deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-23387
Published: 2021-05-24
Description: The package trailing-slash before 2.0.1 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint (such as https://example.com//attacker.example/). The vulnerable code is in index.js::createTrailing(), as the web server uses relative URLs instead of absolute URLs.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601
References: https://github.com/fardog/trailing-slash/blob/f640ece055fe85275c983de5eb94661b95e35670/index.js%23L36; https://github.com/fardog/trailing-slash/commit/f8e66f[PII_REDACTED]e5a119d430203077d8f05048; https://snyk.io/vuln/SNYK-JS-TRAILINGSLASH-1085707
CVE: CVE-2021-30108
Published: 2021-05-24
Description: Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the server can make a request to it.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://github.com/liufee/cms/issues/57; https://github.com/liufee/cms/issues/57
CVE: CVE-2021-33525
Published: 2021-05-24
Description: EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in the nagios_path parameter to lilac/export.php, as demonstrated by %26%26+curl to insert an "&& curl" substring for the shell.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/ArianeBlow/LilacPathVUln/blob/main/eon-pwn.sh; https://github.com/EyesOfNetworkCommunity/eonweb/releases; https://github.com/ArianeBlow/LilacPathVUln/blob/main/eon-pwn.sh
CVE: CVE-2021-33561
Published: 2021-05-24
Description: A stored cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customer_name in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when information is fetched from the backend, e.g., in admin/customers/list.html.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/shopizer-ecommerce/shopizer/commit/197f8c78c8f673b957e41ca2c823afc654c19271; https://github.com/shopizer-ecommerce/shopizer/compare/2.16.0...2.17.0; https://www.exploit-db.com/exploits/49901
CVE: CVE-2021-33562
Published: 2021-05-24
Description: A reflected cross-site scripting (XSS) vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via the ref parameter to a page about an arbitrary product, e.g., a product/insert-product-name-here.html/ref= URL.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/shopizer-ecommerce/shopizer/commit/197f8c78c8f673b957e41ca2c823afc654c19271; https://github.com/shopizer-ecommerce/shopizer/compare/2.16.0...2.17.0; https://www.exploit-db.com/exploits/49901
CVE: CVE-2021-33563
Published: 2021-05-24
Description: Koel before 5.1.4 lacks login throttling, lacks a password strength policy, and shows whether a failed login attempt had a valid username. This might make brute-force attacks easier.
CVSS Score: 7.5 (HIGH)
CWE: CWE-916
References: https://github.com/koel/koel/releases/tag/v5.1.4; https://huntr.dev/bounties/1-other-koel/koel/; https://github.com/koel/koel/releases/tag/v5.1.4
CVE: CVE-2020-9450
Published: 2021-05-25
Description: An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe exposes a REST API that can be used by everyone, even unprivileged users. This API is used to communicate from the GUI to anti_ransomware_service.exe. This can be exploited to add an arbitrary malicious executable to the whitelist, or even exclude an entire drive from being monitored by anti_ransomware_service.exe.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://danishcyberdefence.dk/blog; https://madsjoensen.dk/cve-2020-9450/; https://www.acronis.com
CVE: CVE-2020-9451
Published: 2021-05-25
Description: An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe keeps a log in a folder where unprivileged users have write permissions. The logs are generated in a predictable pattern, allowing an unprivileged user to create a hardlink from a (not yet created) log file to anti_ransomware_service.exe. On reboot, this forces the anti_ransomware_service to try to write its log into its own process, crashing in a SHARING VIOLATION. This crash occurs on every reboot.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://danishcyberdefence.dk/blog; https://madsjoensen.dk/cve-2020-9451/; https://www.acronis.com
CVE: CVE-2020-9452
Published: 2021-05-25
Description: An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe includes functionality to quarantine files by copying a suspected ransomware file from one directory to another using SYSTEM privileges. Because unprivileged users have write permissions in the quarantine folder, it is possible to control this privileged write with a hardlink. This means that an unprivileged user can write/overwrite arbitrary files in arbitrary folders. Escalating privileges to SYSTEM is trivial with arbitrary writes. While the quarantine feature is not enabled by default, it can be forced to copy the file to the quarantine by communicating with anti_ransomware_service.exe through its REST API.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://danishcyberdefence.dk/blog; https://madsjoensen.dk/cve-2020-9452/; https://www.acronis.com
CVE: CVE-2021-20096
Published: 2021-05-25
Description: Cross-site request forgery in OpenOversight 0.6.4 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352
References: https://www.tenable.com/security/research/tra-2021-18; https://www.tenable.com/security/research/tra-2021-18
CVE: CVE-2021-30187
Published: 2021-05-25
Description: CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-78
References: https://customers.codesys.com/index.php; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14727&token=25159b0fc4355f4c6bc2e074a519a9d0cdb23fbb&download=; https://customers.codesys.com/index.php
