deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-38478
Published: 2021-10-19
Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to an attacker using a traceroute tool to inject commands into the device. This may allow the attacker to remotely run commands on behalf of the device.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05; https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE: CVE-2021-38480
Published: 2021-10-19
Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 are vulnerable to cross-site request forgery when unauthorized commands are submitted from a user the web application trusts. This may allow an attacker to remotely perform actions on the router’s management portal, such as making configuration changes, changing administrator credentials, and running system commands on the router.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-352
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05; https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE: CVE-2021-38482
Published: 2021-10-19
Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 website used to control the router is vulnerable to stored cross-site scripting, which may allow an attacker to hijack sessions of users connected to the system.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79, CWE-79
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05; https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE: CVE-2021-38484
Published: 2021-10-19
Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 do not have a filter or signature check to detect or prevent an upload of malicious files to the server, which may allow an attacker, acting as an administrator, to upload malicious files. This could result in cross-site scripting, deletion of system files, and remote code execution.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05; https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE: CVE-2021-38486
Published: 2021-10-19
Description: InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 cloud portal allows for self-registration of the affected product without any requirements to create an account, which may allow an attacker to have full control over the product and execute code within the internal network to which the product is connected.
CVSS Score: 8.0 (HIGH)
CWE: CWE-285, CWE-862
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05; https://us-cert.cisa.gov/ics/advisories/icsa-21-280-05
CVE: CVE-2021-3846
Published: 2021-10-19
Description: firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/firefly-iii/firefly-iii/commit/a85b6420c19ace35134f896e094e1971d8c7954b; https://huntr.dev/bounties/5267ec1c-d204-40d2-bd4f-6c2dd495ee18; https://github.com/firefly-iii/firefly-iii/commit/a85b6420c19ace35134f896e094e1971d8c7954b
CVE: CVE-2021-3851
Published: 2021-10-19
Description: firefly-iii is vulnerable to URL Redirection to Untrusted Site
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/firefly-iii/firefly-iii/commit/8662dfa4c0f71efef61c31dc015c6f723db8318d; https://huntr.dev/bounties/549a1040-9b5e-420b-9b80-20700dd9d592; https://github.com/firefly-iii/firefly-iii/commit/8662dfa4c0f71efef61c31dc015c6f723db8318d
CVE: CVE-2021-3858
Published: 2021-10-19
Description: snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/snipe/snipe-it/commit/84c73aae5dcafa9529ceeeda6e8cdda5a42129c3; https://huntr.dev/bounties/a2fac2eb-100d-45b1-9ac7-71847c2f2b6b; https://github.com/snipe/snipe-it/commit/84c73aae5dcafa9529ceeeda6e8cdda5a42129c3
CVE: CVE-2021-3863
Published: 2021-10-19
Description: snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/snipe/snipe-it/commit/fc5efd857f61f7e45c61db567bb66612bcb53128; https://huntr.dev/bounties/1dbc8d79-1b53-44a3-a576-faec78f29ba0; https://github.com/snipe/snipe-it/commit/fc5efd857f61f7e45c61db567bb66612bcb53128
CVE: CVE-2021-3869
Published: 2021-10-19
Description: corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVSS Score: 7.5 (HIGH)
CWE: CWE-611, CWE-611
References: https://github.com/stanfordnlp/corenlp/commit/5d83f1e8482ca304db8be726cad89554c88f136a; https://huntr.dev/bounties/2f8baf6c-14b3-420d-8ede-9805797cd324; https://github.com/stanfordnlp/corenlp/commit/5d83f1e8482ca304db8be726cad89554c88f136a
CVE: CVE-2021-3872
Published: 2021-10-19
Description: vim is vulnerable to Heap-based Buffer Overflow
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://github.com/vim/vim/commit/826bfe4bbd7594188e3d74d2539d9707b1c6a14b; https://huntr.dev/bounties/c958013b-1c09-4939-92ca-92f50aa169e8; https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html
