deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-32761
Published: 2021-07-21
Description: Redis is an in-memory database that persists on disk. A vulnerability involving out-of-bounds read and integer overflow to buffer overflow exists starting with version 2.2 and prior to versions 5.0.13, 6.0.15, and 6.2.5. On 32-bit systems, Redis `*BIT*` command are vulnerable to integer overflow that can potentially be exploited to corrupt the heap, leak arbitrary heap contents or trigger remote code execution. The vulnerability involves changing the default `proto-max-bulk-len` configuration parameter to a very large value and constructing specially crafted commands bit commands. This problem only affects Redis on 32-bit platforms, or compiled as a 32-bit binary. Redis versions 5.0.`3m 6.0.15, and 6.2.5 contain patches for this issue. An additional workaround to mitigate the problem without patching the `redis-server` executable is to prevent users from modifying the `proto-max-bulk-len` configuration parameter. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-680, CWE-190
References: https://github.com/redis/redis/security/advisories/GHSA-8wxq-j7rp-g8wj; https://lists.debian.org/debian-lts-announce/2021/07/msg00017.html; https://lists.debian.org/debian-lts-announce/2021/08/msg00026.html
CVE: CVE-2021-32775
Published: 2021-07-21
Description: Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.4, a non admin user can get access to many class/field values through GroupBy Dashlet error message. This issue is fixed in versions 2.7.4 and 3.0.0.
CVSS Score: 7.7 (HIGH)
CWE: CWE-209, CWE-209
References: https://github.com/Combodo/iTop/security/advisories/GHSA-xh7w-rrp3-fhpq; https://github.com/Combodo/iTop/security/advisories/GHSA-xh7w-rrp3-fhpq
CVE: CVE-2021-32776
Published: 2021-07-21
Description: Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.4, CSRF tokens can be reused by a malicious user, as on Windows servers no cleanup is done on CSRF tokens. This issue is fixed in versions 2.7.4 and 3.0.0.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/Combodo/iTop/security/advisories/GHSA-cxw7-2x7h-f7pr; https://github.com/Combodo/iTop/security/advisories/GHSA-cxw7-2x7h-f7pr
CVE: CVE-2021-37220
Published: 2021-07-21
Description: MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://git.ghostscript.com/?p=mupdf.git%3Bh=f5712c9949d026e4b891b25837edd2edc166151f; https://bugs.ghostscript.com/show_bug.cgi?id=703791; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TKRMREIYUBGG2GV73CU7BJNW2Q34IP23/
CVE: CVE-2021-1089
Published: 2021-07-22
Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5211; https://nvidia.custhelp.com/app/answers/detail/a_id/5211
CVE: CVE-2021-1090
Published: 2021-07-22
Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for control calls where the software reads or writes to a buffer by using an index or pointer that references a memory location after the end of the buffer, which may lead to data tampering or denial of service.
CVSS Score: 7.1 (HIGH)
CWE: CWE-120
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5211; https://security.gentoo.org/glsa/202310-02; https://nvidia.custhelp.com/app/answers/detail/a_id/5211
CVE: CVE-2021-1091
Published: 2021-07-22
Description: NVIDIA GPU Display driver for Windows contains a vulnerability where an unprivileged user can create a file hard link that causes the driver to overwrite a file that requires elevated privilege to modify, which could lead to data loss or denial of service.
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5211; https://nvidia.custhelp.com/app/answers/detail/a_id/5211
CVE: CVE-2021-1092
Published: 2021-07-22
Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the NVIDIA Control Panel application where it is susceptible to a Windows file system symbolic link attack where an unprivileged attacker can cause the applications to overwrite privileged files, resulting in potential denial of service or data loss.
