deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-23878
Published: 2021-02-10
Description: Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To exploit this, the local user has to access the relevant memory location immediately after an ENS administrator has made a configuration change through the console on their machine
CVSS Score: 7.3 (HIGH)
CWE: CWE-312, CWE-312
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10345; https://kc.mcafee.com/corporate/index?page=content&id=SB10345
CVE: CVE-2021-23880
Published: 2021-02-10
Description: Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10345; https://kc.mcafee.com/corporate/index?page=content&id=SB10345
CVE: CVE-2021-23882
Published: 2021-02-10
Description: Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS will be installed. This is only applicable to clean installations of ENS as the Access Control rules will prevent modification prior to up an upgrade.
CVSS Score: 8.2 (HIGH)
CWE: CWE-269
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10345; https://kc.mcafee.com/corporate/index?page=content&id=SB10345
CVE: CVE-2021-23883
Published: 2021-02-10
Description: A Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash via a specific system call which is not handled correctly. This varies by machine and had partial protection prior to this update.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10345; https://kc.mcafee.com/corporate/index?page=content&id=SB10345
CVE: CVE-2021-23873
Published: 2021-02-10
Description: Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial of Service via manipulating Junction link, after enumerating certain files, at a specific time.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59, CWE-59
References: http://service.mcafee.com/FAQDocument.aspx?&id=TS103114; https://www.zerodayinitiative.com/advisories/ZDI-21-175/; http://service.mcafee.com/FAQDocument.aspx?&id=TS103114
CVE: CVE-2021-23874
Published: 2021-02-10
Description: Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.
CVSS Score: 8.2 (HIGH)
CWE: CWE-269, CWE-732
References: http://service.mcafee.com/FAQDocument.aspx?&id=TS103114; http://service.mcafee.com/FAQDocument.aspx?&id=TS103114; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-23874
CVE: CVE-2021-23876
Published: 2021-02-10
Description: Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially causing Denial of Service via executing carefully constructed malware.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://service.mcafee.com/FAQDocument.aspx?&id=TS103114; http://service.mcafee.com/FAQDocument.aspx?&id=TS103114
CVE: CVE-2021-23881
Published: 2021-02-10
Description: A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 February 2021 Update allows an ENS ePO administrator to add a script to a policy event which will trigger the script to be run through a browser block page when a local non-administrator user triggers the policy.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10345; https://kc.mcafee.com/corporate/index?page=content&id=SB10345
CVE: CVE-2020-29171
Published: 2021-02-10
Description: Cross-site scripting (XSS) vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP Security & Firewall (all-in-one-wp-security-and-firewall) plugin before 4.4.6 for WordPress.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Arsenal21/all-in-one-wordpress-security/commit/4130906bc049b195467b4fc6980d6d304fbe28d5; https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers; https://www.tipsandtricks-hq.com/wordpress-security-and-firewall-plugin
CVE: CVE-2020-24837
Published: 2021-02-10
Description: An integer underflow has been found in the latest version of ZCFees. The variables 'currPeriodIdx' and 'lastPeriodExecIdx' are both unsigned integers, and the result of the minus operation may be a negative integer which leads to an underflow. The attackers can modify the current timestamp of the transaction somehow and block the execution of the process function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-191
References: https://etherscan.io/address/0x9d79c6e2a0222b9ac7bfabc447209c58fe9e0dcc#code; https://etherscan.io/address/0x9d79c6e2a0222b9ac7bfabc447209c58fe9e0dcc#code
CVE: CVE-2020-24838
Published: 2021-02-10
Description: An integer overflow has been found in the the latest version of Issuer. The total issuedCount can be zero if the parameter is overly large. An attacker can obtain the private key of the owner issued with a certain 'amount', and the issuedCount can be zero if there is an overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://etherscan.io/address/0xecaad8df0dee0b9ed45ffd1191b024701f21506c#code; https://etherscan.io/address/0xecaad8df0dee0b9ed45ffd1191b024701f21506c#code
CVE: CVE-2021-27135
Published: 2021-02-10
Description: xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence.
