deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-28042
Published: 2021-03-05
Description: Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload feature or the MO Connect component. This can lead to remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://herolab.usd.de/security-advisories/usd-2020-0028/; https://www.deutschepost.de/de/m/mailoptimizer.html; https://herolab.usd.de/security-advisories/usd-2020-0028/
CVE: CVE-2021-27581
Published: 2021-03-05
Description: The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://gist.github.com/stasinopoulos/673ae3c31d703b4d67449f4d8888c686; https://kontent.ai; https://www.obrela.com/kentico-cms-critical-vulnerability/
CVE: CVE-2021-26814
Published: 2021-03-06
Description: Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI. An authenticated user to the service may exploit incomplete input validation on the /manager/files API to inject arbitrary code within the API service script.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://documentation.wazuh.com/4.0/release-notes/release_4_0_4.html; https://github.com/wazuh/wazuh/releases/tag/v4.0.4; https://documentation.wazuh.com/4.0/release-notes/release_4_0_4.html
CVE: CVE-2021-26294
Published: 2021-03-07
Description: An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a data/settings/settings.xml file containing admin panel credentials), as demonstrated by dav/server.php/files/personal/%2e%2e when using the caldav_public_user account (with caldav_public_user as its password).
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/E3SEC/AfterLogic/blob/main/CVE-2021-26294-exposure-of-sensitive-information-vulnerability.md; https://github.com/E3SEC/AfterLogic/blob/main/CVE-2021-26294-exposure-of-sensitive-information-vulnerability.md
CVE: CVE-2021-27363
Published: 2021-03-07
Description: An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables.
CVSS Score: 4.4 (MEDIUM)
References: http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html; http://www.openwall.com/lists/oss-security/2021/03/06/1; https://blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html
CVE: CVE-2021-27364
Published: 2021-03-07
Description: An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html; https://blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html; https://bugzilla.suse.com/show_bug.cgi?id=1182717
CVE: CVE-2021-27365
Published: 2021-03-07
Description: An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html; https://blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html; https://bugzilla.suse.com/show_bug.cgi?id=1182715
CVE: CVE-2020-28466
Published: 2021-03-07
Description: This affects all versions of package github.com/nats-io/nats-server/server. Untrusted accounts are able to crash the server using configs that represent a service export/import cycles. Disclaimer from the maintainers: Running a NATS service which is exposed to untrusted users presents a heightened risk. Any remote execution flaw or equivalent seriousness, or denial-of-service by unauthenticated users, will lead to prompt releases by the NATS maintainers. Fixes for denial of service issues with no threat of remote execution, when limited to account holders, are likely to just be committed to the main development branch with no special attention. Those who are running such services are encouraged to build regularly from git.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2021/03/16/1; http://www.openwall.com/lists/oss-security/2021/03/16/2; https://github.com/nats-io/nats-server/pull/1731
CVE: CVE-2009-20001
Published: 2021-03-07
Description: An issue was discovered in MantisBT before 2.24.5. It associates a unique cookie string with each user. This string is not reset upon logout (i.e., the user session is still considered valid and active), allowing an attacker who somehow gained access to a user's cookie to login as them.
CVSS Score: 8.1 (HIGH)
CWE: CWE-613
References: https://mantisbt.org/bugs/view.php?id=11296; https://mantisbt.org/bugs/view.php?id=27976; https://mantisbt.org/bugs/view.php?id=11296
CVE: CVE-2021-23351
Published: 2021-03-08
Description: The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service (DoS) via the parseVersion1() function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in the code, a deliberately malformed V1 header could be used to exhaust memory in a server process using this code - and create a DoS. This can be exploited by sending a stream starting with PROXY and continuing to send data (which does not contain a newline) until the target stops acknowledging. The risk here is small, because only trusted sources should be allowed to send proxy protocol headers.
CVSS Score: 4.4 (MEDIUM)
References: https://github.com/pires/go-proxyproto/commit/7f48261db810703d173f27f3309a808cc2b49b8b; https://github.com/pires/go-proxyproto/issues/69; https://github.com/pires/go-proxyproto/pull/71
CVE: CVE-2021-26788
Published: 2021-03-08
Description: Oryx Embedded CycloneTCP 1.7.6 to 2.0.0, fixed in 2.0.2, is affected by incorrect input validation, which may cause a denial of service (DoS). To exploit the vulnerability, an attacker needs to have TCP connectivity to the target system. Receiving a maliciously crafted TCP packet from an unauthenticated endpoint is sufficient to trigger the bug.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/Oryx-Embedded/CycloneTCP/commit/de5336016edbe1e90327d0ed1cba5c4e49114366?branch=de5336016edbe1e90327d0ed1cba5c4e49114366&diff=split; https://github.com/Oryx-Embedded/CycloneTCP/commit/de5336016edbe1e90327d0ed1cba5c4e49114366?branch=de5336016edbe1e90327d0ed1cba5c4e49114366&diff=split
CVE: CVE-2020-23967
Published: 2021-03-08
Description: Dr.Web Security Space versions 11 and 12 allow elevation of privilege for local users without administrative privileges to NT AUTHORITY\SYSTEM due to insufficient control during autoupdate.
