deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-21439
Published: 2021-06-14
Description: DoS attack can be performed when an email contains specially designed URL in the body. It can lead to the high CPU usage and cause low quality of service, or in extreme case bring the system to a halt. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.26 and prior versions; 8.0.x version 8.0.13 and prior versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-754, CWE-755
References: https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html; https://otrs.com/release-notes/otrs-security-advisory-2021-09/; https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html
CVE: CVE-2021-24341
Published: 2021-06-14
Description: When deleting a date in the Xllentech English Islamic Calendar WordPress plugin before 2.6.8, the year_number and month_number POST parameters are not sanitised, escaped or validated before being used in a SQL statement, leading to SQL injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://codevigilant.com/disclosure/2021/xllentech-english-islamic-calendar/; https://wpscan.com/vulnerability/1eba1c73-a19b-4226-afec-d27c48388a04; https://codevigilant.com/disclosure/2021/xllentech-english-islamic-calendar/
CVE: CVE-2021-24345
Published: 2021-06-14
Description: The page lists-management feature of the Sendit WP Newsletter WordPress plugin through 2.5.1, available to Administrator users does not sanitise, validate or escape the id_lista POST parameter before using it in SQL statement, therefore leading to Blind SQL Injection.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-89
References: https://codevigilant.com/disclosure/2021/wp-plugin-sendit/; https://wpscan.com/vulnerability/02ba4d8b-f4d2-42cd-9fae-b543e112fa04; https://codevigilant.com/disclosure/2021/wp-plugin-sendit/
CVE: CVE-2021-24346
Published: 2021-06-14
Description: The Stock in & out WordPress plugin through 1.0.4 has a search functionality, the lowest accessible level to it being contributor. The srch POST parameter is not validated, sanitised or escaped before using it in the echo statement, leading to a reflected XSS issue
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://codevigilant.com/disclosure/2021/wp-plugin-stock-in/; https://wpscan.com/vulnerability/c25146fd-4143-463c-8c85-05dd33e9a77b; https://codevigilant.com/disclosure/2021/wp-plugin-stock-in/
CVE: CVE-2021-24347
Published: 2021-06-14
Description: The SP Project & Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that php files could still be uploaded by changing the file extension's case, for example, from "php" to "pHP".
CVSS Score: 8.8 (HIGH)
CWE: CWE-178, CWE-178
References: http://packetstormsecurity.com/files/163434/WordPress-SP-Project-And-Document-Manager-4.21-Shell-Upload.html; http://packetstormsecurity.com/files/163675/WordPress-SP-Project-And-Document-Remote-Code-Execution.html; https://wpscan.com/vulnerability/8f6e82d5-c0e9-468e-acb8-7cd549f6a45a
CVE: CVE-2021-24348
Published: 2021-06-14
Description: The menu delete functionality of the Side Menu – add fixed side buttons WordPress plugin before 3.1.5, available to Administrator users takes the did GET parameter and uses it into an SQL statement without proper sanitisation, validation or escaping, therefore leading to a SQL Injection issue
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://codevigilant.com/disclosure/2021/wp-plugin-side-menu/; https://wpscan.com/vulnerability/e0ca257e-6e78-4611-a9ad-be43d37cf474; https://codevigilant.com/disclosure/2021/wp-plugin-side-menu/
CVE: CVE-2021-24349
Published: 2021-06-14
Description: This Gallery from files WordPress plugin through 1.6.0 gives the functionality of uploading images to the server. But filenames are not properly sanitized before being output in an error message when they have an invalid extension, leading to a reflected Cross-Site Scripting issue. Due to the lack of CSRF check, the attack could also be performed via such vector.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-352, CWE-79, CWE-352
References: https://wpscan.com/vulnerability/6bb4eb71-d702-4732-b01f-b723077d66ca; https://wpscan.com/vulnerability/6bb4eb71-d702-4732-b01f-b723077d66ca
CVE: CVE-2021-24350
Published: 2021-06-14
Description: The Visitors WordPress plugin through 0.3 is affected by an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. The plugin would display the user's user agent string without validation or encoding within the WordPress admin panel.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/06f1889d-8e2f-481a-b91b-3a8008e00ffc; https://wpscan.com/vulnerability/06f1889d-8e2f-481a-b91b-3a8008e00ffc
CVE: CVE-2021-24351
Published: 2021-06-14
