deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-21584
Published: 2021-08-09
Description: Dell OpenManage Enterprise version 3.5 and OpenManage Enterprise-Modular version 1.30.00 contain an information disclosure vulnerability. An authenticated low privileged attacker may potentially exploit this vulnerability leading to disclosure of the OIDC server credentials.
CVSS Score: 7.7 (HIGH)
CWE: CWE-200, CWE-200
References: https://www.dell.com/support/kbdoc/000189673; https://www.dell.com/support/kbdoc/000189673
CVE: CVE-2021-21585
Published: 2021-08-09
Description: Dell OpenManage Enterprise versions prior to 3.6.1 contain an OS command injection vulnerability in RACADM and IPMI tools. A remote authenticated malicious user with high privileges may potentially exploit this vulnerability to execute arbitrary OS commands.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://www.dell.com/support/kbdoc/000189673; https://www.dell.com/support/kbdoc/000189673
CVE: CVE-2021-21596
Published: 2021-08-09
Description: Dell OpenManage Enterprise versions 3.4 through 3.6.1 and Dell OpenManage Enterprise Modular versions 1.20.00 through 1.30.00, contain a remote code execution vulnerability. A malicious attacker with access to the immediate subnet may potentially exploit this vulnerability leading to information disclosure and a possible elevation of privileges.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-200
References: https://www.dell.com/support/kbdoc/000189673; https://www.dell.com/support/kbdoc/000189673
CVE: CVE-2021-32797
Published: 2021-08-09
Description: JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted notebook can execute code on load. In particular JupyterLab doesn’t sanitize the action attribute of html `<form>`. Using this it is possible to trigger the form validation outside of the form itself. This is a remote code execution, but requires user action to open a notebook.
CVSS Score: 7.4 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/jupyterlab/jupyterlab/commit/504825938c0abfa2fb8ff8d529308830a5ae42ed; https://github.com/jupyterlab/jupyterlab/security/advisories/GHSA-4952-p58q-6crx; https://github.com/jupyterlab/jupyterlab/commit/504825938c0abfa2fb8ff8d529308830a5ae42ed
CVE: CVE-2021-32798
Published: 2021-08-09
Description: The Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can be used to trigger an XSS when a victim opens a malicious ipynb document in Jupyter Notebook. The XSS allows an attacker to execute arbitrary code on the victim computer using Jupyter APIs.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://github.com/jupyter/notebook/commit/79fc76e890a8ec42f73a3d009e44ef84c14ef0d5; https://github.com/jupyter/notebook/security/advisories/GHSA-hwvq-6gjx-j797; https://github.com/jupyter/notebook/commit/79fc76e890a8ec42f73a3d009e44ef84c14ef0d5
CVE: CVE-2021-36276
Published: 2021-08-09
Description: Dell DBUtilDrv2.sys driver (versions 2.5 and 2.6) contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://www.dell.com/support/kbdoc/en-us/000190105/dsa-2021-152-dell-client-platform-security-update-for-an-insufficient-access-control-vulnerability-in-the-dell-dbutildrv2-sys-driver; https://www.dell.com/support/kbdoc/en-us/000190105/dsa-2021-152-dell-client-platform-security-update-for-an-insufficient-access-control-vulnerability-in-the-dell-dbutildrv2-sys-driver
CVE: CVE-2021-36277
Published: 2021-08-09
Description: Dell Command | Update, Dell Update, and Alienware Update versions before 4.3 contains an Improper Verification of Cryptographic Signature Vulnerability. A local authenticated malicious user may exploit this vulnerability by executing arbitrary code on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-347, CWE-347
References: https://www.dell.com/support/kbdoc/000190110; https://www.dell.com/support/kbdoc/000190110
CVE: CVE-2021-38305
Published: 2021-08-09
Description: 23andMe Yamale before 3.0.8 allows remote attackers to execute arbitrary code via a crafted schema file. The schema parser uses eval as part of its processing, and tries to protect from malicious expressions by limiting the builtins that are passed to the eval. When processing the schema, each line is run through Python's eval function to make the validator available. A well-constructed string within the schema rules can execute system commands; thus, by exploiting the vulnerability, an attacker can run arbitrary code on the image that invokes Yamale.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: https://github.com/23andMe/Yamale/pull/165; https://github.com/23andMe/Yamale/releases/tag/3.0.8; https://github.com/23andMe/Yamale/pull/165
CVE: CVE-2020-24741
Published: 2021-08-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-0570. Reason: This candidate is a duplicate of CVE-2020-0570. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2020-0570 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-24742
Published: 2021-08-09
Description: An issue has been fixed in Qt versions 5.14.0 where QPluginLoader attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via crafted files.
