deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-3045
Published: 2021-08-11
Description: An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.19; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14; PAN-OS 9.1 versions earlier than PAN-OS 9.1.10. PAN-OS 10.0 and later versions are not impacted.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-88, CWE-88
References: https://security.paloaltonetworks.com/CVE-2021-3045; https://security.paloaltonetworks.com/CVE-2021-3045
CVE: CVE-2021-3046
Published: 2021-08-11
Description: An improper authentication vulnerability exists in Palo Alto Networks PAN-OS software that enables a SAML authenticated attacker to impersonate any other user in the GlobalProtect Portal and GlobalProtect Gateway when they are configured to use SAML authentication. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.19; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14; PAN-OS 9.1 versions earlier than PAN-OS 9.1.9; PAN-OS 10.0 versions earlier than PAN-OS 10.0.5. PAN-OS 10.1 versions are not impacted.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://security.paloaltonetworks.com/CVE-2021-3046; https://security.paloaltonetworks.com/CVE-2021-3046
CVE: CVE-2021-3047
Published: 2021-08-11
Description: A cryptographically weak pseudo-random number generator (PRNG) is used during authentication to the Palo Alto Networks PAN-OS web interface. This enables an authenticated attacker, with the capability to observe their own authentication secrets over a long duration on the PAN-OS appliance, to impersonate another authenticated web interface administrator's session. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.19; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14; PAN-OS 9.1 versions earlier than PAN-OS 9.1.10; PAN-OS 10.0 versions earlier than PAN-OS 10.0.4. PAN-OS 10.1 versions are not impacted.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-338, CWE-338
References: https://security.paloaltonetworks.com/CVE-2021-3047; https://security.paloaltonetworks.com/CVE-2021-3047
CVE: CVE-2021-3048
Published: 2021-08-11
Description: Certain invalid URL entries contained in an External Dynamic List (EDL) cause the Device Server daemon (devsrvr) to stop responding. This condition causes subsequent commits on the firewall to fail and prevents administrators from performing commits and configuration changes even though the firewall remains otherwise functional. If the firewall then restarts, it results in a denial-of-service (DoS) condition and the firewall stops processing traffic. This issue impacts: PAN-OS 9.0 versions earlier than PAN-OS 9.0.14; PAN-OS 9.1 versions earlier than PAN-OS 9.1.9; PAN-OS 10.0 versions earlier than PAN-OS 10.0.5. PAN-OS 8.1 and PAN-OS 10.1 versions are not impacted.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://security.paloaltonetworks.com/CVE-2020-3048; https://security.paloaltonetworks.com/CVE-2021-3048; https://security.paloaltonetworks.com/CVE-2020-3048
CVE: CVE-2021-3050
Published: 2021-08-11
Description: An OS command injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to execute arbitrary OS commands to escalate privileges. This issue impacts: PAN-OS 9.0 version 9.0.10 through PAN-OS 9.0.14; PAN-OS 9.1 version 9.1.4 through PAN-OS 9.1.10; PAN-OS 10.0 version 10.0.7 and earlier PAN-OS 10.0 versions; PAN-OS 10.1 version 10.1.0 through PAN-OS 10.1.1. Prisma Access firewalls and firewalls running PAN-OS 8.1 versions are not impacted by this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://security.paloaltonetworks.com/CVE-2021-3050; https://security.paloaltonetworks.com/CVE-2021-3050
CVE: CVE-2020-21976
Published: 2021-08-11
Description: An arbitrary file upload in the <input type="file" name="user_image"> component of NewsOne CMS v1.1.0 allows attackers to webshell and execute arbitrary commands.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://cxsecurity.com/issue/WLB[PII_REDACTED]
CVE: CVE-2021-23421
Published: 2021-08-11
Description: All versions of package merge-change are vulnerable to Prototype Pollution via the utils.set function.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-1321
References: https://github.com/VladimirShestakov/merge-change/blob/9901f145e06158f284f52de42e6ba5b0f702fb65/utils.js%23L89-L123; https://snyk.io/vuln/SNYK-JS-MERGECHANGE-1310985; https://github.com/VladimirShestakov/merge-change/blob/9901f145e06158f284f52de42e6ba5b0f702fb65/utils.js%23L89-L123
CVE: CVE-2021-37694
Published: 2021-08-11
Description: @asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream (SCSt) microservice. In versions prior to 0.7.0 arbitrary code injection was possible when an attacker controls the AsyncAPI document. An example is provided in GHSA-xj6r-2jpm-qvxp. There are no mitigations available and all users are advised to update.
