deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-8297
Published: 2021-02-23
Description: Nextcloud Deck before 1.0.2 suffers from an insecure direct object reference (IDOR) vulnerability that permits users with a duplicate user identifier to access deck data of a previous deleted user.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://github.com/nextcloud/deck/pull/1976; https://hackerone.com/reports/882258; https://nextcloud.com/security/advisory/?id=NC-SA-2021-007
CVE: CVE-2021-20247
Published: 2021-02-23
Description: A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing '..' path components to access data outside the designated mailbox on the opposite end of the synchronization channel. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20, CWE-22
References: https://bugzilla.redhat.com/show_bug.cgi?id=1928963; https://lists.debian.org/debian-lts-announce/2022/07/msg00001.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CAXQLCK35QGRCRENRTGKJO4VVZGUXUJJ/
CVE: CVE-2021-22112
Published: 2021-02-23
Description: Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programmed in). However, if the application's intent is to only allow the user to run with elevated privileges in a small portion of the application, the bug can be leveraged to extend those privileges to the rest of the application.
CVSS Score: 8.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2021/02/19/7; https://lists.apache.org/thread.html/r163b3e4e39803882f5be05ee8606b2b9812920e196daa2a82997ce14%40%3Cpluto-dev.portals.apache.org%3E; https://lists.apache.org/thread.html/r2cb05e499807900ba23e539643eead9c5f0652fd271f223f89da1804%40%3Cpluto-scm.portals.apache.org%3E
CVE: CVE-2021-22882
Published: 2021-02-23
Description: UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may cause the UniFi Protect controller to crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://community.ui.com/releases/Security-advisory-bulletin-017-017/071141e5-bc2e-4b71-81f3-5e499316fcee; https://hackerone.com/reports/1008579; https://community.ui.com/releases/Security-advisory-bulletin-017-017/071141e5-bc2e-4b71-81f3-5e499316fcee
CVE: CVE-2021-26593
Published: 2021-02-23
Description: In Directus 8.x through 8.8.1, an attacker can see all users in the CMS using the API /users/{id}. For each call, they get in response a lot of information about the user (such as email address, first name, and last name) but also the secret for 2FA if one exists. This secret can be regenerated. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/sgranel/directusv8; https://github.com/sgranel/directusv8
CVE: CVE-2021-26594
Published: 2021-02-23
Description: In Directus 8.x through 8.8.1, an attacker can switch to the administrator role (via the PATCH method) without any control by the back end. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://github.com/sgranel/directusv8; https://github.com/sgranel/directusv8
CVE: CVE-2021-26595
Published: 2021-02-23
Description: In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of the DBMS, simply by view the result of the api-aa, called automatically upon a connection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-312
References: https://github.com/sgranel/directusv8; https://github.com/sgranel/directusv8
CVE: CVE-2021-26677
Published: 2021-02-23
Description: A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in ClearPass OnGuard could allow local authenticated users on a Windows platform to elevate their privileges. A successful exploit could allow an attacker to execute arbitrary code with SYSTEM level privileges.
