deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-40539
Published: 2021-09-07
Description: Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-706, CWE-706
References: http://packetstormsecurity.com/files/165085/ManageEngine-ADSelfService-Plus-Authentication-Bypass-Code-Execution.html; https://www.manageengine.com; https://www.manageengine.com/products/self-service-password/kb/how-to-fix-authentication-bypass-vulnerability-in-REST-API.html
CVE: CVE-2021-38142
Published: 2021-09-07
Description: Barco MirrorOp Windows Sender before 2.5.3.65 uses cleartext HTTP and thus allows rogue software upgrades. An attacker on the local network can achieve remote code execution on any computer that tries to update Windows Sender due to the fact that the upgrade mechanism is not secured (is not protected with TLS).
CVSS Score: 8.8 (HIGH)
CWE: CWE-319
References: https://www.barco.com/en/support/cms; https://www.barco.com/en/support/software/R33050099?majorVersion=2&minorVersion=5&patchVersion=3&buildVersion=65; https://www.barco.com/en/support/cms
CVE: CVE-2021-39197
Published: 2021-09-07
Description: better_errors is an open source replacement for the standard Rails error page with more information rich error pages. It is also usable outside of Rails in any Rack app as Rack middleware. better_errors prior to 2.8.0 did not implement CSRF protection for its internal requests. It also did not enforce the correct "Content-Type" header for these requests, which allowed a cross-origin "simple request" to be made without CORS protection. These together left an application with better_errors enabled open to cross-origin attacks. As a developer tool, better_errors documentation strongly recommends addition only to the `development` bundle group, so this vulnerability should only affect development environments. Please ensure that your project limits better_errors to the `development` group (or the non-Rails equivalent). Starting with release 2.8.x, CSRF protection is enforced. It is recommended that you upgrade to the latest release, or minimally to "~> 2.8.3". There are no known workarounds to mitigate the risk of using older releases of better_errors.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/BetterErrors/better_errors/commit/8e8e796bfbde4aa088741823c8a3fc6df2089bb0; https://github.com/BetterErrors/better_errors/discussions/507; https://github.com/BetterErrors/better_errors/pull/474
CVE: CVE-2021-35947
Published: 2021-09-07
Description: The public share controller in the ownCloud server before version 10.8.0 allows a remote attacker to see the internal path and the username of a public share by including invalid characters in the URL.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://doc.owncloud.com/server/admin_manual/release_notes.html; https://owncloud.com/security-advisories/cve-2021-35947/; https://doc.owncloud.com/server/admin_manual/release_notes.html
CVE: CVE-2021-35949
Published: 2021-09-07
Description: The shareinfo controller in the ownCloud Server before 10.8.0 allows an attacker to bypass the permission checks for upload only shares and list metadata about the share.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://doc.owncloud.com/server/admin_manual/release_notes.html; https://owncloud.com/security-advisories/cve-2021-35949/; https://doc.owncloud.com/server/admin_manual/release_notes.html
CVE: CVE-2021-39195
Published: 2021-09-07
Description: Misskey is an open source, decentralized microblogging platform. In affected versions a Server-Side Request Forgery vulnerability exists in "Upload from URL" and remote attachment handling. This could result in the disclosure of non-public information within the internal network. This has been fixed in 12.90.0. However, if you are using a proxy, you will need to take additional measures. As a workaround this exploit may be avoided by appropriately restricting access to private networks from the host where the application is running.
CVSS Score: 7.7 (HIGH)
CWE: CWE-918
References: https://github.com/misskey-dev/misskey/blob/develop/CHANGELOG.md#12[PII_REDACTED]4; https://github.com/misskey-dev/misskey/commit/e1a8b158e04ad567d92d8daf3cc0898ee18f1a2e; https://github.com/misskey-dev/misskey/security/advisories/GHSA-mqv7-gxh4-r5vf
CVE: CVE-2021-39196
Published: 2021-09-07
Description: pcapture is an open source dumpcap web service interface . In affected versions this vulnerability allows an authenticated but unprivileged user to use the REST API to capture and download packets with no capture filter and without adequate permissions. This is important because the capture filters can effectively limit the scope of information that a user can see in the data captures. If no filter is present, then all data on the local network segment where the program is running can be captured and downloaded. v3.12 fixes this problem. There is no workaround, you must upgrade to v3.12 or greater.
