deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-10627
Published: 2021-12-01
Description: Insulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wireless RF communication protocol does not properly implement authentication or authorization. An attacker with access to one of the affected insulin pump models may be able to modify and/or intercept data. This vulnerability could also allow attackers to change pump settings and control insulin delivery.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://us-cert.cisa.gov/ics/advisories/icsma-20-079-01; https://www.myomnipod.com/security-bulletins; https://us-cert.cisa.gov/ics/advisories/icsma-20-079-01
CVE: CVE-2021-20609
Published: 2021-12-01
Description: Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V(G), MELSEC Q Series Q24/26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172/173DCPU-S1, MELSEC Q Series Q172/173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://jvn.jp/vu/JVNVU94434051/index.html; https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-019_en.pdf
CVE: CVE-2021-20610
Published: 2021-12-01
Description: Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V(G), MELSEC Q Series Q24/26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172/173DCPU-S1, MELSEC Q Series Q172/173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.
CVSS Score: 7.5 (HIGH)
CWE: CWE-130
References: https://jvn.jp/vu/JVNVU94434051/index.html; https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-019_en.pdf
CVE: CVE-2021-20611
Published: 2021-12-01
Description: Improper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R Series R08/16/32/120SFCPU, MELSEC iQ-R Series R08/16/32/120PCPU, MELSEC iQ-R Series R08/16/32/120PSFCPU, MELSEC iQ-R Series R16/32/64MTCPU, MELSEC iQ-R Series R12CCPU-V, MELSEC Q Series Q03UDECPU, MELSEC Q Series Q04/06/10/13/20/26/50/100UDEHCPU, MELSEC Q Series Q03/04/06/13/26UDVCPU, MELSEC Q Series Q04/06/13/26UDPVCPU, MELSEC Q Series Q12DCCPU-V, MELSEC Q Series Q24DHCCPU-V(G), MELSEC Q Series Q24/26DHCCPU-LS, MELSEC Q Series MR-MQ100, MELSEC Q Series Q172/173DCPU-S1, MELSEC Q Series Q172/173DSCPU, MELSEC Q Series Q170MCPU, MELSEC Q Series Q170MSCPU(-S1), MELSEC L Series L02/06/26CPU(-P), MELSEC L Series L26CPU-(P)BT and MELIPC Series MI5122-VW allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by sending specially crafted packets. System reset is required for recovery.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://jvn.jp/vu/JVNVU94434051/index.html; https://us-cert.cisa.gov/ics/advisories/icsa-21-334-02; https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-019_en.pdf
CVE: CVE-2021-26334
Published: 2021-12-01
Description: The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-284
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1016; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1016
CVE: CVE-2021-43685
Published: 2021-12-01
Description: libretime hv3.0.0-alpha.10 is affected by a path manipulation vulnerability in /blob/master/legacy/application/modules/rest/controllers/ShowImageController.php through the rename function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-610
References: https://github.com/LibreTime/libretime/issues/1437; https://github.com/LibreTime/libretime/issues/1437
CVE: CVE-2021-43687
Published: 2021-12-01
Description: chamilo-lms v1.11.14 is affected by a Cross Site Scripting (XSS) vulnerability in /plugin/jcapture/applet.php if an attacker passes a message hex2bin in the cookie.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://chamilo-lms.com; https://github.com/chamilo/chamilo-lms/blob/v1.11.14/plugin/jcapture/applet.php; https://github.com/chamilo/chamilo-lms/tree/v1.11.14
CVE: CVE-2021-44480
Published: 2021-12-01
Description: Wokka Lokka Q50 devices through 2021-11-30 allow remote attackers (who know the SIM phone number and password) to listen to a device's surroundings via a callback in an SMS command, as demonstrated by the 123456 and 523681 default passwords.
CVSS Score: 8.1 (HIGH)
CWE: CWE-319, CWE-1188
References: https://news.drweb.com/show/?i=14350; https://news.drweb.com/show/?i=14350
CVE: CVE-2021-20400
Published: 2021-12-01
Description: IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196074.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196074; https://www.ibm.com/support/pages/node/6520488; https://exchange.xforce.ibmcloud.com/vulnerabilities/196074
CVE: CVE-2021-29779
Published: 2021-12-01
Description: IBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due to the server performing key exchange without entity authentication on inter-host communications using man in the middle techniques. IBM X-Force ID: 203033.
