deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-29369
Published: 2021-05-03
Description: The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/rkesters/gnuplot/commit/23671d4d3d28570fb19a936a6328bfac742410de; https://www.npmjs.com/package/%40rkesters/gnuplot; https://github.com/rkesters/gnuplot/commit/23671d4d3d28570fb19a936a6328bfac742410de
CVE: CVE-2021-29238
Published: 2021-05-03
Description: CODESYS Automation Server before 1.16.0 allows cross-site request forgery (CSRF).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://customers.codesys.com/index.php; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14638&token=30b75ee95d0d94527894dfd8cdc5432575a8eff8&download=; https://www.codesys.com/security/security-reports.html
CVE: CVE-2021-29239
Published: 2021-05-03
Description: CODESYS Development System 3 before 3.5.17.0 displays or executes malicious documents or files embedded in libraries without first checking their validity.
CVSS Score: 7.8 (HIGH)
CWE: CWE-345
References: https://customers.codesys.com/index.php; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14639&token=fa836f8bd4a2184aa9323a639ca9f2aaf1538412&download=; https://www.codesys.com/security/security-reports.html
CVE: CVE-2021-29241
Published: 2021-05-03
Description: CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://customers.codesys.com/index.php; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14637&token=8dbd75ae7553ae3be25e22f741db783b31e14799&download=; https://www.codesys.com/security/security-reports.html
CVE: CVE-2021-29242
Published: 2021-05-03
Description: CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20
References: https://customers.codesys.com/index.php; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download=; https://www.codesys.com/security/security-reports.html
CVE: CVE-2020-20218
Published: 2021-05-03
Description: Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attacker can cause a Denial of Service due via the loop counter variable.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://seclists.org/fulldisclosure/2020/May/30; https://seclists.org/fulldisclosure/2021/May/1; https://seclists.org/fulldisclosure/2020/May/30
CVE: CVE-2020-20247
Published: 2021-05-03
Description: Mikrotik RouterOs before 6.46.5 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attacker can cause a Denial of Service due via the loop counter variable.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://seclists.org/fulldisclosure/2020/May/30; https://seclists.org/fulldisclosure/2020/May/30
CVE: CVE-2021-21264
Published: 2021-05-03
Description: October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. A bypass of CVE-2020-26231 (fixed in 1.0.470/471 and 1.1.1) was discovered that has the same impact as CVE-2020-26231 & CVE-2020-15247. An authenticated backend user with the `cms.manage_pages`, `cms.manage_layouts`, or `cms.manage_partials` permissions who would **normally** not be permitted to provide PHP code to be executed by the CMS due to `cms.enableSafeMode` being enabled is able to write specific Twig code to escape the Twig sandbox and execute arbitrary PHP. This is not a problem for anyone that trusts their users with those permissions to normally write & manage PHP within the CMS by not having `cms.enableSafeMode` enabled, but would be a problem for anyone relying on `cms.enableSafeMode` to ensure that users with those permissions in production do not have access to write & execute arbitrary PHP. Issue has been patched in Build 472 (v1.0.472) and v1.1.2. As a workaround, apply https://github.com/octobercms/october/commit/f63519ff1e8d375df30deba63156a2fc97aa9ee7 to your installation manually if unable to upgrade to Build 472 or v1.1.2.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-862
References: https://github.com/octobercms/october/security/advisories/GHSA-fcr8-6q7r-m4wg; https://github.com/octobercms/october/security/advisories/GHSA-fcr8-6q7r-m4wg
CVE: CVE-2020-28945
Published: 2021-05-03
Description: OX App Suite 7.10.4 and earlier allows XSS via crafted content to reach an undocumented feature, such as ![](http://onerror=Function.constructor, in a Notes item.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://open-xchange.com; https://packetstormsecurity.com/files/162406/OX-App-Suite-OX-Guard-SSRF-DoS-Cross-Site-Scripting.html; https://open-xchange.com
CVE: CVE-2020-35755
Published: 2021-05-03