CVSS Score: 9.8 (CRITICAL)
References: http://seclists.org/fulldisclosure/2021/May/52; http://www.openwall.com/lists/oss-security/2021/02/10/7; https://access.redhat.com/security/cve/CVE-2021-27135
CVE: CVE-2020-13546
Published: 2021-02-10
Description: In SoftMaker Software GmbH SoftMaker Office TextMaker 2021 (revision 1014), a specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer the application will write outside its bounds resulting in a heap-based buffer overflow. An attacker can entice the victim to open a document to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-131, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1163; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1163
CVE: CVE-2020-5023
Published: 2021-02-10
Description: IBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary data iwhich could cause the serivce to crash due to excess resource consumption. IBM X-Force ID: 193659.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/193659; https://www.ibm.com/support/pages/node/6410888; https://exchange.xforce.ibmcloud.com/vulnerabilities/193659
CVE: CVE-2021-0302
Published: 2021-02-10
Description: In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-155287782
CVSS Score: 7.8 (HIGH)
CWE: CWE-1021
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0305
Published: 2021-02-10
Description: In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-154015447
CVSS Score: 7.8 (HIGH)
CWE: CWE-1021
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0314
Published: 2021-02-10
Description: In onCreate of UninstallerActivity, there is a possible way to uninstall an all without informed user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-171221302
CVSS Score: 7.3 (HIGH)
CWE: CWE-1021
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0325
Published: 2021-02-10
Description: In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-174238784
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0326
Published: 2021-02-10
Description: In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://lists.debian.org/debian-lts-announce/2021/02/msg00033.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMHPFCON6ZFCGZXSASJFKQ3UX2UIYMND/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOSA6DZUDLVOCYJNNXD6V3MRBVLCXZFH/
CVE: CVE-2021-0327
Published: 2021-02-10
Description: In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored binder identities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-172935267
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0328
Published: 2021-02-10
Description: In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan results without permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172670415
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0329
Published: 2021-02-10
Description: In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-171400004
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0330
Published: 2021-02-10
Description: In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in storaged with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-170732441
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0331
Published: 2021-02-10
Description: In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure default value. This could lead to local escalation of privilege and notification access with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-170731783
CVSS Score: 7.3 (HIGH)
CWE: CWE-1021
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0332
Published: 2021-02-10
Description: In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-169256435
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0333
Published: 2021-02-10
Description: In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that obscures the phonebook permissions dialog when a Bluetooth device is connecting. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-168504491
CVSS Score: 7.3 (HIGH)
CWE: CWE-1021
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0334
Published: 2021-02-10
Description: In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-163358811
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0335
Published: 2021-02-10
Description: In process of C2SoftHevcDec.cpp, there is a possible out of bounds write due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160346309
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0336
Published: 2021-02-10
Description: In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent. This could lead to local escalation of privilege that bypasses a permission check, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-158219161
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0337
Published: 2021-02-10
Description: In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-157474195
CVSS Score: 7.8 (HIGH)
CWE: CWE-312
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0338
Published: 2021-02-10
Description: In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-156260178
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0339
Published: 2021-02-10
Description: In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-145728687
CVSS Score: 7.8 (HIGH)
CWE: CWE-754
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0340
Published: 2021-02-10
Description: In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-134155286
CVSS Score: 8.8 (HIGH)
CWE: CWE-212
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-0341
Published: 2021-02-10
Description: In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171980069
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://source.android.com/security/bulletin/2021-02-01; https://source.android.com/security/bulletin/2021-02-01
CVE: CVE-2021-20353
Published: 2021-02-10
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 194882.
CVSS Score: 8.2 (HIGH)
CWE: CWE-611
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/194882; https://www.ibm.com/support/pages/node/6413709; https://www.zerodayinitiative.com/advisories/ZDI-21-174/
CVE: CVE-2020-26299
Published: 2021-02-10
Description: ftp-srv is an open-source FTP server designed to be simple yet configurable. In ftp-srv before version 4.4.0 there is a path-traversal vulnerability. Clients of FTP servers utilizing ftp-srv hosted on Windows machines can escape the FTP user's defined root folder using the expected FTP commands, for example, CWD and UPDR. When windows separators exist within the path (`\`), `path.resolve` leaves the upper pointers intact and allows the user to move beyond the root folder defined for that user. We did not take that into account when creating the path resolve function. The issue is patched in version 4.4.0 (commit 457b859450a37cba10ff3c431eb4aa67771122e3).
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/autovance/ftp-srv/commit/457b859450a37cba10ff3c431eb4aa67771122e3; https://github.com/autovance/ftp-srv/issues/167; https://github.com/autovance/ftp-srv/issues/225
CVE: CVE-2021-26936
Published: 2021-02-10
Description: The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allows a local attacker to escalate privileges to root by specifying video output paths in privileged locations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://www.openwall.com/lists/oss-security/2021/02/10/1; https://github.com/matanui159/ReplaySorcery/releases; http://www.openwall.com/lists/oss-security/2021/02/10/1
CVE: CVE-2021-26938
Published: 2021-02-10
Description: A stored XSS issue exists in henriquedornas 5.2.17 via online live chat. NOTE: Third parties report that no such product exists. That henriquedornas is the web design agency and 5.2.17 is simply the PHP version running on this hosts
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/0xrayan/CVE-/discussions/2; https://github.com/0xrayan/CVE-/discussions/2
CVE: CVE-2021-26939
Published: 2021-02-10
Description: An information disclosure issue exists in henriquedornas 5.2.17 because an attacker can dump phpMyAdmin SQL content. NOTE: third parties report that this is a site-specific problem
CVSS Score: 7.5 (HIGH)
References: https://bugzilla.opensuse.org/show_bug.cgi?id=1182095; https://github.com/0xrayan/CVE-/discussions/4; https://bugzilla.opensuse.org/show_bug.cgi?id=1182095
CVE: CVE-2021-3033
Published: 2021-02-10
Description: An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud Compute console. This vulnerability enables an attacker to bypass signature validation during SAML authentication by logging in to the Prisma Cloud Compute console as any authorized user. This issue impacts: All versions of Prisma Cloud Compute 19.11, Prisma Cloud Compute 20.04, and Prisma Cloud Compute 20.09; Prisma Cloud Compute 20.12 before update 1. Prisma Cloud Compute SaaS version is not impacted by this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-347, CWE-347
References: https://security.paloaltonetworks.com/CVE-2021-3033; https://security.paloaltonetworks.com/CVE-2021-3033
CVE: CVE-2020-7021
Published: 2021-02-10
Description: Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emit_request_body option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication tokens. This could allow an Elasticsearch administrator to view these details.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://discuss.elastic.co/t/elastic-stack-7-11-0-and-6-8-14-security-update/263915; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://discuss.elastic.co/t/elastic-stack-7-11-0-and-6-8-14-security-update/263915