deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-37053
Published: 2021-12-08
Description: There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2021/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2021/10/
CVE: CVE-2021-37054
Published: 2021-12-08
Description: There is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://consumer.huawei.com/en/support/bulletin/2021/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2021/9/
CVE: CVE-2021-37069
Published: 2021-12-08
Description: There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.
CVSS Score: 7.4 (HIGH)
CWE: CWE-362
References: https://consumer.huawei.com/en/support/bulletin/2021/11/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2021/11/
CVE: CVE-2021-37074
Published: 2021-12-08
Description: There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privilege escalation.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://consumer.huawei.com/en/support/bulletin/2021/11/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2021/11/
CVE: CVE-2021-37075
Published: 2021-12-08
Description: There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2021/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2021/10/
CVE: CVE-2021-37092
Published: 2021-12-08
Description: There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-459
References: https://consumer.huawei.com/en/support/bulletin/2021/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2021/10/
CVE: CVE-2021-37093
Published: 2021-12-08
Description: There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers steal short messages.
CVSS Score: 5.3 (MEDIUM)
References: https://consumer.huawei.com/en/support/bulletin/2021/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2021/10/
CVE: CVE-2021-37097
Published: 2021-12-08
Description: There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system restart.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://consumer.huawei.com/en/support/bulletin/2021/10/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2021/10/
CVE: CVE-2021-40860
Published: 2021-12-08
Description: A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) before 9.0.013.11 allows an attacker to execute arbitrary SQL queries via the ql_expression parameter, with which all data in the database can be extracted and OS command execution is possible depending on the permissions and/or database engine.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://docs.genesys.com/Documentation/IWD; https://www.offensity.com/en/blog/authenticated-sql-injection-in-the-genesys-iwd-manager-cve-2021-40860-and-cve-2021-40861/; https://docs.genesys.com/Documentation/IWD
CVE: CVE-2021-40861
Published: 2021-12-08
Description: A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) 9.0.017.07 allows an attacker to execute arbitrary SQL queries via the value attribute, with which all data in the database can be extracted and OS command execution is possible depending on the permissions and/or database engine.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://docs.genesys.com/Documentation/IWD; https://www.offensity.com/en/blog/authenticated-sql-injection-in-the-genesys-iwd-manager-cve-2021-40860-and-cve-2021-40861/; https://docs.genesys.com/Documentation/IWD
CVE: CVE-2021-42835
Published: 2021-12-08
Description: An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. An attacker (with a foothold in a endpoint via a low-privileged user account) can access the exposed RPC service of the update service component. This RPC functionality allows the attacker to interact with the RPC functionality and execute code from a path of his choice (local, or remote via SMB) because of a TOCTOU race condition. This code execution is in the context of the Plex update service (which runs as SYSTEM).
CVSS Score: 7.0 (HIGH)
CWE: CWE-367
References: https://bugsec.com/experts_teams/; https://forums.plex.tv/t/security-regarding-cve-2021-42835/761510; https://ir-on.io/2021/12/02/local-privilege-plexcalation/
CVE: CVE-2021-41450
Published: 2021-12-08
Description: An HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: http://ax10v1.com; http://tp-link.com; https://www.tp-link.com/us/support/download/archer-ax10/v1/#Firmware
CVE: CVE-2021-42110
Published: 2021-12-08
Description: An issue was discovered in Allegro Windows (formerly Popsy Windows) before 3.3.4156.1. A standard user can escalate privileges to SYSTEM if the FTP module is installed, because of DLL hijacking.