CVE: CVE-2021-3879
Published: 2021-10-19
Description: snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/snipe/snipe-it/commit/bda23bb1e66fd7ce42c75c69cf5eea4e80865c1c; https://huntr.dev/bounties/6dccc49e-3843-4a4a-b397-5c659e5f8bfe; https://github.com/snipe/snipe-it/commit/bda23bb1e66fd7ce42c75c69cf5eea4e80865c1c
CVE: CVE-2021-3888
Published: 2021-10-19
Description: libmobi is vulnerable to Use of Out-of-range Pointer Offset
CVSS Score: 8.1 (HIGH)
CWE: CWE-823, CWE-119
References: https://github.com/bfabiszewski/libmobi/commit/c78e186739b50d156cb3da5d08d70294f0490853; https://huntr.dev/bounties/722b3acb-792b-4429-a98d-bb80efb8938d; https://github.com/bfabiszewski/libmobi/commit/c78e186739b50d156cb3da5d08d70294f0490853
CVE: CVE-2021-3889
Published: 2021-10-19
Description: libmobi is vulnerable to Use of Out-of-range Pointer Offset
CVSS Score: 8.1 (HIGH)
CWE: CWE-823, CWE-119
References: https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21; https://huntr.dev/bounties/efb3e261-3f7d-4a45-8114-e0ace6b21516; https://github.com/bfabiszewski/libmobi/commit/bec783e6212439a335ba6e8df7ab8ed610ca9a21
CVE: CVE-2011-1497
Published: 2021-10-19
Description: A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/rails/rails/blob/38df020c95beca7e12f0188cb7e18f3c37789e20/actionpack/CHANGELOG; https://www.openwall.com/lists/oss-security/2011/04/06/13; https://github.com/rails/rails/blob/38df020c95beca7e12f0188cb7e18f3c37789e20/actionpack/CHANGELOG
CVE: CVE-2020-29622
Published: 2021-10-19
Description: A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-005 Catalina. Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges.
CVSS Score: 7.5 (HIGH)
CWE: CWE-362
References: https://support.apple.com/en-us/HT212805; https://support.apple.com/en-us/HT212805
CVE: CVE-2021-30358
Published: 2021-10-19
Description: Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-78
References: https://supportcontent.checkpoint.com/solutions?id=sk142952; https://supportcontent.checkpoint.com/solutions?id=sk175806; https://supportcontent.checkpoint.com/solutions?id=sk142952
CVE: CVE-2021-30807
Published: 2021-10-19
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT212622; https://support.apple.com/en-us/HT212623; https://support.apple.com/en-us/HT212713
CVE: CVE-2021-30810
Published: 2021-10-19
Description: An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8, tvOS 15. An attacker in physical proximity may be able to force a user onto a malicious Wi-Fi network during device setup.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://seclists.org/fulldisclosure/2021/Oct/61; http://seclists.org/fulldisclosure/2021/Oct/62; http://seclists.org/fulldisclosure/2021/Oct/63
CVE: CVE-2021-30811
Published: 2021-10-19
Description: This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8. A local attacker may be able to read sensitive information.
CVSS Score: 5.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2021/Oct/61; http://seclists.org/fulldisclosure/2021/Oct/62; https://support.apple.com/en-us/HT212814
CVE: CVE-2021-30815
Published: 2021-10-19
Description: A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able to view contacts from the lock screen.
CVSS Score: 2.4 (LOW)
References: http://seclists.org/fulldisclosure/2021/Oct/61; https://support.apple.com/en-us/HT212814; http://seclists.org/fulldisclosure/2021/Oct/61
CVE: CVE-2021-30819
Published: 2021-10-19
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15 and iPadOS 15. Processing a maliciously crafted USD file may disclose memory contents.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://seclists.org/fulldisclosure/2021/Oct/61; https://support.apple.com/en-us/HT212814; https://support.apple.com/kb/HT212804
CVE: CVE-2021-30820
Published: 2021-10-19
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8. A remote attacker may be able to cause arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://support.apple.com/en-us/HT212807; https://support.apple.com/en-us/HT212807
CVE: CVE-2021-30825
Published: 2021-10-19
Description: This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able to cause unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/fulldisclosure/2021/Oct/61; https://support.apple.com/en-us/HT212814; https://www.zerodayinitiative.com/advisories/ZDI-22-354/
CVE: CVE-2021-30826
Published: 2021-10-19
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. In certain situations, the baseband would fail to enable integrity and ciphering protection.
