deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-18746
Published: 2021-08-18
Description: SQL Injection in AiteCMS v1.0 allows remote attackers to execute arbitrary code via the component "aitecms/login/diy_list.php".
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/kk98kk0/exploit/issues/3; https://github.com/kk98kk0/exploit/issues/3
CVE: CVE-2021-0407
Published: 2021-08-18
Description: In clk driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05479659; Issue ID: ALPS05479659.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2021; https://corp.mediatek.com/product-security-bulletin/August-2021
CVE: CVE-2021-0408
Published: 2021-08-18
Description: In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489195; Issue ID: ALPS05489220.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-754
References: https://corp.mediatek.com/product-security-bulletin/August-2021; https://corp.mediatek.com/product-security-bulletin/August-2021
CVE: CVE-2021-0415
Published: 2021-08-18
Description: In memory management driver, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336692.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://corp.mediatek.com/product-security-bulletin/August-2021; https://corp.mediatek.com/product-security-bulletin/August-2021
CVE: CVE-2021-0416
Published: 2021-08-18
Description: In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336700.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://corp.mediatek.com/product-security-bulletin/August-2021; https://corp.mediatek.com/product-security-bulletin/August-2021
CVE: CVE-2021-0417
Published: 2021-08-18
Description: In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336702.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-330
References: https://corp.mediatek.com/product-security-bulletin/August-2021; https://corp.mediatek.com/product-security-bulletin/August-2021
CVE: CVE-2021-0418
Published: 2021-08-18
Description: In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336706.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://corp.mediatek.com/product-security-bulletin/August-2021; https://corp.mediatek.com/product-security-bulletin/August-2021
CVE: CVE-2021-0419
Published: 2021-08-18
Description: In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336713.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://corp.mediatek.com/product-security-bulletin/August-2021; https://corp.mediatek.com/product-security-bulletin/August-2021
CVE: CVE-2021-0420
Published: 2021-08-18
Description: In memory management driver, there is a possible system crash due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05381065.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://corp.mediatek.com/product-security-bulletin/August-2021; https://corp.mediatek.com/product-security-bulletin/August-2021
CVE: CVE-2021-0626
Published: 2021-08-18
Description: In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05687510; Issue ID: ALPS05687510.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2021; https://corp.mediatek.com/product-security-bulletin/August-2021
CVE: CVE-2021-0627
Published: 2021-08-18
Description: In OMA DRM, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05722434; Issue ID: ALPS05722434.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190
References: https://corp.mediatek.com/product-security-bulletin/August-2021; https://corp.mediatek.com/product-security-bulletin/August-2021
CVE: CVE-2021-0628
Published: 2021-08-18
Description: In OMA DRM, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05722454; Issue ID: ALPS05722454.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://corp.mediatek.com/product-security-bulletin/August-2021; https://corp.mediatek.com/product-security-bulletin/August-2021
CVE: CVE-2021-21781
Published: 2021-08-18
Description: An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11
CVSS Score: 3.3 (LOW)
CWE: CWE-908, CWE-908
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1243; https://www.oracle.com/security-alerts/cpujul2022.html; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1243
CVE: CVE-2021-21862
Published: 2021-08-18
Description: Multiple exploitable integer truncation vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an improper memory allocation resulting in a heap-based buffer overflow that causes memory corruption The implementation of the parser used for the “Xtra” FOURCC code is handled. An attacker can convince a user to open a video to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-680, CWE-119
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1298; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1298
CVE: CVE-2021-21867
Published: 2021-08-18
Description: An unsafe deserialization vulnerability exists in the ObjectManager.plugin ObjectStream.ProfileByteArray functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16805&token=ee583c498941d9fda86490bca98ff21928eec08a&download=; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1304; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16805&token=ee583c498941d9fda86490bca98ff21928eec08a&download=
CVE: CVE-2021-21868
Published: 2021-08-18
Description: An unsafe deserialization vulnerability exists in the ObjectManager.plugin Project.get_MissingTypes() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16805&token=ee583c498941d9fda86490bca98ff21928eec08a&download=; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1305; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16805&token=ee583c498941d9fda86490bca98ff21928eec08a&download=
CVE: CVE-2021-37358
Published: 2021-08-18
Description: SQL Injection in SEACMS v210530 (2021-05-30) allows remote attackers to execute arbitrary code via the component "admin_ajax.php?action=checkrepeat&v_name=".
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/kk98kk0/exploit/blob/master/SEACMS-V210530-sql.md; https://github.com/kk98kk0/exploit/blob/master/SEACMS-V210530-sql.md
CVE: CVE-2021-37702
Published: 2021-08-18
Description: Pimcore is an open source data & experience management platform. Prior to version 10.1.1, Data Object CSV import allows formular injection. The problem is patched in 10.1.1. Aside from upgrading, one may apply the patch manually as a workaround.