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5211; https://nvidia.custhelp.com/app/answers/detail/a_id/5211
CVE: CVE-2021-1093
Published: 2021-07-22
Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in firmware where the driver contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary, and may lead to denial of service or system crash.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-404
References: https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html; https://nvidia.custhelp.com/app/answers/detail/a_id/5211; https://security.gentoo.org/glsa/202310-02
CVE: CVE-2021-1094
Published: 2021-07-22
Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an out of bounds array access may lead to denial of service or information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-125
References: https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html; https://nvidia.custhelp.com/app/answers/detail/a_id/5211; https://security.gentoo.org/glsa/202310-02
CVE: CVE-2021-1095
Published: 2021-07-22
Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html; https://nvidia.custhelp.com/app/answers/detail/a_id/5211; https://security.gentoo.org/glsa/202310-02
CVE: CVE-2021-1096
Published: 2021-07-22
Description: NVIDIA Windows GPU Display Driver for Windows contains a vulnerability in the NVIDIA kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where dereferencing a NULL pointer may lead to a system crash.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5211; https://nvidia.custhelp.com/app/answers/detail/a_id/5211
CVE: CVE-2021-36934
Published: 2021-07-22
Description: <p>An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p>An attacker must have the ability to execute code on a victim system to exploit this vulnerability.</p>
<p>After installing this security update, you <em>must</em> manually delete all shadow copies of system files, including the SAM database, to fully mitigate this vulnerabilty. <strong>Simply installing this security update will not fully mitigate this vulnerability.</strong> See <a href="https://support.microsoft.com/topic/1ceaa637-aaa3-4b58-a48b-baf72a2fa9e7">KB5005357- Delete Volume Shadow Copies</a>.</p>
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/164006/HiveNightmare-AKA-SeriousSAM.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36934; http://packetstormsecurity.com/files/164006/HiveNightmare-AKA-SeriousSAM.html
CVE: CVE-2021-28131
Published: 2021-07-22
Description: Impala sessions use a 16 byte secret to verify that the session is not being hijacked by another user. However, these secrets appear in the Impala logs, therefore Impala users with access to the logs can use another authenticated user's sessions with specially constructed requests. This means the attacker is able to execute statements for which they don't have the necessary privileges otherwise. Impala deployments with Apache Sentry or Apache Ranger authorization enabled may be vulnerable to privilege escalation if an authenticated attacker is able to hijack a session or query from another authenticated user with privileges not assigned to the attacker. Impala deployments with audit logging enabled may be vulnerable to incorrect audit logging as a user could undertake actions that were logged under the name of a different authenticated user. Constructing an attack requires a high degree of technical sophistication and access to the Impala system as an authenticated user. Mitigation: If an Impala deployment uses Apache Sentry, Apache Ranger or audit logging, then users should upgrade to a version of Impala with the fix for IMPALA-10600. The Impala 4.0 release includes this fix. This hides session secrets from the logs to eliminate the risk of any attack using this mechanism. In lieu of an upgrade, restricting access to logs that expose secrets will reduce the risk of an attack. Restricting access to the Impala deployment to trusted users will also reduce the risk of an attack. Log redaction techniques can be used to redact secrets from the logs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-288, CWE-532
References: http://www.openwall.com/lists/oss-security/2021/07/22/3; https://lists.apache.org/thread.html/rb54f54a91b7abaf1ed772f3a9cec290153c24881b25567b06f1b4a8c%40%3Cannounce.apache.org%3E; https://lists.apache.org/thread.html/rb54f54a91b7abaf1ed772f3a9cec290153c24881b25567b06f1b4a8c%40%3Cuser.impala.apache.org%3E
CVE: CVE-2021-20596
Published: 2021-07-22
Description: NULL Pointer Dereference in MELSEC-F Series FX3U-ENET firmware version 1.14 and prior, FX3U-ENET-L firmware version 1.14 and prior and FX3U-ENET-P502 firmware version 1.14 and prior allows a remote unauthenticated attacker to cause a DoS condition in communication by sending specially crafted packets. Control by MELSEC-F series PLC is not affected and system reset is required for recovery.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://jvn.jp/vu/JVNVU94348759/index.html; https://us-cert.cisa.gov/ics/advisories/icsa-21-201-01; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-006_en.pdf
CVE: CVE-2021-22522
Published: 2021-07-22
Description: Reflected Cross-Site Scripting vulnerability in Micro Focus Verastream Host Integrator, affecting version version 7.8 Update 1 and earlier versions. The vulnerability could allow disclosure of confidential data.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://support.microfocus.com/kb/doc.php?id=7025169; https://support.microfocus.com/kb/doc.php?id=7025169
CVE: CVE-2021-22523
Published: 2021-07-22
Description: XML External Entity vulnerability in Micro Focus Verastream Host Integrator, affecting version 7.8 Update 1 and earlier versions. The vulnerability could allow the control of web browser and hijacking user sessions.
