deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-32030
Published: 2021-05-06
Description: The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handle_request in router/httpd/httpd.c and auth_check in web_hook.o. An attacker-supplied value of '\0' matches the device's default value of '\0' in some situations. Note: All versions of Lyra Mini and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability, Consumers can mitigate this vulnerability by disabling the remote access features from WAN.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://github.com/atredispartners/advisories/blob/master/ATREDIS-2020-0010.md; https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AC2900/HelpDesk_BIOS/; https://www.asus.com/us/supportonly/lyra%20mini/helpdesk_bios/
CVE: CVE-2021-28149
Published: 2021-05-06
Description: Hongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ (e.g., ../../etc/passwd) This can be carried out with a web browser by changing the file name accordingly. Upon visiting log_download.cgi?type=../../etc/passwd and logging in, the web server will allow a download of the contents of the /etc/passwd file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://en.hongdian.com/Products/Details/H8922; https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/; http://en.hongdian.com/Products/Details/H8922
CVE: CVE-2021-28150
Published: 2021-05-06
Description: Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-425
References: http://en.hongdian.com/Products/Details/H8922; https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/; http://en.hongdian.com/Products/Details/H8922
CVE: CVE-2021-28151
Published: 2021-05-06
Description: Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, which is accessible with the username guest and password guest.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://en.hongdian.com/Products/Details/H8922; https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/; http://en.hongdian.com/Products/Details/H8922
CVE: CVE-2021-28152
Published: 2021-05-06
Description: Hongdian H8922 3.0.5 devices have an undocumented feature that allows access to a shell as a superuser. To connect, the telnet service is used on port 5188 with the default credentials of root:superzxmn.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://en.hongdian.com/Products/Details/H8922; https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/; http://en.hongdian.com/Products/Details/H8922
CVE: CVE-2021-31829
Published: 2021-05-06
Description: kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka CID-801c6058d14a. The specific concern is not protecting the BPF stack area against speculative loads. Also, the BPF stack can contain uninitialized data that might represent sensitive information previously operated on by the kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: http://www.openwall.com/lists/oss-security/2021/05/04/4; http://www.openwall.com/lists/oss-security/2021/05/04/4; https://github.com/torvalds/linux/commit/801c6058d14a82179a7ee17a4b532cac6fad067f
CVE: CVE-2021-32052
Published: 2021-05-06
Description: In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application uses values with newlines in an HTTP response, header injection can occur. Django itself is unaffected because HttpResponse prohibits newlines in HTTP headers.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2021/05/06/1; https://docs.djangoproject.com/en/3.2/releases/security/; https://groups.google.com/forum/#%21forum/django-announce
CVE: CVE-2021-3507
Published: 2021-05-06
Description: A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-119, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1951118; https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-25043
Published: 2021-05-06
Description: ModSecurity 3.x before 3.0.4 mishandles key-value pair parsing, as demonstrated by a "string index out of range" error and worker-process crash for a "Cookie: =abc" header.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-755
References: https://github.com/SpiderLabs/ModSecurity/issues/2566; https://github.com/SpiderLabs/ModSecurity/issues/2566
CVE: CVE-2020-18889
Published: 2021-05-06
Description: Cross Site Request Forgery (CSRF) vulnerability in puppyCMS v5.1 that can change the admin's password via /admin/settings.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/choregus/puppyCMS/issues/13; https://github.com/choregus/puppyCMS/issues/13
CVE: CVE-2021-31793
Published: 2021-05-06
Description: An issue exists on NightOwl WDB-20-V2 WDB-20-V2_20190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated user to take a snapshot from the doorbell camera via the /snapshot URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://cloud.binary.ninja/embed/f4400a22-c438-403a-bf2a-939ca44a4f6b; https://gist.github.com/tj-oconnor/16a4116050bbcb4717315f519b944f1f; https://cloud.binary.ninja/embed/f4400a22-c438-403a-bf2a-939ca44a4f6b
CVE: CVE-2021-31916
Published: 2021-05-06
Description: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1946965; https://github.com/torvalds/linux/commit/4edbe1d7bcffcd6269f3b5eb63f710393ff2ec7a; https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
CVE: CVE-2021-31918
Published: 2021-05-06
Description: A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to all users during stack update and creation. The highest threat from this vulnerability is to data confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-732
References: https://bugzilla.redhat.com/show_bug.cgi?id=1954250; https://bugzilla.redhat.com/show_bug.cgi?id=1954250
CVE: CVE-2020-18888
Published: 2021-05-06
Description: Arbitrary File Deletion vulnerability in puppyCMS v5.1 allows remote malicious attackers to delete the file/folder via /admin/functions.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862
References: https://github.com/choregus/puppyCMS/issues/15; https://github.com/choregus/puppyCMS/issues/15
CVE: CVE-2020-18890
Published: 2021-05-06
Description: Rmote Code Execution (RCE) vulnerability in puppyCMS v5.1 due to insecure permissions, which could let a remote malicious user getshell via /admin/functions.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-281
References: https://github.com/choregus/puppyCMS/issues/14; https://github.com/choregus/puppyCMS/issues/14
CVE: CVE-2021-31828
Published: 2021-05-06
Description: An SSRF issue in Open Distro for Elasticsearch (ODFE) before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope.