CVSS Score: 5.9 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/203033; https://www.ibm.com/support/pages/node/6520484; https://exchange.xforce.ibmcloud.com/vulnerabilities/203033
CVE: CVE-2021-29849
Published: 2021-12-01
Description: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205281.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/205281; https://www.ibm.com/support/pages/node/6520476; https://exchange.xforce.ibmcloud.com/vulnerabilities/205281
CVE: CVE-2021-29863
Published: 2021-12-01
Description: IBM QRadar SIEM 7.3 and 7.4 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. This vulnerability is due to an incomplete fix for CVE-2020-4786. IBM X-Force ID: 206087.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/206087; https://www.ibm.com/support/pages/node/6520490; https://exchange.xforce.ibmcloud.com/vulnerabilities/206087
CVE: CVE-2021-42776
Published: 2021-12-01
Description: CloverDX Server before 5.11.2 and and 5.12.x before 5.12.1 allows XXE during configuration import.
CVSS Score: 7.7 (HIGH)
CWE: CWE-611
References: https://support.cloverdx.com/releases/; https://support1.cloverdx.com/hc/en-us/articles/[PII_REDACTED]010; https://support.cloverdx.com/releases/
CVE: CVE-2021-38575
Published: 2021-12-01
Description: NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.
CVSS Score: 8.1 (HIGH)
CWE: CWE-124, CWE-119
References: https://bugzilla.tianocore.org/show_bug.cgi?id=3356; https://www.insyde.com/security-pledge/SA-2023025; https://bugzilla.tianocore.org/show_bug.cgi?id=3356
CVE: CVE-2021-43451
Published: 2021-12-01
Description: SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/PHPGURUKUL/ANUJ%20KUMAR/Employee-Record-Management-System-SQL-Injection; https://www.exploit-db.com/exploits/50467; https://www.nu11secur1ty.com/2021/12/cve-2021-43451.html
CVE: CVE-2021-41039
Published: 2021-12-01
Description: In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1050
References: https://bugs.eclipse.org/bugs/show_bug.cgi?id=575314; https://www.debian.org/security/2023/dsa-5511; https://bugs.eclipse.org/bugs/show_bug.cgi?id=575314
CVE: CVE-2021-43137
Published: 2021-12-01
Description: Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chaining to this both vulnerabilities leads to account takeover.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-352
References: https://www.exploit-db.com/exploits/50461; https://www.exploit-db.com/exploits/50461
CVE: CVE-2021-43792
Published: 2021-12-01
Description: Discourse is an open source discussion platform. In affected versions a vulnerability affects users of tag groups who use the "Tags are visible only to the following groups" feature. A tag group may only allow a certain group (e.g. staff) to view certain tags. Users who were tracking or watching the tags via /preferences/tags, then have their staff status revoked will still see notifications related to the tag, but will not see the tag on each topic. This issue has been patched in stable version 2.7.11. Users are advised to upgrade as soon as possible.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/discourse/discourse/commit/cdaf7f4bb3ec268238e4c29a14bb73fad56574b4; https://github.com/discourse/discourse/security/advisories/GHSA-pq2x-vq37-8522; https://meta.discourse.org/t/non-forum-staff-getting-notifications-for-staff-only-tags/184895
CVE: CVE-2021-43793
Published: 2021-12-01
Description: Discourse is an open source discussion platform. In affected versions a vulnerability in the Polls feature allowed users to vote multiple times in a single-option poll. The problem is patched in the latest tests-passed, beta and stable versions of Discourse
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-269
References: https://github.com/discourse/discourse/commit/0c6b9df77bac9c6f7c7e2eadf6fe100064afdeab; https://github.com/discourse/discourse/commit/1d0faedfbc3a8b77b971dc70d25e30791dbb6e0b; https://github.com/discourse/discourse/security/advisories/GHSA-jq7h-44vc-h6qx
CVE: CVE-2021-43794
Published: 2021-12-01
Description: Discourse is an open source discussion platform. In affected versions an attacker can poison the cache for anonymous (i.e. not logged in) users, such that the users are shown a JSON blob instead of the HTML page. This can lead to a partial denial-of-service. This issue is patched in the latest stable, beta and tests-passed versions of Discourse.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-610
References: https://github.com/discourse/discourse/commit/2da0001965c6d8632d723c46ea5df9f22a1a23f1; https://github.com/discourse/discourse/security/advisories/GHSA-249g-pc77-65hp; https://github.com/discourse/discourse/commit/2da0001965c6d8632d723c46ea5df9f22a1a23f1
