deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-20138
Published: 2021-12-09
Description: An unauthenticated command injection vulnerability exists in multiple parameters in the Gryphon Tower router’s web interface at /cgi-bin/luci/rc. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to the web interface.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2021-51; https://www.tenable.com/security/research/tra-2021-51
CVE: CVE-2021-20139
Published: 2021-12-09
Description: An unauthenticated command injection vulnerability exists in the parameters of operation 3 in the controller_server service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to the controller_server service on port 9999.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2021-51; https://www.tenable.com/security/research/tra-2021-51
CVE: CVE-2021-20140
Published: 2021-12-09
Description: An unauthenticated command injection vulnerability exists in the parameters of operation 10 in the controller_server service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to the controller_server service on port 9999.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2021-51; https://www.tenable.com/security/research/tra-2021-51
CVE: CVE-2021-20141
Published: 2021-12-09
Description: An unauthenticated command injection vulnerability exists in the parameters of operation 32 in the controller_server service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to the controller_server service on port 9999.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2021-51; https://www.tenable.com/security/research/tra-2021-51
CVE: CVE-2021-20142
Published: 2021-12-09
Description: An unauthenticated command injection vulnerability exists in the parameters of operation 41 in the controller_server service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to the controller_server service on port 9999.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2021-51; https://www.tenable.com/security/research/tra-2021-51
CVE: CVE-2021-20143
Published: 2021-12-09
Description: An unauthenticated command injection vulnerability exists in the parameters of operation 48 in the controller_server service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to the controller_server service on port 9999.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2021-51; https://www.tenable.com/security/research/tra-2021-51
CVE: CVE-2021-20144
Published: 2021-12-09
Description: An unauthenticated command injection vulnerability exists in the parameters of operation 49 in the controller_server service on Gryphon Tower routers. An unauthenticated remote attacker on the same network can execute commands as root on the device by sending a specially crafted malicious packet to the controller_server service on port 9999.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2021-51; https://www.tenable.com/security/research/tra-2021-51
CVE: CVE-2021-20145
Published: 2021-12-09
Description: Gryphon Tower routers contain an unprotected openvpn configuration file which can grant attackers access to the Gryphon homebound VPN network which exposes the LAN interfaces of other users' devices connected to the same service. An attacker could leverage this to make configuration changes to, or otherwise attack victims' devices as though they were on an adjacent network.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://www.tenable.com/security/research/tra-2021-51; https://www.tenable.com/security/research/tra-2021-51
CVE: CVE-2021-20146
Published: 2021-12-09
Description: An unprotected ssh private key exists on the Gryphon devices which could be used to achieve root access to a server affiliated with Gryphon's development and infrastructure. At the time of discovery, the ssh key could be used to login to the development server hosted in Amazon Web Services.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: https://www.tenable.com/security/research/tra-2021-51; https://www.tenable.com/security/research/tra-2021-51
CVE: CVE-2021-21954
Published: 2021-12-09
Description: A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of network packets can lead to arbitrary command execution.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1381; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1381
CVE: CVE-2021-21955
Published: 2021-12-09
Description: An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. Generic network sniffing can lead to password recovery. An attacker can sniff network traffic to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-334, CWE-287
