deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-20413
Published: 2021-06-28
Description: IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196212.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196212; https://www.ibm.com/support/pages/node/6444037; https://exchange.xforce.ibmcloud.com/vulnerabilities/196212
CVE: CVE-2021-20494
Published: 2021-06-28
Description: IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap based buffer overflow, caused by improper bounds. An authenticared user could overflow the buffer and cause the service to crash. IBM X-Force ID: 197882.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/197882; https://www.ibm.com/support/pages/node/6465875; https://exchange.xforce.ibmcloud.com/vulnerabilities/197882
CVE: CVE-2021-20572
Published: 2021-06-28
Description: IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow the and cause the server to crash. IBM X-Force ID: 199247.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199247; https://www.ibm.com/support/pages/node/6465875; https://exchange.xforce.ibmcloud.com/vulnerabilities/199247
CVE: CVE-2021-20573
Published: 2021-06-28
Description: IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow the and cause the server to crash. IBM X-Force ID: 199249.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199249; https://www.ibm.com/support/pages/node/6465875; https://exchange.xforce.ibmcloud.com/vulnerabilities/199249
CVE: CVE-2021-20574
Published: 2021-06-28
Description: IBM Security Identity Manager Adapters 6.0 and 7.0 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability and takeover other accounts. IBM X-Force ID: 199252.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199252; https://www.ibm.com/support/pages/node/6465875; https://exchange.xforce.ibmcloud.com/vulnerabilities/199252
CVE: CVE-2021-29693
Published: 2021-06-28
Description: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user that is in the with elevated group privileges to cause a denial of service due to a vulnerability in the lpd daemon. IBM X-Force ID: 200255.
CVSS Score: 4.4 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/200255; https://www.ibm.com/support/pages/node/6467129; https://exchange.xforce.ibmcloud.com/vulnerabilities/200255
CVE: CVE-2021-29751
Published: 2021-06-28
Description: IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 could allow an authenticated user to obtain sensitive information about another user under nondefault configurations. IBM X-Force ID: 201779.
CVSS Score: 4.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/201779; https://www.ibm.com/support/pages/node/6465127; https://www.ibm.com/support/pages/node/6467055
CVE: CVE-2021-29775
Published: 2021-06-28
Description: IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 203029.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/203029; https://www.ibm.com/support/pages/node/6465127; https://www.ibm.com/support/pages/node/6467057
CVE: CVE-2021-32719
Published: 2021-06-28
Description: RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.18, when a federation link was displayed in the RabbitMQ management UI via the `rabbitmq_federation_management` plugin, its consumer tag was rendered without proper <script> tag sanitization. This potentially allows for JavaScript code execution in the context of the page. The user must be signed in and have elevated permissions (manage federation upstreams and policies) for this to occur. The vulnerability is patched in RabbitMQ 3.8.18. As a workaround, disable the `rabbitmq_federation_management` plugin and use [CLI tools](https://www.rabbitmq.com/cli.html) instead.
CVSS Score: 3.1 (LOW)
CWE: CWE-80, CWE-79
References: https://github.com/rabbitmq/rabbitmq-server/pull/3122; https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-5452-hxj4-773x; https://herolab.usd.de/security-advisories/usd-2021-0011/
CVE: CVE-2021-34187
Published: 2021-06-28
Description: main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/chamilo/chamilo-lms/commit/005dc8e9eccc6ea35264064ae09e2e84af8d5b59; https://github.com/chamilo/chamilo-lms/commit/f7f93579ed64765c2667910b9c24d031b0a00571; https://murat.one/?p=118
CVE: CVE-2021-34254
Published: 2021-06-28
Description: Umbraco CMS before 7.15.7 is vulnerable to Open Redirection due to insufficient url sanitization on booting.aspx.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/umbraco/Umbraco-CMS/issues/9782; https://github.com/umbraco/Umbraco-CMS/issues/9782
CVE: CVE-2020-23711
Published: 2021-06-28
Description: SQL Injection vulnerability in NavigateCMS 2.9 via the URL encoded GET input category in navigate.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/NavigateCMS/Navigate-CMS/issues/20; https://github.com/NavigateCMS/Navigate-CMS/issues/20
CVE: CVE-2020-23715
Published: 2021-06-28
Description: Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: https://github.com/luuthehienhbit/LFI-Vulnerability-Webport-CMS-version-1.19.10.17121/blob/master/README.md; https://github.com/luuthehienhbit/LFI-Vulnerability-Webport-CMS-version-1.19.10.17121/blob/master/README.md
CVE: CVE-2021-35523
Published: 2021-06-28
Description: Securepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under "%APPDATA%\Securepoint SSL VPN" and add a external script file that is executed as privileged user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://packetstormsecurity.com/files/163320/Securepoint-SSL-VPN-Client-2.0.30-Local-Privilege-Escalation.html; http://seclists.org/fulldisclosure/2021/Jun/59; https://bogner.sh/2021/04/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/
CVE: CVE-2020-20640
Published: 2021-06-28
Description: Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can use the html entity encoding to bypass the security policy of the safety.php file, triggering the xss vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.jianshu.com/p/219755c047a1; https://www.jianshu.com/p/219755c047a1
CVE: CVE-2021-35525
Published: 2021-06-28
Description: PostSRSd before 1.11 allows a denial of service (subprocess hang) if Postfix sends certain long data fields such as multiple concatenated email addresses. NOTE: the PostSRSd maintainer acknowledges "theoretically, this error should never occur ... I'm not sure if there's a reliable way to trigger this condition by an external attacker, but it is a security bug in PostSRSd nevertheless."
