deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-38504
Published: 2021-12-08
Description: When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1730156; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-38505
Published: 2021-12-08
Description: Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to the clipboard to the cloud, and make it available on other computers in certain scenarios. Applications that wish to prevent copied data from being recorded in Cloud History must use specific clipboard formats; and Firefox before versions 94 and ESR 91.3 did not implement them. This could have caused sensitive data to be recorded to a user's Microsoft account. *This bug only affects Firefox for Windows 10+ with Cloud Clipboard enabled. Other operating systems are unaffected.*. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-668
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1730194; https://www.mozilla.org/security/advisories/mfsa2021-48/; https://www.mozilla.org/security/advisories/mfsa2021-49/
CVE: CVE-2021-38506
Published: 2021-12-08
Description: Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user. This could lead to spoofing attacks on the browser UI including phishing. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1730750; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-38507
Published: 2021-12-08
Description: The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded to TLS while retaining the visual properties of an HTTP connection, including being same-origin with unencrypted connections on port 80. However, if a second encrypted port on the same IP address (e.g. port 8443) did not opt-in to opportunistic encryption; a network attacker could forward a connection from the browser to port 443 to port 8443, causing the browser to treat the content of port 8443 as same-origin with HTTP. This was resolved by disabling the Opportunistic Encryption feature, which had low usage. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-346
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1730935; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-38508
Published: 2021-12-08
Description: By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1366818; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-38509
Published: 2021-12-08
Description: Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary (although unstyled) contents could be displayed over top an uncontrolled webpage of the attacker's choosing. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1718571; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-38510
Published: 2021-12-08
Description: The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run commands on a user's computer.*Note: This issue only affected Mac OS operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
CVSS Score: 8.8 (HIGH)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1731779; https://www.mozilla.org/security/advisories/mfsa2021-48/; https://www.mozilla.org/security/advisories/mfsa2021-49/
CVE: CVE-2021-43527
Published: 2021-12-08
Description: NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1737470; https://cert-portal.siemens.com/productcert/pdf/ssa-594438.pdf; https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_68_1_RTM/
CVE: CVE-2021-43528
Published: 2021-12-08
Description: Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level privileges, but could be used as a stepping stone to further an attack with other vulnerabilities. This vulnerability affects Thunderbird < 91.4.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1742579; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html; https://security.gentoo.org/glsa/202208-14
CVE: CVE-2021-43530
Published: 2021-12-08
Description: A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 94.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1736886; https://www.mozilla.org/security/advisories/mfsa2021-48/; https://bugzilla.mozilla.org/show_bug.cgi?id=1736886
CVE: CVE-2021-43531
Published: 2021-12-08
Description: When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should have access to. This was fixed to provide the pre-redirect URL. This is related to CVE-2021-43532 but in the context of Web Extensions. This vulnerability affects Firefox < 94.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-346
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1659155; https://www.mozilla.org/security/advisories/mfsa2021-48/; https://bugzilla.mozilla.org/show_bug.cgi?id=1659155
CVE: CVE-2021-43532
Published: 2021-12-08
Description: The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that triggered authentication flows - in conjunction with a Content Security Policy that stopped a redirection chain in the middle - the final image URL could be one that contained an authentication token used to takeover a user account. If a website tricked a user into copy and pasting the image link back to the page, the page would be able to steal the authentication tokens. This was fixed by making the action return the original URL, before any redirects. This vulnerability affects Firefox < 94.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1719203; https://www.mozilla.org/security/advisories/mfsa2021-48/; https://bugzilla.mozilla.org/show_bug.cgi?id=1719203
CVE: CVE-2021-43533
Published: 2021-12-08
Description: When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to user confusion or attacks such as phishing. This vulnerability affects Firefox < 94.
CVSS Score: 4.3 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1724233; https://www.mozilla.org/security/advisories/mfsa2021-48/; https://bugzilla.mozilla.org/show_bug.cgi?id=1724233
CVE: CVE-2021-43534
Published: 2021-12-08
Description: Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1606864%2C1712671%2C1730048%2C1735152; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-43535
Published: 2021-12-08
Description: A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 93, Thunderbird < 91.3, and Firefox ESR < 91.3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1667102; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-43536
Published: 2021-12-08
Description: Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1730120; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-43537
Published: 2021-12-08
Description: An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1738237; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-43538
Published: 2021-12-08
Description: By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-362
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1739091; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-43539
Published: 2021-12-08
Description: Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1739683; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-43540
Published: 2021-12-08
Description: WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstalled with the extension. This vulnerability affects Firefox < 95.
CVSS Score: 6.5 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1636629; https://security.gentoo.org/glsa/202202-03; https://www.mozilla.org/security/advisories/mfsa2021-52/
CVE: CVE-2021-43541
Published: 2021-12-08
Description: When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.