CVE: CVE-2021-33265
Published: 2021-12-01
Description: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_80046eb4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln05; https://www.dlink.com/en/security-bulletin/; https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln05
CVE: CVE-2021-33266
Published: 2021-12-01
Description: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_8004776c in /formVirtualApp. This vulnerability is triggered via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln04; https://www.dlink.com/en/security-bulletin/; https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln04
CVE: CVE-2021-33267
Published: 2021-12-01
Description: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_80034d60 in /formStaticDHCP. This vulnerability is triggered via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln02; https://www.dlink.com/en/security-bulletin/; https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln02
CVE: CVE-2021-33268
Published: 2021-12-01
Description: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function sub_8003183C in /fromLogin. This vulnerability is triggered via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln03; https://www.dlink.com/en/security-bulletin/; https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln03
CVE: CVE-2021-33269
Published: 2021-12-01
Description: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_8004776c in /formVirtualServ. This vulnerability is triggered via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln01; https://www.dlink.com/en/security-bulletin/; https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln01
CVE: CVE-2021-33270
Published: 2021-12-01
Description: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_800462c4 in /formAdvFirewall. This vulnerability is triggered via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln06; https://www.dlink.com/en/security-bulletin/; https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln06
CVE: CVE-2021-33271
Published: 2021-12-01
Description: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function sub_80046EB4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln11; https://www.dlink.com/en/security-bulletin/; https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln11
CVE: CVE-2021-33274
Published: 2021-12-01
Description: D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN_80040af8 in /formWlanSetup. This vulnerability is triggered via a crafted POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln07; https://www.dlink.com/en/security-bulletin/; https://github.com/Lnkvct/IoT-poc/tree/master/D-Link-DIR809/vuln07
CVE: CVE-2020-35012
Published: 2021-12-01
Description: The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape a parameter before using it in a SQL statement, leading to an SQL Injection
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2336019/events-manager; https://wpscan.com/vulnerability/323140b1-66c4-4e7d-85a4-1c922e40866f; https://plugins.trac.wordpress.org/changeset/2336019/events-manager
CVE: CVE-2020-35037
Published: 2021-12-01
Description: The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape some search parameter before outputing them in pages, which could lead to Cross-Site Scripting issues
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2336019/events-manager; https://wpscan.com/vulnerability/937b9bdb-7e8e-4ea8-82ec-aa5f6bd70619; https://plugins.trac.wordpress.org/changeset/2336019/events-manager
CVE: CVE-2021-42711
Published: 2021-12-01
Description: Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with SYSTEM privileges when an unprivileged user performs a repair operation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0010/MNDT-2021-0010.md; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0010/MNDT-2021-0010.md
CVE: CVE-2021-43791
Published: 2021-12-02
Description: Zulip is an open source group chat application that combines real-time chat with threaded conversations. In affected versions expiration dates on the confirmation objects associated with email invitations were not enforced properly in the new account registration flow. A confirmation link takes a user to the check_prereg_key_and_redirect endpoint, before getting redirected to POST to /accounts/register/. The problem was that validation was happening in the check_prereg_key_and_redirect part and not in /accounts/register/ - meaning that one could submit an expired confirmation key and be able to register. The issue is fixed in Zulip 4.8. There are no known workarounds and users are advised to upgrade as soon as possible.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-613