Description: An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luci_service Read_ NVRAM Direct Access Information Leak. The luci_service deamon running on port 7777 provides a sub-category of commands for which Read_ is prepended. Commands in this category are able to directly read the contents of the device configuration NVRAM. The NVRAM contains sensitive information, such as the Wi-Fi password (in cleartext), as well as connected account tokens for services such as Spotify.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/; https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/
CVE: CVE-2020-35756
Published: 2021-05-03
Description: An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luci_service GETPASS Configuration Password Information Leak. The luci_service daemon running on port 7777 does not require authentication to return the device configuration password in cleartext when using the GETPASS command. As such, any unauthenticated person with access to port 7777 on the device will be able to leak the user's personal device configuration password by issuing the GETPASS command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/; https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/
CVE: CVE-2020-35757
Published: 2021-05-03
Description: An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is Unauthenticated Root ADB Access Over TCP. The LS9 web interface provides functionality to access ADB over TCP. This is not enabled by default, but can be enabled by sending a crafted request to a web management interface endpoint. Requests made to this endpoint do not require authentication. As such, any unauthenticated user who is able to access the web interface will be able to gain root privileges on the LS9 module.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/; https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/
CVE: CVE-2020-35758
Published: 2021-05-03
Description: An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a Authentication Bypass in the Web Interface. This interface does not properly restrict access to internal functionality. Despite presenting a password login page on first access, authentication is not required to access privileged functionality. As such, it's possible to directly access APIs that should not be exposed to an unauthenticated user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/; https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/
CVE: CVE-2020-23015
Published: 2021-05-03
Description: An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/opnsense/core/issues/4061; https://github.com/opnsense/core/issues/4061
CVE: CVE-2020-23083
Published: 2021-05-03
Description: Unrestricted File Upload in JEECG v4.0 and earlier allows remote attackers to execute arbitrary code or gain privileges by uploading a crafted file to the component "jeecgFormDemoController.do?commonUpload".
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/zhangdaiscott/jeecg/issues/56; https://github.com/zhangdaiscott/jeecg/issues/56
CVE: CVE-2021-32020
Published: 2021-05-03
Description: The kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during management of heap memory.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://github.com/FreeRTOS/FreeRTOS-Kernel/commit/c7a9a01c94987082b223d3e59969ede64363da63; https://github.com/FreeRTOS/FreeRTOS-Kernel/commit/c7a9a01c94987082b223d3e59969ede64363da63
CVE: CVE-2021-31164
Published: 2021-05-04
Description: Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements.
CVSS Score: 7.5 (HIGH)
CWE: CWE-93, CWE-74
References: http://unomi.apache.org/security/cve-2021-31164; http://unomi.apache.org/security/cve-2021-31164
CVE: CVE-2021-23343
Published: 2021-05-04
Description: All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/jbgutierrez/path-parse/issues/8; https://lists.apache.org/thread.html/r6a32cb3eda3b19096ad48ef1e7aa8f26e005f2f63765abb69ce08b85%40%3Cdev.myfaces.apache.org%3E; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1279028
CVE: CVE-2021-23383
Published: 2021-05-04
Description: The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-1321
References: https://github.com/handlebars-lang/handlebars.js/commit/f[PII_REDACTED]268578199be25285b2ebea1c1e427; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1279031
CVE: CVE-2021-29240
Published: 2021-05-04
Description: The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content.
