deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-21650
Published: 2022-01-04
Description: Convos is an open source multi-user chat that runs in a web browser. You can't use SVG extension in Convos' chat window, but you can upload a file with an .html extension. By uploading an SVG file with an html extension the upload filter can be bypassed. This causes Stored XSS. Also, after uploading a file the XSS attack is triggered upon a user viewing the file. Through this vulnerability, an attacker is capable to execute malicious scripts. Users are advised to update as soon as possible.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://blog.pocas.kr/2021/12/30/2021-12-30-s-xss-convos-chat/#First-vulnerability; https://github.com/convos-chat/convos/commit/5c0a1ec9a2c147bc3b63fd5a48da5f32e18fe5df; https://github.com/convos-chat/convos/security/advisories/GHSA-mm2v-4v7g-m695
CVE: CVE-2021-22045
Published: 2022-01-04
Description: VMware ESXi (7.0, 6.7 before ESXi[PII_REDACTED]01-SG and 6.5 before ESXi[PII_REDACTED]01-SG), VMware Workstation (16.2.0) and VMware Fusion (12.2.0) contains a heap-overflow vulnerability in CD-ROM device emulation. A malicious actor with access to a virtual machine with CD-ROM device emulation may be able to exploit this vulnerability in conjunction with other issues to execute code on the hypervisor from a virtual machine.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/165440/VMware-Security-Advisory-2022-0001.html; https://www.vmware.com/security/advisories/VMSA-2022-0001.html; https://www.zerodayinitiative.com/advisories/ZDI-22-003/
CVE: CVE-2021-41388
Published: 2022-01-04
Description: Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementation of nsAuxiliarySvc process does not perform validation on new connections before accepting the connection. Thus any low privileged user can connect and call external methods defined in XPC service as root, elevating their privilege to the highest level.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://www.netskope.com/company/security-compliance-and-assurance/netskope-security-advisory-nskpsa-2021-002; https://www.netskope.com/company/security-compliance-and-assurance/netskope-security-advisory-nskpsa-2021-002
CVE: CVE-2021-45115
Published: 2022-01-05
Description: An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. UserAttributeSimilarityValidator incurred significant overhead in evaluating a submitted password that was artificially large in relation to the comparison values. In a situation where access to user registration was unrestricted, this provided a potential vector for a denial-of-service attack.
CVSS Score: 7.5 (HIGH)
References: https://docs.djangoproject.com/en/4.0/releases/security/; https://groups.google.com/forum/#%21forum/django-announce; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
CVE: CVE-2021-45116
Published: 2022-01-05
Description: An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1. Due to leveraging the Django Template Language's variable resolution logic, the dictsort template filter was potentially vulnerable to information disclosure, or an unintended method call, if passed a suitably crafted key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://docs.djangoproject.com/en/4.0/releases/security/; https://groups.google.com/forum/#%21forum/django-announce; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
CVE: CVE-2021-45452
Published: 2022-01-05
Description: Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted filenames are directly passed to it.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://docs.djangoproject.com/en/4.0/releases/security/; https://groups.google.com/forum/#%21forum/django-announce; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/
CVE: CVE-2021-43946
Published: 2022-01-05
Description: Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to add administrator groups to filter subscriptions via a Broken Access Control vulnerability in the /secure/EditSubscription.jspa endpoint. The affected versions are before version 8.13.21, and from version 8.14.0 before 8.20.9.