CVE: CVE-2021-30186
Published: 2021-05-25
Description: CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://customers.codesys.com/index.php; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14725&token=08691519ef764b252630759eff925890176ecd78&download=; https://customers.codesys.com/index.php
CVE: CVE-2021-30188
Published: 2021-05-25
Description: CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://customers.codesys.com/index.php; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14725&token=08691519ef764b252630759eff925890176ecd78&download=; https://customers.codesys.com/index.php
CVE: CVE-2021-30189
Published: 2021-05-25
Description: CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://customers.codesys.com/index.php; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14726&token=553da5d11234bbe1ceed59969d419a71bb8c8747&download=; https://customers.codesys.com/index.php
CVE: CVE-2021-30190
Published: 2021-05-25
Description: CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://customers.codesys.com/index.php; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14726&token=553da5d11234bbe1ceed59969d419a71bb8c8747&download=; https://customers.codesys.com/index.php
CVE: CVE-2021-30191
Published: 2021-05-25
Description: CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://customers.codesys.com/index.php; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14726&token=553da5d11234bbe1ceed59969d419a71bb8c8747&download=; https://customers.codesys.com/index.php
CVE: CVE-2021-30192
Published: 2021-05-25
Description: CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check.
CVSS Score: 9.8 (CRITICAL)
References: https://customers.codesys.com/index.php; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14726&token=553da5d11234bbe1ceed59969d419a71bb8c8747&download=; https://customers.codesys.com/index.php
CVE: CVE-2021-30193
Published: 2021-05-25
Description: CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://customers.codesys.com/index.php; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14726&token=553da5d11234bbe1ceed59969d419a71bb8c8747&download=; https://customers.codesys.com/index.php
CVE: CVE-2021-30194
Published: 2021-05-25
Description: CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://customers.codesys.com/index.php; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14726&token=553da5d11234bbe1ceed59969d419a71bb8c8747&download=; https://customers.codesys.com/index.php
CVE: CVE-2021-30195
Published: 2021-05-25
Description: CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://customers.codesys.com/index.php; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14725&token=08691519ef764b252630759eff925890176ecd78&download=; https://customers.codesys.com/index.php
CVE: CVE-2021-27821
Published: 2021-05-25
Description: The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerability which can lead to attackers carrying out arbitrary code execution.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://openwrt.com; http://openwrtorg.com; http://openwrt.com
CVE: CVE-2021-27823
Published: 2021-05-25
Description: An information disclosure vulnerability was discovered in /index.class.php (via port 8181) on NetWave System 1.0 which allows unauthenticated attackers to exfiltrate sensitive information from the system.
CVSS Score: 7.5 (HIGH)
References: https://www.mediateknet.net/; https://www.netwavesystem.net/; https://www.mediateknet.net/
CVE: CVE-2021-29201
Published: 2021-05-25
Description: A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us
CVE: CVE-2021-29202
Published: 2021-05-25
Description: A local buffer overflow vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-120
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us
CVE: CVE-2021-29204
Published: 2021-05-25
Description: A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us
CVE: CVE-2021-29205
Published: 2021-05-25
Description: A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us
CVE: CVE-2021-29206
Published: 2021-05-25
Description: A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us
CVE: CVE-2021-29207
Published: 2021-05-25
Description: A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us
CVE: CVE-2021-33425
Published: 2021-05-25
Description: A stored cross-site scripting (XSS) vulnerability was discovered in the Web Interface for OpenWRT LuCI version 19.07 which allows attackers to inject arbitrary Javascript in the OpenWRT Hostname via the Hostname Change operation.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://openwrt.com; http://www.openwall.com/lists/oss-security/2021/11/09/1; http://openwrt.com
CVE: CVE-2021-29208
Published: 2021-05-25
Description: A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-74, CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us
CVE: CVE-2021-29209
Published: 2021-05-25
Description: A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-74, CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us
CVE: CVE-2021-29210
Published: 2021-05-25
Description: A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-74, CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us
CVE: CVE-2021-29211
Published: 2021-05-25
Description: A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 (iLO 4); HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 (iLO 5) for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380 Gen10 H version(s): Prior to version 2.78.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04134en_us
CVE: CVE-2020-10064