CVSS Score: 8.0 (HIGH)
CWE: CWE-1236
References: https://github.com/pimcore/pimcore/pull/9992; https://github.com/pimcore/pimcore/security/advisories/GHSA-pp2h-95hm-hv9r; https://github.com/pimcore/pimcore/pull/9992
CVE: CVE-2021-37714
Published: 2021-08-18
Description: jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248, CWE-835, CWE-835
References: https://github.com/jhy/jsoup/security/advisories/GHSA-m72m-mhq2-9p6c; https://jsoup.org/news/release-1.14.1; https://jsoup.org/news/release-1.14.2
CVE: CVE-2021-38710
Published: 2021-08-18
Description: Static (Persistent) XSS Vulnerability exists in version 4.3.0 of Yclas when using the install/view/form.php script. An attacker can store XSS in the database through the vulnerable SITE_NAME parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/security-n/CVE-2021-38710; https://github.com/security-n/CVE-2021-38710
CVE: CVE-2021-32728
Published: 2021-08-18
Description: The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. Clients using the Nextcloud end-to-end encryption feature download the public and private key via an API endpoint. In versions prior to 3.3.0, the Nextcloud Desktop client fails to check if a private key belongs to previously downloaded public certificate. If the Nextcloud instance serves a malicious public key, the data would be encrypted for this key and thus could be accessible to a malicious actor. This issue is fixed in Nextcloud Desktop Client version 3.3.0. There are no known workarounds aside from upgrading.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: https://github.com/nextcloud/desktop/pull/3338; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-f5fr-5gcv-6cc5; https://hackerone.com/reports/1189162
CVE: CVE-2020-18875
Published: 2021-08-18
Description: Incorrect Access Control in DotCMS versions before 5.1 allows remote attackers to gain privileges by injecting client configurations via vtl (velocity) files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://cwe.mitre.org/data/definitions/284.html; https://dotcms.com/security/SI-51; https://github.com/dotCMS/core/issues/15882
CVE: CVE-2020-23069
Published: 2021-08-18
Description: Path Traversal vulneraility exists in webTareas 2.0 via the extpath parameter in general_serv.php, which could let a malicious user read arbitrary files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.exploit-db.com/exploits/48312; https://www.exploit-db.com/exploits/48312
CVE: CVE-2020-28146
Published: 2021-08-18
Description: Cross Site Scripting (XSS) vulnerability exists in Eyoucms v1.4.7 and earlier via the addonfieldext parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/eyoucms/eyoucms/issues/12; https://www.exploit-db.com/exploits/48530; https://www.eyoucms.com/ask/list_1_0/4511.html
CVE: CVE-2021-23424
Published: 2021-08-18
Description: This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time.
CVSS Score: 7.5 (HIGH)
References: https://github.com/Tjatse/ansi-html/issues/19; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1567198; https://snyk.io/vuln/SNYK-JS-ANSIHTML-1296849
CVE: CVE-2021-23425
Published: 2021-08-18
Description: All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/stevemao/trim-off-newlines/blob/master/index.js%23L6; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1567197; https://snyk.io/vuln/SNYK-JS-TRIMOFFNEWLINES-1296850
CVE: CVE-2021-39282
Published: 2021-08-18
Description: Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://lists.live555.com/pipermail/live-devel/2021-August/021970.html; http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.13%5D; http://lists.live555.com/pipermail/live-devel/2021-August/021970.html
CVE: CVE-2021-39283
Published: 2021-08-18
Description: liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617
References: http://lists.live555.com/pipermail/live-devel/2021-August/021969.html; http://www.live555.com/liveMedia/public/changelog.txt#%5B2021.08.13%5D; http://lists.live555.com/pipermail/live-devel/2021-August/021969.html
CVE: CVE-2020-22120
Published: 2021-08-18
Description: A remote code execution (RCE) vulnerability in /root/run/adm.php?admin-ediy&part=exdiy of imcat v5.1 allows authenticated attackers to execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://cwe.mitre.org/data/definitions/96.html; https://github.com/peacexie/imcat/issues/3; https://cwe.mitre.org/data/definitions/96.html
CVE: CVE-2020-22122
Published: 2021-08-18
Description: A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/876054426/vul/blob/master/ljcms_sql.md; https://github.com/876054426/vul/blob/master/ljcms_sql.md
CVE: CVE-2020-22124
Published: 2021-08-18
Description: A vulnerability in the \inc\config.php component of joyplus-cms v1.6 allows attackers to access sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://github.com/876054426/vul/issues/1; https://github.com/876054426/vul/issues/1
CVE: CVE-2021-37617
Published: 2021-08-18
Description: The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. The Nextcloud Desktop Client invokes its uninstaller script when being installed to make sure there are no remnants of previous installations. In versions 3.0.3 through 3.2.4, the Client searches the `Uninstall.exe` file in a folder that can be written by regular users. This could lead to a case where a malicious user creates a malicious `Uninstall.exe`, which would be executed with administrative privileges on the Nextcloud Desktop Client installation. This issue is fixed in Nextcloud Desktop Client version 3.3.0. As a workaround, do not allow untrusted users to create content in the `C:\` system folder and verify that there is no malicious `C:\Uninstall.exe` file on the system.