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1382; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1382
CVE: CVE-2021-40279
Published: 2021-12-09
Description: An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://gist.github.com/aaaahuia/b99596c6de9bd6f60e0ddb7bf0bd13c4; https://gist.github.com/aaaahuia/b99596c6de9bd6f60e0ddb7bf0bd13c4
CVE: CVE-2021-40280
Published: 2021-12-09
Description: An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dl_sendmail.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://gist.github.com/aaaahuia/1fd31c1ebcddfe4c95268fa4f31fc312; https://gist.github.com/aaaahuia/1fd31c1ebcddfe4c95268fa4f31fc312
CVE: CVE-2021-41246
Published: 2021-12-09
Description: Express OpenID Connect is express JS middleware implementing sign on for Express web apps using OpenID Connect. Versions before and including `2.5.1` do not regenerate the session id and session cookie when user logs in. This behavior opens up the application to various session fixation vulnerabilities. Versions `2.5.2` contains a patch for this issue.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-384
References: https://github.com/auth0/express-openid-connect/commit/5ab67ff2bd84f76674066b5e129b43ab5f2f430f; https://github.com/auth0/express-openid-connect/releases/tag/v2.5.2; https://github.com/auth0/express-openid-connect/security/advisories/GHSA-7rg2-qxmf-hhx9
CVE: CVE-2021-41694
Published: 2021-12-09
Description: An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-330
References: https://www.chudamax.com/posts/multiple-vulnerabilities-in-belloo-dating-script/; https://www.chudamax.com/posts/multiple-vulnerabilities-in-belloo-dating-script/
CVE: CVE-2021-41695
Published: 2021-12-09
Description: An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php. .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.chudamax.com/posts/multiple-vulnerabilities-in-belloo-dating-script/; https://www.chudamax.com/posts/multiple-vulnerabilities-in-belloo-dating-script/
CVE: CVE-2021-41696
Published: 2021-12-09
Description: An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-521
References: https://www.chudamax.com/posts/multiple-vulnerabilities-in-belloo-dating-script/; https://www.chudamax.com/posts/multiple-vulnerabilities-in-belloo-dating-script/
CVE: CVE-2021-41697
Published: 2021-12-09
Description: A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerror_description parameter in assets/sources/instagram.php script.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.chudamax.com/posts/multiple-vulnerabilities-in-belloo-dating-script/; https://www.chudamax.com/posts/multiple-vulnerabilities-in-belloo-dating-script/
CVE: CVE-2021-4038
Published: 2021-12-09
Description: Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) prior to 10.1 Minor 7 allows a remote authenticated administrator to embed a XSS in the administrator interface via specially crafted custom rules containing HTML. NSM did not correctly sanitize custom rule content in all scenarios.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10375; https://kc.mcafee.com/corporate/index?page=content&id=SB10375
CVE: CVE-2021-20373
Published: 2021-12-09
Description: IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the LOAD utility does not enforce directory restrictions. IBM X-Force ID: 199521.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/195521; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6523804
CVE: CVE-2021-22568
Published: 2021-12-09
Description: When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token that is valid for publishing on pub.dev. Using these obtained credentials, an attacker can impersonate the user on pub.dev. We recommend upgrading past https://github.com/dart-lang/sdk/commit/d787e78d21e12ec1ef712d229940b1172aafcdf8 or beyond version 2.15.0
CVSS Score: 8.8 (HIGH)
CWE: CWE-255, CWE-668
References: https://github.com/dart-lang/sdk/blob/main/CHANGELOG.md; https://github.com/dart-lang/sdk/commit/d787e78d21e12ec1ef712d229940b1172aafcdf8; https://github.com/dart-lang/sdk/security/advisories/GHSA-r32f-vhjp-qhj7
CVE: CVE-2021-29678
Published: 2021-12-09
Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other databases and read or modify files. IBM X-Force ID: 199914.
CVSS Score: 8.7 (HIGH)
CWE: CWE-863
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199914; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6523806
CVE: CVE-2021-38926
Published: 2021-12-09
Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privileges due to allowing modification of columns of existing tasks. IBM X-Force ID: 210321.
