deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-36605
Published: 2021-07-30
Description: engineercms 1.03 is vulnerable to Cross Site Scripting (XSS). There is no escaping in the nickname field on the user list page. When viewing this page, the JavaScript code will be executed in the user's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/3xxx/engineercms/issues/52; https://github.com/3xxx/engineercms/issues/52
CVE: CVE-2021-36621
Published: 2021-07-30
Description: Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to SQL Injection. The username parameter is vulnerable to time-based SQL injection. Upon successful dumping the admin password hash, an attacker can decrypt and obtain the plain-text password. Hence, the attacker could authenticate as Administrator.
CVSS Score: 8.1 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/164324/Covid-Vaccination-Scheduler-System-1.0-SQL-Injection-Cross-Site-Scripting.html; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-18-09-2821; https://www.exploit-db.com/exploits/50109
CVE: CVE-2021-36624
Published: 2021-07-30
Description: Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-36624; https://www.exploit-db.com/exploits/50105; https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-36624
CVE: CVE-2021-36754
Published: 2021-07-30
Description: PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE 65535) that causes an out-of-bounds exception.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2021/07/26/2; https://doc.powerdns.com/authoritative/security-advisories/index.html; https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2021-01.html
CVE: CVE-2021-36766
Published: 2021-07-30
Description: Concrete5 through 8.5.5 deserializes Untrusted Data. The vulnerable code is located within the controllers/single_page/dashboard/system/environment/logging.php Logging::update_logging() method. User input passed through the logFile request parameter is not properly sanitized before being used in a call to the file_exists() PHP function. This can be exploited by malicious users to inject arbitrary PHP objects into the application scope (PHP Object Injection via phar:// stream wrapper), allowing them to carry out a variety of attacks, such as executing arbitrary PHP code.
CVSS Score: 7.2 (HIGH)
CWE: CWE-502
References: http://packetstormsecurity.com/files/163564/Concrete5-8.5.5-Phar-Deserialization.html; http://seclists.org/fulldisclosure/2021/Jul/36; https://hackerone.com/reports/1063039
CVE: CVE-2021-36983
Published: 2021-07-30
Description: replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/replay-sorcery or /tmp/replay-sorcery/device.sock.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: http://www.openwall.com/lists/oss-security/2021/07/27/1; https://github.com/matanui159/ReplaySorcery/releases; http://www.openwall.com/lists/oss-security/2021/07/27/1
CVE: CVE-2021-37144
Published: 2021-07-30
Description: CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion. This occurs in PHP when the unlink() function is called and user input might affect portions of or the whole affected parameter, which represents the path of the file to remove, without sufficient sanitization.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-706
References: https://github.com/cskaza/cszcms/issues/32; https://github.com/cskaza/cszcms/issues/32
CVE: CVE-2021-37587
Published: 2021-07-30
Description: In Charm 0.43, any single user can decrypt DAC-MACS or MA-ABE-YJ14 data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-327
References: https://eprint.iacr.org/2020/460; https://github.com/JHUISI/charm/issues/276; https://jhuisi.github.io/charm/_modules/abenc_maabe_yj14.html
CVE: CVE-2021-37588
Published: 2021-07-30
Description: In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327
References: https://eprint.iacr.org/2020/460; https://github.com/JHUISI/charm/blob/dev/charm/schemes/abenc/abenc_yct14.py; https://github.com/JHUISI/charm/issues/276
CVE: CVE-2021-37593
Published: 2021-07-30
Description: PEEL Shopping version 9.4.0 allows remote SQL injection. A public user/guest (unauthenticated) can inject a malicious SQL query in order to affect the execution of predefined SQL commands. Upon a successful SQL injection attack, an attacker can read sensitive data from the database and possibly modify database data.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89
References: http://www.netbytesec.com/advisories/UnauthenticatedBlindSQLInjectionVulnerabilityInPEELShopping/; https://github.com/advisto/peel-shopping/issues/3; https://github.com/faisalfs10x/CVE-IDs/blob/main/2021/CVE-2021-37593/Proof_of_Concept.md
