deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-3530
Published: 2021-06-02
Description: A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674, CWE-674
References: https://bugzilla.redhat.com/show_bug.cgi?id=1956423; https://security.gentoo.org/glsa/202208-30; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2009-0947
Published: 2021-06-02
Description: Multiple integer overflows in the (1) cdf_read_property_info and (2) cdf_read_sat functions in file before 5.02.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://bugzilla.redhat.com/show_bug.cgi?id=498682; https://bugzilla.redhat.com/show_bug.cgi?id=498682
CVE: CVE-2009-0948
Published: 2021-06-02
Description: Multiple buffer overflows in the (1) cdf_read_sat, (2) cdf_read_long_sector_chain, and (3) cdf_read_ssat function in file before 5.02.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://bugzilla.redhat.com/show_bug.cgi?id=498682; https://bugzilla.redhat.com/show_bug.cgi?id=498682
CVE: CVE-2020-22046
Published: 2021-06-02
Description: A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://lists.debian.org/debian-lts-announce/2021/11/msg00012.html; https://trac.ffmpeg.org/ticket/8294; https://lists.debian.org/debian-lts-announce/2021/11/msg00012.html
CVE: CVE-2020-22048
Published: 2021-06-02
Description: A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepool.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://lists.debian.org/debian-lts-announce/2021/11/msg00012.html; https://trac.ffmpeg.org/ticket/8303; https://lists.debian.org/debian-lts-announce/2021/11/msg00012.html
CVE: CVE-2020-22049
Published: 2021-06-02
Description: A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=373c1c9b691fd4c6831b3a114a006b639304c2af; https://lists.debian.org/debian-lts-announce/2021/11/msg00012.html; https://trac.ffmpeg.org/ticket/8314
CVE: CVE-2020-24870
Published: 2021-06-02
Description: Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in identify.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://github.com/LibRaw/LibRaw/commit/4feaed4dea636cee4fee010f615881ccf76a096d; https://github.com/LibRaw/LibRaw/issues/330; https://security.gentoo.org/glsa/202208-07
CVE: CVE-2020-27661
Published: 2021-06-02
Description: A divide-by-zero issue was found in dwc2_handle_packet in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulation of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: https://bugzilla.redhat.com/show_bug.cgi?id=1890653; https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=bea2a9e3e00b275dc40cfa09c760c715b8753e03; https://lists.nongnu.org/archive/html/qemu-devel/2020-10/msg04263.html
CVE: CVE-2020-6950
Published: 2021-06-02
Description: Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=550943; https://github.com/eclipse-ee4j/mojarra/commit/cefbb9447e7be560e59da2da6bd7cb93776f7741; https://github.com/eclipse-ee4j/mojarra/issues/4571
CVE: CVE-2021-25287
Published: 2021-06-02
Description: An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_graya_la.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/python-pillow/Pillow/pull/5377#issuecomment-833821470; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL/; https://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-25287-cve-2021-25288-fix-oob-read-in-jpeg2kdecode
CVE: CVE-2021-25288
Published: 2021-06-02
Description: An issue was discovered in Pillow before 8.2.0. There is an out-of-bounds read in J2kDecode, in j2ku_gray_i.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://github.com/python-pillow/Pillow/pull/5377#issuecomment-833821470; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL/; https://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-25287-cve-2021-25288-fix-oob-read-in-jpeg2kdecode
CVE: CVE-2021-28676
Published: 2021-06-02
Description: An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/python-pillow/Pillow/commit/bb6c11fb889e6c11b0ee122b828132ee763b5856; https://github.com/python-pillow/Pillow/pull/5377; https://lists.debian.org/debian-lts-announce/2021/07/msg00018.html
CVE: CVE-2021-28677
Published: 2021-06-02
Description: An issue was discovered in Pillow before 8.2.0. For EPS data, the readline implementation used in EPSImageFile has to deal with any combination of \r and \n as line endings. It used an accidentally quadratic method of accumulating lines while looking for a line ending. A malicious EPS file could use this to perform a DoS of Pillow in the open phase, before an image was accepted for opening.