CVSS Score: 7.8 (HIGH)
CWE: CWE-347
References: https://amonitoring.ru/article/drweb/; https://habr.com/ru/company/pm/blog/509592/; https://www.youtube.com/watch?v=q7Kqi7kE59U
CVE: CVE-2021-27222
Published: 2021-03-08
Description: In the "Time in Status" app before 4.13.0 for Jira, remote authenticated attackers can cause Stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://dev.obss.com.tr/confluence/display/MD/2021-02-25+Time+in+Status+for+Jira+Server+and+Data+Center+Security+Advisory; https://dev.obss.com.tr/jira/browse/APDTIS-1097?src=confmacro; https://marketplace.atlassian.com/apps/1211756/time-in-status/version-history
CVE: CVE-2020-27817
Published: 2021-03-08
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA
CVE: CVE-2021-21324
Published: 2021-03-08
Description: GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 there is an Insecure Direct Object Reference (IDOR) on "Solutions". This vulnerability gives an unauthorized user the ability to enumerate GLPI items names (including users logins) using the knowbase search form (requires authentication). To Reproduce: Perform a valid authentication at your GLPI instance, Browse the ticket list and select any open ticket, click on Solution form, then Search a solution form that will redirect you to the endpoint /"glpi/front/knowbaseitem.php?item_itemtype=Ticket&item_items_id=18&forcetab=Knowbase$1", and the item_itemtype=Ticket parameter present in the previous URL will point to the PHP alias of glpi_tickets table, so just replace it with "Users" to point to glpi_users table instead; in the same way, item_items_id=18 will point to the related column id, so changing it too you should be able to enumerate all the content which has an alias. Since such id(s) are obviously incremental, a malicious party could exploit the vulnerability simply by guessing-based attempts.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-639
References: https://github.com/glpi-project/glpi/commit/aade65b7f67d46f23d276a8acb0df70651c3b1dc; https://github.com/glpi-project/glpi/releases/tag/9.5.4; https://github.com/glpi-project/glpi/security/advisories/GHSA-jvwm-gq36-3v7v
CVE: CVE-2021-21325
Published: 2021-03-08
Description: GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 a new budget type can be defined by user. This input is not correctly filtered. This results in a cross-site scripting attack. To exploit this endpoint attacker need to be authenticated. This is fixed in version 9.5.4.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-79
References: https://github.com/glpi-project/glpi/releases/tag/9.5.4; https://github.com/glpi-project/glpi/security/advisories/GHSA-m574-f3jw-pwrf; https://github.com/glpi-project/glpi/releases/tag/9.5.4
CVE: CVE-2021-21326
Published: 2021-03-08
Description: GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 it is possible to create tickets for another user with self-service interface without delegatee systems enabled. This is fixed in version 9.5.4.