CVSS Score: 7.8 (HIGH)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE: CVE-2021-26679
Published: 2021-02-23
Description: A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE: CVE-2021-26680
Published: 2021-02-23
Description: A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt
CVE: CVE-2021-27583
Published: 2021-02-23
Description: In Directus 8.x through 8.8.1, an attacker can discover whether a user is present in the database through the password reset feature. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://github.com/sgranel/directusv8; https://github.com/sgranel/directusv8
CVE: CVE-2021-26927
Published: 2021-02-23
Description: A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/jasper-software/jasper/commit/41f214b121b837fa30d9ca5f[PII_REDACTED]f5cd9b; https://github.com/jasper-software/jasper/issues/265; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSXESYUHMO522Z3RHXOQ2SJNWP3XTO67/
CVE: CVE-2021-3405
Published: 2021-02-23
Description: A flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData in libebml.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/Matroska-Org/libebml/issues/74; https://lists.debian.org/debian-lts-announce/2021/04/msg00016.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JNHQI6MDOECJ2HT5GCLEX2DMJFEOWPW7/
CVE: CVE-2021-20182
Published: 2021-02-23
Description: A privilege escalation flaw was found in openshift4/ose-docker-builder. The build container runs with high privileges using a chrooted environment instead of runc. If an attacker can gain access to this build container, they can potentially utilize the raw devices of the underlying node, such as the network and storage devices, to at least escalate their privileges to that of the cluster admin. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-552
References: https://bugzilla.redhat.com/show_bug.cgi?id=1915110; https://bugzilla.redhat.com/show_bug.cgi?id=1915110
CVE: CVE-2021-20194
Published: 2021-02-23
Description: There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF_SYSCALL=y , CONFIG_BPF=y , CONFIG_CGROUPS=y , CONFIG_CGROUP_BPF=y , CONFIG_HARDENED_USERCOPY not set, and BPF hook to getsockopt is registered). As result of BPF execution, the local user can trigger bug in __cgroup_bpf_run_filter_getsockopt() function that can lead to heap overflow (because of non-hardened usercopy). The impact of attack could be deny of service or possibly privileges escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1912683; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://bugzilla.redhat.com/show_bug.cgi?id=1912683
CVE: CVE-2021-20252
Published: 2021-02-23
Description: A flaw was found in Red Hat 3scale API Management Platform 2. The 3scale backend does not perform preventive handling on user-requested date ranges in certain queries allowing a malicious authenticated user to submit a request with a sufficiently large date range to eventually yield an internal server error resulting in denial of service. The highest threat from this vulnerability is to system availability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1928302; https://bugzilla.redhat.com/show_bug.cgi?id=1928302
CVE: CVE-2021-20256
Published: 2021-02-23
Description: A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=1930926; https://bugzilla.redhat.com/show_bug.cgi?id=1930926
CVE: CVE-2021-21323
Published: 2021-02-23
Description: Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor windows to their DNS provider. (DNS requests that were not initiated by CNAME adblocking would go through Tor as expected.) This is fixed in Brave version 1.20.108
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/brave/brave-browser/issues/13527; https://github.com/brave/brave-browser/security/advisories/GHSA-mqjf-9x5g-2rv6; https://github.com/brave/brave-core/commit/12fe321eaad8acc1cbd1d70b4128f687777bcf15
CVE: CVE-2021-3407
Published: 2021-02-23
Description: A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-415, CWE-415
References: http://git.ghostscript.com/?p=mupdf.git%3Bh=cee7cefc610d42fd383b3c80c12cbc675443176a; https://bugs.ghostscript.com/show_bug.cgi?id=703366; https://lists.debian.org/debian-lts-announce/2021/03/msg00012.html
CVE: CVE-2021-3410
Published: 2021-02-23
Description: A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=1928437; https://github.com/cacalabs/libcaca/issues/52; https://lists.debian.org/debian-lts-announce/2021/03/msg00006.html
CVE: CVE-2021-20656
Published: 2021-02-24
Description: Exposure of information through directory listing in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain the information inside the system, such as directories and/or file configurations via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://jvn.jp/en/jp/JVN37417423/index.html; https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf; https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf
CVE: CVE-2021-20657
Published: 2021-02-24
Description: Improper access control vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain and/or alter the setting information without the access privilege via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
References: https://jvn.jp/en/jp/JVN37417423/index.html; https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf; https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf
CVE: CVE-2021-20658
Published: 2021-02-24
Description: SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://jvn.jp/en/jp/JVN37417423/index.html; https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf; https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf
CVE: CVE-2021-20659
Published: 2021-02-24
Description: SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script, an attacker may execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://jvn.jp/en/jp/JVN37417423/index.html; https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf; https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf
CVE: CVE-2021-20660
Published: 2021-02-24
Description: Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN37417423/index.html; https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf; https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf
CVE: CVE-2021-20661
Published: 2021-02-24
Description: Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to delete arbitrary files and/or directories on the server via unspecified vectors.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://jvn.jp/en/jp/JVN37417423/index.html; https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf; https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf
CVE: CVE-2021-20662
Published: 2021-02-24
Description: Missing authentication for critical function in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to alter the setting information without the access privileges via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://jvn.jp/en/jp/JVN37417423/index.html; https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf; https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf
CVE: CVE-2020-12702
Published: 2021-02-24
Description: Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during the pairing process.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-327
References: https://dl.acm.org/doi/abs/10.1145/3[PII_REDACTED]965; https://github.com/salgio/ESPTouchCatcher; https://play.google.com/store/apps/details?id=com.coolkit&hl=en_US
CVE: CVE-2021-27645
Published: 2021-02-24
Description: The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This is related to netgroupcache.c.