CVSS Score: 7.8 (HIGH)
References: https://codereview.qt-project.org/c/qt/qtbase/+/280730; https://codereview.qt-project.org/c/qt/qtbase/+/280730
CVE: CVE-2021-38311
Published: 2021-08-09
Description: In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessive CPU consumption.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/contiki-os/contiki/issues/2685; https://github.com/contiki-os/contiki/issues/2685
CVE: CVE-2020-23148
Published: 2021-08-09
Description: The userLogin parameter in ldap/login.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a LDAP injection and obtain sensitive information via a crafted POST request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://cwe.mitre.org/data/definitions/90.html; https://github.com/rconfig/rconfig/blob/7ef8bd8d606bc10835e1b8f6f72a[PII_REDACTED]d3/www/ldap/authenticate.php#L34; https://cwe.mitre.org/data/definitions/90.html
CVE: CVE-2020-23149
Published: 2021-08-09
Description: The dbName parameter in ajaxDbInstall.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a SQL injection and access sensitive database information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/rconfig/rconfig/blob/7ef8bd8d606bc10835e1b8f6f72a[PII_REDACTED]d3/www/install/lib/ajaxHandlers/ajaxDbInstall.php#L35; https://github.com/rconfig/rconfig/blob/7ef8bd8d606bc10835e1b8f6f72a[PII_REDACTED]d3/www/install/lib/ajaxHandlers/ajaxDbInstall.php#L35
CVE: CVE-2020-23150
Published: 2021-08-09
Description: A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database information via a crafted GET request to install/lib/ajaxHandlers/ajaxDbInstall.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/rconfig/rconfig/blob/7ef8bd8d606bc10835e1b8f6f72a[PII_REDACTED]d3/www/install/lib/ajaxHandlers/ajaxDbInstall.php#L97; https://github.com/rconfig/rconfig/blob/7ef8bd8d606bc10835e1b8f6f72a[PII_REDACTED]d3/www/install/lib/ajaxHandlers/ajaxDbInstall.php#L97
CVE: CVE-2020-23151
Published: 2021-08-09
Description: rConfig 3.9.5 allows command injection by sending a crafted GET request to lib/ajaxHandlers/ajaxArchiveFiles.php since the path parameter is passed directly to the exec function without being escaped.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://cwe.mitre.org/data/definitions/78.html; https://github.com/rconfig/rconfig/blob/7ef8bd8d606bc10835e1b8f6f72a[PII_REDACTED]d3/www/lib/ajaxHandlers/ajaxArchiveFiles.php#L13; https://cwe.mitre.org/data/definitions/78.html
CVE: CVE-2021-21501
Published: 2021-08-10
Description: Improper configuration will cause ServiceComb ServiceCenter Directory Traversal problem in ServcieCenter 1.x.x versions and fixed in 2.0.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: http://www.openwall.com/lists/oss-security/2021/08/10/3; https://lists.apache.org/thread.html/r337be65e504eac52a12e89d7de40345e5d335deee9dd7288f7f59b81%40%3Cannounce.apache.org%3E; https://lists.apache.org/thread.html/r337be65e504eac52a12e89d7de40345e5d335deee9dd7288f7f59b81%40%3Cdev.servicecomb.apache.org%3E
CVE: CVE-2020-28397
Published: 2021-08-10
Description: A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7 PLCSIM Advanced (All versions > V2 < V4), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (Version V4.4), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions > V2.5 < V2.9.2), SIMATIC S7-1500 Software Controller (All versions > V2.5 < V21.9), TIM 1531 IRC (incl. SIPLUS NET variants) (Version V2.1). Due to an incorrect authorization check in the affected component, an attacker could extract information about access protected PLC program variables over port 102/tcp from an affected device when reading multiple attributes at once.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://cert-portal.siemens.com/productcert/pdf/ssa-865327.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-865327.pdf
CVE: CVE-2021-25659
Published: 2021-08-10
Description: A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0 SP9 Update 2). Sending specially crafted packets to port 4410/tcp of an affected system could lead to extensive memory being consumed and as such could cause a denial-of-service preventing legitimate users from using the system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://cert-portal.siemens.com/productcert/pdf/ssa-158827.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-158827.pdf
CVE: CVE-2021-33717
Published: 2021-08-10
Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.1), Teamcenter Visualization (All versions < V13.2.0.1). When parsing specially crafted CGM Files, a NULL pointer deference condition could cause the application to crash. The application must be restarted to restore the service. An attacker could leverage this vulnerability to cause a Denial-of-Service condition in the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://cert-portal.siemens.com/productcert/pdf/ssa-365397.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-365397.pdf
CVE: CVE-2021-33721
Published: 2021-08-10
Description: A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2). The affected application incorrectly neutralizes special elements when creating batch operations which could lead to command injection. An authenticated remote attacker with administrative privileges could exploit this vulnerability to execute arbitrary code on the system with system privileges.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://cert-portal.siemens.com/productcert/pdf/ssa-756744.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-756744.pdf