CVSS Score: 7.7 (HIGH)
CWE: CWE-862
References: https://github.com/glpi-project/glpi/releases/tag/9.5.4; https://github.com/glpi-project/glpi/security/advisories/GHSA-vmj9-cg56-p7wh; https://github.com/glpi-project/glpi/releases/tag/9.5.4
CVE: CVE-2021-21327
Published: 2021-03-08
Description: GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 non-authenticated user can remotely instantiate object of any class existing in the GLPI environment that can be used to carry out malicious attacks, or to start a “POP chain”. As an example of direct impact, this vulnerability affects integrity of the GLPI core platform and third-party plugins runtime misusing classes which implement some sensitive operations in their constructors or destructors. This is fixed in version 9.5.4.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-862, CWE-470
References: http://packetstormsecurity.com/files/161680/GLPI-9.5.3-Unsafe-Reflection.html; https://github.com/glpi-project/glpi/releases/tag/9.5.4; https://github.com/glpi-project/glpi/security/advisories/GHSA-qmw7-w2m4-rjwp
CVE: CVE-2020-4695
Published: 2021-03-08
Description: IBM API Connect V10 is impacted by insecure communications during database replication. As the data replication happens over insecure communication channels, an attacker can view unencrypted data leading to a loss of confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/186788; https://www.ibm.com/support/pages/node/6426707; https://exchange.xforce.ibmcloud.com/vulnerabilities/186788
CVE: CVE-2020-4903
Published: 2021-03-08
Description: IBM API Connect V10 and V2018 could allow an attacker who has intercepted a registration invitation link to impersonate the registered user or obtain sensitive information. IBM X-Force ID: 191105.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191105; https://www.ibm.com/support/pages/node/6426703; https://exchange.xforce.ibmcloud.com/vulnerabilities/191105
CVE: CVE-2020-5014
Published: 2021-03-08
Description: IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges to execute arbitrary code on the system using a server-side requesr forgery attack. IBM X-Force ID: 193247.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-918
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/193247; https://www.ibm.com/support/pages/node/6426789; https://exchange.xforce.ibmcloud.com/vulnerabilities/193247
CVE: CVE-2021-21329
Published: 2021-03-08
Description: RATCF is an open-source framework for hosting Cyber-Security Capture the Flag events. In affected versions of RATCF users with multi factor authentication enabled are able to log in without a valid token. This is fixed in commit cebb67b.
CVSS Score: 8.7 (HIGH)
CWE: CWE-287
References: https://github.com/ractf/core/commit/c57a4d186bfc586ad3edfe4dcba9f11efbf22f09#diff-60c444c47c061306f2dff5bf97c07810f40f949a8e94ecbb609b6b29364c8642R130-R152; https://github.com/ractf/core/commit/cebb67bd16a[PII_REDACTED]805332365ffccb29638; https://github.com/ractf/core/security/advisories/GHSA-fw57-f7mq-9q85
CVE: CVE-2021-21354
Published: 2021-03-08
Description: Pollbot is open source software which "frees its human masters from the toilsome task of polling for the state of things during the Firefox release process." In Pollbot before version 1.4.4 there is an open redirection vulnerability in the path of "https://pollbot.services.mozilla.com/". An attacker can redirect anyone to malicious sites. To Reproduce type in this URL: "https://pollbot.services.mozilla.com//evil.com/". Affected versions will redirect to that website when you inject a payload like "//evil.com/". This is fixed in version 1.4.4.
CVSS Score: 7.4 (HIGH)
CWE: CWE-601
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1694684; https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html; https://github.com/mozilla/PollBot/commit/6db74a4fcbff258c7cdf51a6ff0724fc10c485e5
CVE: CVE-2021-21362
Published: 2021-03-08
Description: MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service. In MinIO before version RELEASE.2021-03-04T00-53-13Z it is possible to bypass a readOnly policy by creating a temporary 'mc share upload' URL. Everyone is impacted who uses MinIO multi-users. This is fixed in version RELEASE.2021-03-04T00-53-13Z. As a workaround, one can disable uploads with `Content-Type: multipart/form-data` as mentioned in the S3 API RESTObjectPOST docs by using a proxy in front of MinIO.
CVSS Score: 7.7 (HIGH)
CWE: CWE-285, CWE-863
References: https://github.com/minio/minio/commit/039f59b552319fcc2f83631bb421a7d4b82bc482; https://github.com/minio/minio/pull/11682; https://github.com/minio/minio/releases/tag/RELEASE.2021-03-04T00-53-13Z
CVE: CVE-2020-27574
Published: 2021-03-08
Description: Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF). If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://maxum.com; https://tvrbk.github.io/cve/2021/03/07/rumpus.html; http://maxum.com
CVE: CVE-2021-21335
Published: 2021-03-08
Description: In the SPNEGO HTTP Authentication Module for nginx (spnego-http-auth-nginx-module) before version 1.1.1 basic Authentication can be bypassed using a malformed username. This affects users of spnego-http-auth-nginx-module that have enabled basic authentication. This is fixed in version 1.1.1 of spnego-http-auth-nginx-module. As a workaround, one may disable basic authentication.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://github.com/stnoonan/spnego-http-auth-nginx-module/commit/a06f9efca373e25328b1c53639a48decd0854570; https://github.com/stnoonan/spnego-http-auth-nginx-module/releases/tag/v1.1.1; https://github.com/stnoonan/spnego-http-auth-nginx-module/security/advisories/GHSA-ww8q-72rx-hc54
CVE: CVE-2021-21336
Published: 2021-03-08
Description: Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an information disclosure vulnerability - everyone can list the names of roles defined in the ZODB Role Manager plugin if the site uses this plugin. The problem has been fixed in version 2.6.0. Depending on how you have installed Products.PluggableAuthService, you should change the buildout version pin to 2.6.0 and re-run the buildout, or if you used pip simply do `pip install "Products.PluggableAuthService>=2.6.0"`.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2021/05/21/1; http://www.openwall.com/lists/oss-security/2021/05/22/1; https://github.com/zopefoundation/Products.PluggableAuthService/commit/2dad81128250cb2e5d950cddc9d3c0314a80b4bb
CVE: CVE-2021-21337
Published: 2021-03-08
Description: Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an open redirect vulnerability. A maliciously crafted link to the login form and login functionality could redirect the browser to a different website. The problem has been fixed in version 2.6.1. Depending on how you have installed Products.PluggableAuthService, you should change the buildout version pin to `2.6.1` and re-run the buildout, or if you used `pip` simply do `pip install "Products.PluggableAuthService>=2.6.1".