CVE: CVE-2021-37594
Published: 2021-07-30
Description: In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_SIZE File Contents Request PDU.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/FreeRDP/FreeRDP/commit/0d79670a28c0ab049af08613621aa0c267f977e9; https://github.com/FreeRDP/FreeRDP/compare/2.3.2...2.4.0; https://github.com/FreeRDP/FreeRDP/commit/0d79670a28c0ab049af08613621aa0c267f977e9
CVE: CVE-2021-37595
Published: 2021-07-30
Description: In FreeRDP before 2.4.0 on Windows, wf_cliprdr_server_file_contents_request in client/Windows/wf_cliprdr.c has missing input checks for a FILECONTENTS_RANGE File Contents Request PDU.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://github.com/FreeRDP/FreeRDP/commit/0d79670a28c0ab049af08613621aa0c267f977e9; https://github.com/FreeRDP/FreeRDP/compare/2.3.2...2.4.0; https://github.com/FreeRDP/FreeRDP/commit/0d79670a28c0ab049af08613621aa0c267f977e9
CVE: CVE-2021-37596
Published: 2021-07-30
Description: Telegram Web K Alpha 0.6.1 allows XSS via a document name.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/morethanwords/tweb/commit/11d2fe01363889f20c8baa2217ed4aad445c5551; https://github.com/morethanwords/tweb/commit/11d2fe01363889f20c8baa2217ed4aad445c5551
CVE: CVE-2021-37600
Published: 2021-07-30
Description: An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/karelzak/util-linux/commit/1c9143d0c1f979c3daf10e1c37b5b1e916c22a1c; https://github.com/karelzak/util-linux/issues/1395; https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html
CVE: CVE-2021-37601
Published: 2021-07-30
Description: muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information (list of admins, members, owners, and banned entities of a Multi-User chat room) in some common configurations.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2021/07/28/4; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7BZRRPCNOETB4MN4XSYPRBBKDIHO27DY/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EMKIOEP2CYWHVVUCNWISPE4AGH4IR7O2/
CVE: CVE-2021-37606
Published: 2021-07-30
Description: Meow hash 0.5/calico does not sufficiently thwart key recovery by an attacker who can query whether there's a collision in the bottom bits of the hashes of two messages, as demonstrated by an attack against a long-running web service that allows the attacker to infer collisions by measuring timing differences.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203, CWE-326
References: https://news.ycombinator.com/item?id=27978878; https://peter.website/meow-hash-cryptanalysis; https://news.ycombinator.com/item?id=27978878
CVE: CVE-2020-26563
Published: 2021-07-30
Description: ObjectPlanet Opinio before 7.14 allows reflected XSS via the survey/admin/surveyAdmin.do?action=viewSurveyAdmin query string. (There is also stored XSS if input to survey/admin/*.do is accepted from untrusted users.)
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://packetstormsecurity.com/files/163699/ObjectPlanet-Opinio-7.12-Cross-Site-Scripting.html; https://www.objectplanet.com/opinio/changelog.html; https://packetstormsecurity.com/files/163699/ObjectPlanet-Opinio-7.12-Cross-Site-Scripting.html
CVE: CVE-2021-37742
Published: 2021-07-30
Description: app/View/Elements/GalaxyClusters/view_relation_tree.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster relationships.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/af50add82433eb2a740c3621b99d9d14d2b1e192; https://zigrin.com/advisories/misp-stored-xss-when-viewing-galaxy-cluster-relationships/; https://github.com/MISP/MISP/commit/af50add82433eb2a740c3621b99d9d14d2b1e192
CVE: CVE-2021-37743
Published: 2021-07-30
Description: app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON format.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/f318f7c0ddac7dfd2b1f246fd8f488d9dfc3a4bf; https://github.com/MISP/MISP/commit/f318f7c0ddac7dfd2b1f246fd8f488d9dfc3a4bf
CVE: CVE-2021-37746
Published: 2021-07-30
Description: textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://claws-mail.org/download.php?file=releases/claws-mail-3.18.0.tar.xz; https://git.claws-mail.org/?p=claws.git%3Ba=commit%3Bh=ac286a71ed78429e16c612161251b9ea90ccd431; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L2QNUIWASJLPUZZKWICGCEGYJZCQE7NH/
CVE: CVE-2021-29297
Published: 2021-07-30
Description: Buffer Overflow in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack to the component "FrameworX.exe" in the module "MSVCR100.dll".
