtls/issues/3629; https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.9
CVE: CVE-2021-37750
Published: 2021-08-23
Description: The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/krb5/krb5/commit/d775c95af7606a51bf79547a94fa52ddd1cb7f49; https://github.com/krb5/krb5/releases; https://lists.debian.org/debian-lts-announce/2021/09/msg00019.html
CVE: CVE-2021-38598
Published: 2021-08-23
Description: OpenStack Neutron before 16.4.1, 17.x before 17.1.3, and 18.0.0 allows hardware address impersonation when the linuxbridge driver with ebtables-nft is used on a Netfilter-based platform. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the hardware addresses of other systems on the network, resulting in denial of service or in some cases possibly interception of traffic intended for other destinations.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-290
References: https://launchpad.net/bugs/1938670; https://launchpad.net/bugs/1938670
CVE: CVE-2021-39243
Published: 2021-08-23
Description: Cross-Site Request Forgery (CSRF) exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via any CGI endpoint. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0, Nexto NX3010 1.8.3.0, Nexto NX3020 1.8.3.0, Nexto NX3030 1.8.3.0, Nexto NX5100 1.8.11.0, Nexto NX5101 1.8.11.0, Nexto NX5110 1.1.2.8, Nexto NX5210 1.1.2.8, Nexto Xpress XP300 1.8.11.0, Nexto Xpress XP315 1.8.11.0, Nexto Xpress XP325 1.8.11.0, Nexto Xpress XP340 1.8.11.0, and Hadron Xtorm HX3040 1.7.58.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2021/Aug/21; https://www.altus.com.br/; http://seclists.org/fulldisclosure/2021/Aug/21
CVE: CVE-2021-39244
Published: 2021-08-23
Description: Authenticated Semi-Blind Command Injection (via Parameter Injection) exists on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices via the getlogs.cgi tcpdump feature. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0, Nexto NX3010 1.8.3.0, Nexto NX3020 1.8.3.0, Nexto NX3030 1.8.3.0, Nexto NX5100 1.8.11.0, Nexto NX5101 1.8.11.0, Nexto NX5110 1.1.2.8, Nexto NX5210 1.1.2.8, Nexto Xpress XP300 1.8.11.0, Nexto Xpress XP315 1.8.11.0, Nexto Xpress XP325 1.8.11.0, Nexto Xpress XP340 1.8.11.0, and Hadron Xtorm HX3040 1.7.58.0.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://seclists.org/fulldisclosure/2021/Aug/21; https://www.altus.com.br/; https://seclists.org/fulldisclosure/2021/Aug/21
CVE: CVE-2021-39245
Published: 2021-08-23
Description: Hardcoded .htaccess Credentials for getlogs.cgi exist on Altus Nexto, Nexto Xpress, and Hadron Xtorm devices. This affects Nexto NX3003 1.8.11.0, Nexto NX3004 1.8.11.0, Nexto NX3005 1.8.11.0, Nexto NX3010 1.8.3.0, Nexto NX3020 1.8.3.0, Nexto NX3030 1.8.3.0, Nexto NX5100 1.8.11.0, Nexto NX5101 1.8.11.0, Nexto NX5110 1.1.2.8, Nexto NX5210 1.1.2.8, Nexto Xpress XP300 1.8.11.0, Nexto Xpress XP315 1.8.11.0, Nexto Xpress XP325 1.8.11.0, Nexto Xpress XP340 1.8.11.0, and Hadron Xtorm HX3040 1.7.58.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://seclists.org/fulldisclosure/2021/Aug/21; https://www.altus.com.br/; https://seclists.org/fulldisclosure/2021/Aug/21
CVE: CVE-2021-39289
Published: 2021-08-23
Description: Certain NetModule devices have Insecure Password Handling (cleartext or reversible encryption), These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB3800.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: http://seclists.org/fulldisclosure/2021/Aug/22; https://www.netmodule.com; http://seclists.org/fulldisclosure/2021/Aug/22
CVE: CVE-2021-39290
Published: 2021-08-23
Description: Certain NetModule devices allow Limited Session Fixation via PHPSESSID. These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB3800.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-384
References: https://seclists.org/fulldisclosure/2021/Aug/22; https://www.netmodule.com; https://seclists.org/fulldisclosure/2021/Aug/22
CVE: CVE-2021-39291
Published: 2021-08-23
Description: Certain NetModule devices allow credentials via GET parameters to CLI-PHP. These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB3800.