Description: The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected Cross-Site Scripting (exploitable on both unauthenticated and authenticated users)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://theplusaddons.com/changelog/; https://wpscan.com/vulnerability/2ee62f85-7aea-4b7d-8b2d-5d86d9fb8016; https://theplusaddons.com/changelog/
CVE: CVE-2021-24352
Published: 2021-06-14
Description: The export_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to export a site's redirects.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://wpscan.com/vulnerability/d770f1fa-7652-465a-833c-b[PII_REDACTED]d; https://www.wordfence.com/blog/2021/05/severe-vulnerabilities-patched-in-simple-301-redirects-by-betterlinks-plugin/; https://wpscan.com/vulnerability/d770f1fa-7652-465a-833c-b[PII_REDACTED]d
CVE: CVE-2021-24353
Published: 2021-06-14
Description: The import_data function of the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4 had no capability or nonce checks making it possible for unauthenticated users to import a set of site redirects.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://wpscan.com/vulnerability/74c23d56-e81f-47e9-bf8b-33d3f0e81894; https://www.wordfence.com/blog/2021/05/severe-vulnerabilities-patched-in-simple-301-redirects-by-betterlinks-plugin/; https://wpscan.com/vulnerability/74c23d56-e81f-47e9-bf8b-33d3f0e81894
CVE: CVE-2021-24354
Published: 2021-06-14
Description: A lack of capability checks and insufficient nonce check on the AJAX action in the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, made it possible for authenticated users to install arbitrary plugins on vulnerable sites.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://wpscan.com/vulnerability/8638b36c-6641-491f-b9df-5db3645e4668; https://www.wordfence.com/blog/2021/05/severe-vulnerabilities-patched-in-simple-301-redirects-by-betterlinks-plugin/; https://wpscan.com/vulnerability/8638b36c-6641-491f-b9df-5db3645e4668
CVE: CVE-2021-24355
Published: 2021-06-14
Description: In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, the lack of capability checks and insufficient nonce check on the AJAX actions, simple301redirects/admin/get_wildcard and simple301redirects/admin/wildcard, made it possible for authenticated users to retrieve and update the wildcard value for redirects.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://wpscan.com/vulnerability/ce8f9648-30fb-4fb9-894e-879dc0f26f98; https://www.wordfence.com/blog/2021/05/severe-vulnerabilities-patched-in-simple-301-redirects-by-betterlinks-plugin/; https://wpscan.com/vulnerability/ce8f9648-30fb-4fb9-894e-879dc0f26f98
CVE: CVE-2021-24356
Published: 2021-06-14
Description: In the Simple 301 Redirects by BetterLinks WordPress plugin before 2.0.4, a lack of capability checks and insufficient nonce check on the AJAX action, simple301redirects/admin/activate_plugin, made it possible for authenticated users to activate arbitrary plugins installed on vulnerable sites.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://wpscan.com/vulnerability/be356530-5e00-4f27-8177-b80f3c1ae6e8; https://www.wordfence.com/blog/2021/05/severe-vulnerabilities-patched-in-simple-301-redirects-by-betterlinks-plugin/; https://wpscan.com/vulnerability/be356530-5e00-4f27-8177-b80f3c1ae6e8
CVE: CVE-2021-24357
Published: 2021-06-14
Description: In the Best Image Gallery & Responsive Photo Gallery – FooGallery WordPress plugin before 2.0.35, the Custom CSS field of each gallery is not properly sanitised or validated before being being output in the page where the gallery is embed, leading to a stored Cross-Site Scripting issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/950f46ae-4476-4969-863a-0e55752953b3; https://wpscan.com/vulnerability/950f46ae-4476-4969-863a-0e55752953b3
CVE: CVE-2021-24358
Published: 2021-06-14
Description: The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.10 did not validate a redirect parameter on a specifically crafted URL before redirecting the user to it, leading to an Open Redirect issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://theplusaddons.com/changelog/; https://wpscan.com/vulnerability/fd4352ad-dae0-4404-94d1-11083cb1f44d; https://theplusaddons.com/changelog/
CVE: CVE-2021-24359
Published: 2021-06-14
Description: The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.11 did not properly check that a user requesting a password reset was the legitimate user, allowing an attacker to send an arbitrary reset password email to a registered user on behalf of the WordPress site. Such issue could be chained with an open redirect (CVE-2021-24358) in version below 4.1.10, to include a crafted password reset link in the email, which would lead to an account takeover.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284, CWE-287
