deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-35413
Published: 2021-12-03
Description: A remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x allows authenticated attackers to execute arbitrary code via a crafted .htaccess file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#authenticated-remote-code-execution-in-import-file; https://github.com/chamilo/chamilo-lms/commit/2e5c004b57d551678a1815500ef91524ba7bb757; https://github.com/chamilo/chamilo-lms/commit/905a21037ebc9bc5369f0fb380177cb56f496f5c
CVE: CVE-2021-35414
Published: 2021-12-03
Description: Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#unauthenticated-sql-injection-2-in-plugin; https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#unauthenticated-sql-injection-in-compilatio-module; https://github.com/chamilo/chamilo-lms/commit/36149c1ff99973840a809bb865f23e1b23d6df00
CVE: CVE-2021-35415
Published: 2021-12-03
Description: A stored cross-site scripting (XSS) vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the course "Title" and "Content" fields.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/andrejspuler/writeups/tree/main/chamilo-lms#multiple-stored-cross-site-scripting-vulnerabilities; https://github.com/chamilo/chamilo-lms/commit/19189a91d1eac9aa204b9439b82e3e73c8ac2e03; https://github.com/chamilo/chamilo-lms/commit/cf84be1ca1d9a08ad1341dfbf8df475b13a89072
CVE: CVE-2021-43415
Published: 2021-12-03
Description: HashiCorp Nomad and Nomad Enterprise up to 1.0.13, 1.1.7, and 1.2.0, with the QEMU task driver enabled, allowed authenticated users with job submission capabilities to bypass the configured allowed image paths. Fixed in 1.0.14, 1.1.8, and 1.2.1.
CVSS Score: 8.8 (HIGH)
References: https://discuss.hashicorp.com/t/hcsec-2021-31-nomad-qemu-task-driver-allowed-paths-bypass-with-job-args/32288; https://www.hashicorp.com/blog/category/nomad; https://discuss.hashicorp.com/t/hcsec-2021-31-nomad-qemu-task-driver-allowed-paths-bypass-with-job-args/32288
CVE: CVE-2021-4005
Published: 2021-12-04
Description: firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/firefly-iii/firefly-iii/commit/03a1601bf343181df9f405dd2109aec483cb7053; https://huntr.dev/bounties/bf4ef581-325a-492d-a710-14fcb53f00ff; https://github.com/firefly-iii/firefly-iii/commit/03a1601bf343181df9f405dd2109aec483cb7053
CVE: CVE-2021-37253
Published: 2021-12-05
Description: M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests with crafted Range or Request-Range headers). NOTE: this is disputed because the range behavior is the responsibility of the web server, not the responsibility of the individual web application
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: http://packetstormsecurity.com/files/165139/M-Files-Web-Denial-Of-Service.html; http://seclists.org/fulldisclosure/2021/Dec/1; https://vulmon.com/vulnerabilitydetails?qid=CVE-2021-37253
CVE: CVE-2021-44044
Published: 2021-12-05
Description: An out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing JPG files. Crafted data in a JPG (4 extraneous bytes before the marker 0xca) can trigger a write operation past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.opendesign.com/security-advisories; https://www.opendesign.com/security-advisories
CVE: CVE-2021-44045
Published: 2021-12-05
Description: An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation for the XFAT sectors count can trigger a write operation past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.opendesign.com/security-advisories; https://www.opendesign.com/security-advisories
CVE: CVE-2021-44046
Published: 2021-12-05
Description: An out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC SDK before 2022.11. An unchecked return value of a function (verifying input data from a U3D file) leads to an out-of-bounds write. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.opendesign.com/security-advisories; https://www.opendesign.com/security-advisories
CVE: CVE-2021-44047
Published: 2021-12-05
Description: A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Crafted data in a DWF/DWFX file and lack of proper validation of input data can trigger a write operation past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.opendesign.com/security-advisories; https://www.opendesign.com/security-advisories
CVE: CVE-2021-44048
Published: 2021-12-05