CVSS Score: 8.8 (HIGH)
CWE: CWE-532
References: https://seclists.org/fulldisclosure/2021/Aug/22; https://www.netmodule.com; https://seclists.org/fulldisclosure/2021/Aug/22
CVE: CVE-2021-35940
Published: 2021-08-23
Description: An out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1.6.3 release (CVE-2017-12613). The fix for this issue was not carried forward to the APR 1.7.x branch, and hence version 1.7.0 regressed compared to 1.6.3 and is vulnerable to the same issue.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://mail-archives.apache.org/mod_mbox/www-announce/201710.mbox/%3CCACsi251B8UaLvM-rrH9fv57-zWi0zhyF3275_jPg1a9VEVVoxw%40mail.gmail.com%3E; http://svn.apache.org/viewvc?view=revision&revision=1891198; http://www.openwall.com/lists/oss-security/2021/08/23/1
CVE: CVE-2021-24486
Published: 2021-08-23
Description: The Simple Social Media Share Buttons – Social Sharing for Everyone WordPress plugin before 3.2.3 did not escape the align and like_button_size parameters of its SSB shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/324e6b7b-a2ac-4c08-8b97-0967513f7328; https://wpscan.com/vulnerability/324e6b7b-a2ac-4c08-8b97-0967513f7328
CVE: CVE-2021-24497
Published: 2021-08-23
Description: The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $post_id on the options.php page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/a1cf08fe-943a-4f14-beb0-25216011b538; https://wpscan.com/vulnerability/a1cf08fe-943a-4f14-beb0-25216011b538
CVE: CVE-2021-24506
Published: 2021-08-23
Description: The Slider Hero with Animation, Video Background & Intro Maker WordPress plugin before 8.2.7 does not sanitise or escape the id attribute of its hero-button shortcode before using it in a SQL statement, allowing users with a role as low as Contributor to perform SQL injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/52c8755c-46b9-4383-8c8d-8816f03456b0; https://wpscan.com/vulnerability/52c8755c-46b9-4383-8c8d-8816f03456b0
CVE: CVE-2021-24524
Published: 2021-08-23
Description: The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.12.0 did not escape the Donation Level setting of its Donation Forms, allowing high privilege users to use Cross-Site Scripting payloads in them.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/5a4774ec-c0ee-4c6b-92a6-fa10821ec336; https://wpscan.com/vulnerability/5a4774ec-c0ee-4c6b-92a6-fa10821ec336
CVE: CVE-2021-24529
Published: 2021-08-23
Description: The Grid Gallery – Photo Image Grid Gallery WordPress plugin before 1.2.5 does not properly sanitize the title field for image galleries when adding them via the admin dashboard, resulting in an authenticated Stored Cross-Site Scripting vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8953d931-19f9-4b73-991c-9c48db1af8b5; https://wpscan.com/vulnerability/8953d931-19f9-4b73-991c-9c48db1af8b5
CVE: CVE-2021-24531
Published: 2021-08-23
Description: The Charitable – Donation Plugin WordPress plugin before 1.6.51 is affected by an authenticated stored cross-site scripting vulnerability which was found in the add donation feature.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/a5837621-ee6e-4876-9f65-82658fc0341f; https://www.wpcharitable.com/release-notes-1-6-51/; https://wpscan.com/vulnerability/a5837621-ee6e-4876-9f65-82658fc0341f
CVE: CVE-2021-24533
Published: 2021-08-23
Description: The Maintenance WordPress plugin before 4.03 does not sanitise or escape some of its settings, allowing high privilege users such as admin to se Cross-Site Scripting payload in them (even when the unfiltered_html capability is disallowed), which will be triggered in the frontend
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/174b2119-b806-4da4-a23d-c19b552c86cb; https://wpscan.com/vulnerability/174b2119-b806-4da4-a23d-c19b552c86cb
CVE: CVE-2021-24547
Published: 2021-08-23
Description: The KN Fix Your Title WordPress plugin through 1.0.1 was vulnerable to Authenticated Stored XSS in the separator field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/faaeb685-ea02-4a5a-ac5f-87081efe94e0; https://wpscan.com/vulnerability/faaeb685-ea02-4a5a-ac5f-87081efe94e0
CVE: CVE-2021-24549
Published: 2021-08-23
Description: The AceIDE WordPress plugin through 2.6.2 does not sanitise or validate the user input which is appended to system paths before using it in various actions, such as to read arbitrary files from the server. This allows high privilege users such as administrator to access any file on the web server outside of the blog directory via a path traversal attack.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: https://codevigilant.com/disclosure/2021/wp-plugin-aceide/; https://wpscan.com/vulnerability/c594abaf-b152-448c-8a20-9b3267fe547a; https://codevigilant.com/disclosure/2021/wp-plugin-aceide/