CVSS Score: 7.8 (HIGH)
References: https://customers.codesys.com/index.php; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14636&token=1ce7e6e4cbe4651989ede418450d7c82e972bdf2&download=; https://www.codesys.com/security/security-reports.html
CVE: CVE-2021-22547
Published: 2021-05-04
Description: In IoT Devices SDK, there is an implementation of calloc() that doesn't have a length check. An attacker could pass in memory objects larger than the buffer and wrap around to have a smaller buffer than required, allowing the attacker access to the other parts of the heap. We recommend upgrading the Google Cloud IoT Device SDK for Embedded C used to 1.0.3 or greater.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://github.com/GoogleCloudPlatform/iot-device-sdk-embedded-c/blob/master/RELEASE-NOTES.md; https://github.com/GoogleCloudPlatform/iot-device-sdk-embedded-c/pull/119; https://github.com/GoogleCloudPlatform/iot-device-sdk-embedded-c/blob/master/RELEASE-NOTES.md
CVE: CVE-2020-27518
Published: 2021-05-04
Description: All versions of Windscribe VPN for Mac and Windows <= v2.02.10 contain a local privilege escalation vulnerability in the WindscribeService component. A low privilege user could leverage several openvpn options to execute code as root/SYSTEM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://windscribe.com; https://jeffs.sh/CVEs/CVE-2020-27518.txt; http://windscribe.com
CVE: CVE-2021-3154
Published: 2021-05-04
Description: An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-2_release_notes.htm; https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-2_release_notes.htm
CVE: CVE-2020-21999
Published: 2021-05-04
Description: iWT Ltd FaceSentry Access Control System 6.4.8 suffers from an authenticated OS command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user via the 'strInIP' POST parameter in pingTest PHP script.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.exploit-db.com/exploits/47066; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5525.php; https://www.exploit-db.com/exploits/47066
CVE: CVE-2020-4987
Published: 2021-05-04
Description: The IBM FlashSystem 900 user management GUI is vulnerable to stored cross-site scripting in code versions 1.5.2.8 and prior and 1.6.1.2 and prior. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/192702; https://www.ibm.com/support/pages/node/6449280; https://exchange.xforce.ibmcloud.com/vulnerabilities/192702
CVE: CVE-2021-21551
Published: 2021-05-04
Description: Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.
CVSS Score: 8.8 (HIGH)
CWE: CWE-782
References: http://packetstormsecurity.com/files/162604/Dell-DBUtil_2_3.sys-IOCTL-Memory-Read-Write.html; http://packetstormsecurity.com/files/162739/DELL-dbutil_2_3.sys-2.3-Arbitrary-Write-Privilege-Escalation.html; https://www.dell.com/support/kbdoc/en-us/000186019/dsa-2021-088-dell-client-platform-security-update-for-dell-driver-insufficient-access-control-vulnerability
CVE: CVE-2021-29477
Published: 2021-05-04
Description: Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer could be exploited using the `STRALGO LCS` command to corrupt the heap and potentially result with remote code execution. The problem is fixed in version 6.2.3 and 6.0.13. An additional workaround to mitigate the problem without patching the redis-server executable is to use ACL configuration to prevent clients from using the `STRALGO LCS` command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-190
References: https://github.com/redis/redis/security/advisories/GHSA-vqxj-26vj-996g; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BHWOF7CBVUGDK3AN6H3BN3VNTH2TDUZZ/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPWBIZXA67JFIB63W2CNVVILCGIC2ME5/
CVE: CVE-2021-29478
Published: 2021-05-04
Description: Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis 6.2 before 6.2.3 could be exploited to corrupt the heap and potentially result with remote code execution. Redis 6.0 and earlier are not directly affected by this issue. The problem is fixed in version 6.2.3. An additional workaround to mitigate the problem without patching the `redis-server` executable is to prevent users from modifying the `set-max-intset-entries` configuration parameter. This can be done using ACL to restrict unprivileged users from using the `CONFIG SET` command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-190
References: https://github.com/redis/redis/security/advisories/GHSA-qh52-crrg-44g3; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPWBIZXA67JFIB63W2CNVVILCGIC2ME5/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZJ6JGQ2ETZB2DWTQSGCOGG7EF3ILV4V/
CVE: CVE-2021-26804
Published: 2021-05-04
Description: Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extension to ".gif", then uploading it in the "Administration/ Parameters/ Images" section of the application.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-276
References: https://medium.com/%40pedro.ferreira.phf/vulnerability-affecting-some-versions-of-centreon-2b34bd6dc621; https://medium.com/%40pedro.ferreira.phf/vulnerability-affecting-some-versions-of-centreon-2b34bd6dc621
CVE: CVE-2020-22428
Published: 2021-05-05