CVSS Score: 7.6 (HIGH)
CWE: CWE-611
References: https://support.microfocus.com/kb/doc.php?id=7025169; https://support.microfocus.com/kb/doc.php?id=7025169
CVE: CVE-2021-30049
Published: 2021-07-22
Description: SysAid 20.3.64 b14 is affected by Cross Site Scripting (XSS) via a /KeepAlive.jsp?stamp= URI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://eh337.net/2021/03/30/sysaid/; https://eh337.net/2021/03/30/sysaid/
CVE: CVE-2021-30486
Published: 2021-07-22
Description: SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp (GET computerID), AssetManagementChart.jsp (POST group1), AssetManagementList.jsp (GET computerID or group1), or AssetManagementSummary.jsp (GET group1).
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://eh337.net/2021/04/10/sysaid-ii/; https://eh337.net/2021/04/10/sysaid-ii/
CVE: CVE-2021-35520
Published: 2021-07-22
Description: A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution, denial of services, and information disclosure via serial ports.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-787
References: https://biometricdevices.idemia.com/s/global-search/[PII_REDACTED]JJa0zAAD?sharing=true; https://biometricdevices.idemia.com/s/global-search/[PII_REDACTED]JJa1nAAD?sharing=true; https://www.idemia.com
CVE: CVE-2021-35521
Published: 2021-07-22
Description: A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve denial of services and information disclosure via TCP/IP packets.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-22
References: https://biometricdevices.idemia.com/s/global-search/[PII_REDACTED]JJa0zAAD?sharing=true; https://biometricdevices.idemia.com/s/global-search/[PII_REDACTED]JJa1nAAD?sharing=true; https://www.idemia.com
CVE: CVE-2021-35522
Published: 2021-07-22
Description: A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2, Sigma devices before 4.9.4, and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution, denial of services, and information disclosure via TCP/IP packets.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://biometricdevices.idemia.com/s/global-search/[PII_REDACTED]JJa0zAAD?sharing=true; https://biometricdevices.idemia.com/s/global-search/[PII_REDACTED]JJa1nAAD?sharing=true; https://www.idemia.com
CVE: CVE-2019-20467
Published: 2021-07-22
Description: An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2[PII_REDACTED]17 devices. The device by default has a TELNET interface available (which is not advertised or functionally used, but is nevertheless available). Two backdoor accounts (root and default) exist that can be used on this interface. The usernames and passwords of the backdoor accounts are the same on all devices. Attackers can use these backdoor accounts to obtain access and execute code as root within the device.
CVSS Score: 9.8 (CRITICAL)
References: http://seclists.org/fulldisclosure/2024/Jul/14; https://www.eurofins-cybersecurity.com/news/connected-devices-baby-monitors-part-2/; https://www.sannce.com
CVE: CVE-2021-30110
Published: 2021-07-22
Description: dttray.exe in Greyware Automation Products Inc Domain Time II before 5.2.b.20210331 allows remote attackers to execute arbitrary code via a URL to a malicious update in a spoofed response to the UDP query used to check for updates.
CVSS Score: 7.5 (HIGH)
References: https://blog.grimm-co.com/2021/04/time-for-upgrade.html; https://www.greyware.com/software/domaintime/; https://www.greyware.com/software/domaintime/v5/installation/v5x.asp#currentVersion
CVE: CVE-2021-22001
Published: 2021-07-22
Description: In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in response when deletion request of an identity provider( IdP) of type “oauth 1.0” was sent to UAA server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://www.cloudfoundry.org/blog/cve-2021-22001-sensitive-info-leakage-in-uaa-during-identity-provider-deletion/; https://www.cloudfoundry.org/blog/cve-2021-22001-sensitive-info-leakage-in-uaa-during-identity-provider-deletion/
CVE: CVE-2021-29143
Published: 2021-07-22
Description: A remote execution of arbitrary commands vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions prior to 10.04.3070, 10.05.xxxx - versions prior to 10.05.0070, 10.06.xxxx - versions prior to 10.06.0110, 10.07.xxxx - versions prior to 10.07.0001. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-013.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-013.txt
CVE: CVE-2021-29148
Published: 2021-07-22
Description: A local cross-site scripting (XSS) vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions prior to 10.04.3070, 10.05.xxxx - versions prior to 10.05.0070, 10.06.xxxx - versions prior to 10.06.0110, 10.07.xxxx - versions prior to 10.07.0001. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-013.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-013.txt
CVE: CVE-2021-29149
Published: 2021-07-22
Description: A local bypass security restrictions vulnerability was discovered in Aruba CX 6200F Switch Series, Aruba 6300 Switch Series, Aruba 6400 Switch Series, Aruba 8320 Switch Series, Aruba 8325 Switch Series, Aruba 8400 Switch Series, Aruba CX 8360 Switch Series version(s): Aruba AOS-CX firmware: 10.04.xxxx - versions prior to 10.04.3070, 10.05.xxxx - versions prior to 10.05.0070, 10.06.xxxx - versions prior to 10.06.0110, 10.07.xxxx - versions prior to 10.07.0001. Aruba has released upgrades for Aruba AOS-CX devices that address this security vulnerability.