CVSS Score: 5.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/210321; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6523808
CVE: CVE-2021-38931
Published: 2021-12-09
Description: IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user having indirect read access to a table where they are not authorized to select from. IBM X-Force ID: 210418.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-668
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/210418; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6523810
CVE: CVE-2021-38951
Published: 2021-12-09
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available CPU resources. IBM X-Force ID: 211405.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/211405; https://www.ibm.com/support/pages/node/6524674; https://exchange.xforce.ibmcloud.com/vulnerabilities/211405
CVE: CVE-2021-39002
Published: 2021-12-09
Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/213217; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6523802
CVE: CVE-2021-40281
Published: 2021-12-09
Description: An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 in dl/dl_print.php when registering ordinary users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://gist.github.com/aaaahuia/583b062b686cdff27554e3c6fa5ac94e; https://gist.github.com/aaaahuia/583b062b686cdff27554e3c6fa5ac94e
CVE: CVE-2021-40282
Published: 2021-12-09
Description: An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, abd 2021 in dl/dl_download.php. when registering ordinary users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://gist.github.com/aaaahuia/1343e3aa06b031ea621b5701cebcee3e; https://gist.github.com/aaaahuia/1343e3aa06b031ea621b5701cebcee3e
CVE: CVE-2021-41265
Published: 2021-12-09
Description: Flask-AppBuilder is a development framework built on top of Flask. Verions prior to 3.3.4 contain an improper authentication vulnerability in the REST API. The issue allows for a malicious actor with a carefully crafted request to successfully authenticate and gain access to existing protected REST API endpoints. This only affects non database authentication types and new REST API endpoints. Users should upgrade to Flask-AppBuilder 3.3.4 to receive a patch.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://github.com/dpgaspar/Flask-AppBuilder/commit/eba517aab121afa3f3f2edb011ec6bc4efd61fbc; https://github.com/dpgaspar/Flask-AppBuilder/releases/tag/v3.3.4; https://github.com/dpgaspar/Flask-AppBuilder/security/advisories/GHSA-m3rf-7m4w-r66q
CVE: CVE-2021-43703
Published: 2021-12-09
Description: An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php. After disabling JavaScript, you can directly access the administrator console.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/forget-code/zzcms/issues/1; https://github.com/forget-code/zzcms/issues/1
CVE: CVE-2020-19682
Published: 2021-12-09
Description: A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://zhhhy.github.io/2019/06/28/zzzcms/; https://zhhhy.github.io/2019/06/28/zzzcms/
CVE: CVE-2020-19683
Published: 2021-12-09
Description: A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://zhhhy.github.io/2019/06/28/zzzcms/; https://zhhhy.github.io/2019/06/28/zzzcms/
CVE: CVE-2021-43797
Published: 2021-12-09
Description: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty prior to version 4.1.71.Final skips control chars when they are present at the beginning / end of the header name. It should instead fail fast as these are not allowed by the spec and could lead to HTTP request smuggling. Failing to do the validation might cause netty to "sanitize" header names before it forward these to another remote system when used as proxy. This remote system can't see the invalid usage anymore, and therefore does not do the validation itself. Users should upgrade to version 4.1.71.Final.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-444, CWE-444
References: https://github.com/netty/netty/commit/07aa6b5938a8b6ed7a6586e066400e[PII_REDACTED]; https://github.com/netty/netty/security/advisories/GHSA-wx5j-54mm-rqqq; https://lists.debian.org/debian-lts-announce/2023/01/msg00008.html
CVE: CVE-2021-43608
Published: 2021-12-09
Description: Doctrine DBAL 3.x before 3.1.4 allows SQL Injection. The escaping of offset and length inputs to the generation of a LIMIT clause was not probably cast to an integer, allowing SQL injection to take place if application developers passed unescaped user input to the DBAL QueryBuilder or any other API that ultimately uses the AbstractPlatform::modifyLimitQuery API.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/doctrine/dbal/commit/9dcfa4cb6c03250b78a84737ba7ceb82f4b7ba4d; https://github.com/doctrine/dbal/releases; https://github.com/doctrine/dbal/security/advisories/GHSA-r7cj-8hjg-x622
CVE: CVE-2021-44514
Published: 2021-12-09
Description: OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.manageengine.com/network-monitoring/help/read-me-complete.html#build_125490; https://www.manageengine.com/network-monitoring/help/read-me-complete.html#build_125490
CVE: CVE-2021-4033