References: https://github.com/zulip/zulip/commit/a014ef75a3a0ed7f24ebb157632ba58751e732c6; https://github.com/zulip/zulip/security/advisories/GHSA-wj76-pcqr-mf9f; https://github.com/zulip/zulip/commit/a014ef75a3a0ed7f24ebb157632ba58751e732c6
CVE: CVE-2021-44227
Published: 2021-12-02
Description: In GNU Mailman before 2.1.38, a list member or moderator can get a CSRF token and craft an admin request (using that token) to set a new admin password or make other changes.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://bugs.launchpad.net/mailman/+bug/1952384; https://lists.debian.org/debian-lts-announce/2022/06/msg00011.html; https://bugs.launchpad.net/mailman/+bug/1952384
CVE: CVE-2020-27414
Published: 2021-12-02
Description: Mahavitaran android application 7.50 and prior transmit sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header, MITM or browser history.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: https://cvewalkthrough.com/cve-2020-27414-mahavitaran-android-application-insecure-communication-of-sensitive-dat/; https://cvewalkthrough.com/cve-2020-27414-mahavitaran-android-application-insecure-communication-of-sensitive-dat/
CVE: CVE-2021-26777
Published: 2021-12-02
Description: Buffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC smart metering concentrator Firwmare version CIR_CDC_v1.2.17, allows attackers to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/Ell0/plc_concentrator_vulns/; https://github.com/Ell0/plc_concentrator_vulns/
CVE: CVE-2021-43681
Published: 2021-12-02
Description: SakuraPanel v1.0.1.1 is affected by a Cross Site Scripting (XSS) vulnerability in /master/core/PostHandler.php. The exit function will terminate the script and print the message $data['proxy_name'].
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/ZeroDream-CN/SakuraPanel/issues/23; https://github.com/ZeroDream-CN/SakuraPanel/issues/23
CVE: CVE-2021-43683
Published: 2021-12-02
Description: pictshare v1.5 is affected by a Cross Site Scripting (XSS) vulnerability in api/info.php. The exit function will terminate the script and print the message which has $_REQUEST['hash'].
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/HaschekSolutions/pictshare/issues/133; https://github.com/HaschekSolutions/pictshare/issues/133
CVE: CVE-2021-43686
Published: 2021-12-02
Description: nZEDb v0.4.20 is affected by a Cross Site Scripting (XSS) vulnerability in www/pages/api.php. The exit function will terminate the script and print the message which has the input $_GET['t'].
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/nZEDb/nZEDb/issues/2659; https://github.com/nZEDb/nZEDb/issues/2659
CVE: CVE-2021-43682
Published: 2021-12-02
Description: thinkphp-bjyblog (last update Jun 4 2021) is affected by a Cross Site Scripting (XSS) vulnerability in AdminBaseController.class.php. The exit function terminates the script and prints a message to the user that contains $_SERVER['HTTP_HOST'].
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/baijunyao/thinkphp-bjyblog/issues/6; https://github.com/baijunyao/thinkphp-bjyblog/issues/6
CVE: CVE-2021-43679
Published: 2021-12-02
Description: ecshop v2.7.3 is affected by a SQL injection vulnerability in shopex\ecshop\upload\api\client\api.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/shopex/ecshop/issues/4; https://github.com/shopex/ecshop/issues/4
CVE: CVE-2021-23258
Published: 2021-12-02
Description: Authenticated users with Administrator or Developer roles may execute OS commands by SPEL Expression in Spring beans. SPEL Expression does not have security restrictions, which will cause attackers to execute arbitrary commands remotely (RCE).
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-913, CWE-913
References: https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]; https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]
CVE: CVE-2021-23259
Published: 2021-12-02
Description: Authenticated users with Administrator or Developer roles may execute OS commands by Groovy Script which uses Groovy lib to render a webpage. The groovy script does not have security restrictions, which will cause attackers to execute arbitrary commands remotely(RCE).
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-913, CWE-913
References: https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]; https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]
CVE: CVE-2021-23260
Published: 2021-12-02
Description: Authenticated users with Site roles may inject XSS scripts via file names that will execute in the browser for this and other users of the same site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]; https://docs.craftercms.org/en/3.1/security/advisory.html#cv[PII_REDACTED]