deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-45971
Published: 2022-01-06
Description: An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (CommBufferData).
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.insyde.com/security-pledge
CVE: CVE-2021-43947
Published: 2022-01-06
Description: Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to execute arbitrary code via a Remote Code Execution (RCE) vulnerability in the Email Templates feature. This issue bypasses the fix of https://jira.atlassian.com/browse/JSDSERVER-8665. The affected versions are before version 8.13.15, and from version 8.14.0 before 8.20.3.
CVSS Score: 7.2 (HIGH)
References: https://jira.atlassian.com/browse/JRASERVER-73067; https://jira.atlassian.com/browse/JRASERVER-73067
CVE: CVE-2022-0121
Published: 2022-01-06
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hoppscotch hoppscotch/hoppscotch.This issue affects hoppscotch/hoppscotch before 2.1.1.
CVSS Score: 8.0 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/hoppscotch/hoppscotch/commit/86ef1a4e143ea5bb0c7b309574127cc39d4faa74; https://huntr.dev/bounties/b70a6191-8226-4ac6-b817-cae7332a68ee; https://github.com/hoppscotch/hoppscotch/commit/86ef1a4e143ea5bb0c7b309574127cc39d4faa74
CVE: CVE-2021-46141
Published: 2022-01-06
Description: An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://blog.hartwork.org/posts/uriparser-096-with-security-fixes-released/; https://github.com/uriparser/uriparser/issues/121; https://github.com/uriparser/uriparser/pull/124
CVE: CVE-2021-46142
Published: 2022-01-06
Description: An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://blog.hartwork.org/posts/uriparser-096-with-security-fixes-released/; https://github.com/uriparser/uriparser/issues/122; https://github.com/uriparser/uriparser/pull/124
CVE: CVE-2021-46143
Published: 2022-01-06
Description: In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
CVSS Score: 8.1 (HIGH)
CWE: CWE-190, CWE-190
References: http://www.openwall.com/lists/oss-security/2022/01/17/3; https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf; https://github.com/libexpat/libexpat/issues/532
CVE: CVE-2021-46144
Published: 2022-01-06
Description: Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets (CSS) token sequences.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugs.debian.org/1003027; https://github.com/roundcube/roundcubemail/commit/8894fddd59b770399eed4ef8d4da5773913b5bf0; https://github.com/roundcube/roundcubemail/commit/b2400a4b592e3094b6c84e6000d512f99ae0eed8
CVE: CVE-2022-0122
Published: 2022-01-06
Description: forge is vulnerable to URL Redirection to Untrusted Site
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/digitalbazaar/forge/commit/db8016c805371e72b06d8e2edfe0ace0df934a5e; https://huntr.dev/bounties/41852c50-3c6d-4703-8c55-4db27164a4ae; https://github.com/digitalbazaar/forge/commit/db8016c805371e72b06d8e2edfe0ace0df934a5e
CVE: CVE-2022-22704
Published: 2022-01-06
Description: The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expected that systemd would (in effect) determine part of the configuration.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-909
References: https://gitlab.alpinelinux.org/alpine/aports/-/issues/13368; https://gitlab.alpinelinux.org/alpine/aports/-/issues/13368
CVE: CVE-2021-46145
Published: 2022-01-06
Description: The keyfob subsystem in Honda Civic 2012 vehicles allows a replay attack for unlocking. This is related to a non-expiring rolling code and counter resynchronization.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-294
References: http://starvlab.qianxin.com/?p=409; https://tiger-team-1337.blogspot.com/2022/01/honda-civic-keyfob-system-affected-by.html; https://twitter.com/Kevin2600/status/[PII_REDACTED]08780804?s=20
CVE: CVE-2022-22707
Published: 2022-01-06
