deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-41832
Published: 2021-10-11
Description: It is possible for an attacker to manipulate documents to appear to be signed by a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25635 for the LibreOffice advisory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-347, CWE-347
References: https://lists.apache.org/thread.html/rd3214a568b43dd335b5d558f521377f4bff750684dea18eb041fc1bb%40%3Cusers.openoffice.apache.org%3E; https://lists.apache.org/thread.html/rfbc93cd7cea40e2ad3b6e080f688dd02566cdd2b1984fcbb6f8b0fb6%40%3Cannounce.apache.org%3E; https://lists.apache.org/thread.html/rd3214a568b43dd335b5d558f521377f4bff750684dea18eb041fc1bb%40%3Cusers.openoffice.apache.org%3E
CVE: CVE-2021-35059
Published: 2021-10-11
Description: OpenWay WAY4 ACS before 1.2.278-2693 allows XSS via the /way4acs/enroll action parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/exviry/560fededd1e44b7cced483d8ca8c362e; https://www.openwaygroup.com/way4-platform; https://gist.github.com/exviry/560fededd1e44b7cced483d8ca8c362e
CVE: CVE-2021-35060
Published: 2021-10-11
Description: /way4acs/enroll in OpenWay WAY4 ACS before 1.2.278-2693 allows unauthenticated attackers to leverage response differences to discover whether a specific payment card number is stored in the system.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://gist.github.com/exviry/9527ce2ccdc0718d3ffd1e3ca62cf304; https://www.openwaygroup.com/way4-platform; https://gist.github.com/exviry/9527ce2ccdc0718d3ffd1e3ca62cf304
CVE: CVE-2021-40889
Published: 2021-10-11
Description: CMSUno version 1.7.2 is affected by a PHP code execution vulnerability. sauvePass action in {webroot}/uno/central.php file calls to file_put_contents() function to write username in password.php file when a user successfully changed their password. The attacker can inject malicious PHP code into password.php and then use the login function to execute code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/boiteasite/cmsuno/issues/19; https://github.com/boiteasite/cmsuno/issues/19
CVE: CVE-2021-24545
Published: 2021-10-11
Description: The WP HTML Author Bio WordPress plugin through 1.2.0 does not sanitise the HTML allowed in the Bio of users, allowing them to use malicious JavaScript code, which will be executed when anyone visit a post in the frontend made by such user. As a result, user with a role as low as author could perform Cross-Site Scripting attacks against users, which could potentially lead to privilege escalation when an admin view the related post/s.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/64267134-9d8c-4e0c-b24f-d18692a5775e; https://wpscan.com/vulnerability/64267134-9d8c-4e0c-b24f-d18692a5775e
CVE: CVE-2021-24546
Published: 2021-10-11
Description: The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://wpscan.com/vulnerability/bdc36f6a-682d-4d66-b587-92e86085d971; https://wpscan.com/vulnerability/bdc36f6a-682d-4d66-b587-92e86085d971
CVE: CVE-2021-24563
Published: 2021-10-11
Description: The Frontend Uploader WordPress plugin through 1.3.2 does not prevent HTML files from being uploaded via its form, allowing unauthenticated user to upload a malicious HTML file containing JavaScript for example, which will be triggered when someone access the file directly
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/165515/WordPress-Frontend-Uploader-1.3.2-Cross-Site-Scripting.html; https://wpscan.com/vulnerability/e53ef41e-a176-4d00-916a-3a03835370f1; http://packetstormsecurity.com/files/165515/WordPress-Frontend-Uploader-1.3.2-Cross-Site-Scripting.html
CVE: CVE-2021-24576
Published: 2021-10-11
Description: The Easy Accordion WordPress plugin before 2.0.22 does not properly sanitize inputs when adding new items to an accordion.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4d0c60d1-db5a-4c4f-9bdb-669975ac7210; https://wpscan.com/vulnerability/4d0c60d1-db5a-4c4f-9bdb-669975ac7210
CVE: CVE-2021-24577
Published: 2021-10-11
Description: The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not properly sanitize inputs submitted by authenticated users when setting adding or modifying coming soon or maintenance mode pages, leading to stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d453b547-41a8-4a6b-8349-8686b7054805; https://wpscan.com/vulnerability/d453b547-41a8-4a6b-8349-8686b7054805
CVE: CVE-2021-24651