CVSS Score: 7.1 (HIGH)
CWE: CWE-918
References: https://github.com/opendistro-for-elasticsearch/alerting/pull/353; https://opendistro.github.io/for-elasticsearch-docs/version-history/; https://rotem-bar.com/ssrf-in-open-distro-for-elasticsearch-cve-2021-31828
CVE: CVE-2020-28198
Published: 2021-05-06
Description: The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 (Command Line Administrative Interface, dsmadmc.exe) is vulnerable to an exploitable stack buffer overflow. Note: the vulnerability can be exploited when it is used in "interactive" mode while, cause of a max number characters limitation, it cannot be exploited in batch or command line usage (e.g. dsmadmc.exe -id=username -password=pwd). NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 7.0 (HIGH)
CWE: CWE-787
References: https://github.com/VoidSec/Exploit-Development/blob/master/windows/x86/local/IBM_ITSM_Administrator_Client_v.5.2.0.1/IBM_TSM_v.5.2.0.1_exploit.py; https://voidsec.com/tivoli-madness/#IBM_Tivoli_Storage_Manager; https://github.com/VoidSec/Exploit-Development/blob/master/windows/x86/local/IBM_ITSM_Administrator_Client_v.5.2.0.1/IBM_TSM_v.5.2.0.1_exploit.py
CVE: CVE-2021-28665
Published: 2021-05-06
Description: Stormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in the SNMP plugin that can lead to excessive consumption of memory and CPU resources, and possibly a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://advisories-admin.stormshield.eu/2021-014; https://advisories.stormshield.eu/; https://advisories-admin.stormshield.eu/2021-014
CVE: CVE-2021-29493
Published: 2021-05-06
Description: Kennnyshiwa-cogs contains cogs for Red Discordbot. An RCE exploit has been found in the Tickets module of kennnyshiwa-cogs. This exploit allows discord users to craft a message that can reveal sensitive and harmful information. Users can upgrade to version 5a84d60018468e5c0346f7ee74b2b4650a6dade7 to receive a patch or, as a workaround, unload tickets to render the exploit unusable.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://github.com/kennnyshiwa/kennnyshiwa-cogs/commit/5a84d60018468e5c0346f7ee74b2b4650a6dade7; https://github.com/kennnyshiwa/kennnyshiwa-cogs/security/advisories/GHSA-f4j2-2cwr-h473; https://github.com/kennnyshiwa/kennnyshiwa-cogs/commit/5a84d60018468e5c0346f7ee74b2b4650a6dade7
CVE: CVE-2021-27941
Published: 2021-05-06
Description: Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application (through 4.9.2 on Android and through 4.9.1 on iOS) allows a physically proximate attacker to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during a device pairing process.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-522
References: https://apps.apple.com/us/app/ewelink-smart-home/id[PII_REDACTED]; https://github.com/salgio/eWeLink-QR-Code; https://play.google.com/store/apps/details?id=com.coolkit&hl=en_US
CVE: CVE-2021-29203
Published: 2021-05-06
Description: A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gaining privileged access, causing denial of service, and changing the configuration. HPE has released a software update to resolve the vulnerability in the HPE Edgeline Infrastructure Manager.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04124en_us; https://www.tenable.com/security/research/tra-2021-15; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04124en_us
CVE: CVE-2021-31737
Published: 2021-05-06
Description: emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/emlog/emlog/issues/82; https://github.com/emlog/emlog/issues/82
CVE: CVE-2020-23263
Published: 2021-05-06
Description: Persistent Cross-site scripting vulnerability on Fork CMS version 5.8.2 allows remote attackers to inject arbitrary Javascript code via the "navigation_title" parameter and the "title" parameter in /private/en/pages/add.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/forkcms/forkcms/pull/3093; https://github.com/forkcms/forkcms/pull/3093
CVE: CVE-2020-23264
Published: 2021-05-06
Description: Cross-site request forgery (CSRF) in Fork-CMS before 5.8.2 allow remote attackers to hijack the authentication of logged administrators.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/forkcms/forkcms/pull/3123; https://github.com/forkcms/forkcms/pull/3123
CVE: CVE-2021-32077
Published: 2021-05-06
Description: Primary Source Verification in VerityStream MSOW Solutions before 3.1.1 allows an anonymous internet user to discover Social Security Number (SSN) values via a brute-force attack on a (sometimes hidden) search field, because the last four SSN digits are part of the supported combination of search selectors. This discloses doctors' and nurses' social security numbers and PII.
CVSS Score: 7.5 (HIGH)
References: https://www.marbasec.com/blog/cve-2021-32077-fun-with-social-security-numbers; https://www.veritystream.com/legacy/msow-solutions; https://www.marbasec.com/blog/cve-2021-32077-fun-with-social-security-numbers
CVE: CVE-2021-32094
Published: 2021-05-07
Description: U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to upload arbitrary files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed; https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover; https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed
CVE: CVE-2021-32095
Published: 2021-05-07
Description: U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to delete arbitrary files.