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-601
References: http://packetstormsecurity.com/files/162911/Products.PluggableAuthService-2.6.0-Open-Redirect.html; https://github.com/zopefoundation/Products.PluggableAuthService/commit/7eead067898852ebd3e0f143bc[PII_REDACTED]8dfa; https://github.com/zopefoundation/Products.PluggableAuthService/security/advisories/GHSA-p44j-xrqg-4xrr
CVE: CVE-2021-22134
Published: 2021-03-08
Description: A document disclosure flaw was found in Elasticsearch versions after 7.6.0 and before 7.11.0 when Document or Field Level Security is used. Get requests do not properly apply security permissions when executing a query against a recently updated document. This affects documents that have been updated and not yet refreshed in the index. This could result in the search disclosing the existence of documents and fields the attacker should not be able to view.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-863
References: https://discuss.elastic.co/t/elastic-stack-7-11-0-security-update/265835; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.oracle.com/security-alerts/cpuapr2022.html
CVE: CVE-2020-27575
Published: 2021-03-08
Description: Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://maxum.com; https://tvrbk.github.io/cve/2021/03/07/rumpus.html; http://maxum.com
CVE: CVE-2020-27576
Published: 2021-03-08
Description: Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS). Users are able to create folders in the web application. The folder name is insufficiently validated resulting in a stored cross-site scripting vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://maxum.com; https://tvrbk.github.io/cve/2021/03/07/rumpus.html; http://maxum.com
CVE: CVE-2020-27838
Published: 2021-03-08
Description: A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients (like client secret) without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this vulnerability is to data confidentiality.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: https://bugzilla.redhat.com/show_bug.cgi?id=1906797; https://bugzilla.redhat.com/show_bug.cgi?id=1906797
CVE: CVE-2021-21503
Published: 2021-03-08
Description: PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user could potentially exploit this vulnerability, leading to potential privileges escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://www.dell.com/support/kbdoc/000183717; https://www.dell.com/support/kbdoc/000183717
CVE: CVE-2021-21506
Published: 2021-03-08
Description: PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenticated with ISI_PRIV_SYS_SUPPORT and ISI_PRIV_LOGIN_PAPI privileges could potentially exploit this vulnerability, leading to potential privileges escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.dell.com/support/kbdoc/000183717; https://www.dell.com/support/kbdoc/000183717
CVE: CVE-2021-21510
Published: 2021-03-08
Description: Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20, CWE-74
References: https://www.dell.com/support/kbdoc/en-us/000183758/dsa-2021-041-dell-emc-idrac-8-security-update-for-a-host-header-injection-vulnerability; https://www.dell.com/support/kbdoc/en-us/000183758/dsa-2021-041-dell-emc-idrac-8-security-update-for-a-host-header-injection-vulnerability
CVE: CVE-2021-21360
Published: 2021-03-09
Description: Products.GenericSetup is a mini-framework for expressing the configured state of a Zope Site as a set of filesystem artifacts. In Products.GenericSetup before version 2.1.1 there is an information disclosure vulnerability - anonymous visitors may view log and snapshot files generated by the Generic Setup Tool. The problem has been fixed in version 2.1.1. Depending on how you have installed Products.GenericSetup, you should change the buildout version pin to 2.1.1 and re-run the buildout, or if you used pip simply do pip install `"Products.GenericSetup>=2.1.1"`.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2021/05/21/1; http://www.openwall.com/lists/oss-security/2021/05/22/1; https://github.com/zopefoundation/Products.GenericSetup/commit/700319512b3615b3871a1f24e096cf66dc488c57