deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-25605
Published: 2021-02-17
Description: Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cleartext network traffic.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-319
References: https://docs.agora.io/en/Agora%20Platform/downloads; https://www.mcafee.com/blogs/other-blogs/mcafee-labs/dont-call-us-well-call-you-mcafee-atr-finds-vulnerability-in-agora-video-sdk/; https://docs.agora.io/en/Agora%20Platform/downloads
CVE: CVE-2021-26911
Published: 2021-02-17
Description: core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for IMAP in STARTTLS mode.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2021/02/17/3; https://apps.apple.com/us/app/canary-mail/id[PII_REDACTED]; https://census-labs.com/news/2021/02/17/canary-mail-app-missing-certificate-validation-check-on-imap-starttls/
CVE: CVE-2021-27367
Published: 2021-02-17
Description: Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/bolt/core/pull/2371; https://github.com/bolt/core/releases/tag/4.1.13; https://github.com/bolt/core/pull/2371
CVE: CVE-2021-3396
Published: 2021-02-17
Description: OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <1.5.3 has Incorrect Access Control, which allows local and remote code execution using JEXL expressions.
CVSS Score: 8.8 (HIGH)
References: https://www.opennms.com; https://www.opennms.com/en/blog/2021-02-16-cve-2021-3396-full-security-disclosure/; https://www.opennms.com
CVE: CVE-2020-36245
Published: 2021-02-17
Description: GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent. The attacker must be able to reach TCP port 7912, e.g., by being on the same Wi-Fi network.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://github.com/GramAddict/bot/issues/134; https://github.com/GramAddict/bot/issues/134
CVE: CVE-2021-26720
Published: 2021-02-17
Description: avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects the packaging for Debian GNU/Linux (used indirectly by SUSE), not the upstream Avahi product.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982796; https://bugs.launchpad.net/ubuntu/+source/avahi/+bug/1870824; https://bugzilla.suse.com/show_bug.cgi?id=1180827
CVE: CVE-2021-27374
Published: 2021-02-17
Description: VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207 allows attackers to achieve "Zugriff auf Inhalte der WebOffice Applikation."
CVSS Score: 7.5 (HIGH)
References: https://resources.weboffice.vertigis.com/WebOffice107/Patches/Readme_Patch_de.html#patch20210202; https://resources.weboffice.vertigis.com/WebOffice108/Patches/Readme_Patch_de.html#patch20210207; https://resources.weboffice.vertigis.com/WebOffice107/Patches/Readme_Patch_de.html#patch20210202
CVE: CVE-2020-8625
Published: 2021-02-17
Description: BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicitly setting valid values for the tkey-gssapi-keytab or tkey-gssapi-credentialconfiguration options. Although the default configuration is not vulnerable, GSS-TSIG is frequently used in networks where BIND is integrated with Samba, as well as in mixed-server environments that combine BIND servers with Active Directory domain controllers. The most likely outcome of a successful exploitation of the vulnerability is a crash of the named process. However, remote code execution, while unproven, is theoretically possible. Affects: BIND 9.5.0 -> 9.11.27, 9.12.0 -> 9.16.11, and versions BIND 9.11.3-S1 -> 9.11.27-S1 and 9.16.8-S1 -> 9.16.11-S1 of BIND Supported Preview Edition. Also release versions 9.17.0 -> 9.17.1 of the BIND 9.17 development branch
CVSS Score: 8.1 (HIGH)
CWE: CWE-120
References: http://www.openwall.com/lists/oss-security/2021/02/19/1; http://www.openwall.com/lists/oss-security/2021/02/20/2; https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
CVE: CVE-2021-27097
Published: 2021-02-17
Description: The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT.
CVSS Score: 7.8 (HIGH)
References: https://github.com/u-boot/u-boot/commit/6f3c2d8aa5e6cbd80b5e869bbbddecb66c329d01; https://github.com/u-boot/u-boot/commit/8a7d4cf9820ea16fabd25a6379351b4dc291204b; https://github.com/u-boot/u-boot/commit/b6f4c757959f8850e1299a77c8e5713da78e8ec0
CVE: CVE-2021-27138
Published: 2021-02-17
Description: The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT.