CVSS Score: 7.5 (HIGH)
References: https://github.com/python-pillow/Pillow/pull/5377; https://lists.debian.org/debian-lts-announce/2021/07/msg00018.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL/
CVE: CVE-2021-28678
Published: 2021-06-02
Description: An issue was discovered in Pillow before 8.2.0. For BLP data, BlpImagePlugin did not properly check that reads (after jumping to file offsets) returned data. This could lead to a DoS where the decoder could be run a large number of times on empty data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-345
References: https://github.com/python-pillow/Pillow/pull/5377; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQHA5HAIBOYI3R6HDWCLAGFTIQP767FL/; https://pillow.readthedocs.io/en/stable/releasenotes/8.2.0.html#cve-2021-28678-fix-blp-dos
CVE: CVE-2021-31855
Published: 2021-06-02
Description: KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server (e.g., an IMAP server) causes KMail to upload the decrypted content of the message to the remote server. With a crafted message, a user could be tricked into decrypting an encrypted message and then deleting an attachment attached to this message. If the attacker has access to the messages stored on the email server, then the attacker could read the decrypted content of the encrypted message. This occurs in ViewerPrivate::deleteAttachment in messageviewer/src/viewer/viewer_p.cpp.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312
References: https://github.com/KDE/messagelib/commit/3b5b171e91ce78b966c98b1292a1bcbc8d984799; https://kde.org/info/security/advisory-20210429-1.txt; https://github.com/KDE/messagelib/commit/3b5b171e91ce78b966c98b1292a1bcbc8d984799
CVE: CVE-2021-31921
Published: 2021-06-02
Description: Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is configured with AUTO_PASSTHROUGH routing configuration.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://istio.io/latest/news/security/istio-security-2021-006/; https://istio.io/latest/news/security/istio-security-2021-006/
CVE: CVE-2021-3468
Published: 2021-06-02
Description: A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://bugzilla.redhat.com/show_bug.cgi?id=1939614; https://lists.debian.org/debian-lts-announce/2022/06/msg00009.html; https://lists.debian.org/debian-lts-announce/2023/06/msg00028.html
CVE: CVE-2021-3499
Published: 2021-06-02
Description: A vulnerability was found in OVN Kubernetes in versions up to and including 0.3.0 where the Egress Firewall does not reliably apply firewall rules when there is multiple DNS rules. It could lead to potentially lose of confidentiality, integrity or availability of a service.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=1949188; https://bugzilla.redhat.com/show_bug.cgi?id=1949188
CVE: CVE-2011-3656
Published: 2021-06-02
Description: Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP 0.9 errors, non-default ports, and content-sniffing.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugzilla.mozilla.org/show_bug.cgi?id=667907; https://bugzilla.mozilla.org/show_bug.cgi?id=667907
CVE: CVE-2015-1877
Published: 2021-06-02
Description: The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://www.debian.org/security/2015/dsa-3165; http://www.openwall.com/lists/oss-security/2015/02/18/7; http://www.openwall.com/lists/oss-security/2015/02/18/9
CVE: CVE-2020-22051
Published: 2021-06-02
Description: A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=673fce6d40d9a594fb7a0ea17d296b7d3d9ea856; https://trac.ffmpeg.org/ticket/8313; http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=673fce6d40d9a594fb7a0ea17d296b7d3d9ea856
CVE: CVE-2020-24862
Published: 2021-06-02