CVE: CVE-2021-33738
Published: 2021-08-10
Description: A vulnerability has been identified in JT2Go (All versions < V13.2.0.2), Teamcenter Visualization (All versions < V13.2.0.2). The plmxmlAdapterSE70.dll library in affected applications lacks proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-13405)
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-938030.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-981/; https://cert-portal.siemens.com/productcert/pdf/ssa-938030.pdf
CVE: CVE-2021-37172
Published: 2021-08-10
Description: A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (V4.5.0). Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication and download arbitrary programs to the PLC. The vulnerability does not occur when TIA Portal V13 SP1 or any later version was used to provision the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-287
References: https://cert-portal.siemens.com/productcert/pdf/ssa-830194.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-830194.pdf
CVE: CVE-2021-37178
Published: 2021-08-10
Description: A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). An XML external entity injection vulnerability in the underlying XML parser could cause the affected application to disclose arbitrary files to remote attackers by loading a specially crafted xml file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://cert-portal.siemens.com/productcert/pdf/ssa-818688.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-818688.pdf
CVE: CVE-2021-37179
Published: 2021-08-10
Description: A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library in affected application lacks proper validation while parsing user-supplied OBJ files that could lead to a use-after-free condition. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13777)
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://cert-portal.siemens.com/productcert/pdf/ssa-818688.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-1114/; https://cert-portal.siemens.com/productcert/pdf/ssa-818688.pdf
CVE: CVE-2021-37180
Published: 2021-08-10
Description: A vulnerability has been identified in Solid Edge SE2021 (All Versions < SE2021MP7). The PSKERNEL.dll library lacks proper validation while parsing user-supplied OBJ files that could cause an out of bounds access to an uninitialized pointer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13775)
CVSS Score: 7.8 (HIGH)
CWE: CWE-824, CWE-824
References: https://cert-portal.siemens.com/productcert/pdf/ssa-818688.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-1113/; https://cert-portal.siemens.com/productcert/pdf/ssa-818688.pdf
CVE: CVE-2021-3689
Published: 2021-08-10
Description: yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
CVSS Score: 7.5 (HIGH)
CWE: CWE-1241, CWE-330
References: https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46; https://huntr.dev/bounties/50aad1d4-eb00-4573-b8a4-dbe38e2c229f; https://github.com/yiisoft/yii2/commit/13f27e4d920a05d53236139e8b07007acd046a46
CVE: CVE-2021-31655
Published: 2021-08-10
Description: Cross Site Scripting (XSS) vulnerability in TRENDnet TV-IP110WN V1.2.2.64 V1.2.2.65 V1.2.2.68 via the profile parameter. in a GET request in view.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://trendnet.com; http://tv-ip110wn.com; https://github.com/yinfeidi/Vuls/blob/main/TRENDnet%20TV-IP110WN/CVE-2021-31655.md
CVE: CVE-2021-22385
Published: 2021-08-10
Description: A component of the Huawei smartphone has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-668
References: https://consumer.huawei.com/en/support/bulletin/2021/6/; https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2021/6/
CVE: CVE-2021-22386
Published: 2021-08-10
Description: A component of the Huawei smartphone has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevation of Privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-415
References: https://consumer.huawei.com/en/support/bulletin/2021/6/; https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2021/6/
CVE: CVE-2021-22674
Published: 2021-08-10
Description: The affected product is vulnerable to a relative path traversal condition, which may allow an attacker access to unauthorized files and directories on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-23, CWE-22
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-217-04; https://us-cert.cisa.gov/ics/advisories/icsa-21-217-04
CVE: CVE-2021-29739
Published: 2021-08-10
Description: IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. X-Force ID: 198846.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-252
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/198846; https://www.ibm.com/support/pages/node/6479255; https://exchange.xforce.ibmcloud.com/vulnerabilities/198846
CVE: CVE-2021-37152
Published: 2021-08-10
Description: Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://support.sonatype.com; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]827; https://support.sonatype.com
CVE: CVE-2021-38365
Published: 2021-08-10
Description: Winner (aka ToneWinner) desktop speakers through 2021-08-09 allow remote attackers to recover speech signals from the power-indicator LED via a telescope and an electro-optical sensor, aka a "Glowworm" attack.