CVSS Score: 7.7 (HIGH)
CWE: CWE-287, CWE-754
References: https://github.com/jdhwpgmbca/pcapture/commit/0f74f431e0970a2e5784dbd955cfa4760e3b1ef7; https://github.com/jdhwpgmbca/pcapture/issues/7; https://github.com/jdhwpgmbca/pcapture/security/advisories/GHSA-3r67-fxpr-p2qx
CVE: CVE-2021-39199
Published: 2021-09-07
Description: remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has mentioned that it was safe by default. In practice the default was never safe and had to be opted into. That is, user input was not sanitized. This means arbitrary HTML can be passed through leading to potential XSS attacks. The problem has been patched in 13.0.2 and 14.0.1: `remark-html` is now safe by default, and the implementation matches the documentation. On older affected versions, pass `sanitize: true` if you cannot update.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-79
References: https://github.com/remarkjs/remark-html/commit/b75c9dde582ad87ba498e369c033dc8a350478c1; https://github.com/remarkjs/remark-html/releases/tag/14.0.1; https://github.com/remarkjs/remark-html/security/advisories/GHSA-9q5w-79cv-947m
CVE: CVE-2020-19750
Published: 2021-09-07
Description: An issue was discovered in gpac 0.8.0. The strdup function in box_code_base.c has a heap-based buffer over-read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://cwe.mitre.org/data/definitions/126.html; https://github.com/gpac/gpac/issues/1262; https://cwe.mitre.org/data/definitions/126.html
CVE: CVE-2020-19751
Published: 2021-09-07
Description: An issue was discovered in gpac 0.8.0. The gf_odf_del_ipmp_tool function in odf_code.c has a heap-based buffer over-read.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://cwe.mitre.org/data/definitions/126.html; https://github.com/gpac/gpac/issues/1272; https://cwe.mitre.org/data/definitions/126.html
CVE: CVE-2020-19752
Published: 2021-09-07
Description: The find_color_or_error function in gifsicle 1.92 contains a NULL pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/kohler/gifsicle/issues/140; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7H3ASG2BD4D4SAUUI6TOLUZYP2QYYHXY/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DH7X7PGUN5BYXKW533DAX4KAEM4HPMJC/
CVE: CVE-2021-32782
Published: 2021-09-07
Description: Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud Circles application is vulnerable to a stored Cross-Site Scripting (XSS) vulnerability. Due the strict Content-Security-Policy shipped with Nextcloud, this issue is not exploitable on modern browsers supporting Content-Security-Policy. It is recommended that the Nextcloud Circles application is upgraded to 0.21.3, 0.20.10 or 0.19.14 to resolve this issue. As a workaround users may use a browser that has support for Content-Security-Policy. A notable exemption is Internet Explorer which does not support CSP properly.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/nextcloud/circles/commit/dbb97a83ccb342c839a54f088aa19b8ba6844b0e; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-hgpq-28gj-jrj9; https://hackerone.com/reports/1217606
CVE: CVE-2021-35946
Published: 2021-09-07
Description: A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://doc.owncloud.com/server/admin_manual/release_notes.html; https://owncloud.com/security-advisories/cve-2021-35946/; https://doc.owncloud.com/server/admin_manual/release_notes.html
CVE: CVE-2021-35948
Published: 2021-09-07
Description: Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-384
References: https://doc.owncloud.com/server/admin_manual/release_notes.html; https://owncloud.com/security-advisories/cve-2021-35948/; https://doc.owncloud.com/server/admin_manual/release_notes.html
CVE: CVE-2021-37630
Published: 2021-09-07
Description: Nextcloud Circles is an open source social network built for the nextcloud ecosystem. In affected versions the Nextcloud Circles application allowed any user to join any "Secret Circle" without approval by the Circle owner leaking private information. It is recommended that Nextcloud Circles is upgraded to 0.19.15, 0.20.11 or 0.21.4. There are no workarounds for this issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://github.com/nextcloud/circles/pull/768; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-56j9-3rj4-wvgm; https://hackerone.com/reports/1257624
CVE: CVE-2021-37631
Published: 2021-09-07
Description: Deck is an open source kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. In affected versions the Deck application didn't properly check membership of users in a Circle. This allowed other users in the instance to gain access to boards that have been shared with a Circle, even if the user was not a member of the circle. It is recommended that Nextcloud Deck is upgraded to 1.5.1, 1.4.4 or 1.2.9. If you are unable to update it is advised to disable the Deck plugin.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://github.com/nextcloud/deck/pull/3217; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-4mxp-j277-82hr; https://hackerone.com/reports/1256021