Published: 2021-10-11
Description: The Poll Maker WordPress plugin before 3.4.2 allows unauthenticated users to perform SQL injection via the ays_finish_poll AJAX action. While the result is not disclosed in the response, it is possible to use a timing attack to exfiltrate data such as password hash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-203, CWE-89, CWE-203
References: https://wpscan.com/vulnerability/24f933b0-ad57-4ed3-817d-d637256e2fb1; https://wpscan.com/vulnerability/24f933b0-ad57-4ed3-817d-d637256e2fb1
CVE: CVE-2021-24656
Published: 2021-10-11
Description: The Simple Social Media Share Buttons WordPress plugin before 3.2.4 does not escape the Share Title settings before outputting it in the frontend pages or posts (depending on the settings used), allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/8e897dcc-6e52-440b-83ad-b119c55751c7; https://wpscan.com/vulnerability/8e897dcc-6e52-440b-83ad-b119c55751c7
CVE: CVE-2021-24681
Published: 2021-10-11
Description: The Duplicate Page WordPress plugin through 4.4.2 does not sanitise or escape the Duplicate Post Suffix settings before outputting it, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/9ebdd1df-1d6f-4399-8b0f-77a79f841464; https://wpscan.com/vulnerability/9ebdd1df-1d6f-4399-8b0f-77a79f841464
CVE: CVE-2021-24683
Published: 2021-10-11
Description: The Weather Effect WordPress plugin before 1.3.4 does not have any CSRF checks in place when saving its settings, and do not validate or escape them, which could lead to Stored Cross-Site Scripting issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-352, CWE-79, CWE-352
References: https://wpscan.com/vulnerability/54f95b51-5804-4bee-9e4a-f73b8ef9bbd5; https://wpscan.com/vulnerability/54f95b51-5804-4bee-9e4a-f73b8ef9bbd5
CVE: CVE-2021-24690
Published: 2021-10-11
Description: The Chained Quiz WordPress plugin before 1.2.7.2 does not properly sanitize or escape inputs in the plugin's settings.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/b2f473b4-268c-48b7-95e8-0a8eeaa3fc28; https://wpscan.com/vulnerability/b2f473b4-268c-48b7-95e8-0a8eeaa3fc28
CVE: CVE-2021-24691
Published: 2021-10-11
Description: The Quiz And Survey Master WordPress plugin before 7.3.2 does not escape the Quiz Url Slug setting before outputting it in some pages, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/ecf6a082-b563-42c4-9d8c-3757aa6b696f; https://wpscan.com/vulnerability/ecf6a082-b563-42c4-9d8c-3757aa6b696f
CVE: CVE-2021-24709
Published: 2021-10-11
Description: The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings (like *_size_leaf, *_flakes_leaf, *_speed) which could lead to Stored Cross-Site Scripting issues
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/df74ed76-af9e-47a8-9a4d-c5c57e9e0f91; https://wpscan.com/vulnerability/df74ed76-af9e-47a8-9a4d-c5c57e9e0f91
CVE: CVE-2021-24711
Published: 2021-10-11
Description: The del_reistered_domains AJAX action of the Software License Manager WordPress plugin before 4.5.1 does not have any CSRF checks, and is vulnerable to a CSRF attack
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jetpack.com/2021/09/14/csrf-vulnerability-found-in-software-license-manager-plugin/; https://wpscan.com/vulnerability/3351bc30-e5ff-471f-8d1c-b1bcdf419937; https://jetpack.com/2021/09/14/csrf-vulnerability-found-in-software-license-manager-plugin/
CVE: CVE-2021-24712
Published: 2021-10-11
Description: The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/e677e51b-0d3f-44a5-9fcd-c159786b9926; https://wpscan.com/vulnerability/e677e51b-0d3f-44a5-9fcd-c159786b9926
CVE: CVE-2021-24719
Published: 2021-10-11
Description: The Enfold Enfold WordPress theme before 4.8.4 was vulnerable to Reflected Cross-Site Scripting (XSS). The vulnerability is present on Enfold versions previous than 4.8.4 which use Avia Page Builder.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/164548/WordPress-Enfold-Theme-4.8.3-Cross-Site-Scripting.html; https://wpscan.com/vulnerability/a53e213f-6011-47f8-93e6-aa5ad30e857e; http://packetstormsecurity.com/files/164548/WordPress-Enfold-Theme-4.8.3-Cross-Site-Scripting.html
CVE: CVE-2021-24720
Published: 2021-10-11