Description: In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes representing -1), as demonstrated by remote denial of service (daemon crash) in a non-default configuration. The non-default configuration requires handling of the Forwarded header in a somewhat unusual manner. Also, a 32-bit system is much more likely to be affected than a 64-bit system.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-787
References: https://redmine.lighttpd.net/issues/3134; https://www.debian.org/security/2022/dsa-5040; https://redmine.lighttpd.net/issues/3134
CVE: CVE-2021-36737
Published: 2022-01-06
Description: The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the v3-demo-portlet.war artifact
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://lists.apache.org/thread/x7kt47bf358x8sg9qg02zt0dmdrtow25; https://lists.apache.org/thread/x7kt47bf358x8sg9qg02zt0dmdrtow25
CVE: CVE-2021-36738
Published: 2022-01-06
Description: The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://lists.apache.org/thread/11j19v1gjsk7o6o8nch1xrydow9b8lll; https://lists.apache.org/thread/11j19v1gjsk7o6o8nch1xrydow9b8lll
CVE: CVE-2021-36739
Published: 2022-01-06
Description: The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting (XSS) attacks.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://lists.apache.org/thread/m5j87nn1lmvzp8b9lmh7gqq68g5lnb7p; https://lists.apache.org/thread/m5j87nn1lmvzp8b9lmh7gqq68g5lnb7p
CVE: CVE-2021-44351
Published: 2022-01-06
Description: An arbitrary file read vulnerability exists in NavigateCMS 2.9 via /navigate/navigate_download.php id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/NavigateCMS/Navigate-CMS/issues/28; https://github.com/NavigateCMS/Navigate-CMS/issues/28
CVE: CVE-2021-44564
Published: 2022-01-06
Description: A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access to the SYNC device and knowledge of its IP address. The attack exploits the unsecured communication channel used between the administration tool Easyconnect and the SYNC device (in the affected family of SYNC products).
CVSS Score: 8.1 (HIGH)
References: https://kalkitech.com/wp-content/uploads/CYB_33631_Advisory.pdf; https://www.kalkitech.com/cybersecurity/; https://kalkitech.com/wp-content/uploads/CYB_33631_Advisory.pdf
CVE: CVE-2021-27738
Published: 2022-01-06
Description: All request mappings in `StreamingCoordinatorController.java` handling `/kylin/api/streaming_coordinator/*` REST API endpoints did not include any security checks, which allowed an unauthenticated user to issue arbitrary requests, such as assigning/unassigning of streaming cubes, creation/modification and deletion of replica sets, to the Kylin Coordinator. For endpoints accepting node details in HTTP message body, unauthenticated (but limited) server-side request forgery (SSRF) can be achieved. This issue affects Apache Kylin Apache Kylin 3 versions prior to 3.1.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918, CWE-918
References: http://www.openwall.com/lists/oss-security/2022/01/06/6; https://lists.apache.org/thread/vkohh0to2vzwymyb2x13fszs3cs3vd70; http://www.openwall.com/lists/oss-security/2022/01/06/6
CVE: CVE-2021-31522
Published: 2022-01-06
Description: Kylin can receive user input and load any class through Class.forName(...). This issue affects Apache Kylin 2 version 2.6.6 and prior versions; Apache Kylin 3 version 3.1.2 and prior versions; Apache Kylin 4 version 4.0.0 and prior versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-470
References: http://www.openwall.com/lists/oss-security/2022/01/06/4; https://lists.apache.org/thread/hh5crx3yr701zd8wtpqo1mww2rlkvznw; http://www.openwall.com/lists/oss-security/2022/01/06/4
CVE: CVE-2021-36774
Published: 2022-01-06
Description: Apache Kylin allows users to read data from other database systems using JDBC. The MySQL JDBC driver supports certain properties, which, if left unmitigated, can allow an attacker to execute arbitrary code from a hacker-controlled malicious MySQL server within Kylin server processes. This issue affects Apache Kylin 2 version 2.6.6 and prior versions; Apache Kylin 3 version 3.1.2 and prior versions.