CVSS Score: 5.3 (MEDIUM)
References: https://bugs.gentoo.org/793674; https://github.com/roehling/postsrsd/commit/077be98d8c8a9847e4ae0c7dc09e7474cbe27db2; https://github.com/roehling/postsrsd/releases/tag/1.11
CVE: CVE-2020-22607
Published: 2021-06-28
Description: Cross Site Scripting vulnerabilty in LimeSurvey 4.1.11+200316 via the (1) name and (2) description parameters in application/controllers/admin/PermissiontemplatesController.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/LimeSurvey/LimeSurvey/commit/2aada33c76efbbc35d33c149ac02b1dc16a81f62; https://github.com/LimeSurvey/LimeSurvey/commit/2aada33c76efbbc35d33c149ac02b1dc16a81f62
CVE: CVE-2020-22608
Published: 2021-06-28
Description: Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.search.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/osTicket/osTicket/commit/d54cca0b265128f119b6c398575175cb10cf1754; https://github.com/osTicket/osTicket/commit/d54cca0b265128f119b6c398575175cb10cf1754
CVE: CVE-2020-22609
Published: 2021-06-28
Description: Cross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/class.queue.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/osTicket/osTicket/commit/6c724ea3fe352d10d457d334dc054ef81917fde1; https://github.com/osTicket/osTicket/commit/6c724ea3fe352d10d457d334dc054ef81917fde1
CVE: CVE-2021-32720
Published: 2021-06-28
Description: Sylius is an Open Source eCommerce platform on top of Symfony. In versions of Sylius prior to 1.9.5 and 1.10.0-RC.1, part of the details (order ID, order number, items total, and token value) of all placed orders were exposed to unauthorized users. If exploited properly, a few additional information like the number of items in the cart and the date of the shipping may be fetched as well. This data seems to not be crucial nor is personal data, however, could be used for sociotechnical attacks or may expose a few details about shop condition to the third parties. The data possible to aggregate are the number of processed orders or their value in the moment of time. The problem has been patched at Sylius 1.9.5 and 1.10.0-RC.1. There are a few workarounds for the vulnerability. The first possible solution is to hide the problematic endpoints behind the firewall from not logged in users. This would put only the order list under the firewall and allow only authorized users to access it. Once a user is authorized, it will have access to theirs orders only. The second possible solution is to decorate the `\Sylius\Bundle\ApiBundle\Doctrine\QueryCollectionExtension\OrdersByLoggedInUserExtension` and throw `Symfony\Component\Security\Core\Exception\AccessDeniedException` if the class is executed for unauthorized user.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://github.com/Sylius/Sylius/releases/tag/v1.9.5; https://github.com/Sylius/Sylius/security/advisories/GHSA-rpxh-vg2x-526v; https://github.com/Sylius/Sylius/releases/tag/v1.9.5
CVE: CVE-2020-21142
Published: 2021-06-28
Description: Cross Site Scripting (XSS) vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.ipfire.org/show_bug.cgi?id=12226; https://bugzilla.ipfire.org/show_bug.cgi?id=12226
CVE: CVE-2021-32722
Published: 2021-06-28
Description: GlobalNewFiles is a mediawiki extension. Versions prior to 48be7adb70568e20e961ea1cb70904454a671b1d are affected by an uncontrolled resource consumption vulnerability. A large amount of page moves within a short space of time could overwhelm Database servers due to improper handling of load balancing and a lack of an appropriate index. As a workaround, one may avoid use of the extension unless additional rate limit at the MediaWiki level or via PoolCounter / MySQL is enabled. A patch is available in version 48be7adb70568e20e961ea1cb70904454a671b1d.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://github.com/miraheze/GlobalNewFiles/commit/48be7adb70568e20e961ea1cb70904454a671b1d; https://github.com/miraheze/GlobalNewFiles/pull/17; https://github.com/miraheze/GlobalNewFiles/security/advisories/GHSA-cwv5-c938-5h5h
CVE: CVE-2021-32723
Published: 2021-06-28
Description: Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS). When Prism is used to highlight untrusted (user-given) text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fixed in Prism v1.24. As a workaround, do not use ASCIIDoc or ERB to highlight untrusted text. Other languages are not affected and can be used to highlight untrusted text.