Published: 2021-05-25
Description: Improper Input Frame Validation in ieee802154 Processing. Zephyr versions >= v1.14.2, >= v2.2.0 contain Stack-based Buffer Overflow (CWE-121), Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7
CVSS Score: 8.3 (HIGH)
CWE: CWE-121, CWE-122, CWE-787
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3gvq-h42f-v3c7
CVE: CVE-2020-10065
Published: 2021-05-25
Description: Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Length Parameter Inconsistency (CWE-130). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c
CVSS Score: 3.8 (LOW)
CWE: CWE-130, CWE-787
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hg2w-62p6-g67c
CVE: CVE-2020-10066
Published: 2021-05-25
Description: Incorrect Error Handling in Bluetooth HCI core. Zephyr versions >= v1.14.2, >= v2.2.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gc66-xfrc-24qr
CVSS Score: 2.5 (LOW)
CWE: CWE-476, CWE-476
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gc66-xfrc-24qr; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gc66-xfrc-24qr
CVE: CVE-2020-10069
Published: 2021-05-25
Description: Zephyr Bluetooth unchecked packet data results in denial of service. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Parameters (CWE-233). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-f6vh-7v4x-8fjp
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-233
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-f6vh-7v4x-8fjp; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-f6vh-7v4x-8fjp
CVE: CVE-2020-10072
Published: 2021-05-25
Description: Improper Handling of Insufficient Permissions or Privileges in zephyr. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Insufficient Permissions or Privileges (CWE-280). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-vf79-hqwm-w4xc
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-280
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-vf79-hqwm-w4xc; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-vf79-hqwm-w4xc
CVE: CVE-2020-13598
Published: 2021-05-25
Description: FS: Buffer Overflow when enabling Long File Names in FAT_FS and calling fs_stat. Zephyr versions >= v1.14.2, >= v2.3.0 contain Stack-based Buffer Overflow (CWE-121). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7fhv-rgxr-x56h
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-121, CWE-787
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7fhv-rgxr-x56h; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7fhv-rgxr-x56h
CVE: CVE-2020-13599
Published: 2021-05-25
Description: Security problem with settings and littlefs. Zephyr versions >= 1.14.2, >= 2.3.0 contain Incorrect Default Permissions (CWE-276). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5qhg-j6wc-4f6q
CVSS Score: 3.3 (LOW)
CWE: CWE-276, CWE-276
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5qhg-j6wc-4f6q; https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1199; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5qhg-j6wc-4f6q
CVE: CVE-2020-13600
Published: 2021-05-25
Description: Malformed SPI in response for eswifi can corrupt kernel memory. Zephyr versions >= 1.14.2, >= 2.3.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr
CVSS Score: 7.0 (HIGH)
CWE: CWE-122, CWE-787
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hx4p-j86p-2mhr
CVE: CVE-2020-13601
Published: 2021-05-25
Description: Possible read out of bounds in dns read. Zephyr versions >= 1.14.2, >= 2.3.0 contain Out-of-bounds Read (CWE-125). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-mm57-9hqw-qh44
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-125, CWE-125
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-mm57-9hqw-qh44; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-mm57-9hqw-qh44
CVE: CVE-2020-13602
Published: 2021-05-25
Description: Remote Denial of Service in LwM2M do_write_op_tlv. Zephyr versions >= 1.14.2, >= 2.2.0 contain Improper Input Validation (CWE-20), Loop with Unreachable Exit Condition ('Infinite Loop') (CWE-835). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-g9mg-fj58-6fqh
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20, CWE-835, CWE-20, CWE-835
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-g9mg-fj58-6fqh; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-g9mg-fj58-6fqh
CVE: CVE-2020-13603
Published: 2021-05-25
Description: Integer Overflow in memory allocating functions. Zephyr versions >= 1.14.2, >= 2.4.0 contain Integer Overflow or Wraparound (CWE-190). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94vp-8gc2-rm45
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-190, CWE-190
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94vp-8gc2-rm45; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-94vp-8gc2-rm45
CVE: CVE-2020-4839
Published: 2021-05-25
Description: IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privileged attacker could exploit this vulnerability and cause a denial of service. IBM X-Force ID: 190037.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-787
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/190037; https://www.ibm.com/support/pages/node/6454303; https://exchange.xforce.ibmcloud.com/vulnerabilities/190037
CVE: CVE-2021-21657
Published: 2021-05-25
Description: Jenkins Filesystem Trigger Plugin 0.40 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVSS Score: 8.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2021/05/25/3; https://www.jenkins.io/security/advisory/2021-05-25/#SECURITY-2339; http://www.openwall.com/lists/oss-security/2021/05/25/3