CVSS Score: 7.8 (HIGH)
References: https://github.com/u-boot/u-boot/commit/3f04db891a353f4b127ed57279279f851c6b4917; https://github.com/u-boot/u-boot/commit/79af75f7776fc20b0d7eb6afe1e27c00fdb4b9b4; https://github.com/u-boot/u-boot/commit/b6f4c757959f8850e1299a77c8e5713da78e8ec0
CVE: CVE-2020-12878
Published: 2021-02-18
Description: Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symlink attack that uses chown, related to /etc/init.d/S50dropbear.sh and the /WEB/python/.ssh directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://github.com/fireeye/Vulnerability-Disclosures; https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2020-0020/FEYE-2020-0020.md; https://www.digi.com/support/productdetail?pid=5570
CVE: CVE-2020-9306
Published: 2021-02-18
Description: Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-522, CWE-798
References: https://github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2020-0019/FEYE-2020-0019.md; https://www.fireeye.com/blog/threat-research.html; https://www.fireeye.com/blog/threat-research/2021/02/solarcity-exploitation-of-x2e-iot-device-part-one.html
CVE: CVE-2021-27375
Published: 2021-02-18
Description: Traefik before 2.4.5 allows the loading of IFRAME elements from other domains.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1021
References: https://github.com/traefik/traefik/pull/7904; https://github.com/traefik/traefik/releases/tag/v2.4.5; https://github.com/traefik/traefik/pull/7904
CVE: CVE-2021-27124
Published: 2021-02-18
Description: SQL injection in the expertise parameter in search_result.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.com/files/161342/Doctor-Appointment-System-1.0-SQL-Injection.html; https://naku-ratti.medium.com/doctor-appointment-system-1-0-authenticated-sql-dios-7689b1d30f5f; https://www.sourcecodester.com/php/14182/doctor-appointment-system.html
CVE: CVE-2021-27376
Published: 2021-02-18
Description: An issue was discovered in the nb-connect crate before 1.0.3 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://rustsec.org/advisories/RUSTSEC-2021-0021.html; https://rustsec.org/advisories/RUSTSEC-2021-0021.html
CVE: CVE-2021-27377
Published: 2021-02-18
Description: An issue was discovered in the yottadb crate before 1.2.0 for Rust. For some memory-allocation patterns, ydb_subscript_next_st and ydb_subscript_prev_st have a use-after-free.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://rustsec.org/advisories/RUSTSEC-2021-0022.html; https://rustsec.org/advisories/RUSTSEC-2021-0022.html
CVE: CVE-2021-27378
Published: 2021-02-18
Description: An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle certain buffer-length checks, a random number generator may be seeded with too little data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-131
References: https://rustsec.org/advisories/RUSTSEC-2021-0023.html; https://rustsec.org/advisories/RUSTSEC-2021-0023.html
CVE: CVE-2020-29664
Published: 2021-02-18
Description: A command injection issue in dji_sys in DJI Mavic 2 Remote Controller before firmware version 01.00.0510 allows for code execution via a malicious firmware upgrade packet.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: http://hacktheplanet.nu/djihax.pdf; http://kth.diva-portal.org/smash/get/diva2:1463784/FULLTEXT01.pdf; https://gist.github.com/viktoredstrom/2f0463ebe7cd786904f229e11386e817
CVE: CVE-2020-35577
Published: 2021-02-18
Description: In Endalia Selection Portal before 4.205.0, an Insecure Direct Object Reference (IDOR) allows any authenticated user to download every file uploaded to the platform by changing the value of the file identifier (aka CommonDownload identification number).
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/blackarrowsec/advisories/tree/master/2020/CVE-2020-35577; https://www.endalia.com/en/software/; https://github.com/blackarrowsec/advisories/tree/master/2020/CVE-2020-35577
CVE: CVE-2019-18255
Published: 2021-02-18
Description: HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects. This may allow privilege escalation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-040-01; https://us-cert.cisa.gov/ics/advisories/icsa-21-040-01
CVE: CVE-2020-28490
Published: 2021-02-18
Description: The package async-git before 1.13.2 are vulnerable to Command Injection via shell meta-characters (back-ticks). For example: git.reset('atouch HACKEDb')
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://github.com/omrilotan/async-git/commit/d1950a5021f4e19d92f347614be0d85ce991510d; https://github.com/omrilotan/async-git/pull/14; https://snyk.io/vuln/SNYK-JS-ASYNCGIT-1064877
CVE: CVE-2020-28496
Published: 2021-02-18
Description: This affects the package three before 0.125.0. This can happen when handling rgb or hsl colors. PoC: var three = require('three') function build_blank (n) { var ret = "rgb(" for (var i = 0; i < n; i++) { ret += " " } return ret + ""; } var Color = three.Color var time = Date.now(); new Color(build_blank(50000)) var time_cost = Date.now() - time; console.log(time_cost+" ms")
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/mrdoob/three.js/issues/21132; https://github.com/mrdoob/three.js/pull/21143/commits/4a582355216b620176a291ff319d740e619d583e; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1065972
CVE: CVE-2020-4933
Published: 2021-02-18
Description: IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191751.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191751; https://www.ibm.com/support/pages/node/6415911; https://exchange.xforce.ibmcloud.com/vulnerabilities/191751
CVE: CVE-2021-20354
Published: 2021-02-18
Description: IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 194883.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/194883; https://www.ibm.com/support/pages/node/6415959; https://exchange.xforce.ibmcloud.com/vulnerabilities/194883
CVE: CVE-2021-20443
Published: 2021-02-18
Description: IBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality (such as a library) from a source that is outside of the intended control sphere. IBM X-Force ID: 196619.