CVSS Score: 7.5 (HIGH)
References: http://seclists.org/fulldisclosure/2021/Oct/61; https://support.apple.com/en-us/HT212814; https://support.apple.com/kb/HT212807
CVE: CVE-2021-30827
Published: 2021-10-19
Description: A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local attacker may be able to elevate their privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-281
References: https://support.apple.com/en-us/HT212804; https://support.apple.com/en-us/HT212805; https://support.apple.com/en-us/HT212804
CVE: CVE-2021-30828
Published: 2021-10-19
Description: This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local user may be able to read arbitrary files as root.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212804; https://support.apple.com/en-us/HT212805; https://support.apple.com/en-us/HT212804
CVE: CVE-2021-30829
Published: 2021-10-19
Description: A URI parsing issue was addressed with improved parsing. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local user may be able to execute arbitrary files.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212804; https://support.apple.com/en-us/HT212805; https://support.apple.com/en-us/HT212804
CVE: CVE-2021-30830
Published: 2021-10-19
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212804; https://support.apple.com/en-us/HT212805; https://support.apple.com/en-us/HT212804
CVE: CVE-2021-30832
Published: 2021-10-19
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local attacker may be able to elevate their privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212804; https://support.apple.com/en-us/HT212805; https://www.zerodayinitiative.com/advisories/ZDI-22-355/
CVE: CVE-2021-30835
Published: 2021-10-19
Description: This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, iTunes 12.12 for Windows, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/fulldisclosure/2021/Oct/61; http://seclists.org/fulldisclosure/2021/Oct/62; http://seclists.org/fulldisclosure/2021/Oct/63
CVE: CVE-2021-30837
Published: 2021-10-19
Description: A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8, tvOS 15. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/fulldisclosure/2021/Oct/61; http://seclists.org/fulldisclosure/2021/Oct/62; http://seclists.org/fulldisclosure/2021/Oct/63
CVE: CVE-2021-30838
Published: 2021-10-19
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15 and iPadOS 15. A malicious application may be able to execute arbitrary code with system privileges on devices with an Apple Neural Engine.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/fulldisclosure/2021/Oct/61; https://support.apple.com/en-us/HT212814; https://support.apple.com/kb/HT212804
CVE: CVE-2021-30841
Published: 2021-10-19
Description: This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/fulldisclosure/2021/Oct/61; http://seclists.org/fulldisclosure/2021/Oct/62; http://seclists.org/fulldisclosure/2021/Oct/63
CVE: CVE-2021-30842
Published: 2021-10-19
Description: This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/fulldisclosure/2021/Oct/61; http://seclists.org/fulldisclosure/2021/Oct/62; http://seclists.org/fulldisclosure/2021/Oct/63
CVE: CVE-2021-30843
Published: 2021-10-19
Description: This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/fulldisclosure/2021/Oct/61; http://seclists.org/fulldisclosure/2021/Oct/62; http://seclists.org/fulldisclosure/2021/Oct/63
CVE: CVE-2021-30844
Published: 2021-10-19
Description: A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A remote attacker may be able to leak memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://support.apple.com/en-us/HT212804; https://support.apple.com/en-us/HT212805; https://support.apple.com/kb/HT212871
CVE: CVE-2021-30845
Published: 2021-10-19
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6. A local user may be able to read kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212804; https://support.apple.com/en-us/HT212804
CVE: CVE-2021-30846
Published: 2021-10-19
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2021/Oct/60; http://seclists.org/fulldisclosure/2021/Oct/61; http://seclists.org/fulldisclosure/2021/Oct/62
CVE: CVE-2021-30847
Published: 2021-10-19
Description: This issue was addressed with improved checks. This issue is fixed in watchOS 8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/fulldisclosure/2021/Oct/61; http://seclists.org/fulldisclosure/2021/Oct/62; http://seclists.org/fulldisclosure/2021/Oct/63
CVE: CVE-2021-30848
Published: 2021-10-19
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2021/Oct/60; http://seclists.org/fulldisclosure/2021/Oct/61; http://www.openwall.com/lists/oss-security/2021/10/26/9
CVE: CVE-2021-30849
Published: 2021-10-19
Description: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2021/Oct/60; http://seclists.org/fulldisclosure/2021/Oct/61; http://seclists.org/fulldisclosure/2021/Oct/62
CVE: CVE-2021-30850
Published: 2021-10-19
Description: An access issue was addressed with improved access restrictions. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6, tvOS 15. A user may gain access to protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
References: http://seclists.org/fulldisclosure/2021/Oct/63; https://support.apple.com/en-us/HT212804; https://support.apple.com/en-us/HT212805
CVE: CVE-2011-1075
Published: 2021-10-19
Description: FreeBSD's crontab calculates the MD5 sum of the previous and new cronjob to determine if any changes have been made before copying the new version in. In particular, it uses the MD5File() function, which takes a pathname as an argument, and is called with euid 0. A race condition in this process may lead to an arbitrary MD5 comparison regardless of the read permissions.