CVSS Score: 2.5 (LOW)
CWE: CWE-415, CWE-415
References: https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LZNT6KTMCCWPWXEOGSHD3YLYZKUGMH5/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7TS26LIZSOBLGJEZMJX4PXT5BQDE2WS/
CVE: CVE-2021-3355
Published: 2021-02-24
Description: A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/SensitiveWords.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/161562/LightCMS-1.3.4-Cross-Site-Scripting.html; https://gist.github.com/Peithon/1c628ded0c4fc96c6331c3cce1d0c69b; https://github.com/eddy8/LightCMS/issues/18
CVE: CVE-2020-28599
Published: 2021-02-24
Description: A stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFXQZK6BAYARVVWBBXDKPVPN3N77PPDX/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRHYUWXQ7QQIC6TXDYYLYFFF7B7L3EBD/; https://security.gentoo.org/glsa/202107-35
CVE: CVE-2020-7846
Published: 2021-02-24
Description: Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key. It finally leads to a file download and execution via access to crafted web page.
CVSS Score: 8.0 (HIGH)
CWE: CWE-321, CWE-798
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35919; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35919
CVE: CVE-2021-21616
Published: 2021-02-24
Description: Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2021/02/24/3; https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2192; http://www.openwall.com/lists/oss-security/2021/02/24/3
CVE: CVE-2021-21617
Published: 2021-02-24
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Configuration Slicing Plugin 1.51 and earlier allows attackers to apply different slice configurations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2021/02/24/3; https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2003; http://www.openwall.com/lists/oss-security/2021/02/24/3
CVE: CVE-2021-21618
Published: 2021-02-24
Description: Jenkins Repository Connector Plugin 2.0.2 and earlier does not escape parameter names and descriptions for past builds, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2183; https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2183
CVE: CVE-2021-21619
Published: 2021-02-24
Description: Jenkins Claim Plugin 2.18.1 and earlier does not escape the user display name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers who are able to control the display names of Jenkins users, either via the security realm, or directly inside Jenkins.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2021/02/24/3; https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2188%20%281%29; http://www.openwall.com/lists/oss-security/2021/02/24/3
CVE: CVE-2021-21620
Published: 2021-02-24
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to change claims.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2188%20%282%29; https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2188%20%282%29
CVE: CVE-2021-21621
Published: 2021-02-24
Description: Jenkins Support Core Plugin 2.72 and earlier provides the serialized user authentication as part of the "About user (basic authentication details only)" information, which can include the session ID of the user creating the support bundle in some configurations.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2150; https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2150
CVE: CVE-2021-21622
Published: 2021-02-24
Description: Jenkins Artifact Repository Parameter Plugin 1.0.0 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2168; https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2168
CVE: CVE-2020-27224
Published: 2021-02-24
Description: In Eclipse Theia versions up to and including 1.2.0, the Markdown Preview (@theia/preview), can be exploited to execute arbitrary code.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://github.com/eclipse-theia/theia/issues/7954; https://omespino.com/write-up-google-bug-bounty-xss-to-cloud-shell-instance-takeover-rce-as-root-5000-usd/; https://github.com/eclipse-theia/theia/issues/7954
CVE: CVE-2020-7836
Published: 2021-02-24
Description: VOICEYE WSActiveBridgeES versions prior to 2.1.0.3 contains a stack-based buffer overflow vulnerability caused by improper bound checking parameter given by attack. It finally leads to a stack-based buffer overflow via access to crafted web page.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35922; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35922