CVSS Score: 8.8 (HIGH)
CWE: CWE-829
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196619; https://www.ibm.com/support/pages/node/6415883; https://exchange.xforce.ibmcloud.com/vulnerabilities/196619
CVE: CVE-2021-20444
Published: 2021-02-18
Description: IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196620.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196620; https://www.ibm.com/support/pages/node/6415887; https://exchange.xforce.ibmcloud.com/vulnerabilities/196620
CVE: CVE-2021-20445
Published: 2021-02-18
Description: IBM Maximo for Civil Infrastructure 7.6.2 could allow a user to obtain sensitive information due to insecure storeage of authentication credentials. IBM X-Force ID: 196621.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196621; https://www.ibm.com/support/pages/node/6415891; https://exchange.xforce.ibmcloud.com/vulnerabilities/196621
CVE: CVE-2021-20446
Published: 2021-02-18
Description: IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196622.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196622; https://www.ibm.com/support/pages/node/6415893; https://exchange.xforce.ibmcloud.com/vulnerabilities/196622
CVE: CVE-2021-23340
Published: 2021-02-18
Description: This affects the package pimcore/pimcore before 6.8.8. A Local FIle Inclusion vulnerability exists in the downloadCsvAction function of the CustomReportController class (bundles/AdminBundle/Controller/Reports/CustomReportController.php). An authenticated user can reach this function with a GET request at the following endpoint: /admin/reports/custom-report/download-csv?exportFile=&91;filename]. Since exportFile variable is not sanitized, an attacker can exploit a local file inclusion vulnerability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-22
References: https://github.com/pimcore/pimcore/blob/v6.7.2/bundles/AdminBundle/Controller/Reports/CustomReportController.php%23L454; https://github.com/pimcore/pimcore/commit/1786bdd4962ee51544fad537352c2b[PII_REDACTED]; https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-1070132
CVE: CVE-2020-28463
Published: 2021-02-18
Description: All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) via img tags. In order to reduce risk, use trustedSchemes & trustedHosts (see in Reportlab's documentation) Steps to reproduce by Karan Bamal: 1. Download and install the latest package of reportlab 2. Go to demos -> odyssey -> dodyssey 3. In the text file odyssey.txt that needs to be converted to pdf inject <img src="http://127.0.0.1:5000" valign="top"/> 4. Create a nc listener nc -lp 5000 5. Run python3 dodyssey.py 6. You will get a hit on your nc showing we have successfully proceded to send a server side request 7. dodyssey.py will show error since there is no img file on the url, but we are able to do SSRF
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://lists.debian.org/debian-lts-announce/2023/09/msg00037.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HMUJA5GZTPQ5WRYUCCK2GEZM4W43N7HH/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZQSFCID67K6BTC655EQY6MNOF35QI44/
CVE: CVE-2020-28491
Published: 2021-02-18
Description: This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/FasterXML/jackson-dataformats-binary/commit/de072d314af8f5f269c8abec6930652af67bc8e6; https://github.com/FasterXML/jackson-dataformats-binary/issues/186; https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONDATAFORMAT-1047329
CVE: CVE-2020-28499
Published: 2021-02-18
Description: All versions of package merge are vulnerable to Prototype Pollution via _recursiveMerge .
CVSS Score: 7.3 (HIGH)
References: https://github.com/yeikos/js.merge/blob/master/src/index.ts%23L64; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1071049; https://snyk.io/vuln/SNYK-JS-MERGE-1042987
CVE: CVE-2021-23341
Published: 2021-02-18
Description: The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components.