CVSS Score: 7.4 (HIGH)
CWE: CWE-400, CWE-400
References: https://github.com/PrismJS/prism/pull/2688; https://github.com/PrismJS/prism/pull/2774; https://github.com/PrismJS/prism/security/advisories/GHSA-gj77-59wh-66hg
CVE: CVE-2021-35298
Published: 2021-06-28
Description: Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML via multiple models that contain a 'note' field to store additional information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://zammad.com/en/advisories/zaa-2021-03; https://zammad.com/en/advisories/zaa-2021-03
CVE: CVE-2021-35299
Published: 2021-06-28
Description: Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connection configuration probing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://zammad.com/en/advisories/zaa-2021-02; https://zammad.com/en/advisories/zaa-2021-02
CVE: CVE-2021-35300
Published: 2021-06-28
Description: Text injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers to manipulate users into visiting the attackers' page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021
References: https://zammad.com/en/advisories/zaa-2021-07; https://zammad.com/en/advisories/zaa-2021-07
CVE: CVE-2021-35301
Published: 2021-06-28
Description: Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive information via the Ticket Article detail view.
CVSS Score: 5.3 (MEDIUM)
References: https://zammad.com/en/advisories/zaa-2021-05; https://zammad.com/en/advisories/zaa-2021-05
CVE: CVE-2021-35302
Published: 2021-06-28
Description: Incorrect Access Control for linked Tickets in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive information.
CVSS Score: 5.3 (MEDIUM)
References: https://zammad.com/en/advisories/zaa-2021-04; https://zammad.com/en/advisories/zaa-2021-04
CVE: CVE-2021-35303
Published: 2021-06-28
Description: Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML via the User Avatar attribute.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://zammad.com/en/advisories/zaa-2021-06; https://zammad.com/en/advisories/zaa-2021-06
CVE: CVE-2021-1134
Published: 2021-06-29
Description: A vulnerability in the Cisco Identity Services Engine (ISE) integration feature of the Cisco DNA Center Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to an incomplete validation of the X.509 certificate used when establishing a connection between DNA Center and an ISE server. An attacker could exploit this vulnerability by supplying a crafted certificate and could then intercept communications between the ISE and DNA Center. A successful exploit could allow the attacker to view and alter sensitive information that the ISE maintains about clients that are connected to the network.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295, CWE-295
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-certvalid-USEj2CZk; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-certvalid-USEj2CZk
CVE: CVE-2021-31838
Published: 2021-06-29
Description: A command injection vulnerability in MVISION EDR (MVEDR) prior to 3.4.0 allows an authenticated MVEDR administrator to trigger the EDR client to execute arbitrary commands through PowerShell using the EDR functionality 'execute reaction'.
CVSS Score: 8.4 (HIGH)
CWE: CWE-78, CWE-78
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10342; https://kc.mcafee.com/corporate/index?page=content&id=SB10342
CVE: CVE-2021-33503
Published: 2021-06-29
Description: An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a parameter or redirected to via an HTTP redirect.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/advisories/GHSA-q2q7-5pp4-w6pg; https://github.com/urllib3/urllib3/commit/2d4a3fee6de2fa45eb[PII_REDACTED]8f759269b4ec; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6SCV7ZNAHS3E6PBFLJGENCDRDRWRZZ6W/
CVE: CVE-2021-34548
Published: 2021-06-29
Description: An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-003. An attacker can forge RELAY_END or RELAY_RESOLVED to bypass the intended access control for ending a stream.