CVE: CVE-2021-38704
Published: 2021-09-07
Description: Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL. This can result in account takeover via session token theft.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/judsonmitchell/ClinicCases/releases; https://github.com/sudonoodle/CVE-2021-38704; https://github.com/judsonmitchell/ClinicCases/releases
CVE: CVE-2021-38705
Published: 2021-09-07
Description: ClinicCases 7.3.3 is affected by Cross-Site Request Forgery (CSRF). A successful attack would consist of an authenticated user following a malicious link, resulting in arbitrary actions being carried out with the privilege level of the targeted user. This can be exploited to create a secondary administrator account for the attacker.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/judsonmitchell/ClinicCases/releases; https://github.com/sudonoodle/CVE-2021-38705; https://github.com/judsonmitchell/ClinicCases/releases
CVE: CVE-2021-38706
Published: 2021-09-07
Description: messages_load.php in ClinicCases 7.3.3 suffers from a blind SQL injection vulnerability, which allows low-privileged attackers to execute arbitrary SQL commands through a vulnerable parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://cliniccases.com; https://github.com/judsonmitchell/ClinicCases/releases; https://cliniccases.com
CVE: CVE-2021-38707
Published: 2021-09-07
Description: Persistent cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow low-privileged attackers to introduce arbitrary JavaScript to account parameters. The XSS payloads will execute in the browser of any user who views the relevant content. This can result in account takeover via session token theft.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/judsonmitchell/ClinicCases/releases; https://github.com/sudonoodle/CVE-2021-38707; https://github.com/judsonmitchell/ClinicCases/releases
CVE: CVE-2021-39194
Published: 2021-09-07
Description: kaml is an open source implementation of the YAML format with support for kotlinx.serialization. In affected versions attackers that could provide arbitrary YAML input to an application that uses kaml could cause the application to endlessly loop while parsing the input. This could result in resource starvation and denial of service. This only affects applications that use polymorphic serialization with the default tagged polymorphism style. Applications using the property polymorphism style are not affected. YAML input for a polymorphic type that provided a tag but no value for the object would trigger the issue. Version 0.35.3 or later contain the fix for this issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-835
References: https://github.com/charleskorn/kaml/commit/e18785d043fc6324c81e968aae9764b4b060bc6a; https://github.com/charleskorn/kaml/issues/179; https://github.com/charleskorn/kaml/security/advisories/GHSA-fmm9-3gv8-58f4
CVE: CVE-2021-39496
Published: 2021-09-07
Description: Eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject malicious code into `filename` param to trigger Reflected XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/KietNA-HPT/CVE; https://github.com/eyoucms/eyoucms/releases/tag/v1.5.4; https://github.com/KietNA-HPT/CVE
CVE: CVE-2021-39497
Published: 2021-09-07
Description: eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveRemote() function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: http://hptcybersec.com/ssrf_PoC.jpg; https://github.com/KietNA-HPT/CVE; https://github.com/eyoucms/eyoucms/releases/tag/v1.5.4
CVE: CVE-2021-39499
Published: 2021-09-07
Description: A Cross-site scripting (XSS) vulnerability in Users in Qiong ICP EyouCMS 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the `title` parameter in bind_email function.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/KietNA-HPT/CVE; https://github.com/eyoucms/eyoucms/issues/18; https://github.com/KietNA-HPT/CVE
CVE: CVE-2021-39503
Published: 2021-09-07
Description: PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, =, `,...." In WriteConfig() function, an attacker can inject php code to /include/config.cache.php file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/KietNA-HPT/CVE; https://github.com/gaozhifeng/PHPMyWind/issues/15; https://github.com/KietNA-HPT/CVE
CVE: CVE-2021-40143
Published: 2021-09-07
Description: Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. By sending a crafted HTTP request, a remote attacker may disclose sensitive information or request external resources from a vulnerable instance.