CVSS Score: 6.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2022/01/06/5; https://lists.apache.org/thread/lchpcvoolc6w8zc6vo1wstk8zbfqv2ow; http://www.openwall.com/lists/oss-security/2022/01/06/5
CVE: CVE-2021-44584
Published: 2022-01-06
Description: Cross-site scripting (XSS) vulnerability in index.php in emlog version <= pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/emlog/emlog/commit/3f89610f721120ded3ff491cb9cd99d9927c7582; https://github.com/emlog/emlog/issues/113; https://github.com/emlog/emlog/commit/3f89610f721120ded3ff491cb9cd99d9927c7582
CVE: CVE-2021-44878
Published: 2022-01-06
Description: If an OpenID Connect provider supports the "none" algorithm (i.e., tokens with no signature), pac4j v5.3.0 (and prior) does not refuse it without an explicit configuration on its side or for the "idtoken" response type which is not secure and violates the OpenID Core Specification. The "none" algorithm does not require any signature verification when validating the ID tokens, which allows the attacker to bypass the token validation by injecting a malformed ID token using "none" as the value of "alg" key in the header with an empty signature value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347
References: https://github.com/pac4j/pac4j/commit/22b82ffd702a132d9f09da60362fc6264fc281ae; https://openid.net/specs/openid-connect-core-1_0.html#IDToken; https://www.pac4j.org/blog/cve_2021_44878_is_this_serious.html
CVE: CVE-2021-45456
Published: 2022-01-06
Description: Apache kylin checks the legitimacy of the project before executing some commands with the project name passed in by the user. There is a mismatch between what is being checked and what is being used as the shell command argument in DiagnosisService. This may cause an illegal project name to pass the check and perform the following steps, resulting in a command injection vulnerability. This issue affects Apache Kylin 4.0.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: http://www.openwall.com/lists/oss-security/2022/01/06/1; https://lists.apache.org/thread/70fkf9w1swt2cqdcz13rwfjvblw1fcpf; http://www.openwall.com/lists/oss-security/2022/01/06/1
CVE: CVE-2021-45457
Published: 2022-01-06
Description: In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin. This issue affects Apache Kylin 2 version 2.6.6 and prior versions; Apache Kylin 3 version 3.1.2 and prior versions; Apache Kylin 4 version 4.0.0 and prior versions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: http://www.openwall.com/lists/oss-security/2022/01/06/2; https://lists.apache.org/thread/rzv4mq58okwj1n88lry82ol2wwm57q1m; http://www.openwall.com/lists/oss-security/2022/01/06/2
CVE: CVE-2021-45458
Published: 2022-01-06
Description: Apache Kylin provides encryption classes PasswordPlaceholderConfigurer to help users encrypt their passwords. In the encryption algorithm used by this encryption class, the cipher is initialized with a hardcoded key and IV. If users use class PasswordPlaceholderConfigurer to encrypt their password and configure it into kylin's configuration file, there is a risk that the password may be decrypted. This issue affects Apache Kylin 2 version 2.6.6 and prior versions; Apache Kylin 3 version 3.1.2 and prior versions; Apache Kylin 4 version 4.0.0 and prior versions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798, CWE-330, CWE-798
References: http://www.openwall.com/lists/oss-security/2022/01/06/3; http://www.openwall.com/lists/oss-security/2022/01/06/7; https://lists.apache.org/thread/oof215qz188k16vhlo97cm1jksxdowfy
CVE: CVE-2021-44590
Published: 2022-01-06
Description: In libming 0.4.8, a memory exhaustion vulnerability exist in the function cws2fws in util/main.c. Remote attackers could launch denial of service attacks by submitting a crafted SWF file that exploits this vulnerability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/libming/libming; https://github.com/libming/libming/issues/236; https://github.com/libming/libming
CVE: CVE-2021-44591
Published: 2022-01-06
Description: In libming 0.4.8, the parseSWF_DEFINELOSSLESS2 function in util/parser.c lacks a boundary check that would lead to denial-of-service attacks via a crafted SWF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://github.com/libming/libming; https://github.com/libming/libming/issues/235; https://github.com/libming/libming
CVE: CVE-2021-46076
Published: 2022-01-06
Description: Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution; https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution; https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution
CVE: CVE-2021-46080
Published: 2022-01-06
Description: A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-352
References: https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS; https://www.plsanu.com/vehicle-service-management-system-multiple-cross-site-request-forgery-csrf-leads-to-stored-cross-site-scripting-xss; https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS
CVE: CVE-2021-45744
Published: 2022-01-06
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in bludit 3.13.1 via the TAGS section in login panel.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/plsanu/Bludit-3.13.1-TAGS-Field-Stored-Cross-Site-Scripting-XSS; https://www.plsanu.com/bludit-3-13-1-tags-field-stored-cross-site-scripting-xss; https://github.com/plsanu/Bludit-3.13.1-TAGS-Field-Stored-Cross-Site-Scripting-XSS