CVSS Score: 7.5 (HIGH)
References: https://github.com/PrismJS/prism/commit/c2f6a64426f44497a675cb32dccb079b3eff1609; https://github.com/PrismJS/prism/issues/2583; https://github.com/PrismJS/prism/pull/2584
CVE: CVE-2019-18243
Published: 2021-02-18
Description: HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through the registry. This may allow privilege escalation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-040-01; https://us-cert.cisa.gov/ics/advisories/icsa-21-040-01
CVE: CVE-2021-27379
Published: 2021-02-18
Description: An issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve unintended read/write DMA access, and possibly cause a denial of service (host OS crash) or gain privileges. This occurs because a backport missed a flush, and thus IOMMU updates were not always correct. NOTE: this issue exists because of an incomplete fix for CVE-2020-15565.
CVSS Score: 7.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2021/02/23/1; http://xenbits.xen.org/xsa/advisory-366.html; https://www.debian.org/security/2021/dsa-4888
CVE: CVE-2021-21318
Published: 2021-02-18
Description: Opencast is a free, open-source platform to support the management of educational audio and video content. In Opencast before version 9.2 there is a vulnerability in which publishing an episode with strict access rules will overwrite the currently set series access. This allows for an easy denial of access for all users without superuser privileges, effectively hiding the series. Access to series and series metadata on the search service (shown in media module and player) depends on the events published which are part of the series. Publishing an event will automatically publish a series and update access to it. Removing an event or republishing the event should do the same. Affected versions of Opencast may not update the series access or remove a published series if an event is being removed. On removal of an episode, this may lead to an access control list for series metadata with broader access rules than the merged access rules of all remaining events, or the series metadata still being available although all episodes of that series have been removed. This problem is fixed in Opencast 9.2.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://github.com/opencast/opencast/commit/b18c6a7f81f08ed14884592a6c14c9ab611ad450; https://github.com/opencast/opencast/security/advisories/GHSA-vpc2-3wcv-qj4w; https://github.com/opencast/opencast/commit/b18c6a7f81f08ed14884592a6c14c9ab611ad450
CVE: CVE-2021-27329
Published: 2021-02-18
Description: Friendica 2021.01 allows SSRF via parse_url?binurl= for DNS lookups or HTTP requests to arbitrary domain names.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-918
References: https://github.com/friendica/friendica/issues/9929; https://github.com/friendica/friendica/issues/9929
CVE: CVE-2021-27335
Published: 2021-02-18
Description: KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://hacked0x90.net/index.php/2021/02/15/kollectapp-insecure-java-deserialization/; https://hacked0x90.net/index.php/2021/02/15/kollectapp-insecure-java-deserialization/
CVE: CVE-2021-3271
Published: 2021-02-18
Description: PressBooks 5.17.3 contains a cross-site scripting (XSS). Stored XSS can be submitted via the Book Info's Long Description Body, and all actions to open or preview the books page will result in the triggering the stored XSS.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/pressbooks/pressbooks; https://github.com/pressbooks/pressbooks/pull/2072; https://www.gosecure.net/blog/2021/02/16/cve-2021-3271-pressbooks-stored-cross-site-scripting-proof-of-concept/
CVE: CVE-2020-35591
Published: 2021-02-18
Description: Pi-hole 5.0, 5.1, and 5.1.1 allows Session Fixation. The application does not generate a new session cookie after the user is logged in. A malicious user is able to create a new session cookie value and inject it to a victim. After the victim logs in, the injected cookie becomes valid, giving the attacker access to the user's account through the active session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-384
References: https://discourse.pi-hole.net/c/announcements/5; https://n4nj0.github.io/advisories/pi-hole-multiple-vulnerabilities-i/; https://discourse.pi-hole.net/c/announcements/5
CVE: CVE-2020-35592
Published: 2021-02-18
Description: Pi-hole 5.0, 5.1, and 5.1.1 allows XSS via the Options header to the admin/ URI. A remote user is able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and achieve a Reflected Cross-Site Scripting attack against other users and steal the session cookie.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://discourse.pi-hole.net/c/announcements/5; https://n4nj0.github.io/advisories/pi-hole-multiple-vulnerabilities-i/; https://discourse.pi-hole.net/c/announcements/5
CVE: CVE-2020-35776
Published: 2021-02-18
Description: A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1, and 18.1.1 allows remote attacker to crash Asterisk by deliberately misusing SIP 181 responses.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: http://packetstormsecurity.com/files/161470/Asterisk-Project-Security-Advisory-AST-2021-001.html; http://seclists.org/fulldisclosure/2021/Feb/57; https://downloads.asterisk.org/pub/security/AST-2021-001.html
CVE: CVE-2020-36233
Published: 2021-02-18
Description: The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://jira.atlassian.com/browse/BSERV-12753; https://www.kb.cert.org/vuls/id/240785; https://jira.atlassian.com/browse/BSERV-12753