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120
References: https://github.com/boofish/GE_Proficy_Machine_Edition_vul; https://github.com/boofish/GE_Proficy_Machine_Edition_vul/blob/main/vul1/vul1_steps.pdf; https://github.com/boofish/GE_Proficy_Machine_Edition_vul
CVE: CVE-2021-29298
Published: 2021-07-30
Description: Improper Input Validation in Emerson GE Automation Proficy Machine Edition v8.0 allows an attacker to cause a denial of service and application crash via crafted traffic from a Man-in-the-Middle (MITM) attack to the component "FrameworX.exe"in the module "fxVPStatcTcp.dll".
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/boofish/GE_Proficy_Machine_Edition_vul; https://github.com/boofish/GE_Proficy_Machine_Edition_vul/blob/main/vul2/vul2_steps.pdf; https://github.com/boofish/GE_Proficy_Machine_Edition_vul
CVE: CVE-2021-35193
Published: 2021-07-30
Description: Patterson Application Service in Patterson Eaglesoft 18 through 21 accepts the same certificate authentication across different customers' installations (that have the same software version). This provides remote access to SQL database credentials. (In the normal use of the product, retrieving those credentials only occurs after a username/password authentication step; however, this authentication step is on the client side, and an attacker can develop their own client that skips this step.)
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://patterson.eaglesoft.net/Home/Contact-Us; https://github.com/jshafer817/Eaglesoft; https://justinshafer.blogspot.com/2021/07/eaglesoft-18-through-21-vulnerability.html
CVE: CVE-2021-3636
Published: 2021-07-30
Description: It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster Service CA, incorrectly included additional certificates. The Service CA is automatically mounted into all pods, allowing them to safely connect to trusted in-cluster services that present certificates signed by the trusted Service CA. The incorrect inclusion of additional CAs in this certificate would allow an attacker that compromises any of the additional CAs to masquerade as a trusted in-cluster service.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-295, CWE-287
References: https://bugzilla.redhat.com/show_bug.cgi?id=1978621; https://bugzilla.redhat.com/show_bug.cgi?id=1978621
CVE: CVE-2021-22521
Published: 2021-07-30
Description: A privileged escalation vulnerability has been identified in Micro Focus ZENworks Configuration Management, affecting version 2020 Update 1 and all prior versions. The vulnerability could be exploited to gain unauthorized system privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-863
References: https://support.microfocus.com/kb/doc.php?id=7025205; https://support.microfocus.com/kb/doc.php?id=7025205
CVE: CVE-2021-34629
Published: 2021-07-30
Description: The SendGrid WordPress plugin is vulnerable to authorization bypass via the get_ajax_statistics function found in the ~/lib/class-sendgrid-statistics.php file which allows authenticated users to export statistic for a WordPress multi-site main site, in versions up to and including 1.11.8.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34629; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34629
CVE: CVE-2021-34630
Published: 2021-07-30
Description: In the Pro and Enterprise versions of GTranslate < 2.8.65, the gtranslate_request_uri_var function runs at the top of all pages and echoes out the contents of $_SERVER['REQUEST_URI']. Although this uses addslashes, and most modern browsers automatically URLencode requests, this plugin is still vulnerable to Reflected XSS in older browsers such as Internet Explorer 9 or below, or in cases where an attacker is able to modify the request en route between the client and the server, or in cases where the user is using an atypical browsing solution.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-116, CWE-79, CWE-116
References: https://plugins.svn.wordpress.org/gtranslate/tags/2.8.64/gtranslate.php; https://plugins.svn.wordpress.org/gtranslate/tags/2.8.64/gtranslate.php
CVE: CVE-2021-27491
Published: 2021-07-30
Description: Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1.7.5,The Ypsomed mylife Cloud discloses password hashes during the registration process.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: https://us-cert.cisa.gov/ics/advisories/icsma-21-196-01; https://us-cert.cisa.gov/ics/advisories/icsma-21-196-01
CVE: CVE-2021-27495
Published: 2021-07-30
Description: Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed mylife Cloud,All versions prior to 1.7.2,Ypsomed mylife App,All versions prior to 1.7.5,he Ypsomed mylife Cloud reflects the user password during the login process after redirecting the user from a HTTPS endpoint to a HTTP endpoint.
CVSS Score: 7.1 (HIGH)
CWE: CWE-522
References: https://us-cert.cisa.gov/ics/advisories/icsma-21-196-01; https://us-cert.cisa.gov/ics/advisories/icsma-21-196-01
CVE: CVE-2021-32807
Published: 2021-07-30
Description: The module `AccessControl` defines security policies for Python code used in restricted code within Zope applications. Restricted code is any code that resides in Zope's object database, such as the contents of `Script (Python)` objects. The policies defined in `AccessControl` severely restrict access to Python modules and only exempt a few that are deemed safe, such as Python's `string` module. However, full access to the `string` module also allows access to the class `Formatter`, which can be overridden and extended within `Script (Python)` in a way that provides access to other unsafe Python libraries. Those unsafe Python libraries can be used for remote code execution. By default, you need to have the admin-level Zope "Manager" role to add or edit `Script (Python)` objects through the web. Only sites that allow untrusted users to add/edit these scripts through the web - which would be a very unusual configuration to begin with - are at risk. The problem has been fixed in AccessControl 4.3 and 5.2. Only AccessControl versions 4 and 5 are vulnerable, and only on Python 3, not Python 2.7. As a workaround, a site administrator can restrict adding/editing `Script (Python)` objects through the web using the standard Zope user/role permission mechanisms. Untrusted users should not be assigned the Zope Manager role and adding/editing these scripts through the web should be restricted to trusted users only. This is the default configuration in Zope.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-915, CWE-1321
References: https://github.com/zopefoundation/AccessControl/blob/master/CHANGES.rst#51-2021-07-30; https://github.com/zopefoundation/AccessControl/commit/b42dd4badf803bb9fb71ac34cd9cb0c249262f2c; https://github.com/zopefoundation/AccessControl/security/advisories/GHSA-qcx9-j53g-ccgf
CVE: CVE-2020-26564
Published: 2021-07-31
Description: ObjectPlanet Opinio before 7.15 allows XXE attacks via three steps: modify a .css file to have <!ENTITY content, create a .xml file for a generic survey template (containing a link to this .css file), and import this .xml file at the survey/admin/folderSurvey.do?action=viewImportSurvey['importFile'] URI. The XXE can then be triggered at a admin/preview.do?action=previewSurvey&surveyId= URI.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://packetstormsecurity.com/files/163707/ObjectPlanet-Opinio-7.13-7.14-XML-Injection.html; https://www.objectplanet.com/opinio/changelog.html; https://packetstormsecurity.com/files/163707/ObjectPlanet-Opinio-7.13-7.14-XML-Injection.html
CVE: CVE-2020-26565
Published: 2021-07-31
Description: ObjectPlanet Opinio before 7.14 allows Expression Language Injection via the admin/permissionList.do from parameter. This can be used to retrieve possibly sensitive serverInfo data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-917
References: https://packetstormsecurity.com/files/163708/ObjectPlanet-Opinio-7.13-Expression-Language-Injection.html; https://www.objectplanet.com/opinio/changelog.html; https://packetstormsecurity.com/files/163708/ObjectPlanet-Opinio-7.13-Expression-Language-Injection.html
CVE: CVE-2020-26806
Published: 2021-07-31
Description: admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in remote code execution, because filePath can have directory traversal and fileContent can be valid JSP code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://packetstormsecurity.com/files/163709/ObjectPlanet-Opinio-7.13-Shell-Upload.html; https://www.objectplanet.com/opinio/changelog.html; https://packetstormsecurity.com/files/163709/ObjectPlanet-Opinio-7.13-Shell-Upload.html
CVE: CVE-2021-33617
Published: 2021-07-31
Description: Zoho ManageEngine Password Manager Pro before 11.2 11200 allows login/AjaxResponse.jsp?RequestType=GetUserDomainName&userName= username enumeration, because the response (to a failed login request) is null only when the username is invalid.