Description: The GeoDirectory Business Directory WordPress plugin before 2.1.1.3 was vulnerable to Authenticated Stored Cross-Site Scripting (XSS).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/BigTiger2020/word-press/blob/main/WrodPress%20Plugin%20GeoDirectory%E2%80%94%E2%80%94Stored%20Cross-Site%20Scripting%20.md; https://plugins.trac.wordpress.org/changeset/2596452/geodirectory; https://wpscan.com/vulnerability/9de5cc51-f64c-4475-a0f4-d932dc4364a6
CVE: CVE-2021-24737
Published: 2021-10-11
Description: The Comments – wpDiscuz WordPress plugin through 7.3.0 does not properly sanitise or escape the Follow and Unfollow messages before outputting them in the page, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/f51a350c-c46d-4d52-b[PII_REDACTED]25d0b; https://wpscan.com/vulnerability/f51a350c-c46d-4d52-b[PII_REDACTED]25d0b
CVE: CVE-2021-40884
Published: 2021-10-11
Description: Projectsend version r1295 is affected by sensitive information disclosure. Because of not checking authorization in ids parameter in files-edit.php and id parameter in process.php function, a user with uploader role can download and edit all files of users in application.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://github.com/projectsend/projectsend/issues/992; https://github.com/projectsend/projectsend/issues/992
CVE: CVE-2021-40886
Published: 2021-10-11
Description: Projectsend version r1295 is affected by a directory traversal vulnerability. A user with Uploader role can add value `2` for `chunks` parameter to bypass `fileName` sanitization.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/projectsend/projectsend/issues/993; https://github.com/projectsend/projectsend/issues/993
CVE: CVE-2021-40887
Published: 2021-10-11
Description: Projectsend version r1295 is affected by a directory traversal vulnerability. Because of lacking sanitization input for files[] parameter, an attacker can add ../ to move all PHP files or any file on the system that has permissions to /upload/files/ folder.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/projectsend/projectsend/issues/994; https://github.com/projectsend/projectsend/issues/994
CVE: CVE-2021-40888
Published: 2021-10-11
Description: Projectsend version r1295 is affected by Cross Site Scripting (XSS) due to lack of sanitization when echo output data in returnFilesIds() function. A low privilege user can call this function through process.php file and execute scripting code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/projectsend/projectsend/issues/995; https://github.com/projectsend/projectsend/releases/tag/r1295; https://github.com/projectsend/projectsend/issues/995
CVE: CVE-2021-29004
Published: 2021-10-11
Description: rConfig 3.9.6 is affected by SQL Injection. A user must be authenticated to exploit the vulnerability. If --secure-file-priv in MySQL server is not set and the Mysql server is the same as rConfig, an attacker may successfully upload a webshell to the server and access it remotely.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://rconfig.com; https://github.com/mrojz/rconfig-exploit/blob/main/CVE-2021-29004-POC-req.txt; https://github.com/mrojz/rconfig-exploit/blob/main/README.md
CVE: CVE-2021-29005
Published: 2021-10-11
Description: Insecure permission of chmod command on rConfig server 3.9.6 exists. After installing rConfig apache user may execute chmod as root without password which may let an attacker with low privilege to gain root access on server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: http://rconfig.com; https://github.com/mrojz/rconfig-exploit/blob/main/CVE-2021-29005-POC.sh; http://rconfig.com
CVE: CVE-2021-29006
Published: 2021-10-11
Description: rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://rconfig.com; https://github.com/mrojz/rconfig-exploit/blob/main/CVE-2021-29006-POC.py; http://rconfig.com
CVE: CVE-2021-40542
Published: 2021-10-11
Description: Opensis-Classic Version 8.0 is affected by cross-site scripting (XSS). An unauthenticated user can inject and execute JavaScript code through the link_url parameter in Ajax_url_encode.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/OS4ED/openSIS-Classic/issues/189; https://github.com/OS4ED/openSIS-Classic/issues/189
CVE: CVE-2021-40543
Published: 2021-10-11
Description: Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $_GET['usrid'] and $_GET['prof_id'] in the PasswordCheck.php file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/OS4ED/openSIS-Classic/issues/191; https://github.com/OS4ED/openSIS-Classic/issues/191
CVE: CVE-2021-40191
Published: 2021-10-11