References: https://theplusaddons.com/changelog/; https://wpscan.com/vulnerability/486b82d1-30d4-44d2-9542-f33e3f149e92; https://theplusaddons.com/changelog/
CVE: CVE-2021-24360
Published: 2021-06-14
Description: The Yes/No Chart WordPress plugin before 1.0.12 did not sanitise its sid shortcode parameter before using it in a SQL statement, allowing medium privilege users (contributor+) to perform Blind SQL Injection attacks
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://wpscan.com/vulnerability/d9586453-cc5c-4d26-bb45-a6370c9427fe; https://wpscan.com/vulnerability/d9586453-cc5c-4d26-bb45-a6370c9427fe
CVE: CVE-2021-24382
Published: 2021-06-14
Description: The Smart Slider 3 Free and pro WordPress plugins before 3.5.0.9 did not sanitise the Project Name before outputting it back in the page, leading to a Stored Cross-Site Scripting issue. By default, only administrator users could access the affected functionality, limiting the exploitability of the vulnerability. However, some WordPress admins may allow lesser privileged users to access the plugin's functionality, in which case, privilege escalation could be performed.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://smartslider.helpscoutdocs.com/article/1746-changelog; https://wpscan.com/vulnerability/7b32a282-e51f-4ee5-b59f-5ba10e62a54d; https://smartslider.helpscoutdocs.com/article/1746-changelog
CVE: CVE-2021-32682
Published: 2021-06-14
Description: elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Several vulnerabilities affect elFinder 2.1.58. These vulnerabilities can allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP connector, even with minimal configuration. The issues were patched in version 2.1.59. As a workaround, ensure the connector is not exposed without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-78, CWE-918
References: http://packetstormsecurity.com/files/164173/elFinder-Archive-Command-Injection.html; https://blog.sonarsource.com/elfinder-case-study-of-web-file-manager-vulnerabilities/; https://github.com/Studio-42/elFinder/commit/a106c350b7dfe666a81d6b576816db9fe0899b17
CVE: CVE-2021-21554
Published: 2021-06-14
Description: Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://www.dell.com/support/kbdoc/000187958; https://www.dell.com/support/kbdoc/000187958
CVE: CVE-2021-21555
Published: 2021-06-14
Description: Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://www.dell.com/support/kbdoc/000187958; https://www.dell.com/support/kbdoc/000187958
CVE: CVE-2021-21556
Published: 2021-06-14
Description: Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a stack-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://www.dell.com/support/kbdoc/000187958; https://www.dell.com/support/kbdoc/000187958
CVE: CVE-2021-21557
Published: 2021-06-14
Description: Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20, CWE-125
References: https://www.dell.com/support/kbdoc/000187958; https://www.dell.com/support/kbdoc/000187958
CVE: CVE-2021-0324
Published: 2021-06-14
Description: Product: AndroidVersions: Android SoCAndroid ID: A-175402462
CVSS Score: 9.8 (CRITICAL)
References: https://source.android.com/security/bulletin/2021-05-01; https://source.android.com/security/bulletin/2021-05-01
CVE: CVE-2021-0467
Published: 2021-06-14
Description: In Chromecast bootROM, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the bootloader, with physical USB access, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-174490700
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2021-05-01; https://source.android.com/security/bulletin/2021-05-01
CVE: CVE-2021-26845
Published: 2021-06-14
Description: Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report data if the URL used to access the report is discovered. This issue affects: Hitachi ABB Power Grids eSOMS 6.0 versions prior to 6.0.4.2.2; 6.1 versions prior to 6.1.4; 6.3 versions prior to 6.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8942&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8942&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2021-27196
Published: 2021-06-14
Description: Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 (TEGO1), MSM, GMS600, PWC600 allows an attacker with access to the IEC 61850 network with knowledge of how to reproduce the attack, as well as the IP addresses of the different IEC 61850 access points (of IEDs/products), to force the device to reboot, which renders the device inoperable for approximately 60 seconds. This vulnerability affects only products with IEC 61850 interfaces. This issue affects: Hitachi ABB Power Grids Relion 670 Series 1.1; 1.2.3 versions prior to 1.2.3.20; 2.0 versions prior to 2.0.0.13; 2.1; 2.2.2 versions prior to 2.2.2.3; 2.2.3 versions prior to 2.2.3.2. Hitachi ABB Power Grids Relion 670/650 Series 2.2.0 versions prior to 2.2.0.13. Hitachi