CVSS Score: 7.1 (HIGH)
References: http://www.popsy.com/Documents/Setups/Setup.Allegro.3.3.4154.2.exe; https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-42110; https://excellium-services.com/cert-xlm-advisory/CVE-2021-42110
CVE: CVE-2021-27860
Published: 2021-12-08
Description: A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The FatPipe advisory identifier for this vulnerability is FPSA006.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: https://www.fatpipeinc.com/support/cve-list.php; https://www.ic3.gov/Media/News/2021/211117-2.pdf; https://www.fatpipeinc.com/support/cve-list.php
CVE: CVE-2021-36188
Published: 2021-12-08
Description: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to execute unauthorized code or commands via crafted GET parameters in requests to login and error handlers
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-21-118; https://fortiguard.com/advisory/FG-IR-21-118
CVE: CVE-2021-3815
Published: 2021-12-08
Description: utils.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/fabiocaccamo/utils.js/commit/102efafb291ce[PII_REDACTED]40d3bf8a6826890a; https://huntr.dev/bounties/20f48c63-f078-4173-bcac-a9f34885f2c0; https://github.com/fabiocaccamo/utils.js/commit/102efafb291ce[PII_REDACTED]40d3bf8a6826890a
CVE: CVE-2021-41013
Published: 2021-12-08
Description: An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Report Browse section of Log & Report may allow an unauthorized and unauthenticated user to access the Log reports via their URLs.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://fortiguard.com/advisory/FG-IR-21-138; https://fortiguard.com/advisory/FG-IR-21-138
CVE: CVE-2021-41063
Published: 2021-12-08
Description: SQL injection vulnerability was discovered in Aanderaa GeoView Webservice prior to version 2.1.3 that could allow an unauthenticated attackers to execute arbitrary commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-334-01; https://www.xylem.com; https://www.xylem.com/en-us/about-xylem/cybersecurity/advisories/
CVE: CVE-2021-41090
Published: 2021-12-08
Description: Grafana Agent is a telemetry collector for sending metrics, logs, and trace data to the opinionated Grafana observability stack. Prior to versions 0.20.1 and 0.21.2, inline secrets defined within a metrics instance config are exposed in plaintext over two endpoints: metrics instance configs defined in the base YAML file are exposed at `/-/config` and metrics instance configs defined for the scraping service are exposed at `/agent/api/v1/configs/:key`. Inline secrets will be exposed to anyone being able to reach these endpoints. If HTTPS with client authentication is not configured, these endpoints are accessible to unauthenticated users. Secrets found in these sections are used for delivering metrics to a Prometheus Remote Write system, authenticating against a system for discovering Prometheus targets, and authenticating against a system for collecting metrics. This does not apply for non-inlined secrets, such as `*_file` based secrets. This issue is patched in Grafana Agent versions 0.20.1 and 0.21.2. A few workarounds are available. Users who cannot upgrade should use non-inline secrets where possible. Users may also desire to restrict API access to Grafana Agent with some combination of restricting the network interfaces Grafana Agent listens on through `http_listen_address` in the `server` block, configuring Grafana Agent to use HTTPS with client authentication, and/or using firewall rules to restrict external access to Grafana Agent's API.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-312
References: https://github.com/grafana/agent/commit/af7fb01e31fe2d389e5f1c36b399ddc46b412b21; https://github.com/grafana/agent/pull/1152; https://github.com/grafana/agent/releases/tag/v0.20.1
CVE: CVE-2021-41021
Published: 2021-12-08
Description: A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to escalate the privileges to root via the sudo command.
CVSS Score: 7.8 (HIGH)
References: https://fortiguard.com/advisory/FG-IR-21-182; https://fortiguard.com/advisory/FG-IR-21-182
CVE: CVE-2021-41030
Published: 2021-12-08
Description: An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allow an unauthenticated attacker to impersonate an existing user by intercepting and re-using valid SAML authentication messages.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-294
References: https://fortiguard.com/advisory/FG-IR-21-192; https://fortiguard.com/advisory/FG-IR-21-192
CVE: CVE-2020-27416
Published: 2021-12-08
Description: Mahavitaran android application 7.50 and prior are affected by account takeover due to improper OTP validation, allows remote attackers to control a users account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613
References: https://cvewalkthrough.com/cve-2021-41716-mahavitaran-android-application-account-take-over-via-otp-fixation/; https://play.google.com/store/apps/details?id=com.msedcl.app&hl=en&gl=US; https://cvewalkthrough.com/cve-2021-41716-mahavitaran-android-application-account-take-over-via-otp-fixation/
CVE: CVE-2021-36173
Published: 2021-12-08
Description: A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, and 6.0.0 through 6.0.13 may allow an attacker to execute arbitrary code via specially crafted installation images.