CVSS Score: 6.5 (MEDIUM)
References: https://jira.atlassian.com/browse/JRASERVER-73071; https://jira.atlassian.com/browse/JRASERVER-73071
CVE: CVE-2021-22567
Published: 2022-01-05
Description: Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign. An attacker could embed a source that is invisible to a code reviewer that modifies the behavior of a program in unexpected ways.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-284
References: https://github.com/dart-lang/sdk/blob/main/CHANGELOG.md; https://github.com/dart-lang/sdk/commit/52519ea8eb4780c468c4c2ed00e7c8046ccfed41; https://github.com/dart-lang/sdk/blob/main/CHANGELOG.md
CVE: CVE-2020-15933
Published: 2022-01-05
Description: A exposure of sensitive information to an unauthorized actor in Fortinet FortiMail versions 6.0.9 and below, FortiMail versions 6.2.4 and below FortiMail versions 6.4.1 and 6.4.0 allows attacker to obtain potentially sensitive software-version information via client-side resources inspection.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://fortiguard.com/psirt/FG-IR-20-105; https://fortiguard.com/psirt/FG-IR-20-105
CVE: CVE-2021-31589
Published: 2022-01-05
Description: A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Software version 6.0.1 and older, which allows the injection of unauthenticated, specially-crafted web requests without proper sanitization.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/165408/BeyondTrust-Remote-Support-6.0-Cross-Site-Scripting.html; https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://www.beyondtrust.com/docs/release-notes/index.htm
CVE: CVE-2021-41043
Published: 2022-01-05
Description: Use after free in tcpslice triggers AddressSanitizer, no other confirmed impact.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://github.com/the-tcpdump-group/tcpslice/issues/11; https://github.com/the-tcpdump-group/tcpslice/issues/11
CVE: CVE-2022-22107
Published: 2022-01-05
Description: In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (employee type user), can view the appointments of all users in the system including administrators. However, this type of user is not authorized to view the calendar at all.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://github.com/Bottelet/DaybydayCRM/commit/a0392f4a4a14e1e3fedaf6817aefce69b6bd661b; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-22107; https://github.com/Bottelet/DaybydayCRM/commit/a0392f4a4a14e1e3fedaf6817aefce69b6bd661b
CVE: CVE-2022-22108
Published: 2022-01-05
Description: In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account (employee type user), can view the absences of all users in the system including administrators. This type of user is not authorized to view this kind of information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://github.com/Bottelet/DaybydayCRM/commit/fe842ea5ede237443f1f45a99aeb839133115d8b; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-22108; https://github.com/Bottelet/DaybydayCRM/commit/fe842ea5ede237443f1f45a99aeb839133115d8b
CVE: CVE-2022-22109
Published: 2022-01-05
Description: In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting (XSS) vulnerability that allows low privileged application users to store malicious scripts in the title field of new tasks. These scripts are executed in a victim’s browser when they open the “/tasks” page to view all the tasks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Bottelet/DaybydayCRM/commit/002dc75f400cf307bd00b71a5a93f1e26e52cee2; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-22109; https://github.com/Bottelet/DaybydayCRM/commit/002dc75f400cf307bd00b71a5a93f1e26e52cee2
CVE: CVE-2022-22110
Published: 2022-01-05
Description: In Daybyday CRM, versions 1.1 through 2.2.0 enforce weak password requirements in the user update functionality. A user with privileges to update his password could change it to a weak password, such as those with a length of a single character. This may allow an attacker to brute-force users’ passwords with minimal to no computational effort.
CVSS Score: 7.5 (HIGH)
CWE: CWE-521, CWE-521
References: https://github.com/Bottelet/DaybydayCRM/commit/a0392f4a4a14e1e3fedaf6817aefce69b6bd661b; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-22110; https://github.com/Bottelet/DaybydayCRM/commit/a0392f4a4a14e1e3fedaf6817aefce69b6bd661b
CVE: CVE-2022-22111
Published: 2022-01-05
Description: In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization. Any application user in the application who has update user permission enabled is able to change the password of other users, including the administrator’s. This allows the attacker to gain access to the highest privileged user in the application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://github.com/Bottelet/DaybydayCRM/commit/fe842ea5ede237443f1f45a99aeb839133115d8b; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-22111; https://github.com/Bottelet/DaybydayCRM/commit/fe842ea5ede237443f1f45a99aeb839133115d8b
CVE: CVE-2021-28711
Published: 2022-01-05
Description: Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "driver domains". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713
CVSS Score: 6.5 (MEDIUM)
References: https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html; https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html; https://www.debian.org/security/2022/dsa-5050
CVE: CVE-2021-28712
Published: 2022-01-05
Description: Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "driver domains". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713