CVSS Score: 8.1 (HIGH)
CWE: CWE-862
References: https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed; https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover; https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed
CVE: CVE-2021-32096
Published: 2021-05-07
Description: The ConsoleAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows a CSRF attack that results in injecting arbitrary Ruby code (for an eval call) via the CONSOLE_COMMAND_STRING parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed; https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover; https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed
CVE: CVE-2021-32098
Published: 2021-05-07
Description: Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained; https://pandorafms.com/blog/whats-new-in-pandora-fms-743/; https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack
CVE: CVE-2021-32099
Published: 2021-05-07
Description: A SQL injection vulnerability in the pandora_console component of Artica Pandora FMS 742 allows an unauthenticated attacker to upgrade his unprivileged session via the /include/chart_generator.php session_id parameter, leading to a login bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained; https://pandorafms.com/blog/whats-new-in-pandora-fms-743/; https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack
CVE: CVE-2021-32100
Published: 2021-05-07
Description: A remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploitable by the lowest privileged user.
CVSS Score: 6.5 (MEDIUM)
References: https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained; https://pandorafms.com/blog/whats-new-in-pandora-fms-743/; https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack
CVE: CVE-2021-32101
Published: 2021-05-07
Description: The Patient Portal of OpenEMR 5.0.2.1 is affected by a incorrect access control system in portal/patient/_machine_config.php. To exploit the vulnerability, an unauthenticated attacker can register an account, bypassing the permission check of this portal's API. Then, the attacker can then manipulate and read data of every registered patient.
CVSS Score: 8.2 (HIGH)
CWE: CWE-732
References: https://blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerability; https://community.open-emr.org/t/openemr-5-0-2-patch-5-has-been-released/15431; https://community.sonarsource.com/t/openemr-5-0-2-1-command-injection-vulnerability-puts-health-records-at-risk/33592
CVE: CVE-2021-32102
Published: 2021-05-07
Description: A SQL injection vulnerability exists (with user privileges) in library/custom_template/ajax_code.php in OpenEMR 5.0.2.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerability; https://community.open-emr.org/t/openemr-5-0-2-patch-5-has-been-released/15431; https://community.sonarsource.com/t/openemr-5-0-2-1-command-injection-vulnerability-puts-health-records-at-risk/33592
CVE: CVE-2021-32103
Published: 2021-05-07
Description: A Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerability; https://community.open-emr.org/t/openemr-5-0-2-patch-5-has-been-released/15431; https://community.sonarsource.com/t/openemr-5-0-2-1-command-injection-vulnerability-puts-health-records-at-risk/33592
CVE: CVE-2021-32104
Published: 2021-05-07
Description: A SQL injection vulnerability exists (with user privileges) in interface/forms/eye_mag/save.php in OpenEMR 5.0.2.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerability; https://community.open-emr.org/t/openemr-5-0-2-patch-5-has-been-released/15431; https://community.sonarsource.com/t/openemr-5-0-2-1-command-injection-vulnerability-puts-health-records-at-risk/33592
CVE: CVE-2021-32074
Published: 2021-05-07
Description: HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was not correctly registered with GitHub Actions for log masking.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532
References: https://discuss.hashicorp.com/t/hcsec-2021-13-vault-github-action-did-not-correctly-mask-multi-line-secrets-in-output/24128; https://github.com/hashicorp/vault-action/blob/master/CHANGELOG.md; https://github.com/hashicorp/vault-action/issues/205
CVE: CVE-2021-32090
Published: 2021-05-07
Description: The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://blog.sonarsource.com/hack-the-stack-with-localstack; https://portswigger.net/daily-swig/localstack-zero-day-vulnerabilities-chained-to-achieve-remote-takeover-of-local-instances; https://blog.sonarsource.com/hack-the-stack-with-localstack
CVE: CVE-2021-32091
Published: 2021-05-07
Description: A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.sonarsource.com/hack-the-stack-with-localstack; https://portswigger.net/daily-swig/localstack-zero-day-vulnerabilities-chained-to-achieve-remote-takeover-of-local-instances; https://blog.sonarsource.com/hack-the-stack-with-localstack
CVE: CVE-2021-32092
Published: 2021-05-07
Description: A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the uuid parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed; https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover; https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed
CVE: CVE-2021-32093
Published: 2021-05-07
Description: The ConfigFileAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to read arbitrary files via the ConfigName parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed; https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover; https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed
CVE: CVE-2020-29444
Published: 2021-05-07
Description: Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javascript via a Cross Site Scripting Vulnerability in admin global setting parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://jira.atlassian.com/browse/CONFSERVER-61266; https://jira.atlassian.com/browse/CONFSERVER-61266
CVE: CVE-2020-29445
Published: 2021-05-07
Description: Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify internal hosts and ports via a blind server-side request forgery vulnerability in Team Calendars parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://jira.atlassian.com/browse/CONFSERVER-61453; https://jira.atlassian.com/browse/CONFSERVER-61453
CVE: CVE-2020-11254
Published: 2021-05-07
Description: Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-476
References: https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin
CVE: CVE-2020-11268
Published: 2021-05-07
Description: Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Auto, Snapdragon Mobile
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin; https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin