deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-34560
Published: 2021-08-31
Description: In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://cert.vde.com/en-us/advisories/vde-2021-027; https://cert.vde.com/en-us/advisories/vde-2021-027
CVE: CVE-2021-34561
Published: 2021-08-31
Description: In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.
CVSS Score: 7.5 (HIGH)
CWE: CWE-350
References: https://cert.vde.com/en-us/advisories/vde-2021-027; https://cert.vde.com/en-us/advisories/vde-2021-027
CVE: CVE-2021-34562
Published: 2021-08-31
Description: In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 it is possible to inject arbitrary JavaScript into the application's response.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cert.vde.com/en-us/advisories/vde-2021-027; https://cert.vde.com/en-us/advisories/vde-2021-027
CVE: CVE-2021-34563
Published: 2021-08-31
Description: In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie's value to be read or set by client-side JavaScript.
CVSS Score: 3.3 (LOW)
CWE: CWE-1004
References: https://cert.vde.com/en-us/advisories/vde-2021-027; https://cert.vde.com/en-us/advisories/vde-2021-027
CVE: CVE-2021-34564
Published: 2021-08-31
Description: Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the PEPPERL+FUCHS WirelessHART-Gateway 3.0.9.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-315
References: https://cert.vde.com/en-us/advisories/vde-2021-027; https://cert.vde.com/en-us/advisories/vde-2021-027
CVE: CVE-2021-34565
Published: 2021-08-31
Description: In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://cert.vde.com/en-us/advisories/vde-2021-027; https://cert.vde.com/en-us/advisories/vde-2021-027
CVE: CVE-2021-34578
Published: 2021-08-31
Description: This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://cert.vde.com/en-us/advisories/vde-2020-044; https://cert.vde.com/en-us/advisories/vde-2020-044
CVE: CVE-2021-34581
Published: 2021-08-31
Description: Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772, CWE-772
References: https://cert.vde.com/en-us/advisories/vde-2021-038; https://cert.vde.com/en-us/advisories/vde-2021-038
CVE: CVE-2021-3749
Published: 2021-08-31
Description: axios is vulnerable to Inefficient Regular Expression Complexity
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333, CWE-400
References: https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf; https://github.com/axios/axios/commit/5b457116e31db0e88fede6c428e969e87f290929; https://huntr.dev/bounties/1e8f07fc-c384-4ff9-8498-0690de2e8c31
CVE: CVE-2021-35219
Published: 2021-08-31
Description: ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page.
CVSS Score: 6.0 (MEDIUM)
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm; https://support.solarwinds.com/SuccessCenter/s/article/Mitigate-the-ExportToPdfCmd-Arbitrary-File-Read-Information-Disclosure-CVE-2021-35219?language=en_US; https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1?language=en_US
CVE: CVE-2021-35220
Published: 2021-08-31
Description: Command Injection vulnerability in EmailWebPage API which can lead to a Remote Code Execution (RCE) from the Alerts Settings page.
CVSS Score: 8.1 (HIGH)
CWE: CWE-77
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/orion_platform_2020-2-6_release_notes.htm; https://support.solarwinds.com/SuccessCenter/s/article/Mitigate-the-EmailWebPage-Command-Injection-RCE-CVE-2021-35220?language=en_US; https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1?language=en_US
CVE: CVE-2021-39316
Published: 2021-08-31
Description: The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dzsap_download` action using directory traversal in the `link` parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-552, CWE-22
References: http://packetstormsecurity.com/files/165146/WordPress-DZS-Zoomsounds-6.45-Arbitrary-File-Read.html; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39316; http://packetstormsecurity.com/files/165146/WordPress-DZS-Zoomsounds-6.45-Arbitrary-File-Read.html
CVE: CVE-2021-35221
Published: 2021-08-31
Description: Improper Access Control Tampering Vulnerability using ImportAlert function which can lead to a Remote Code Execution (RCE) from the Alerts Settings page.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm; https://support.solarwinds.com/SuccessCenter/s/article/Mitigate-the-ImportAlert-Improper-Access-Control-Tampering-Vulnerability-CVE-2021-35221?language=en_US; https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1?language=en_US
CVE: CVE-2021-35222
Published: 2021-08-31
Description: This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a Remote Code Execution (RCE) from the Alerts Settings page.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79, CWE-79
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm; https://support.solarwinds.com/SuccessCenter/s/article/Mitigate-the-Resource-aspx-Reflected-Cross-Site-Scripting-Vulnerability-CVE-2021-35222?language=en_US; https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1?language=en_US
CVE: CVE-2020-19046
Published: 2021-08-31
Description: Cross Site Scripting (XSS) in S-CMS v1.0 allows remote attackers to execute arbitrary code via the component '/admin/tpl.php?page='.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Aoyanm/audit/issues/1; https://github.com/Aoyanm/audit/issues/1
CVE: CVE-2020-19047
Published: 2021-08-31
Description: Cross Site Request Forgey (CSRF) in iWebShop v5.3 allows remote atatckers to execute arbitrary code via malicious POST request to the component '/index.php?controller=system&action=admin_edit_act'.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/Aoyanm/audit/issues/2; https://github.com/Aoyanm/audit/issues/2
CVE: CVE-2020-19048
Published: 2021-08-31
Description: Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Title" field found in the "Add New Forum" page by doing an authenticated POST HTTP request to '/Upload/admin/index.php?module=forum-management&action=add'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/joelister/bug/issues/1; https://github.com/joelister/bug/issues/1
CVE: CVE-2020-19049
Published: 2021-08-31
Description: Cross Site Scripting (XSS) in MyBB v1.8.20 allows remote attackers to inject arbitrary web script or HTML via the "Description" field found in the "Add New Forum" page by doing an authenticated POST HTTP request to '/Upload/admin/index.php?module=forum-management&action=add'.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/joelister/bug/issues/2; https://github.com/joelister/bug/issues/2
CVE: CVE-2021-21677
Published: 2021-08-31
Description: Jenkins Code Coverage API Plugin 1.4.0 and earlier does not apply Jenkins JEP-200 deserialization protection to Java objects it deserializes from disk, resulting in a remote code execution vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: http://www.openwall.com/lists/oss-security/2021/08/31/1; https://www.jenkins.io/security/advisory/2021-08-31/#SECURITY-2376; http://www.openwall.com/lists/oss-security/2021/08/31/1
CVE: CVE-2021-21678
Published: 2021-08-31
Description: Jenkins SAML Plugin 2.0.7 and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2021/08/31/1; https://www.jenkins.io/security/advisory/2021-08-31/#SECURITY-2469; http://www.openwall.com/lists/oss-security/2021/08/31/1
CVE: CVE-2021-21679
Published: 2021-08-31
Description: Jenkins Azure AD Plugin 179.vf[PII_REDACTED]e and earlier allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2021/08/31/1; https://www.jenkins.io/security/advisory/2021-08-31/#SECURITY-2470; http://www.openwall.com/lists/oss-security/2021/08/31/1
CVE: CVE-2021-21680
Published: 2021-08-31
Description: Jenkins Nested View Plugin 1.20 and earlier does not configure its XML transformer to prevent XML external entity (XXE) attacks.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2021/08/31/1; https://www.jenkins.io/security/advisory/2021-08-31/#SECURITY-2411; http://www.openwall.com/lists/oss-security/2021/08/31/1
CVE: CVE-2021-21681
Published: 2021-08-31
Description: Jenkins Nomad Plugin 0.7.4 and earlier stores Docker passwords unencrypted in the global config.xml file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2021/08/31/1; https://www.jenkins.io/security/advisory/2021-08-31/#SECURITY-2396; http://www.openwall.com/lists/oss-security/2021/08/31/1
CVE: CVE-2021-29907
Published: 2021-08-31
Description: IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary code on the system. IBM X-Force ID: 207633.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/207633; https://www.ibm.com/support/pages/node/6483607; https://exchange.xforce.ibmcloud.com/vulnerabilities/207633
CVE: CVE-2021-35213
Published: 2021-08-31
Description: An Improper Access Control Privilege Escalation Vulnerability was discovered in the User Setting of Orion Platform version 2020.2.5. It allows a guest user to elevate privileges to the Administrator using this vulnerability. Authentication is required to exploit the vulnerability.
CVSS Score: 8.9 (HIGH)
CWE: CWE-284
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm; https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/orion_platform_2020-2-6_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35213
CVE: CVE-2021-35223
Published: 2021-08-31
Description: The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20
References: https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-4_release_notes.htm; https://support.solarwinds.com/SuccessCenter/s/article/Execute-Command-Function-Allows-Remote-Code-Execution-RCE-Vulnerability-CVE-2021-35223?language=en_US; https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35223
CVE: CVE-2021-35239
Published: 2021-08-31
Description: A security researcher found a user with Orion map manage rights could store XSS through via text box hyperlink.
CVSS Score: 7.5 (HIGH)
CWE: CWE-79, CWE-79
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm; https://support.solarwinds.com/SuccessCenter/s/article/Mitigate-the-Stored-XSS-in-Maps-text-box-hyperlink-vulnerability-CVE-2021-35239?language=en_US; https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1?language=en_US
CVE: CVE-2021-35240
Published: 2021-08-31
Description: A security researcher stored XSS via a Help Server setting. This affects customers using Internet Explorer, because they do not support 'rel=noopener'.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm; https://support.solarwinds.com/SuccessCenter/s/article/Mitigate-the-Stored-XSS-via-Help-Server-setting-CVE-2021-35240?language=en_US; https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-1?language=en_US
CVE: CVE-2021-39163
Published: 2021-08-31
Description: Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the name, avatar, topic and number of members of a room if they know the ID of the room. This vulnerability is limited to homeservers where the vulnerable homeserver is in the room and untrusted users are permitted to create groups (communities). By default, only homeserver administrators can create groups. However, homeserver administrators can already access this information in the database or using the admin API. As a result, only homeservers where the configuration setting `enable_group_creation` has been set to `true` are impacted. Server administrators should upgrade to 1.41.1 or higher to patch the vulnerability. There are two potential workarounds. Server administrators can set `enable_group_creation` to `false` in their homeserver configuration (this is the default value) to prevent creation of groups by non-administrators. Administrators that are using a reverse proxy could, with partial loss of group functionality, block the endpoints `/_matrix/client/r0/groups/{group_id}/rooms` and `/_matrix/client/unstable/groups/{group_id}/rooms`.
CVSS Score: 3.1 (LOW)
CWE: CWE-200, CWE-863
References: https://github.com/matrix-org/synapse/commit/cb35df940a; https://github.com/matrix-org/synapse/releases/tag/v1.41.1; https://github.com/matrix-org/synapse/security/advisories/GHSA-jj53-8fmw-f2w2
CVE: CVE-2021-21811
Published: 2021-08-31
Description: A memory corruption vulnerability exists in the XML-parsing CreateLabelOrAttrib functionality of AT&T Labs’ Xmill 0.7. A specially crafted XML file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191, CWE-191
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1279; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1279
CVE: CVE-2021-22684
Published: 2021-08-31
Description: Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functions_calloc and mm_zalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-119-04; https://us-cert.cisa.gov/ics/advisories/icsa-21-119-04
CVE: CVE-2021-22929
Published: 2021-08-31
Description: An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-312, CWE-532
References: https://hackerone.com/reports/1249056; https://hackerone.com/reports/1249056
CVE: CVE-2021-22943
Published: 2021-08-31
Description: A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subsequently control the Protect camera(s) assigned to said network. This vulnerability is fixed in UniFi Protect application V1.19.0 and later.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://community.ui.com/releases/Security-Advisory-Bulletin-019-019/90a00abe-d6b6-43c6-92d4-0a0342f1506f; https://community.ui.com/releases/Security-Advisory-Bulletin-019-019/90a00abe-d6b6-43c6-92d4-0a0342f1506f
CVE: CVE-2021-22944
Published: 2021-08-31
Description: A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor with a view-only role and network access to gain the same privileges as the owner of the UniFi Protect application. This vulnerability is fixed in UniFi Protect application V1.19.0 and later.
CVSS Score: 8.0 (HIGH)
References: https://community.ui.com/releases/Security-Advisory-Bulletin-019-019/90a00abe-d6b6-43c6-92d4-0a0342f1506f; https://community.ui.com/releases/Security-Advisory-Bulletin-019-019/90a00abe-d6b6-43c6-92d4-0a0342f1506f
CVE: CVE-2021-35212
Published: 2021-08-31
Description: An SQL injection Privilege Escalation Vulnerability was discovered in the Orion Platform reported by the ZDI Team. A blind Boolean SQL injection which could lead to full read/write over the Orion database content including the Orion certificate for any authenticated user.
CVSS Score: 8.9 (HIGH)
CWE: CWE-89
References: https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm; https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/orion_platform_2020-2-6_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35212
CVE: CVE-2021-37701
Published: 2021-08-31
Description: The npm package "tar" (aka node-tar) before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted directories are not symlinks. Additionally, in order to prevent unnecessary stat calls to determine whether a given path is a directory, paths are cached when directories are created. This logic was insufficient when extracting tar files that contained both a directory and a symlink with the same name as the directory, where the symlink and directory names in the archive entry used backslashes as a path separator on posix systems. The cache checking logic used both `\` and `/` characters as path separators, however `\` is a valid filename character on posix systems. By first creating a directory, and then replacing that directory with a symlink, it was thus possible to bypass node-tar symlink checks on directories, essentially allowing an untrusted tar file to symlink into an arbitrary location and subsequently extracting arbitrary files into that location, thus allowing arbitrary file creation and overwrite. Additionally, a similar confusion could arise on case-insensitive filesystems. If a tar archive contained a directory at `FOO`, followed by a symbolic link named `foo`, then on case-insensitive file systems, the creation of the symbolic link would remove the directory from the filesystem, but _not_ from the internal directory cache, as it would not be treated as a cache hit. A subsequent file entry within the `FOO` directory would then be placed in the target of the symbolic link, thinking that the directory had already been created. These issues were addressed in releases 4.4.16, 5.0.8 and 6.1.7. The v3 branch of node-tar has been deprecated and did not receive patches for these issues. If you are still using a v3 release we recommend you update to a more recent version of node-tar. If this is not possible, a workaround is available in the referenced GHSA-9r2w-394v-53qc.
CVSS Score: 8.2 (HIGH)
CWE: CWE-22, CWE-59, CWE-59
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://github.com/npm/node-tar/security/advisories/GHSA-9r2w-394v-53qc; https://lists.debian.org/debian-lts-announce/2022/12/msg00023.html
CVE: CVE-2021-37712
Published: 2021-08-31
Description: The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability. node-tar aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted directories are not symlinks. Additionally, in order to prevent unnecessary stat calls to determine whether a given path is a directory, paths are cached when directories are created. This logic was insufficient when extracting tar files that contained both a directory and a symlink with names containing unicode values that normalized to the same value. Additionally, on Windows systems, long path portions would resolve to the same file system entities as their 8.3 "short path" counterparts. A specially crafted tar archive could thus include a directory with one form of the path, followed by a symbolic link with a different string that resolves to the same file system entity, followed by a file using the first form. By first creating a directory, and then replacing that directory with a symlink that had a different apparent name that resolved to the same entry in the filesystem, it was thus possible to bypass node-tar symlink checks on directories, essentially allowing an untrusted tar file to symlink into an arbitrary location and subsequently extracting arbitrary files into that location, thus allowing arbitrary file creation and overwrite. These issues were addressed in releases 4.4.18, 5.0.10 and 6.1.9. The v3 branch of node-tar has been deprecated and did not receive patches for these issues. If you are still using a v3 release we recommend you update to a more recent version of node-tar. If this is not possible, a workaround is available in the referenced GHSA-qq89-hq3f-393p.
CVSS Score: 8.2 (HIGH)
CWE: CWE-22, CWE-59, CWE-59
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://github.com/npm/node-tar/security/advisories/GHSA-qq89-hq3f-393p; https://lists.debian.org/debian-lts-announce/2022/12/msg00023.html