CVE: CVE-2021-24550
Published: 2021-08-23
Description: The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://codevigilant.com/disclosure/2021/wp-plugin-broken-link-manager/; https://wpscan.com/vulnerability/1bf65448-689c-474d-a566-c9b6797d3e4a; https://codevigilant.com/disclosure/2021/wp-plugin-broken-link-manager/
CVE: CVE-2021-24551
Published: 2021-08-23
Description: The Edit Comments WordPress plugin through 0.3 does not sanitise, validate or escape the jal_edit_comments GET parameter before using it in a SQL statement, leading to a SQL injection issue
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://codevigilant.com/disclosure/2021/wp-plugin-edit-comments/; https://wpscan.com/vulnerability/e62fb8db-384f-4384-ad24-e10eb9058ed5; https://codevigilant.com/disclosure/2021/wp-plugin-edit-comments/
CVE: CVE-2021-24552
Published: 2021-08-23
Description: The Simple Events Calendar WordPress plugin through 1.4.0 does not sanitise, validate or escape the event_id POST parameter before using it in a SQL statement when deleting events, leading to an authenticated SQL injection issue
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://codevigilant.com/disclosure/2021/wp-plugin-simple-events-calendar/; https://wpscan.com/vulnerability/3482a015-a5ed-4913-b516-9eae2b3f89db; https://codevigilant.com/disclosure/2021/wp-plugin-simple-events-calendar/
CVE: CVE-2021-24553
Published: 2021-08-23
Description: The Timeline Calendar WordPress plugin through 1.2 does not sanitise, validate or escape the edit GET parameter before using it in a SQL statement when editing events, leading to an authenticated SQL injection issue. Other SQL Injections are also present in the plugin
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://codevigilant.com/disclosure/2021/wp-plugin-timeline-calendar/; https://wpscan.com/vulnerability/14c75a00-a52b-430b-92da-5145e5aee30a; https://codevigilant.com/disclosure/2021/wp-plugin-timeline-calendar/
CVE: CVE-2021-24554
Published: 2021-08-23
Description: The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise, validate or escape the id GET parameter before using it in a SQL statement when deleting donations, leading to an authenticated SQL injection issue
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://codevigilant.com/disclosure/2021/wp-plugin-wp-paytm-pay/; https://wpscan.com/vulnerability/f2842ac8-76fa-4490-aa0c-5f2b07ecf2ad; https://codevigilant.com/disclosure/2021/wp-plugin-wp-paytm-pay/
CVE: CVE-2021-24555
Published: 2021-08-23
Description: The daac_delete_booking_callback function, hooked to the daac_delete_booking AJAX action, takes the id POST parameter which is passed into the SQL statement without proper sanitisation, validation or escaping, leading to a SQL Injection issue. Furthermore, the ajax action is lacking any CSRF and capability check, making it available to any authenticated user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-352, CWE-89, CWE-352
References: https://codevigilant.com/disclosure/2021/wp-plugin-diary-availability-calendar/; https://wpscan.com/vulnerability/8eafd84b-6214-450b-869b-0afe7cca4c5f; https://codevigilant.com/disclosure/2021/wp-plugin-diary-availability-calendar/
CVE: CVE-2021-24556
Published: 2021-08-23
Description: The kento_email_subscriber_ajax AJAX action of the Email Subscriber WordPress plugin through 1.1, does not properly sanitise, validate and escape the submitted subscribe_email and subscribe_name POST parameters, inserting them in the DB and then outputting them back in the Subscriber list (/wp-admin/edit.php?post_type=kes_campaign&page=kento_email_subscriber_list_settings), leading a Stored XSS issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://codevigilant.com/disclosure/2021/wp-plugin-email-subscriber/; https://wpscan.com/vulnerability/f050aedc-f79f-4b27-acac-0cdb33b25af8; https://codevigilant.com/disclosure/2021/wp-plugin-email-subscriber/
CVE: CVE-2021-24557
Published: 2021-08-23
Description: The update functionality in the rslider_page uses an rs_id POST parameter which is not validated, sanitised or escaped before being inserted in sql query, therefore leading to SQL injection for users having Administrator role.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://codevigilant.com/disclosure/2021/wp-plugin-m-vslider/; https://wpscan.com/vulnerability/8b8e41e8-5a40-4062-b5b7-3b01b1a709ef; https://codevigilant.com/disclosure/2021/wp-plugin-m-vslider/
CVE: CVE-2021-24558
Published: 2021-08-23