CVSS Score: 8.0 (HIGH)
CWE: CWE-787
References: https://fortiguard.com/advisory/FG-IR-21-115; https://fortiguard.com/advisory/FG-IR-21-115
CVE: CVE-2021-36195
Published: 2021-12-08
Description: Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, and 6.1.0 through 6.1.2 may allow an authenticated attacker to execute arbitrary commands on the underlying system shell via specially crafted command arguments.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-78
References: https://fortiguard.com/advisory/FG-IR-21-157; https://fortiguard.com/advisory/FG-IR-21-157
CVE: CVE-2021-41017
Published: 2021-12-08
Description: Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow a remote authenticated attacker to execute arbitrary code or commands via specifically crafted HTTP requests.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://fortiguard.com/advisory/FG-IR-21-160; https://fortiguard.com/advisory/FG-IR-21-160
CVE: CVE-2021-41025
Published: 2021-12-08
Description: Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2.6, 6.1.0 through 6.1.2, 6.0.0 thorugh 6.0.7, including an instance of concurrent execution using shared resource with improper synchronization and one of authentication bypass by capture-replay, may allow a remote unauthenticated attacker to circumvent the authentication process and authenticate as a legitimate cluster peer.
CVSS Score: 7.3 (HIGH)
CWE: CWE-362
References: https://fortiguard.com/advisory/FG-IR-21-130; https://fortiguard.com/advisory/FG-IR-21-130
CVE: CVE-2021-43399
Published: 2021-12-08
Description: The Yubico YubiHSM YubiHSM2 library 2021.08, included in the yubihsm-shell project, does not properly validate the length of some operations including SSH signing requests, and some data operations received from a YubiHSM 2 device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://blog.inhq.net/posts/yubico-yubihsm-shell-vuln3/; https://www.yubico.com/support/security-advisories/ysa-2021-04/; https://blog.inhq.net/posts/yubico-yubihsm-shell-vuln3/
CVE: CVE-2021-43809
Published: 2021-12-08
Description: `Bundler` is a package for managing application dependencies in Ruby. In `bundler` versions before 2.2.33, when working with untrusted and apparently harmless `Gemfile`'s, it is not expected that they lead to execution of external code, unless that's explicit in the ruby code inside the `Gemfile` itself. However, if the `Gemfile` includes `gem` entries that use the `git` option with invalid, but seemingly harmless, values with a leading dash, this can be false. To handle dependencies that come from a Git repository instead of a registry, Bundler uses various commands, such as `git clone`. These commands are being constructed using user input (e.g. the repository URL). When building the commands, Bundler versions before 2.2.33 correctly avoid Command Injection vulnerabilities by passing an array of arguments instead of a command string. However, there is the possibility that a user input starts with a dash (`-`) and is therefore treated as an optional argument instead of a positional one. This can lead to Code Execution because some of the commands have options that can be leveraged to run arbitrary executables. Since this value comes from the `Gemfile` file, it can contain any character, including a leading dash.

To exploit this vulnerability, an attacker has to craft a directory containing a `Gemfile` file that declares a dependency that is located in a Git repository. This dependency has to have a Git URL in the form of `-u./payload`. This URL will be used to construct a Git clone command but will be interpreted as the upload-pack argument. Then this directory needs to be shared with the victim, who then needs to run a command that evaluates the Gemfile, such as `bundle lock`, inside.

This vulnerability can lead to Arbitrary Code Execution, which could potentially lead to the takeover of the system. However, the exploitability is very low, because it requires a lot of user interaction. Bundler 2.2.33 has patched this problem by inserting `--` as an argument before any positional arguments to those Git commands that were affected by this issue. Regardless of whether users can upgrade or not, they should review any untrustred `Gemfile`'s before running any `bundler` commands that may read them, since they can contain arbitrary ruby code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-88, CWE-88
References: https://github.com/rubygems/rubygems/commit/0fad1ccfe9dd7a3c5b82c1496df3c2b4842870d3; https://github.com/rubygems/rubygems/commit/a4f2f8ac17e6ce81c689527a8b6f14381060d95f; https://github.com/rubygems/rubygems/pull/5142
CVE: CVE-2021-43978
Published: 2021-12-08
Description: Allegro WIndows 3.3.4152.0, embeds software administrator database credentials into its binary files, which allows users to access and modify data using the same credentials.