CVSS Score: 5.3 (MEDIUM)
References: https://herolab.usd.de/security-advisories/usd-2021-0015/; https://www.manageengine.com; https://www.manageengine.com/products/passwordmanagerpro/release-notes.html#pmp11200
CVE: CVE-2021-37759
Published: 2021-07-31
Description: A Session ID leak in the DEBUG log file in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532
References: https://www.graylog.org/post/announcing-graylog-v4-1-2; https://www.graylog.org/post/announcing-graylog-v4-1-2
CVE: CVE-2021-37760
Published: 2021-07-31
Description: A Session ID leak in the audit log in Graylog before 4.1.2 allows attackers to escalate privileges (to the access level of the leaked session ID).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-532
References: https://www.graylog.org/post/announcing-graylog-v4-1-2; https://www.graylog.org/post/announcing-graylog-v4-1-2
CVE: CVE-2021-32066
Published: 2021-08-01
Description: An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does not raise an exception when StartTLS fails with an an unknown response, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
CVSS Score: 7.4 (HIGH)
CWE: CWE-755
References: https://github.com/ruby/ruby/commit/a21a3b7d23704a01d34bd79d09dc37897e00922a; https://hackerone.com/reports/1178562; https://lists.debian.org/debian-lts-announce/2021/10/msg00009.html
CVE: CVE-2017-18113
Published: 2021-08-02
Description: The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attackers who can trick a system administrator to import their malicious workflow to execute arbitrary code via a Remote Code Execution (RCE) vulnerability. The vulnerability allowed for various problematic OSWorkflow classes to be used as part of workflows. The fix for this issue blocks usage of unsafe conditions, validators, functions and registers that are build-in into OSWorkflow library and other Jira dependencies. Atlassian-made functions or functions provided by 3rd party plugins are not affected by this fix.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94, CWE-94
References: https://jira.atlassian.com/browse/JRASERVER-72660; https://jira.atlassian.com/browse/JRASERVER-72660
CVE: CVE-2021-35477
Published: 2021-08-02
Description: In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation does not necessarily occur before a store operation that has an attacker-controlled value.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203
References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/?id=2039f26f3aca5b0e419b98f65dd36481337b86ee; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/?id=f5e81d[PII_REDACTED]b7be050c5fbafa6efd2c722c; https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html
CVE: CVE-2021-34556
Published: 2021-08-02
Description: In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-203
References: http://www.openwall.com/lists/oss-security/2021/08/01/3; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/?id=2039f26f3aca5b0e419b98f65dd36481337b86ee; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/?id=f5e81d[PII_REDACTED]b7be050c5fbafa6efd2c722c
CVE: CVE-2021-3351
Published: 2021-08-02
Description: OpenPLC runtime V3 through 2016-03-14 allows stored XSS via the Device Name to the web server's Add New Device page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.youtube.com/watch?v=eSAqXq4m8so; https://www.youtube.com/watch?v=eSAqXq4m8so