Published: 2021-12-09
Description: kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/kevinpapst/kimai2/commit/1da26e041df62c10bd8075d78f2db7854d3eee07; https://huntr.dev/bounties/e05be1f7-d00c-4cfd-9390-ccd9d1c737b7; https://github.com/kevinpapst/kimai2/commit/1da26e041df62c10bd8075d78f2db7854d3eee07
CVE: CVE-2021-37861
Published: 2021-12-09
Description: Mattermost 6.0.2 and earlier fails to sufficiently sanitize user's password in audit logs when user creation fails.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://mattermost.com/security-updates/; https://mattermost.com/security-updates/
CVE: CVE-2021-43982
Published: 2021-12-09
Description: Delta Electronics CNCSoft Versions 1.01.30 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-334-03; https://www.cisa.gov/uscert/ics/advisories/icsa-21-334-03
CVE: CVE-2021-43802
Published: 2021-12-09
Description: Etherpad is a real-time collaborative editor. In versions prior to 1.8.16, an attacker can craft an `*.etherpad` file that, when imported, might allow the attacker to gain admin privileges for the Etherpad instance. This, in turn, can be used to install a malicious Etherpad plugin that can execute arbitrary code (including system commands). To gain privileges, the attacker must be able to trigger deletion of `express-session` state or wait for old `express-session` state to be cleaned up. Core Etherpad does not delete any `express-session` state, so the only known attacks require either a plugin that can delete session state or a custom cleanup process (such as a cron job that deletes old `sessionstorage:*` records). The problem has been fixed in version 1.8.16. If users cannot upgrade to 1.8.16 or install patches manually, several workarounds are available. Users may configure their reverse proxies to reject requests to `/p/*/import`, which will block all imports, not just `*.etherpad` imports; limit all users to read-only access; and/or prevent the reuse of `express_sid` cookie values that refer to deleted express-session state. More detailed information and general mitigation strategies may be found in the GitHub Security Advisory.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-790, CWE-1287, CWE-20
References: https://github.com/ether/etherpad-lite/compare/b7065eb9a0ec7c3c265f8cfeb2534efe6f036456...77bcb507b30e762e9375b0511b3763e0162aae53; https://github.com/ether/etherpad-lite/issues/5010; https://github.com/ether/etherpad-lite/releases/tag/1.8.16
CVE: CVE-2021-43803
Published: 2021-12-10
Description: Next.js is a React framework. In versions of Next.js prior to 12.0.5 or 11.1.3, invalid or malformed URLs could lead to a server crash. In order to be affected by this issue, the deployment must use Next.js versions above 11.1.0 and below 12.0.5, Node.js above 15.0.0, and next start or a custom server. Deployments on Vercel are not affected, along with similar environments where invalid requests are filtered before reaching Next.js. Versions 12.0.5 and 11.1.3 contain patches for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/vercel/next.js/commit/6d98b4fb4315dec1badecf0e9bdc212a4272b264; https://github.com/vercel/next.js/pull/32080; https://github.com/vercel/next.js/releases/tag/v11.1.3
CVE: CVE-2021-44228
Published: 2021-12-10
Description: Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-20, CWE-400, CWE-502, CWE-917
References: http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.html; http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.html; http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-Disclosure.html
CVE: CVE-2021-4081
Published: 2021-12-10
Description: pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/34ed0e050ff679b4b38414aef48ea1ff956f907a; https://huntr.dev/bounties/da173e66-76ba-4f98-b8fb-429aabf222d3; https://github.com/pimcore/pimcore/commit/34ed0e050ff679b4b38414aef48ea1ff956f907a
CVE: CVE-2021-4082
Published: 2021-12-10
Description: pimcore is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/pimcore/pimcore/commit/3088cec7dc3cbc5a8b26f1269e398e799ee7ee28; https://huntr.dev/bounties/81838575-e170-41fb-b451-92c1c8aab092; https://github.com/pimcore/pimcore/commit/3088cec7dc3cbc5a8b26f1269e398e799ee7ee28
CVE: CVE-2021-4084
Published: 2021-12-10
Description: pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/pimcore/pimcore/commit/3c2a14e676a57e5d77a[PII_REDACTED]eef48f9065; https://huntr.dev/bounties/dcb37f19-ba53-4498-b953-d[PII_REDACTED]6; https://github.com/pimcore/pimcore/commit/3c2a14e676a57e5d77a[PII_REDACTED]eef48f9065
CVE: CVE-2021-35978
Published: 2021-12-10
Description: An issue was discovered in Digi TransPort DR64, SR44 VC74, and WR. The ZING protocol allows arbitrary remote command execution with SUPER privileges. This allows an attacker (with knowledge of the protocol) to execute arbitrary code on the controller including overwriting firmware, adding/removing users, disabling the internal firewall, etc.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://digi.com; https://raw.githubusercontent.com/reidmefirst/vuln-disclosure/main/2021-04.txt; https://digi.com