CVSS Score: 8.2 (HIGH)
CWE: CWE-74
References: https://issues.sonatype.org/secure/ReleaseNote.jspa; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]579; https://issues.sonatype.org/secure/ReleaseNote.jspa
CVE: CVE-2021-32766
Published: 2021-09-07
Description: Nextcloud Text is an open source plaintext editing application which ships with the nextcloud server. In affected versions the Nextcloud Text application returned different error messages depending on whether a folder existed in a public link share. This is problematic in case the public link share has been created with "Upload Only" privileges. (aka "File Drop"). A link share recipient is not expected to see which folders or files exist in a "File Drop" share. Using this vulnerability an attacker is able to enumerate folders in such a share. Exploitation requires that the attacker has access to a valid affected "File Drop" link share. It is recommended that the Nextcloud Server is upgraded to 20.0.12, 21.0.4 or 22.0.1. Users who are unable to upgrade are advised to disable the Nextcloud Text application in the app settings.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-gcf3-3wmc-88jr; https://github.com/nextcloud/text/pull/1716; https://hackerone.com/reports/1253475
CVE: CVE-2021-37628
Published: 2021-09-07
Description: Nextcloud Richdocuments is an open source collaborative office suite. In affected versions the File Drop features ("Upload Only" public link shares in Nextcloud) can be bypassed using the Nextcloud Richdocuments app. An attacker was able to read arbitrary files in such a share. It is recommended that the Nextcloud Richdocuments is upgraded to 3.8.4 or 4.2.1. If upgrading is not possible then it is recommended to disable the Richdocuments application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639, CWE-639
References: https://github.com/nextcloud/richdocuments/pull/1664; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-pxhh-954f-8w7w; https://hackerone.com/reports/1253403
CVE: CVE-2021-37629
Published: 2021-09-07
Description: Nextcloud Richdocuments is an open source collaborative office suite. In affected versions there is a lack of rate limiting on the Richdocuments OCS endpoint. This may have allowed an attacker to enumerate potentially valid share tokens. It is recommended that the Nextcloud Richdocuments app is upgraded to either 3.8.4 or 4.2.1 to resolve. For users unable to upgrade it is recommended that the Richdocuments application be disabled.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-770
References: https://github.com/nextcloud/richdocuments/pull/1663; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-gvvr-h36p-8mjx; https://hackerone.com/reports/1258750
CVE: CVE-2021-39500
Published: 2021-09-07
Description: Eyoucms 1.5.4 is vulnerable to Directory Traversal. Due to a lack of input data sanitizaton in param tpldir, filename, type, nid an attacker can inject "../" to escape and write file to writeable directories.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/KietNA-HPT/CVE; https://github.com/eyoucms/eyoucms/releases/tag/v1.5.4; https://github.com/KietNA-HPT/CVE
CVE: CVE-2021-39501
Published: 2021-09-07
Description: EyouCMS 1.5.4 is vulnerable to Open Redirect. An attacker can redirect a user to a malicious url via the Logout function.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://github.com/KietNA-HPT/CVE; https://github.com/eyoucms/eyoucms/issues/17; https://github.com/KietNA-HPT/CVE
CVE: CVE-2020-19765
Published: 2021-09-07
Description: An issue in the noReentrance() modifier of the Ethereum-based contract Accounting 1.0 allows attackers to carry out a reentrancy attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://github.com/OSUPlayer/CVEs/blob/master/Reentrancy/2019-07-09-01.md; https://github.com/OSUPlayer/CVEs/blob/master/Reentrancy/2019-07-09-01.md
CVE: CVE-2020-19766
Published: 2021-09-07
Description: The time check operation of PepeAuctionSale 1.0 can be rendered ineffective by assigning a large number to the _duration variable, compromising access control to the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: https://github.com/OSUPlayer/CVEs/blob/master/Reentrancy/2019-07-09-02.md; https://github.com/OSUPlayer/CVEs/blob/master/Reentrancy/2019-07-09-02.md
CVE: CVE-2020-19767
Published: 2021-09-07
Description: A lack of target address verification in the destroycontract() function of 0xRACER 1.0 allows attackers to steal tokens from victim users via a crafted script.