CVSS Score: 6.5 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1696685; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-43542
Published: 2021-12-08
Description: Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-209
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1723281; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-43543
Published: 2021-12-08
Description: Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additional content. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1738418; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-43544
Published: 2021-12-08
Description: When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 95.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1739934; https://www.mozilla.org/security/advisories/mfsa2021-52/; https://bugzilla.mozilla.org/show_bug.cgi?id=1739934
CVE: CVE-2021-43545
Published: 2021-12-08
Description: Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-834
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1720926; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-43546
Published: 2021-12-08
Description: It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1737751; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE: CVE-2021-44529
Published: 2021-12-08
Description: A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: http://packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.html; http://packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.html; https://forums.ivanti.com/s/article/SA-2021-12-02
CVE: CVE-2021-4048
Published: 2021-12-08
Description: An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/JuliaLang/julia/issues/42415; https://github.com/Reference-LAPACK/lapack/commit/38f3eeee3108b18158409ca2a100e6fe03754781; https://github.com/Reference-LAPACK/lapack/pull/625
CVE: CVE-2021-43811
Published: 2021-12-08
Description: Sockeye is an open-source sequence-to-sequence framework for Neural Machine Translation built on PyTorch. Sockeye uses YAML to store model and data configurations on disk. Versions below 2.3.24 use unsafe YAML loading, which can be made to execute arbitrary code embedded in config files. An attacker can add malicious code to the config file of a trained model and attempt to convince users to download and run it. If users run the model, the embedded code will run locally. The issue is fixed in version 2.3.24.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://github.com/awslabs/sockeye/pull/964; https://github.com/awslabs/sockeye/releases/tag/2.3.24; https://github.com/awslabs/sockeye/security/advisories/GHSA-ggmr-44cv-24pm
CVE: CVE-2021-36189
Published: 2021-12-09
Description: A missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below, version 6.4.4 and below allows attacker to information disclosure via inspecting browser decrypted data
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-311
References: https://fortiguard.com/advisory/FG-IR-21-140; https://fortiguard.com/advisory/FG-IR-21-140
CVE: CVE-2021-36194
Published: 2021-12-09
Description: Multiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to achieve arbitrary code execution via specially crafted requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://fortiguard.com/advisory/FG-IR-21-152; https://fortiguard.com/advisory/FG-IR-21-152
CVE: CVE-2021-43204
Published: 2021-12-09
Description: A improper control of a resource through its lifetime in Fortinet FortiClientWindows version 6.4.1 and 6.4.0, version 6.2.9 and below, version 6.0.10 and below allows attacker to cause a complete denial of service of its components via changes of directory access permissions.
CVSS Score: 4.4 (MEDIUM)
References: https://fortiguard.com/advisory/FG-IR-21-167; https://fortiguard.com/advisory/FG-IR-21-167
CVE: CVE-2021-43410
Published: 2021-12-09
Description: Apache Airavata Django Portal allows CRLF log injection because of lack of escaping log statements. In particular, some HTTP request parameters are logged without first being escaped. Versions affected: master branch before commit 3c5d8c7 [1] of airavata-django-portal [1] https://github.com/apache/airavata-django-portal/commit/3c5d8c72bfc3eb0af8693a655a5d60f9273f8170
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-117, CWE-116
References: https://lists.apache.org/thread/q64h16ofdxk29soz3jj561nysnzcrl31; https://lists.apache.org/thread/q64h16ofdxk29soz3jj561nysnzcrl31
CVE: CVE-2021-36167
Published: 2021-12-09
Description: An improper authorization vulnerabiltiy [CWE-285] in FortiClient Windows versions 7.0.0 and 6.4.6 and below and 6.2.8 and below may allow an unauthenticated attacker to bypass the webfilter control via modifying the session-id paramater.
CVSS Score: 4.3 (MEDIUM)
References: https://fortiguard.com/advisory/FG-IR-20-127; https://fortiguard.com/advisory/FG-IR-20-127
CVE: CVE-2021-42759
Published: 2021-12-09
Description: A violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5.5 and below allows attacker to execute unauthorized code or commands via crafted cli commands.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-78
References: https://fortiguard.com/advisory/FG-IR-21-004; https://fortiguard.com/advisory/FG-IR-21-004
CVE: CVE-2021-43065
Published: 2021-12-09
Description: A incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to sensitive system data.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://fortiguard.com/advisory/FG-IR-21-178; https://github.com/orangecertcc/security-research/security/advisories/GHSA-8wx4-g5p9-348h; https://fortiguard.com/advisory/FG-IR-21-178
CVE: CVE-2021-43068
Published: 2021-12-09
Description: A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of authentication via a RADIUS login portal.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-287
References: https://fortiguard.com/advisory/FG-IR-21-212; https://fortiguard.com/advisory/FG-IR-21-212
CVE: CVE-2021-43071
Published: 2021-12-09
Description: A heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to the LogReport API controller.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://fortiguard.com/advisory/FG-IR-21-188; https://fortiguard.com/advisory/FG-IR-21-188
CVE: CVE-2021-3817
Published: 2021-12-09
Description: wbce_cms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/165377/WBCE-CMS-1.5.1-Admin-Password-Reset.html; https://github.com/wbce/wbce_cms/commit/6ca63f0cad5f0cd606fdb69a372f09b7d238f1d7; https://huntr.dev/bounties/c330dc0d-220a-4b15-b785-5face4cf6ef7
CVE: CVE-2021-22565
Published: 2021-12-09
Description: An attacker could prematurely expire a verification code, making it unusable by the patient, making the patient unable to upload their TEKs to generate exposure notifications. We recommend upgrading the Exposure Notification server to V1.1.2 or greater.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://github.com/google/exposure-notifications-verification-server/releases/tag/v1.1.2; https://github.com/google/exposure-notifications-verification-server/security/advisories/GHSA-wx8q-rgfr-cf6v; https://github.com/google/exposure-notifications-verification-server/releases/tag/v1.1.2
CVE: CVE-2021-41449
Published: 2021-12-09
Description: A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted HTTP packet.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: http://netgear.com; http://rax40.com; https://kb.netgear.com/000064405/Security-Advisory-for-Path-Traversal-on-Some-Routers-PSV-2021-0268
CVE: CVE-2021-20137
Published: 2021-12-09
Description: A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the Gryphon Tower router's web interface. An attacker could exploit this issue by tricking a user into following a specially crafted link, granting the attacker javascript execution in the context of the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.tenable.com/security/research/tra-2021-51; https://www.tenable.com/security/research/tra-2021-51