CVE: CVE-2021-45745
Published: 2022-01-06
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/plsanu/Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS; https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss; https://github.com/plsanu/Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS
CVE: CVE-2021-46067
Published: 2022-01-06
Description: In Vehicle Service Management System 1.0 an attacker can steal the cookies leading to Full Account Takeover.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover; https://www.plsanu.com/vehicle-service-management-system-multiple-cookie-stealing-leads-to-full-account-takeover; https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cookie-Stealing-Leads-to-Full-Account-Takeover
CVE: CVE-2021-46068
Published: 2022-01-06
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/plsanu/Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS; https://www.plsanu.com/vehicle-service-management-system-myaccount-stored-cross-site-scripting-xss; https://github.com/plsanu/Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS
CVE: CVE-2021-46069
Published: 2022-01-06
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/plsanu/Vehicle-Service-Management-System-Mechanic-List-Stored-Cross-Site-Scripting-XSS; https://www.plsanu.com/vehicle-service-management-system-mechanic-list-stored-cross-site-scripting-xss; https://github.com/plsanu/Vehicle-Service-Management-System-Mechanic-List-Stored-Cross-Site-Scripting-XSS
CVE: CVE-2021-46070
Published: 2022-01-06
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service Requests Section in login panel.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/plsanu/Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS; https://www.plsanu.com/vehicle-service-management-system-service-requests-stored-cross-site-scripting-xss; https://github.com/plsanu/Vehicle-Service-Management-System-Service-Requests-Stored-Cross-Site-Scripting-XSS
CVE: CVE-2021-46071
Published: 2022-01-06
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/plsanu/Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS; https://www.plsanu.com/vehicle-service-management-system-category-list-stored-cross-site-scripting-xss; https://github.com/plsanu/Vehicle-Service-Management-System-Category-List-Stored-Cross-Site-Scripting-XSS
CVE: CVE-2021-46072
Published: 2022-01-06
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/plsanu/Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS; https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss; https://github.com/plsanu/Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS
CVE: CVE-2021-46073
Published: 2022-01-06
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/plsanu/Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS; https://www.plsanu.com/vehicle-service-management-system-user-list-stored-cross-site-scripting-xss; https://github.com/plsanu/Vehicle-Service-Management-System-User-List-Stored-Cross-Site-Scripting-XSS
CVE: CVE-2021-46074
Published: 2022-01-06
Description: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/plsanu/Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS; https://www.plsanu.com/vehicle-service-management-system-settings-stored-cross-site-scripting-xss; https://github.com/plsanu/Vehicle-Service-Management-System-Settings-Stored-Cross-Site-Scripting-XSS
CVE: CVE-2021-46075
Published: 2022-01-06
Description: A Privilege Escalation vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. Staff account users can access the admin resources and perform CRUD Operations.
CVSS Score: 7.2 (HIGH)
CWE: CWE-862
References: https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Privilege-Escalation-Leads-to-CRUD-Operations; https://www.plsanu.com/vehicle-service-management-system-multiple-privilege-escalation-leads-to-crud-operations; https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Privilege-Escalation-Leads-to-CRUD-Operations
CVE: CVE-2021-46078
Published: 2022-01-06
Description: An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-434
References: https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting; https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-stored-cross-site-scripting; https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting
CVE: CVE-2021-46079
Published: 2022-01-06
Description: An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection; https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-html-injection; https://github.com/plsanu/Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection
CVE: CVE-2022-0128
Published: 2022-01-06
Description: vim is vulnerable to Out-of-bounds Read
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: http://seclists.org/fulldisclosure/2022/Jul/14; http://seclists.org/fulldisclosure/2022/Mar/29; http://seclists.org/fulldisclosure/2022/May/35
CVE: CVE-2021-28714
Published: 2022-01-06
Description: Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html; https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html; https://www.debian.org/security/2022/dsa-5050