Description: The pspin_duplicate_post_save_as_new_post function of the Project Status WordPress plugin through 1.6 does not sanitise, validate or escape the post GET parameter passed to it before outputting it in an error message when the related post does not exist, leading to a reflected XSS issue
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://codevigilant.com/disclosure/2021/wp-plugin-project-status/; https://wpscan.com/vulnerability/ca5f2152-fcfd-492d-a552-f9604011beff; https://codevigilant.com/disclosure/2021/wp-plugin-project-status/
CVE: CVE-2021-24561
Published: 2021-08-23
Description: The WP SMS WordPress plugin before 5.4.13 does not sanitise the "wp_group_name" parameter before outputting it back in the "Groups" page, leading to an Authenticated Stored Cross-Site Scripting issue
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2570762/wp-sms; https://wpscan.com/vulnerability/5433ef4c-4451-4b6e-992b-69c5eccabf90; https://plugins.trac.wordpress.org/changeset/2570762/wp-sms
CVE: CVE-2021-24562
Published: 2021-08-23
Description: The LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.2 was affected by an IDOR issue, allowing students to see other student answers and grades
CVSS Score: 7.5 (HIGH)
CWE: CWE-639, CWE-639
References: https://make.lifterlms.com/2021/05/17/lifterlms-version-4-21-2/; https://wpscan.com/vulnerability/d45bb744-4a0d-4af0-aa16-71f7e3ea6e00; https://make.lifterlms.com/2021/05/17/lifterlms-version-4-21-2/
CVE: CVE-2021-24564
Published: 2021-08-23
Description: The WPFront Scroll Top WordPress plugin before 2.0.6.07225 does not sanitise or escape its Image ALT setting before outputting it attributes, leading to an Authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/b25af0e1-392f-4305-ad44-50e64ef3dbdf; https://wpscan.com/vulnerability/b25af0e1-392f-4305-ad44-50e64ef3dbdf
CVE: CVE-2021-24565
Published: 2021-08-23
Description: The Contact Form 7 Captcha WordPress plugin before 0.0.9 does not have any CSRF check in place when saving its settings, allowing attacker to make a logged in user with the manage_options change them. Furthermore, the settings are not escaped when output in attributes, leading to a Stored Cross-Site Scripting issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-352, CWE-79, CWE-352
References: https://plugins.trac.wordpress.org/changeset/2570402; https://wpscan.com/vulnerability/97bfef5e-2ee0-491a-a931-4f44c83e5be0; https://plugins.trac.wordpress.org/changeset/2570402
CVE: CVE-2021-24571
Published: 2021-08-23
Description: The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/377fd65f-3a8c-4f7a-9e40-046d52ec0eef; https://wpscan.com/vulnerability/377fd65f-3a8c-4f7a-9e40-046d52ec0eef
CVE: CVE-2021-24574
Published: 2021-08-23
Description: The Simple Banner WordPress plugin before 2.10.4 does not sanitise and escape one of its settings, allowing high privilege users such as admin to use Cross-Site Scripting payload even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/2571047/; https://wpscan.com/vulnerability/9adf7022-5108-43b7-bf0e-a42593185b74; https://plugins.trac.wordpress.org/changeset/2571047/
CVE: CVE-2021-24602
Published: 2021-08-23
Description: The HM Multiple Roles WordPress plugin before 1.3 does not have any access control to prevent low privilege users to set themselves as admin via their profile page
CVSS Score: 8.8 (HIGH)
CWE: CWE-269, CWE-669
References: https://jetpack.com/2021/08/05/privilege-escalation-in-hm-multiple-roles-wordpress-plugin/; https://wpscan.com/vulnerability/5fd2548a-08de-4417-bff1-f174dab718d5; https://jetpack.com/2021/08/05/privilege-escalation-in-hm-multiple-roles-wordpress-plugin/
CVE: CVE-2021-24658
Published: 2021-08-23
Description: The Erident Custom Login and Dashboard WordPress plugin before 3.5.9 did not properly sanitise its settings, allowing high privilege users to use XSS payloads in them (even when the unfileted_html is disabled)
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/changeset/2507516; https://wpscan.com/vulnerability/ec70f02b-02a1-4511-949e-68f2d9d37ca8; https://plugins.trac.wordpress.org/changeset/2507516
CVE: CVE-2021-33598
Published: 2021-08-23
Description: A Denial-of-Service (DoS) vulnerability was discovered in all versions of F-Secure Atlant whereby the SAVAPI component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service (DoS) of the Anti-Virus engine.
CVSS Score: 4.6 (MEDIUM)
References: https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame; https://www.f-secure.com/en/business/support-and-downloads/security-advisories; https://www.f-secure.com/en/business/support-and-downloads/security-advisories/fsc-2021-33598