CVSS Score: 6.2 (MEDIUM)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-013.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-013.txt
CVE: CVE-2021-34431
Published: 2021-07-22
Description: In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=573191; https://bugs.eclipse.org/bugs/show_bug.cgi?id=573191
CVE: CVE-2021-1518
Published: 2021-07-22
Description: A vulnerability in the REST API of Cisco Firepower Device Manager (FDM) On-Box Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. This vulnerability is due to insufficient sanitization of user input on specific REST API commands. An attacker could exploit this vulnerability by sending a crafted HTTP request to the API subsystem of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system. To exploit this vulnerability, an attacker would need valid low-privileged user credentials.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-94, CWE-94
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fdm-rce-Rx6vVurq; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fdm-rce-Rx6vVurq
CVE: CVE-2021-1599
Published: 2021-07-22
Description: A vulnerability in the web-based management interface of Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, remote attacker to perform a cross-site scripting (XSS) attack against a user. This vulnerability is due to insufficient input validation of a parameter that is used by the web-based management interface. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary code in the context of the interface, access sensitive, browser-based information, or cause an affected device to reboot under certain conditions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvp-xss-yvE6L8Zq; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cvp-xss-yvE6L8Zq
CVE: CVE-2021-1600
Published: 2021-07-22
Description: Multiple vulnerabilities in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to access sensitive internal services from an external interface. These vulnerabilities are due to insufficient restrictions for IPv4 or IPv6 packets that are received on the external management interface. An attacker could exploit these vulnerabilities by sending specific traffic to this interface on an affected device. A successful exploit could allow the attacker to access sensitive internal services and make configuration changes on the affected device.
CVSS Score: 8.3 (HIGH)
CWE: CWE-284
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsi2-iptaclbp-L8Dzs8m8; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsi2-iptaclbp-L8Dzs8m8
CVE: CVE-2021-1601
Published: 2021-07-22
Description: Multiple vulnerabilities in Cisco Intersight Virtual Appliance could allow an unauthenticated, adjacent attacker to access sensitive internal services from an external interface. These vulnerabilities are due to insufficient restrictions for IPv4 or IPv6 packets that are received on the external management interface. An attacker could exploit these vulnerabilities by sending specific traffic to this interface on an affected device. A successful exploit could allow the attacker to access sensitive internal services and make configuration changes on the affected device.
CVSS Score: 8.3 (HIGH)
CWE: CWE-284
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsi2-iptaclbp-L8Dzs8m8; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsi2-iptaclbp-L8Dzs8m8
CVE: CVE-2021-1614
Published: 2021-07-22
Description: A vulnerability in the Multiprotocol Label Switching (MPLS) packet handling function of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to gain access to information stored in MPLS buffer memory. This vulnerability is due to insufficient handling of malformed MPLS packets that are processed by a device that is running Cisco SD-WAN Software. An attacker could exploit this vulnerability by sending a crafted MPLS packet to an affected device that is running Cisco SD-WAN Software or Cisco SD-WAN vManage Software. A successful exploit could allow the attacker to gain unauthorized access to sensitive information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-126
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdw-mpls-infodisclos-MSSRFkZq; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdw-mpls-infodisclos-MSSRFkZq