Description: An out-of-bounds write vulnerability exists when reading a TIF file using Open Design Alliance (ODA) Drawings Explorer before 2022.11. The specific issue exists after loading TIF files. Crafted data in a TIF file can trigger a write operation past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.opendesign.com/security-advisories; https://www.opendesign.com/security-advisories
CVE: CVE-2021-43033
Published: 2021-12-06
Description: An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. Multiple functions in the bpserverd daemon were vulnerable to arbitrary remote code execution as root. The vulnerability was caused by untrusted input (received by the server) being passed to system calls.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://helpdesk.kaseya.com/hc/en-gb/articles/[PII_REDACTED]961; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2
CVE: CVE-2021-43034
Published: 2021-12-06
Description: An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A world writable file allowed local users to execute arbitrary code as the user apache, leading to privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://helpdesk.kaseya.com/hc/en-gb/articles/[PII_REDACTED]961; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2
CVE: CVE-2021-43035
Published: 2021-12-06
Description: An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. Two unauthenticated SQL injection vulnerabilities were discovered, allowing arbitrary SQL queries to be injected and executed under the postgres superuser account. Remote code execution was possible, leading to full access to the postgres user account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://helpdesk.kaseya.com/hc/en-gb/articles/[PII_REDACTED]961; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2
CVE: CVE-2021-43036
Published: 2021-12-06
Description: An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The password for the PostgreSQL wguest account is weak.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-521
References: https://helpdesk.kaseya.com/hc/en-gb/articles/[PII_REDACTED]961; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2
CVE: CVE-2021-43037
Published: 2021-12-06
Description: An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Unitrends Windows agent was vulnerable to DLL injection and binary planting due to insecure default permissions. This allowed privilege escalation from an unprivileged user to SYSTEM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://helpdesk.kaseya.com/hc/en-gb/articles/[PII_REDACTED]961; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2
CVE: CVE-2021-43038
Published: 2021-12-06
Description: An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The wguest account could execute commands by injecting into PostgreSQL trigger functions. This allowed privilege escalation from the wguest user to the postgres user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://helpdesk.kaseya.com/hc/en-gb/articles/[PII_REDACTED]961; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2
CVE: CVE-2021-43039
Published: 2021-12-06
Description: An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anonymous read/write access.
CVSS Score: 6.5 (MEDIUM)
References: https://helpdesk.kaseya.com/hc/en-gb/articles/[PII_REDACTED]961; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2
CVE: CVE-2021-43040
Published: 2021-12-06
Description: An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The privileged vaultServer could be leveraged to create arbitrary writable files, leading to privilege escalation.
CVSS Score: 8.8 (HIGH)
References: https://helpdesk.kaseya.com/hc/en-gb/articles/[PII_REDACTED]961; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2
CVE: CVE-2021-43041
Published: 2021-12-06
Description: An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A crafted HTTP request could induce a format string vulnerability in the privileged vaultServer application.
CVSS Score: 8.8 (HIGH)
CWE: CWE-134
References: https://helpdesk.kaseya.com/hc/en-gb/articles/[PII_REDACTED]961; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2
CVE: CVE-2021-43042
Published: 2021-12-06
Description: An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A buffer overflow existed in the vaultServer component. This was exploitable by a remote unauthenticated attacker.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://helpdesk.kaseya.com/hc/en-gb/articles/[PII_REDACTED]961; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2
CVE: CVE-2021-43043
Published: 2021-12-06
Description: An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The apache user could read arbitrary files such as /etc/shadow by abusing an insecure Sudo rule.