Description: SolarWinds Serv-U before 15.1.6 Hotfix 3 is affected by Cross Site Scripting (XSS) via a directory name (entered by an admin) containing a JavaScript payload.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/matrix; https://support.solarwinds.com/SuccessCenter/s/article/Serv-U-15-1-6-Hotfix-3?language=en_US; https://twitter.com/gm4tr1x
CVE: CVE-2021-25179
Published: 2021-05-05
Description: SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting (XSS) via the HTTP Host header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2_release_notes.htm; https://github.com/matrix; https://twitter.com/gm4tr1x
CVE: CVE-2020-36333
Published: 2021-05-05
Description: themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard_actions hook.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306
References: https://www.openwall.com/lists/oss-security/2020/02/19/1; https://www.webarxsecurity.com/critical-issue-in-themegrill-demo-importer/; https://www.openwall.com/lists/oss-security/2020/02/19/1
CVE: CVE-2020-36334
Published: 2021-05-05
Description: themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.openwall.com/lists/oss-security/2020/02/19/1; https://www.webarxsecurity.com/critical-issue-in-themegrill-demo-importer/; https://www.openwall.com/lists/oss-security/2020/02/19/1
CVE: CVE-2021-25319
Published: 2021-05-05
Description: A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to escalate to root. This issue affects: openSUSE Factory virtualbox version 6.1.20-1.1 and prior versions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://bugzilla.suse.com/show_bug.cgi?id=1182918; https://bugzilla.suse.com/show_bug.cgi?id=1182918
CVE: CVE-2021-25317
Published: 2021-05-05
Description: A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.
CVSS Score: 3.3 (LOW)
CWE: CWE-276
References: https://bugzilla.suse.com/show_bug.cgi?id=1184161; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWPGZLT3U776Q5YPPSA6LGFWWBDWBVH3/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H74BP746O5NNVCBUTLLZYAFBPESFVECV/
CVE: CVE-2021-31800
Published: 2021-05-05
Description: Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing /etc/shadow or an SSH authorized key.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e[PII_REDACTED]c1ec624/impacket/smbserver.py#L2008; https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e[PII_REDACTED]c1ec624/impacket/smbserver.py#L2958; https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e[PII_REDACTED]c1ec624/impacket/smbserver.py#L3485
CVE: CVE-2021-29245
Published: 2021-05-05
Description: BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-338
References: https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/; https://github.com/btcpayserver/btcpayserver/releases; https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/
CVE: CVE-2021-29246
Published: 2021-05-05
Description: BTCPay Server through 1.0.7.0 suffers from directory traversal, which allows an attacker with admin privileges to achieve code execution. The attacker must craft a malicious plugin file with special characters to upload the file outside of the restricted directory.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-22
References: https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/; https://github.com/btcpayserver/btcpayserver/releases; https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/
CVE: CVE-2021-29247
Published: 2021-05-05
Description: BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the HTTPOnly flag for a cookie.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/; https://github.com/btcpayserver/btcpayserver/releases; https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/
CVE: CVE-2021-29248
Published: 2021-05-05
Description: BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the Secure flag for a cookie.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-311
References: https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/; https://github.com/btcpayserver/btcpayserver/releases; https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/
CVE: CVE-2021-29250
Published: 2021-05-05
Description: BTCPay Server through 1.0.7.0 suffers from a Stored Cross Site Scripting (XSS) vulnerability within the POS Add Products functionality. This enables cookie stealing.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/; https://github.com/btcpayserver/btcpayserver/releases; https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/
CVE: CVE-2016-20010
Published: 2021-05-05
Description: EWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a protection mechanism involving boolval, which is unavailable before PHP 5.5.
CVSS Score: 10.0 (CRITICAL)
References: https://plugins.trac.wordpress.org/browser/ewww-image-optimizer/trunk/changelog.txt; https://www.wordfence.com/blog/2016/06/vulnerability-ewww-image-optimizer/; https://plugins.trac.wordpress.org/browser/ewww-image-optimizer/trunk/changelog.txt
CVE: CVE-2020-13666
Published: 2021-05-05
Description: Cross-site scripting vulnerability in Drupal Core. Drupal AJAX API does not disable JSONP by default, allowing for an XSS attack. This issue affects: Drupal Drupal Core 7.x versions prior to 7.73; 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.drupal.org/sa-core-2020-007; https://www.drupal.org/sa-core-2020-007