CVSS Score: 7.5 (HIGH)
References: https://github.com/OSUPlayer/CVEs/blob/master/Suicidal/2019-07-09-03.md; https://github.com/OSUPlayer/CVEs/blob/master/Suicidal/2019-07-09-03.md
CVE: CVE-2020-19768
Published: 2021-09-07
Description: A lack of target address verification in the selfdestructs() function of ICOVO 1.0 allows attackers to steal tokens from victim users via a crafted script.
CVSS Score: 7.5 (HIGH)
CWE: CWE-345
References: https://github.com/OSUPlayer/CVEs/blob/master/Suicidal/2019-07-09-02.md; https://github.com/OSUPlayer/CVEs/blob/master/Suicidal/2019-07-09-02.md
CVE: CVE-2020-19769
Published: 2021-09-07
Description: A lack of target address verification in the BurnMe() function of Rob The Bank 1.0 allows attackers to steal tokens from victim users via a crafted script.
CVSS Score: 7.5 (HIGH)
CWE: CWE-345
References: https://github.com/OSUPlayer/CVEs/blob/master/Suicidal/2019-07-09-01.md; https://github.com/OSUPlayer/CVEs/blob/master/Suicidal/2019-07-09-01.md
CVE: CVE-2021-32800
Published: 2021-09-07
Description: Nextcloud server is an open source, self hosted personal cloud. In affected versions an attacker is able to bypass Two Factor Authentication in Nextcloud. Thus knowledge of a password, or access to a WebAuthN trusted device of a user was sufficient to gain access to an account. It is recommended that the Nextcloud Server is upgraded to 20.0.12, 21.0.4 or 22.1.0. There are no workaround for this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-306, CWE-306
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-gv5w-8q25-785v; https://github.com/nextcloud/server/pull/28078; https://hackerone.com/reports/1271052
CVE: CVE-2021-32801
Published: 2021-09-07
Description: Nextcloud server is an open source, self hosted personal cloud. In affected versions logging of exceptions may have resulted in logging potentially sensitive key material for the Nextcloud Encryption-at-Rest functionality. It is recommended that the Nextcloud Server is upgraded to 20.0.12, 21.0.4 or 22.1.0. If upgrading is not an option users are advised to disable system logging to resolve this issue until such time that an upgrade can be performed Note that ff you do not use the Encryption-at-Rest functionality of Nextcloud you are not affected by this bug.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-mcpf-v65v-359h; https://github.com/nextcloud/server/pull/28082; https://hackerone.com/reports/1251776
CVE: CVE-2021-32802
Published: 2021-09-07
Description: Nextcloud server is an open source, self hosted personal cloud. Nextcloud supports rendering image previews for user provided file content. For some image types, the Nextcloud server was invoking a third-party library that wasn't suited for untrusted user-supplied content. There are several security concerns with passing user-generated content to this library, such as Server-Side-Request-Forgery, file disclosure or potentially executing code on the system. The risk depends on your system configuration and the installed library version. It is recommended that the Nextcloud Server is upgraded to 20.0.12, 21.0.4 or 22.1.0. These versions do not use this library anymore. As a workaround users may disable previews by setting `enable_previews` to `false` in `config.php`.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-829, CWE-829
References: https://docs.nextcloud.com/server/21/admin_manual/configuration_files/previews_configuration.html#disabling-previews; https://github.com/nextcloud/security-advisories/security/advisories/GHSA-m682-v4g9-wrq7; https://hackerone.com/reports/1261413