CVSS Score: 6.5 (MEDIUM)
References: https://helpdesk.kaseya.com/hc/en-gb/articles/[PII_REDACTED]961; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2
CVE: CVE-2021-43044
Published: 2021-12-06
Description: An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The SNMP daemon was configured with a weak default community.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://helpdesk.kaseya.com/hc/en-gb/articles/[PII_REDACTED]961; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1; https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2
CVE: CVE-2021-43469
Published: 2021-12-06
Description: VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://github.com/badboycxcc/CVE; https://github.com/badboycxcc/CVE
CVE: CVE-2021-4069
Published: 2021-12-06
Description: vim is vulnerable to Use After Free
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://www.openwall.com/lists/oss-security/2022/01/15/1; https://github.com/vim/vim/commit/e031fe90cf2e375ce861ff5e5e281e4ad229ebb9; https://huntr.dev/bounties/0efd6d23-2259-4081-9ff1-3ade26907d74
CVE: CVE-2021-43471
Published: 2021-12-06
Description: In Canon LBP223 printers, the System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the device after entering the background, creating a denial of service vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-521
References: https://github.com/cxaqhq/cve-1; https://github.com/cxaqhq/cve-1
CVE: CVE-2021-24714
Published: 2021-12-06
Description: The Import any XML or CSV File to WordPress plugin before 3.6.3 does not escape the Import's Title and Unique Identifier fields before outputting them in admin pages, which could allow high privilege users to perform Cross-Site attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/a8d314b9-26ac-4b56-a85c-a2528e55e73a; https://wpscan.com/vulnerability/a8d314b9-26ac-4b56-a85c-a2528e55e73a
CVE: CVE-2021-24718
Published: 2021-12-06
Description: The Contact Form, Survey & Popup Form Plugin for WordPress plugin before 1.5 does not properly sanitize some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/60c9d78f-ae2c-49e0-aca3-6dce1bd8f697; https://wpscan.com/vulnerability/60c9d78f-ae2c-49e0-aca3-6dce1bd8f697
CVE: CVE-2021-24759
Published: 2021-12-06
Description: The PDF.js Viewer WordPress plugin before 2.0.2 does not escape some of its shortcode and Gutenberg Block attributes, which could allow users with a role as low as Contributor to to perform Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/38274ef2-5100-4669-9544-a42346b6727d; https://wpscan.com/vulnerability/38274ef2-5100-4669-9544-a42346b6727d
CVE: CVE-2021-24866
Published: 2021-12-06
Description: The WP Data Access WordPress plugin before 5.0.0 does not properly sanitise and escape the backup_date parameter before using it a SQL statement, leading to a SQL injection issue and could allow arbitrary table deletion
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/a9073616-ffd6-4956-b2e7-0fb2eac6e9b5; https://wpscan.com/vulnerability/a9073616-ffd6-4956-b2e7-0fb2eac6e9b5
CVE: CVE-2021-24914
Published: 2021-12-06
Description: The Tawk.To Live Chat WordPress plugin before 0.6.0 does not have capability and CSRF checks in the tawkto_setwidget and tawkto_removewidget AJAX actions, available to any authenticated user. The first one allows low-privileged users (including simple subscribers) to change the 'tawkto-embed-widget-page-id' and 'tawkto-embed-widget-widget-id' parameters. Any authenticated user can thus link the vulnerable website to their own Tawk.to instance. Consequently, they will be able to monitor the vulnerable website and interact with its visitors (receive contact messages, answer, ...). They will also be able to display an arbitrary Knowledge Base. The second one will remove the live chat widget from pages.
CVSS Score: 8.0 (HIGH)
CWE: CWE-862, CWE-352
References: https://wpscan.com/vulnerability/39392055-8cd3-452f-8bcb-a650f5bddc2e; https://wpscan.com/vulnerability/39392055-8cd3-452f-8bcb-a650f5bddc2e
CVE: CVE-2021-24917
Published: 2021-12-06
Description: The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863, CWE-863
References: https://wordpress.org/support/topic/bypass-security-issue/; https://wpscan.com/vulnerability/15bb711a-7d70-4891-b7a2-c473e3e8b375; https://wordpress.org/support/topic/bypass-security-issue/
CVE: CVE-2021-24924
Published: 2021-12-06
Description: The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4621e86e-aba4-429c-8e08-32cf9b4c65e6; https://wpscan.com/vulnerability/4621e86e-aba4-429c-8e08-32cf9b4c65e6
CVE: CVE-2021-24930
Published: 2021-12-06
Description: The WordPress Online Booking and Scheduling Plugin WordPress plugin before 20.3.1 does not escape the Staff Full Name field before outputting it back in a page, which could lead to a Stored Cross-Site Scripting issue