CVSS Score: 3.7 (LOW)
CWE: CWE-362, CWE-362
References: https://marc.info/?l=full-disclosure&m=[PII_REDACTED]8897&w=2; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.openwall.com/lists/oss-security/2011/02/28/14
CVE: CVE-2021-26589
Published: 2021-10-19
Description: A potential security vulnerability has been identified in HPE Superdome Flex Servers. The vulnerability could be remotely exploited to allow Cross Site Scripting (XSS) because the Session Cookie is missing an HttpOnly Attribute. HPE has provided a firmware update to resolve the vulnerability in HPE Superdome Flex Servers.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-732
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04199en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04199en_us
CVE: CVE-2021-27001
Published: 2021-10-19
Description: Clustered Data ONTAP versions 9.x prior to 9.5P18, 9.6P16, 9.7P16, 9.8P7 and 9.9.1P2 are susceptible to a vulnerability which could allow an authenticated privileged local attacker to arbitrarily modify Compliance-mode WORM data prior to the end of the retention period.
CVSS Score: 5.5 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]
CVE: CVE-2021-36832
Published: 2021-10-19
Description: WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram (versions <= 2.0.2) vulnerable at "Headline" (&message_data[16][headline]) input.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/icegram/wordpress-icegram-plugin-2-0-2-authenticated-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/icegram/#developers; https://patchstack.com/database/vulnerability/icegram/wordpress-icegram-plugin-2-0-2-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2021-37136
Published: 2021-10-19
Description: The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://github.com/netty/netty/security/advisories/GHSA-grg4-wf29-r9vv; https://lists.apache.org/thread.html/r06a145c9bd41a7344da242cef07977b24abe3349161ede948e30913d%40%3Ccommits.druid.apache.org%3E; https://lists.apache.org/thread.html/r5406eaf3b07577d233b9f07cfc8f26e28369e6bab5edfcab41f28abb%40%3Ccommits.druid.apache.org%3E
CVE: CVE-2021-37137
Published: 2021-10-19
Description: The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://github.com/netty/netty/security/advisories/GHSA-9vjp-v76f-g363; https://lists.apache.org/thread.html/r06a145c9bd41a7344da242cef07977b24abe3349161ede948e30913d%40%3Ccommits.druid.apache.org%3E; https://lists.apache.org/thread.html/r5406eaf3b07577d233b9f07cfc8f26e28369e6bab5edfcab41f28abb%40%3Ccommits.druid.apache.org%3E
CVE: CVE-2021-39329
Published: 2021-10-19
Description: The JobBoardWP WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/includes/admin/class-metabox.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.0.7. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/BigTiger2020/word-press/blob/main/JobBoardWP%20%E2%80%93%20Job%20Board%20Listings%20and%20Submissions.md; https://plugins.trac.wordpress.org/browser/jobboardwp/trunk/includes/admin/class-metabox.php#L165; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39329