CVSS Score: 6.5 (MEDIUM)
References: https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html; https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html; https://www.debian.org/security/2022/dsa-5050
CVE: CVE-2021-28713
Published: 2022-01-05
Description: Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "driver domains". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713
CVSS Score: 6.5 (MEDIUM)
References: https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html; https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html; https://www.debian.org/security/2022/dsa-5050
CVE: CVE-2021-38918
Published: 2022-01-05
Description: IBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could lead to a violation of the isolation between peer VMs. IBM X-Force ID: 210019.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/210019; https://www.ibm.com/support/pages/node/6525032; https://exchange.xforce.ibmcloud.com/vulnerabilities/210019
CVE: CVE-2021-43779
Published: 2022-01-05
Description: GLPI is an open source IT Asset Management, issue tracking system and service desk system. The GLPI addressing plugin in versions < 2.9.1 suffers from authenticated Remote Code Execution vulnerability, allowing access to the server's underlying operating system using command injection abuse of functionality. There is no workaround for this issue and users are advised to upgrade or to disable the addressing plugin.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-20, CWE-78
References: https://github.com/hansmach1ne/MyExploits/tree/main/RCE_GLPI_addressing_plugin; https://github.com/pluginsGLPI/addressing/commit/6f[PII_REDACTED]4a5acb5feda92c7c7f1d91ab5366; https://github.com/pluginsGLPI/addressing/security/advisories/GHSA-q5fp-xpr8-77jh
CVE: CVE-2021-43816
Published: 2022-01-05
Description: containerd is an open source container runtime. On installations using SELinux, such as EL8 (CentOS, RHEL), Fedora, or SUSE MicroOS, with containerd since v1.5.0-beta.0 as the backing container runtime interface (CRI), an unprivileged pod scheduled to the node may bind mount, via hostPath volume, any privileged, regular file on disk for complete read/write access (sans delete). Such is achieved by placing the in-container location of the hostPath volume mount at either `/etc/hosts`, `/etc/hostname`, or `/etc/resolv.conf`. These locations are being relabeled indiscriminately to match the container process-label which effectively elevates permissions for savvy containers that would not normally be able to access privileged host files. This issue has been resolved in version 1.5.9. Users are advised to upgrade as soon as possible.
CVSS Score: 8.0 (HIGH)
CWE: CWE-281, CWE-281
References: https://github.com/containerd/containerd/commit/a731039238c62be081eb8c31525b988415745eea; https://github.com/containerd/containerd/issues/6194; https://github.com/containerd/containerd/security/advisories/GHSA-mvff-h3cj-wj9c
CVE: CVE-2022-21642
Published: 2022-01-05
Description: Discourse is an open source platform for community discussion. In affected versions when composing a message from topic the composer user suggestions reveals whisper participants. The issue has been patched in stable version 2.7.13 and beta version 2.8.0.beta11. There is no workaround for this issue and users are advised to upgrade.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://github.com/discourse/discourse/commit/702685b6a06ae45a544fc702027f1e4573d94aaa; https://github.com/discourse/discourse/security/advisories/GHSA-mx3h-vc7w-r9c6; https://github.com/discourse/discourse/commit/702685b6a06ae45a544fc702027f1e4573d94aaa
CVE: CVE-2021-45830
Published: 2022-01-05
Description: A heap-based buffer overflow vulnerability exists in HDF5 1.13.1-1 via H5F_addr_decode_len in /hdf5/src/H5Fint.c, which could cause a Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/HDFGroup/hdf5/issues/1314; https://github.com/HDFGroup/hdf5/issues/1314
CVE: CVE-2021-45831
Published: 2022-01-05
Description: A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via __strlen_avx2, which causes a Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/1990; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/1990
CVE: CVE-2022-21651
Published: 2022-01-05
Description: Shopware is an open source e-commerce software platform. An open redirect vulnerability has been discovered. Users may be arbitrary redirected due to incomplete URL handling in the shopware router. This issue has been resolved in version 5.7.7. There is no workaround and users are advised to upgrade as soon as possible.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://docs.shopware.com/en/shopware-5-en/securityupdates/security-update-01-2022; https://github.com/shopware/shopware/commit/a90046c765c57a46c4399dce17bd174253c32886; https://github.com/shopware/shopware/security/advisories/GHSA-c53v-qmrx-93hg
CVE: CVE-2022-21652
Published: 2022-01-05
Description: Shopware is an open source e-commerce software platform. In affected versions shopware would not invalidate a user session in the event of a password change. With version 5.7.7 the session validation was adjusted, so that sessions created prior to the latest password change of a customer account can't be used to login with said account. This also means, that upon a password change, all existing sessions for a given customer account are automatically considered invalid. There is no workaround for this issue.