Description: Dzzoffice Version 2.02.1 is affected by cross-site scripting (XSS) due to a lack of sanitization of input data at all upload functions in webroot/dzz/attach/Uploader.class.php and return a wrong response in content-type of output data in webroot/dzz/attach/controller.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/zyx0814/dzzoffice/issues/196; https://github.com/zyx0814/dzzoffice/issues/196
CVE: CVE-2021-40541
Published: 2021-10-11
Description: PHPFusion 9.03.110 is affected by cross-site scripting (XSS) in the preg patterns filter html tag without "//" in descript() function An authenticated user can trigger XSS by appending "//" in the end of text.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/PHPFusion/PHPFusion/issues/2373; https://github.com/PHPFusion/PHPFusion/issues/2373
CVE: CVE-2021-0583
Published: 2021-10-11
Description: In onCreate of BluetoothPairingDialog, there is a possible way to enable Bluetooth without user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-182282956
CVSS Score: 7.3 (HIGH)
CWE: CWE-1021
References: https://source.android.com/security/bulletin/aaos/2021-10-01; https://source.android.com/security/bulletin/aaos/2021-10-01
CVE: CVE-2021-27664
Published: 2021-10-11
Description: Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269, CWE-269
References: https://us-cert.gov/ics/advisories/icsa-21-280-01; https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://us-cert.gov/ics/advisories/icsa-21-280-01
CVE: CVE-2021-27665
Published: 2021-10-11
Description: An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-190
References: https://us-cert.gov/ics/advisories/icsa-21-280-03; https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://us-cert.gov/ics/advisories/icsa-21-280-03
CVE: CVE-2021-37123
Published: 2021-10-11
Description: There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when an user wants to do certain operation, the software does not insufficiently validate the user's identity. Successful exploit could allow the attacker to do certain operations which the user are supposed not to do.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210929-01-auth-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210929-01-auth-en
CVE: CVE-2021-39317
Published: 2021-10-11
Description: A WordPress plugin and several WordPress themes developed by AccessPress Themes are vulnerable to malicious file uploads via the plugin_offline_installer AJAX action due to a missing capability check in the plugin_offline_installer_callback function found in the /demo-functions.php file or /welcome.php file of the affected products. The complete list of affected products and their versions are below: WordPress Plugin: AccessPress Demo Importer <=1.0.6 WordPress Themes: accesspress-basic <= 3.2.1 accesspress-lite <= 2.92 accesspress-mag <= 2.6.5 accesspress-parallax <= 4.5 accesspress-root <= 2.5 accesspress-store <= 2.4.9 agency-lite <= 1.1.6 arrival <= 1.4.2 bingle <= 1.0.4 bloger <= 1.2.6 brovy <= 1.3 construction-lite <= 1.2.5 doko <= 1.0.27 edict-lite <= 1.1.4 eightlaw-lite <= 2.1.5 eightmedi-lite <= 2.1.8 eight-sec <= 1.1.4 eightstore-lite <= 1.2.5 enlighten <= 1.3.5 fotography <= 2.4.0 opstore <= 1.4.3 parallaxsome <= 1.3.6 punte <= 1.1.2 revolve <= 1.3.1 ripple <= 1.2.0 sakala <= 1.0.4 scrollme <= 2.1.0 storevilla <= 1.4.1 swing-lite <= 1.1.9 the100 <= 1.1.2 the-launcher <= 1.3.2 the-monday <= 1.4.1 ultra-seven <= 1.2.8 uncode-lite <= 1.3.3 vmag <= 1.2.7 vmagazine-lite <= 1.3.5 vmagazine-news <= 1.0.5 wpparallax <= 2.0.6 wp-store <= 1.1.9 zigcy-baby <= 1.0.6 zigcy-cosmetics <= 1.0.5 zigcy-lite <= 2.0.9
CVSS Score: 8.8 (HIGH)
CWE: CWE-285, CWE-434, CWE-434
References: https://patchstack.com/articles/authenticated-vulnerability-in-unpatched-wordpress-themes/; https://plugins.trac.wordpress.org/changeset/2592642/access-demo-importer/trunk/inc/demo-functions.php; https://plugins.trac.wordpress.org/changeset/2602132/access-demo-importer/trunk/inc/demo-functions.php
CVE: CVE-2021-20121
Published: 2021-10-11
Description: The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is vulnerable to an authenticated arbitrary file read. An authenticated user with physical access to the device can read arbitrary files from the device by preparing and connecting a specially prepared USB drive to the device, and making a series of crafted requests to the device's web interface.