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/479704d8-057b-4642-b84a-4a78567ba20b; https://wpscan.com/vulnerability/479704d8-057b-4642-b84a-4a78567ba20b
CVE: CVE-2021-24931
Published: 2021-12-06
Description: The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/165946/WordPress-Secure-Copy-Content-Protection-And-Content-Locking-2.8.1-SQL-Injection.html; https://wpscan.com/vulnerability/1cd52d61-af75-43ed-9b99-b46c471c4231; http://packetstormsecurity.com/files/165946/WordPress-Secure-Copy-Content-Protection-And-Content-Locking-2.8.1-SQL-Injection.html
CVE: CVE-2021-24935
Published: 2021-12-06
Description: The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family parameter of the googlefont_action AJAx action (available to any authenticated user) before outputing them in attributes, leading Reflected Cross-Site Scripting issues
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2623659; https://wpscan.com/vulnerability/53702281-1bd5-4828-b7a4-9f81cf0b6bb6; https://plugins.trac.wordpress.org/changeset/2623659
CVE: CVE-2021-24938
Published: 2021-12-06
Description: The WOOCS WordPress plugin before 1.3.7.1 does not sanitise and escape the key parameter of the woocs_update_profiles_data AJAX action (available to any authenticated user) before outputting it back in the response, leading to a Reflected cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/df8a6f2c-e075-45d5-9262-b4eb63c9351e; https://wpscan.com/vulnerability/df8a6f2c-e075-45d5-9262-b4eb63c9351e
CVE: CVE-2021-24939
Published: 2021-12-06
Description: The LoginWP (Formerly Peter's Login Redirect) WordPress plugin before 3.0.0.5 does not sanitise and escape the rul_login_url and rul_logout_url parameter before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting issue
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/1a46cfec-24ad-4619-8579-f09bbd8ee748; https://wpscan.com/vulnerability/1a46cfec-24ad-4619-8579-f09bbd8ee748
CVE: CVE-2021-24943
Published: 2021-12-06
Description: The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not sanitise and escape the event_id in the rtec_send_unregister_link AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an unauthenticated SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpscan.com/vulnerability/ba50c590-42ee-4523-8aa0-87ac644b77ed; https://wpscan.com/vulnerability/ba50c590-42ee-4523-8aa0-87ac644b77ed
CVE: CVE-2021-25041
Published: 2021-12-06
Description: The Photo Gallery by 10Web WordPress plugin before 1.5.68 is vulnerable to Reflected Cross-Site Scripting (XSS) issues via the bwg_album_breadcrumb_0 and shortcode_id GET parameters passed to the bwg_frontend_data AJAX action
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2467205; https://wpscan.com/vulnerability/32aee3ea-e0af-44da-a16c-102c83eaed8f; https://plugins.trac.wordpress.org/changeset/2467205
CVE: CVE-2021-35242
Published: 2021-12-06
Description: Serv-U server responds with valid CSRFToken when the request contains only Session.
CVSS Score: 8.3 (HIGH)
CWE: CWE-352, CWE-352
References: https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-5_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35242; https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-5_release_notes.htm
CVE: CVE-2021-35245
Published: 2021-12-06
Description: When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine.
CVSS Score: 8.4 (HIGH)
CWE: CWE-284
References: https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-5_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35245; https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-5_release_notes.htm
CVE: CVE-2021-36198
Published: 2021-12-06
Description: Successful exploitation of this vulnerability could allow an unauthorized user to access sensitive data.
CVSS Score: 8.3 (HIGH)
CWE: CWE-200, CWE-668
References: https://us-cert.gov/ics/advisories/ICSA-21-336-02; https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://us-cert.gov/ics/advisories/ICSA-21-336-02
CVE: CVE-2021-22170
Published: 2021-12-06
Description: Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's encrypted content
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-327
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22170.json; https://gitlab.com/gitlab-org/gitlab/-/issues/36855; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22170.json
CVE: CVE-2021-39890
Published: 2021-12-06
Description: It was possible to bypass 2FA for LDAP users and access some specific pages with Basic Authentication in GitLab 14.1.1 and above.
CVSS Score: 3.1 (LOW)
CWE: CWE-287
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39890.json; https://gitlab.com/gitlab-org/gitlab/-/issues/341522; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39890.json