CVSS Score: 7.3 (HIGH)
CWE: CWE-426, CWE-427
References: https://github.com/nextcloud/desktop/pull/3497; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-6q2w-v879-q24v; https://hackerone.com/reports/1240749
CVE: CVE-2021-39286
Published: 2021-08-18
Description: Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates are autoescaped.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/webrecorder/pywb/commit/f7bd84cdacdd665ff73ae8d09a202f60be2ebae9; https://github.com/webrecorder/pywb/compare/v-2.5.0...v-2.6.0; https://github.com/webrecorder/pywb/commit/f7bd84cdacdd665ff73ae8d09a202f60be2ebae9
CVE: CVE-2020-19669
Published: 2021-08-18
Description: Cross Site Request Forgery (CSRF) vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin&c=Admin&a=admin_add&lang=cn.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/eyoucms/eyoucms/issues/4; https://github.com/eyoucms/eyoucms/issues/4
CVE: CVE-2020-25767
Published: 2021-08-18
Description: An issue was discovered in HCC Embedded NicheStack IPv4 4.1. The dnc_copy_in routine for parsing DNS domain names does not check whether a domain name compression pointer is pointing within the bounds of the packet (e.g., forward compression pointer jumps are allowed), which leads to an Out-of-bounds Read, and a Denial-of-Service as a consequence.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/; https://www.kb.cert.org/vuls/id/608209; https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/
CVE: CVE-2020-25926
Published: 2021-08-18
Description: The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transaction id. The impact is: DNS cache poisoning (remote). The component is: dns_query_type(). The attack vector is: a specific DNS response packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-331
References: https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/; https://www.kb.cert.org/vuls/id/608209; https://www.kb.cert.org/vuls/id/608209
CVE: CVE-2020-25927
Published: 2021-08-18
Description: The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Out-of-bounds Read. The impact is: a denial of service (remote). The component is: DNS response processing in function: dns_upcall(). The attack vector is: a specific DNS response packet. The code does not check whether the number of queries/responses specified in the DNS packet header corresponds to the query/response data available in the DNS packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.iniche.com/source-code/networking-stack/nichestack.php; https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/; https://www.kb.cert.org/vuls/id/608209
CVE: CVE-2020-25928
Published: 2021-08-18
Description: The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: DNS response processing functions: dns_upcall(), getoffset(), dnc_set_answer(). The attack vector is: a specific DNS response packet. The code does not check the "response data length" field of individual DNS answers, which may cause out-of-bounds read/write operations, leading to Information leak, Denial-or-Service, or Remote Code Execution, depending on the context.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125, CWE-787
References: https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/; https://www.kb.cert.org/vuls/id/608209; https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/
CVE: CVE-2021-25218
Published: 2021-08-18
Description: In BIND 9.16.19, 9.17.16. Also, version 9.16.19-S1 of BIND Supported Preview Edition When a vulnerable version of named receives a query under the circumstances described above, the named process will terminate due to a failed assertion check. The vulnerability affects only BIND 9 releases 9.16.19, 9.17.16, and release 9.16.19-S1 of the BIND Supported Preview Edition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://www.openwall.com/lists/oss-security/2021/08/18/3; http://www.openwall.com/lists/oss-security/2021/08/20/2; https://kb.isc.org/v1/docs/cve-2021-25218
CVE: CVE-2021-39270
Published: 2021-08-18
Description: In Ping Identity RSA SecurID Integration Kit before 3.2, user impersonation can occur.
CVSS Score: 7.5 (HIGH)
CWE: CWE-346
References: https://docs.pingidentity.com/bundle/integrations/page/yqq[PII_REDACTED]46.html; https://www.pingidentity.com/en/resources/downloads/pingfederate.html; https://docs.pingidentity.com/bundle/integrations/page/yqq[PII_REDACTED]46.html
CVE: CVE-2021-1561
Published: 2021-08-18
Description: A vulnerability in the spam quarantine feature of Cisco Secure Email and Web Manager, formerly Cisco Security Management Appliance (SMA), could allow an authenticated, remote attacker to gain unauthorized access and modify the spam quarantine settings of another user. This vulnerability exists because access to the spam quarantine feature is not properly restricted. An attacker could exploit this vulnerability by sending malicious requests to an affected system. A successful exploit could allow the attacker to modify another user's spam quarantine settings, possibly disabling security controls or viewing email messages stored on the spam quarantine interfaces.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-302, CWE-287
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-spam-jPxUXMk; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-spam-jPxUXMk
CVE: CVE-2021-34715
Published: 2021-08-18
Description: A vulnerability in the image verification function of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to execute code with internal user privileges on the underlying operating system. The vulnerability is due to insufficient validation of the content of upgrade packages. An attacker could exploit this vulnerability by uploading a malicious archive to the Upgrade page of the administrative web interface. A successful exploit could allow the attacker to execute code with user-level privileges (the _nobody account) on the underlying operating system.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-347, CWE-347
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewver-c6WZPXRx; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewver-c6WZPXRx