CVSS Score: 7.5 (HIGH)
CWE: CWE-290
References: http://packetstormsecurity.com/files/163510/Tor-Half-Closed-Connection-Stream-Confusion.html; https://blog.torproject.org/node/2041; https://gitlab.torproject.org/tpo/core/tor/-/issues/40389
CVE: CVE-2021-22545
Published: 2021-06-29
Description: An attacker can craft a specific IdaPro *.i64 file that will cause the BinDiff plugin to load an invalid memory offset. This can allow the attacker to control the instruction pointer and execute arbitrary code. It is recommended to upgrade BinDiff 7
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.zynamics.com/bindiff/manual/index.html#nyyyy7; https://www.zynamics.com/bindiff/manual/index.html#nyyyy7
CVE: CVE-2021-23400
Published: 2021-06-29
Description: The package nodemailer before 6.6.1 are vulnerable to HTTP Header Injection if unsanitized user input that may contain newlines and carriage returns is passed into an address object.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74
References: https://github.com/nodemailer/nodemailer/commit/7e02648cc8cd863f5085bad3cd09087bccf84b9f; https://github.com/nodemailer/nodemailer/issues/1289; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1314737
CVE: CVE-2021-27577
Published: 2021-06-29
Description: Incorrect handling of url fragment vulnerability of Apache Traffic Server allows an attacker to poison the cache. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444, CWE-444
References: https://lists.apache.org/thread.html/ra1a41ff92a70d25bf576d7da2590575e8ff430393a3f4a0c34de4277%40%3Cusers.trafficserver.apache.org%3E; https://www.debian.org/security/2021/dsa-4957; https://lists.apache.org/thread.html/ra1a41ff92a70d25bf576d7da2590575e8ff430393a3f4a0c34de4277%40%3Cusers.trafficserver.apache.org%3E
CVE: CVE-2021-28690
Published: 2021-06-29
Description: x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vulnerability. Please see https://xenbits.xen.org/xsa/advisory-305.html for details. Mitigating TAA by disabling TSX (the default and preferred option) requires selecting a non-default setting in MSR_TSX_CTRL. This setting isn't restored after S3 suspend.
CVSS Score: 6.5 (MEDIUM)
References: https://security.gentoo.org/glsa/202107-30; https://xenbits.xenproject.org/xsa/advisory-377.txt; https://security.gentoo.org/glsa/202107-30
CVE: CVE-2021-28691
Published: 2021-06-29
Description: Guest triggered use-after-free in Linux xen-netback A malicious or buggy network PV frontend can force Linux netback to disable the interface and terminate the receive kernel thread associated with queue 0 in response to the frontend sending a malformed packet. Such kernel thread termination will lead to a use-after-free in Linux netback when the backend is destroyed, as the kernel thread associated with queue 0 will have already exited and thus the call to kthread_stop will be performed against a stale pointer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://security.gentoo.org/glsa/202107-30; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://xenbits.xenproject.org/xsa/advisory-374.txt
CVE: CVE-2021-32565
Published: 2021-06-29
Description: Invalid values in the Content-Length header sent to Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444, CWE-444
References: https://lists.apache.org/thread.html/ra1a41ff92a70d25bf576d7da2590575e8ff430393a3f4a0c34de4277%40%3Cusers.trafficserver.apache.org%3E; https://www.debian.org/security/2021/dsa-4957; https://lists.apache.org/thread.html/ra1a41ff92a70d25bf576d7da2590575e8ff430393a3f4a0c34de4277%40%3Cusers.trafficserver.apache.org%3E
CVE: CVE-2021-34549
Published: 2021-06-29
Description: An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-005. Hashing is mishandled for certain retrieval of circuit data. Consequently. an attacker can trigger the use of an attacker-chosen circuit ID to cause algorithm inefficiency.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://blog.torproject.org/node/2041; https://gitlab.torproject.org/tpo/core/tor/-/issues/40391; https://security.gentoo.org/glsa/202107-25
CVE: CVE-2021-34550
Published: 2021-06-29
Description: An issue was discovered in Tor before 0.4.6.5, aka TROVE-2021-006. The v3 onion service descriptor parsing allows out-of-bounds memory access, and a client crash, via a crafted onion service descriptor
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://blog.torproject.org/node/2041; https://gitlab.torproject.org/tpo/core/tor/-/issues/40392; https://security.gentoo.org/glsa/202107-25
CVE: CVE-2020-7871
Published: 2021-06-29
Description: A vulnerability of Helpcom could allow an unauthenticated attacker to execute arbitrary command. This vulnerability exists due to insufficient validation of the parameter. This issue affects: Cnesty Helpcom 10.0 versions prior to.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36095; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36095
CVE: CVE-2020-7868
Published: 2021-06-29
Description: A remote code execution vulnerability exists in helpUS(remote administration tool) due to improper validation of parameter of ShellExecutionExA function used for login.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-141
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36088; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36088
CVE: CVE-2020-7869
Published: 2021-06-29
Description: An improper input validation vulnerability of ZOOK software (remote administration tool) could allow a remote attacker to create arbitrary file. The ZOOK viewer has the "Tight file CMD" function to create file. An attacker could create and execute arbitrary file in the ZOOK agent program using "Tight file CMD" without authority.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-20, CWE-20
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36090; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36090
CVE: CVE-2020-7870
Published: 2021-06-29
Description: A memory corruption vulnerability exists when ezPDF improperly handles the parameter. This vulnerability exists due to insufficient validation of the parameter.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20, CWE-787
References: https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36099; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=36099