ABB Power Grids Relion 670/650/SAM600-IO 2.2.1 versions prior to 2.2.1.6. Hitachi ABB Power Grids Relion 650 1.1; 1.2; 1.3 versions prior to 1.3.0.7. Hitachi ABB Power Grids REB500 7.3; 7.4; 7.5; 7.6; 8.2; 8.3. Hitachi ABB Power Grids RTU500 Series 7.x version 7.x and prior versions; 8.x version 8.x and prior versions; 9.x version 9.x and prior versions; 10.x version 10.x and prior versions; 11.x version 11.x and prior versions; 12.x version 12.x and prior versions. Hitachi ABB Power Grids FOX615 (TEGO1) R1D02 version R1D02 and prior versions. Hitachi ABB Power Grids MSM 2.1.0 versions prior to 2.1.0. Hitachi ABB Power Grids GMS600 1.3.0 version 1.3.0 and prior versions. Hitachi ABB Power Grids PWC600 1.0 versions prior to 1.0.1.4; 1.1 versions prior to 1.1.0.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8932&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8934&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A8936&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2021-27887
Published: 2021-06-14
Description: Cross-site Scripting (XSS) vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser. This issue affects: Hitachi ABB Power Grids Ellipse APM 5.3 version 5.3.0.1 and prior versions; 5.2 version 5.2.0.3 and prior versions; 5.1 version 5.1.0.6 and prior versions.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79
References: https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A9700&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=9AKK107991A9700&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2021-34693
Published: 2021-06-14
Description: net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-909
References: http://www.openwall.com/lists/oss-security/2021/06/15/1; https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5e87ddbe3942e27e939bdc02deb8579b0cbd8ecc; https://lists.debian.org/debian-lts-announce/2021/07/msg00014.html
CVE: CVE-2021-20027
Published: 2021-06-14
Description: A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted request. This vulnerability affects SonicOS Gen5, Gen6, Gen7 platforms, and SonicOSv virtual firewalls.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0016; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0016
CVE: CVE-2021-32684
Published: 2021-06-14
Description: magento-scripts contains scripts and configuration used by Create Magento App, a zero-configuration tool-chain which allows one to deploy Magento 2. In versions 1.5.1 and 1.5.2, after changing the function from synchronous to asynchronous there wasn't implemented handler in the start, stop, exec, and logs commands, effectively making them unusable. Version 1.5.3 contains patches for the problems.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-670
References: https://github.com/scandipwa/create-magento-app/commit/89115db7031e181eb8fb4ec2822bc6cab88e7071; https://github.com/scandipwa/create-magento-app/security/advisories/GHSA-52qp-gwwh-qrg4; https://github.com/scandipwa/create-magento-app/commit/89115db7031e181eb8fb4ec2822bc6cab88e7071
CVE: CVE-2021-31618
Published: 2021-06-15
Description: Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a status code indicating why the request was rejected. This rejection response was not fully initialised in the HTTP/2 protocol handler if the offending header was the very first one received or appeared in a a footer. This led to a NULL pointer dereference on initialised memory, crashing reliably the child process. Since such a triggering HTTP/2 request is easy to craft and submit, this can be exploited to DoS the server. This issue affected mod_http2 1.15.17 and Apache HTTP Server version 2.4.47 only. Apache HTTP Server 2.4.47 was never released.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: http://httpd.apache.org/security/vulnerabilities_24.html; http://www.openwall.com/lists/oss-security/2021/06/10/9; http://www.openwall.com/lists/oss-security/2024/03/13/2
CVE: CVE-2021-31478
Published: 2021-06-15
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12633.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://www.zerodayinitiative.com/advisories/ZDI-21-618/; https://www.cvedetails.com/vulnerability-list/vendor_id-2032/product_id-96672/Opentext-Brava-Desktop.html?page=1&opec=1&order=1&trc=35&sha=37f4ed0596f8ccacca7d571f22a38c97b0f19f4c; https://www.opentext.com/products/brava
CVE: CVE-2021-31479
Published: 2021-06-15
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12634.
CVSS Score: 7.8 (HIGH)
CWE: CWE-824
References: https://www.zerodayinitiative.com/advisories/ZDI-21-619/; https://www.cvedetails.com/vulnerability-list/vendor_id-2032/product_id-96672/Opentext-Brava-Desktop.html?page=1&opec=1&order=1&trc=35&sha=37f4ed0596f8ccacca7d571f22a38c97b0f19f4c; https://www.opentext.com/products/brava