Description: The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to retrieve all databases.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/48752; https://www.sourcecodester.com/download-code?nid=14398&title=Pharmacy%2FMedical+Store+%26+Sale+Point+Using+PHP%2FMySQL+with+Bootstrap+Framework; https://www.sourcecodester.com/php/14398/pharmacymedical-store-sale-point-using-phpmysql-bootstrap-framework.html
CVE: CVE-2020-25362
Published: 2021-06-02
Description: The id paramater in Online Shopping Alphaware 1.0 has been discovered to be vulnerable to an Error-Based blind SQL injection in the /alphaware/details.php path. This allows an attacker to retrieve all databases.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/48771; https://www.sourcecodester.com/download-code?nid=14368&title=Online+Shopping+Alphaware+in+PHP%2FMysql; https://www.sourcecodester.com/php/14368/online-shopping-alphaware-phpmysql.html
CVE: CVE-2021-30474
Published: 2021-06-02
Description: aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://aomedia.googlesource.com/aom/+/6e31957b6dc62dbc7d1bb70cd84902dd14c4bf2e; https://bugs.chromium.org/p/aomedia/issues/detail?id=3000; https://lists.debian.org/debian-lts-announce/2023/09/msg00003.html
CVE: CVE-2021-3529
Published: 2021-06-02
Description: A flaw was found in noobaa-core in versions before 5.7.0. This flaw results in the name of an arbitrarily URL being copied into an HTML document as plain text between tags, including potentially a payload script. The input was echoed unmodified in the application response, resulting in arbitrary JavaScript being injected into an application's response. The highest threat to the system is for confidentiality, availability, and integrity.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://bugzilla.redhat.com/show_bug.cgi?id=1950479; https://bugzilla.redhat.com/show_bug.cgi?id=1950479
CVE: CVE-2020-22054
Published: 2021-06-02
Description: A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set function in dict.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=6f2a3958cfac135c60b509a61a4fd39432d8f9a9; https://lists.debian.org/debian-lts-announce/2021/11/msg00012.html; https://trac.ffmpeg.org/ticket/8315
CVE: CVE-2020-22056
Published: 2021-06-02
Description: A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the config_input function in af_acrossover.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://trac.ffmpeg.org/ticket/8304; https://trac.ffmpeg.org/ticket/8304
CVE: CVE-2021-32625
Published: 2021-06-02
Description: Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer, could be exploited using the STRALGO LCS command to corrupt the heap and potentially result with remote code execution. This is a result of an incomplete fix by CVE-2021-29477. The problem is fixed in version 6.2.4 and 6.0.14. An additional workaround to mitigate the problem without patching the redis-server executable is to use ACL configuration to prevent clients from using the STRALGO LCS command. On 64 bit systems which have the fixes of CVE-2021-29477 (6.2.3 or 6.0.13), it is sufficient to make sure that the proto-max-bulk-len config parameter is smaller than 2GB (default is 512MB).
CVSS Score: 7.5 (HIGH)
CWE: CWE-680, CWE-190
References: https://github.com/redis/redis/releases/tag/6.0.14; https://github.com/redis/redis/releases/tag/6.2.4; https://github.com/redis/redis/security/advisories/GHSA-46cp-x4x9-6pfq
CVE: CVE-2020-4495
Published: 2021-06-02
Description: IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted request to the REST API, an attacker could exploit this vulnerability to bypass access restrictions, and execute arbitrary actions with administrative privileges. IBM X-Force ID: 182114.