CVSS Score: 3.5 (LOW)
CWE: CWE-613, CWE-613
References: https://docs.shopware.com/en/shopware-5-en/securityupdates/security-update-01-2022; https://github.com/shopware/shopware/commit/47ebd126a94f4b019b6fde64c0df3d18d74ef7d0; https://github.com/shopware/shopware/security/advisories/GHSA-p523-jrph-qjc6
CVE: CVE-2021-45832
Published: 2022-01-05
Description: A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 at at hdf5/src/H5Eint.c, which causes a Denial of Service (context-dependent).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/HDFGroup/hdf5/issues/1315; https://github.com/HDFGroup/hdf5/issues/1315
CVE: CVE-2021-45833
Published: 2022-01-05
Description: A Stack-based Buffer Overflow Vulnerability exists in HDF5 1.13.1-1 via the H5D__create_chunk_file_map_hyper function in /hdf5/src/H5Dchunk.c, which causes a Denial of Service (context-dependent).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/HDFGroup/hdf5/issues/1313; https://github.com/HDFGroup/hdf5/issues/1313
CVE: CVE-2022-21653
Published: 2022-01-05
Description: Jawn is an open source JSON parser. Extenders of the `org.typelevel.jawn.SimpleFacade` and `org.typelevel.jawn.MutableFacade` who don't override `objectContext()` are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, but inherit from a library. `jawn-parser-1.3.1` fixes this issue and users are advised to upgrade. For users unable to upgrade override `objectContext()` to use a collision-safe collection.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400, CWE-326
References: https://github.com/typelevel/jawn/pull/390; https://github.com/typelevel/jawn/security/advisories/GHSA-vc89-hccf-rq55; https://github.com/typelevel/jawn/pull/390
CVE: CVE-2020-5956
Published: 2022-01-05
Description: An issue was discovered in SdLegacySmm in Insyde InsydeH2O with kernel 5.1 before 05.15.11, 5.2 before 05.25.11, 5.3 before 05.34.11, and 5.4 before 05.42.11. The software SMI handler allows untrusted external input because it does not verify CommBuffer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.insyde.com/security-pledge; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-45969
Published: 2022-01-05
Description: An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the CommBuffer+8 location).
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.insyde.com/security-pledge
CVE: CVE-2021-45970
Published: 2022-01-05
Description: An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the status code saved at the CommBuffer+4 location).
CVSS Score: 8.2 (HIGH)
CWE: CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.insyde.com/security-pledge
CVE: CVE-2021-46038
Published: 2022-01-05
Description: A Pointer Dereference vulnerability exists in GPAC 1.0.1 in unlink_chunk.isra, which causes a Denial of Service (context-dependent).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/2000; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/2000
CVE: CVE-2020-23986
Published: 2022-01-06
Description: Github Read Me Stats commit 3c7220e4f7144f6cb068fd433c774f6db47ccb95 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the function renderError.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/anuraghazra/github-readme-stats/pull/255; https://github.com/anuraghazra/github-readme-stats/pull/255
CVE: CVE-2020-27428
Published: 2022-01-06
Description: A DOM-based cross-site scripting (XSS) vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted sb3 file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/LLK/scratch-svg-renderer/commit/7c74ec7de3254143ec3c557677f5355a90a3d07f; https://github.com/LLK/scratch-svg-renderer/commit/7c74ec7de3254143ec3c557677f5355a90a3d07f
CVE: CVE-2021-41842
Published: 2022-01-06
Description: An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5.4 before 05.43.46, and 5.5 before 05.51.45 in Insyde InsydeH2O. Code execution can occur because the SMI handler lacks a CommBuffer check.
CVSS Score: 9.8 (CRITICAL)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.insyde.com/security-pledge; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/