CVSS Score: 7.1 (HIGH)
CWE: CWE-522
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-43978; https://excellium-services.com/cert-xlm-advisory/CVE-2021-43978; https://www.allegro.be/
CVE: CVE-2021-36718
Published: 2021-12-08
Description: SYNEL - eharmonynew / Synel Reports - The attacker can log in to the system with default credentials and export a report of eharmony system with sensetive data (Employee name, Employee ID number, Working hours etc') The vulnerabilety has been addressed and fixed on version 11. Default credentials , Security miscommunication , Sensetive data exposure vulnerability in Synel Reports of SYNEL eharmonynew, Synel Reports allows an attacker to log into the system with default credentials. This issue affects: SYNEL eharmonynew, Synel Reports 8.0.2 version 11 and prior versions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-287
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2021-36719
Published: 2021-12-08
Description: PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system. The attacker exploits the vulnerable nicUpload.php file to upload a malicious file,Thus taking over the server and running remote code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2021-36720
Published: 2021-12-08
Description: PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=<script>alert(1)</script> and stealing cookies .
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.gov.il/en/departments/faq/cve_advisories; https://www.gov.il/en/departments/faq/cve_advisories
CVE: CVE-2021-21950
Published: 2021-12-08
Description: An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h in function recv_server_device_response_msg_process. A specially-crafted network packet can lead to code execution.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-119, CWE-1284
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1378; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1378
CVE: CVE-2021-21951
Published: 2021-12-08
Description: An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h in function read_udp_push_config_file. A specially-crafted network packet can lead to code execution.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-119, CWE-1284
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1378; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1378
CVE: CVE-2021-21957
Published: 2021-12-08
Description: A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A specially-crafted command injection can lead to elevated capabilities. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276
References: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1384; https://talosintelligence.com/vulnerability_reports/TALOS-2021-1384
CVE: CVE-2021-23859
Published: 2021-12-08
Description: An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS with VRM installation this crash also opens the possibility to send further unauthenticated commands to the service. On some products the interface is only local accessible lowering the CVSS base score. For a list of modified CVSS scores, please see the official Bosch Advisory Appendix chapter Modified CVSS Scores for CVE-2021-23859
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-703, CWE-755
References: https://psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html; https://psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html
CVE: CVE-2021-23860
Published: 2021-12-08
Description: An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. To exploit this vulnerability an attack must be able to modify the HTTP header that is sent. This issue also affects installations of the DIVAR IP and BVMS with VRM installed.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html; https://psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html
CVE: CVE-2021-23861
Published: 2021-12-08
Description: By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software. This issue also affects installations of the DIVAR IP and BVMS with VRM installed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-489
References: https://psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html; https://psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html
CVE: CVE-2021-23862
Published: 2021-12-08
Description: A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder (VJD-7513 and VJD-8000).
CVSS Score: 7.2 (HIGH)
CWE: CWE-20, CWE-78
References: https://psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html; https://psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html
CVE: CVE-2021-37941
Published: 2021-12-08
Description: A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with the APM Java agent. Using this vector, a malicious or compromised user account could use the agent to run commands at a higher level of permissions than they possess. This vulnerability affects users that have set up the agent via the attacher cli 3, the attach API 2, as well as users that have enabled the profiling_inferred_spans_enabled option
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://discuss.elastic.co/t/apm-java-agent-security-update/289627; https://discuss.elastic.co/t/apm-java-agent-security-update/289627
CVE: CVE-2021-38503
Published: 2021-12-08
Description: The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the top-level frame. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-863
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1729517; https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html