CVSS Score: 8.8 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/182114; https://www.ibm.com/support/pages/node/6457739; https://exchange.xforce.ibmcloud.com/vulnerabilities/182114
CVE: CVE-2020-4732
Published: 2021-06-02
Description: IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions. IBM X-Force ID: 188126.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/188126; https://www.ibm.com/support/pages/node/6457739; https://exchange.xforce.ibmcloud.com/vulnerabilities/188126
CVE: CVE-2020-4977
Published: 2021-06-02
Description: IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192470.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/192470; https://www.ibm.com/support/pages/node/6457739; https://exchange.xforce.ibmcloud.com/vulnerabilities/192470
CVE: CVE-2020-5030
Published: 2021-06-02
Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 193737.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/193737; https://www.ibm.com/support/pages/node/6457739; https://exchange.xforce.ibmcloud.com/vulnerabilities/193737
CVE: CVE-2021-20338
Published: 2021-06-02
Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194449.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/194449; https://www.ibm.com/support/pages/node/6457739; https://exchange.xforce.ibmcloud.com/vulnerabilities/194449
CVE: CVE-2021-20343
Published: 2021-06-02
Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194593.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/194593; https://www.ibm.com/support/pages/node/6457739; https://exchange.xforce.ibmcloud.com/vulnerabilities/194593
CVE: CVE-2021-20345
Published: 2021-06-02
Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194594.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/194594; https://www.ibm.com/support/pages/node/6457739; https://exchange.xforce.ibmcloud.com/vulnerabilities/194594
CVE: CVE-2021-20346
Published: 2021-06-02
Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194595.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/194595; https://www.ibm.com/support/pages/node/6457739; https://exchange.xforce.ibmcloud.com/vulnerabilities/194595
CVE: CVE-2021-20347
Published: 2021-06-02
Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194596.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/194596; https://www.ibm.com/support/pages/node/6457739; https://exchange.xforce.ibmcloud.com/vulnerabilities/194596
CVE: CVE-2021-20348
Published: 2021-06-02
Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 194597.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/194597; https://www.ibm.com/support/pages/node/6457739; https://exchange.xforce.ibmcloud.com/vulnerabilities/194597
CVE: CVE-2021-20371
Published: 2021-06-02
Description: IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 195516.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/195516; https://www.ibm.com/support/pages/node/6457739; https://exchange.xforce.ibmcloud.com/vulnerabilities/195516
CVE: CVE-2021-29668
Published: 2021-06-02
Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199406.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199406; https://www.ibm.com/support/pages/node/6457739; https://exchange.xforce.ibmcloud.com/vulnerabilities/199406
CVE: CVE-2021-29670
Published: 2021-06-02
Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199408.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199408; https://www.ibm.com/support/pages/node/6457739; https://exchange.xforce.ibmcloud.com/vulnerabilities/199408
CVE: CVE-2020-35441
Published: 2021-06-02
Description: FDCMS (aka Fangfa Content Management System) 4.0 contains a front-end SQL injection via Admin/Lib/Action/FloginAction.class.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.ttk7.cn/post-141.html; http://www.ttk7.cn/post-141.html
CVE: CVE-2020-35442
Published: 2021-06-02
Description: FDCMS (also known as Fangfa Content Management System) 4.0 allows remote attackers to get a webshell in the background via Front/lib/Action/FindexAction.class.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.ttk7.cn/post-142.html; http://www.ttk7.cn/post-142.html
CVE: CVE-2021-28806
Published: 2021-06-03
Description: A DOM-based XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.3.1652 Build 20210428. QNAP Systems Inc. QuTS hero versions prior to h4.5.2.1638 Build 20210414. QNAP Systems Inc. QuTScloud versions prior to c4.5.5.1656 Build 20210503. This issue does not affect: QNAP Systems Inc. QTS 4.3.6; 4.3.3.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-79
References: https://www.qnap.com/zh-tw/security-advisory/qsa-21-22; https://www.qnap.com/zh-tw/security-advisory/qsa-21-22
CVE: CVE-2021-28807
Published: 2021-06-03
Description: A post-authentication reflected XSS vulnerability has been reported to affect QNAP NAS running Q’center. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already fixed this vulnerability in the following versions of Q’center: QTS 4.5.3: Q’center v1.12.1012 and later QTS 4.3.6: Q’center v1.10.1004 and later QTS 4.3.3: Q’center v1.10.1004 and later QuTS hero h4.5.2: Q’center v1.12.1012 and later QuTScloud c4.5.4: Q’center v1.12.1012 and later
CVSS Score: 7.7 (HIGH)
CWE: CWE-79
References: https://www.qnap.com/zh-tw/security-advisory/qsa-21-20; https://www.shielder.it/advisories/qnap-qcenter-post-auth-remote-code-execution-via-qpkg/; https://www.shielder.it/advisories/qnap-qcenter-virtual-stored-xss/