CVSS Score: 4.0 (MEDIUM)
References: https://www.tenable.com/security/research/tra-2021-41; https://www.tenable.com/security/research/tra-2021-41
CVE: CVE-2021-20122
Published: 2021-10-11
Description: The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is affected by an authenticated command injection vulnerability in multiple parameters passed to tr69_cmd.cgi. A remote attacker connected to the router's LAN and authenticated with a super user account, or using a bypass authentication vulnerability like CVE-2021-20090 could leverage this issue to run commands or gain a shell as root on the target device.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.tenable.com/security/research/tra-2021-41; https://www.tenable.com/security/research/tra-2021-41
CVE: CVE-2021-22263
Published: 2021-10-11
Description: An issue has been discovered in GitLab affecting all versions starting from 13.0 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions starting from 14.2 before 14.2.2. A user account with 'external' status which is granted 'Maintainer' role on any project on the GitLab instance where 'project tokens' are allowed may elevate its privilege to 'Internal' and access Internal projects.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-269
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22263.json; https://gitlab.com/gitlab-org/gitlab/-/issues/331473; https://hackerone.com/reports/1193062
CVE: CVE-2021-25633
Published: 2021-10-11
Description: LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to create a digitally signed ODF document, by manipulating the documentsignatures.xml or macrosignatures.xml stream within the document to combine multiple certificate data, which when opened caused LibreOffice to display a validly signed indicator but whose content was unrelated to the signature shown. This issue affects: The Document Foundation LibreOffice 7-0 versions prior to 7.0.6; 7-1 versions prior to 7.1.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295, CWE-295
References: https://www.debian.org/security/2021/dsa-4988; https://www.libreoffice.org/about-us/security/advisories/CVE-2021-25633; https://www.debian.org/security/2021/dsa-4988
CVE: CVE-2021-26588
Published: 2021-10-11
Description: A potential security vulnerability has been identified in HPE 3PAR StoreServ, HPE Primera Storage and HPE Alletra 9000 Storage array firmware. An unauthenticated user could remotely exploit the low complexity issue to execute code as administrator. This vulnerability impacts completely the confidentiality, integrity, availability of the array. HPE has made the following software updates and mitigation information to resolve the vulnerability in 3PAR, Primera and Alletra 9000 firmware.
CVSS Score: 9.8 (CRITICAL)
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04191en_us; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst04191en_us
CVE: CVE-2021-27002
Published: 2021-10-11
Description: NetApp Cloud Manager versions prior to 3.9.10 are susceptible to a vulnerability which could allow a remote unauthenticated attacker to retrieve sensitive data via the web proxy.
CVSS Score: 7.5 (HIGH)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-32028
Published: 2021-10-11
Description: A flaw was found in postgresql. Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an authenticated database user could read arbitrary bytes of server memory. The highest threat from this vulnerability is to data confidentiality.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=1956877; https://security.gentoo.org/glsa/202211-04; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-27372
Published: 2021-10-11
Description: A buffer overflow vulnerability exists in Brandy Basic V Interpreter 1.21 in the run_interpreter function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://sourceforge.net/p/brandy/bugs/10/; https://sourceforge.net/p/brandy/bugs/10/