CVSS Score: 3.7 (LOW)
References: http://www.tonewinner.com; https://www.nassiben.com/glowworm-attack; http://www.tonewinner.com
CVE: CVE-2021-22676
Published: 2021-08-10
Description: UserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting (XSS), which could allow an attacker to send malicious JavaScript code. This could result in hijacking of cookie/session tokens, redirection to a malicious webpage, and unintended browser action on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-217-04; https://us-cert.cisa.gov/ics/advisories/icsa-21-217-04
CVE: CVE-2021-32943
Published: 2021-08-10
Description: The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-217-04; https://us-cert.cisa.gov/ics/advisories/icsa-21-217-04
CVE: CVE-2021-33699
Published: 2021-08-10
Description: Task Hijacking is a vulnerability that affects the applications running on Android devices due to a misconfiguration in their AndroidManifest.xml with their Task Control features. This allows an unauthorized attacker or malware to takeover legitimate apps and to steal user's sensitive information.
CVSS Score: 6.5 (MEDIUM)
References: https://launchpad.support.sap.com/#/notes/3067219; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806; https://launchpad.support.sap.com/#/notes/3067219
CVE: CVE-2021-33702
Published: 2021-08-10
Description: Under certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode report data. An attacker can craft malicious data and print it to the report. In a successful attack, a victim opens the report, and the malicious script gets executed in the victim's browser, resulting in a Stored Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/165737/SAP-Enterprise-Portal-NavigationReporter-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2022/Jan/70; https://launchpad.support.sap.com/#/notes/3073681
CVE: CVE-2021-33703
Published: 2021-08-10
Description: Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode URL parameters. An attacker can craft a malicious link and send it to a victim. A successful attack results in Reflected Cross-Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/165740/SAP-Enterprise-Portal-RunContentCreation-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2022/Jan/71; https://launchpad.support.sap.com/#/notes/3072920
CVE: CVE-2021-33706
Published: 2021-08-10
Description: Due to improper input validation in InfraBox, logs can be modified by an authenticated user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/SAP/InfraBox/security/advisories/GHSA-gw7h-9xvm-83qh; https://github.com/SAP/InfraBox/security/advisories/GHSA-gw7h-9xvm-83qh
CVE: CVE-2021-33707
Published: 2021-08-10
Description: SAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL stored in a component. This could enable the attacker to compromise the user's confidentiality and integrity.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: http://packetstormsecurity.com/files/165748/SAP-Enterprise-Portal-Open-Redirect.html; http://seclists.org/fulldisclosure/2022/Jan/73; https://launchpad.support.sap.com/#/notes/3076399
CVE: CVE-2021-36601
Published: 2021-08-10
Description: GetSimpleCMS 3.3.16 contains a cross-site Scripting (XSS) vulnerability, where Function TSL does not filter check settings.php Website URL: "siteURL" parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kk98kk0/exploit/blob/dbd10a47b0585ba4c673c952a280d502294cdbf4/GetSimpleCMS-3.3.16-xss.md; https://github.com/kk98kk0/exploit/blob/dbd10a47b0585ba4c673c952a280d502294cdbf4/GetSimpleCMS-3.3.16-xss.md
CVE: CVE-2021-38370
Published: 2021-08-10
Description: In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-77
References: https://alpine.x10host.com; https://bugs.gentoo.org/807613#c4; https://nostarttls.secvuln.info
CVE: CVE-2021-38371
Published: 2021-08-10
Description: The STARTTLS feature in Exim through 4.94.2 allows response injection (buffering) during MTA SMTP sending.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://nostarttls.secvuln.info; https://www.exim.org; https://www.exim.org/static/doc/security/CVE-2021-38371.txt
CVE: CVE-2021-38372
Published: 2021-08-10
Description: In KDE Trojita 0.7, man-in-the-middle attackers can create new folders because untagged responses from an IMAP server are accepted before STARTTLS.
CVSS Score: 3.7 (LOW)
CWE: CWE-77
References: https://bugs.kde.org/show_bug.cgi?id=432353; https://nostarttls.secvuln.info; https://bugs.kde.org/show_bug.cgi?id=432353