CVSS Score: 8.7 (HIGH)
CWE: CWE-94, CWE-94
References: https://github.com/asyncapi/java-spring-cloud-stream-template/security/advisories/GHSA-xj6r-2jpm-qvxp; https://github.com/asyncapi/java-spring-cloud-stream-template/security/advisories/GHSA-xj6r-2jpm-qvxp
CVE: CVE-2021-38085
Published: 2021-08-11
Description: The Canon TR150 print driver through 3.71.2.10 is vulnerable to a privilege escalation issue. During the add printer process, a local attacker can overwrite CNMurGE.dll and, if timed properly, the overwritten DLL will be loaded into a SYSTEM process resulting in escalation of privileges. This occurs because the driver drops a world-writable DLL into a CanonBJ %PROGRAMDATA% location that gets loaded by printisolationhost (a system process).
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/163795/Canon-TR150-Driver-3.71.2.10-Privilege-Escalation.html; https://defcon.org/html/defcon-29/dc-29-speakers.html#baines; https://raw.githubusercontent.com/jacob-baines/vuln_disclosure/main/vuln_2021_03.txt
CVE: CVE-2021-32437
Published: 2021-08-11
Description: The gf_hinter_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/1653f31cf874eb6df964bea88d58d8e9b98b485e; https://github.com/gpac/gpac/issues/1770; https://github.com/gpac/gpac/commit/1653f31cf874eb6df964bea88d58d8e9b98b485e
CVE: CVE-2021-32438
Published: 2021-08-11
Description: The gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/00194f5fe462123f70b0bae7987317b52898b868; https://github.com/gpac/gpac/issues/1769; https://github.com/gpac/gpac/commit/00194f5fe462123f70b0bae7987317b52898b868
CVE: CVE-2021-32439
Published: 2021-08-11
Description: Buffer overflow in the stbl_AppendSize function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/gpac/gpac/commit/77ed81c069e10b3861d88f72e1c6be1277ee7eae; https://github.com/gpac/gpac/issues/1774; https://github.com/gpac/gpac/commit/77ed81c069e10b3861d88f72e1c6be1277ee7eae
CVE: CVE-2021-32440
Published: 2021-08-11
Description: The Media_RewriteODFrame function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/f0ba83717b6e4d7a15a1676d1fe06152e199b011; https://github.com/gpac/gpac/issues/1772; https://github.com/gpac/gpac/commit/f0ba83717b6e4d7a15a1676d1fe06152e199b011
CVE: CVE-2021-33791
Published: 2021-08-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability
CVE: CVE-2021-33793
Published: 2021-08-11
Description: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 have an out-of-bounds write because the Cross-Reference table is mishandled during Office document conversion.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.html; https://www.foxitsoftware.com/support/security-bulletins.html
CVE: CVE-2021-33794
Published: 2021-08-11
Description: Foxit Reader before 10.1.4 and PhantomPDF before 10.1.4 allow information disclosure or an application crash after mishandling the Tab key during XFA form interaction.
CVSS Score: 9.1 (CRITICAL)
References: https://www.foxitsoftware.com/support/security-bulletins.html; https://www.foxitsoftware.com/support/security-bulletins.html
CVE: CVE-2017-16629
Published: 2021-08-11
Description: In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software from the errors it gives out for each type of user on the Login form. For "Incorrect User" - it gives an error "The application failed to identify the user. Please contact administrator for help." For "Correct User and Incorrect Password" - it gives an error "Authentication failed. Please login again."
CVSS Score: 7.5 (HIGH)
CWE: CWE-209
References: https://vuln.shellcoder.party/2020/07/18/cve-2017-16629-sapphireims-login-page-information-disclosure/; https://vuln.shellcoder.party/tags/sapphireims/; https://vuln.shellcoder.party/2020/07/18/cve-2017-16629-sapphireims-login-page-information-disclosure/
CVE: CVE-2017-16630
Published: 2021-08-11
Description: In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that has SapphireIMS installed, because of an Insecure Direct Object Reference (IDOR) in the local user creation function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://vuln.shellcoder.party/2020/07/18/cve-2017-16630-sapphireims-idor-based-privilege-elevation/; https://vuln.shellcoder.party/tags/sapphireims/; https://vuln.shellcoder.party/2020/07/18/cve-2017-16630-sapphireims-idor-based-privilege-elevation/
CVE: CVE-2017-16631
Published: 2021-08-11
Description: In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by utilizing an Insecure Direct Object Reference (IDOR) in the "Account Password Reset" functionality.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732
References: https://vuln.shellcoder.party/2020/07/18/cve-2017-16631-sapphireims-idor-on-password-reset/; https://vuln.shellcoder.party/tags/sapphireims/; https://vuln.shellcoder.party/2020/07/18/cve-2017-16631-sapphireims-idor-on-password-reset/
CVE: CVE-2017-16632
Published: 2021-08-11
Description: In SapphireIMS 4097_1, the password in the database is stored in Base64 format.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: https://vuln.shellcoder.party/2020/07/18/cve-2017-16632-sapphireims-insecure-storage-of-password/; https://vuln.shellcoder.party/tags/sapphireims/; https://vuln.shellcoder.party/2020/07/18/cve-2017-16632-sapphireims-insecure-storage-of-password/
CVE: CVE-2020-21359
Published: 2021-08-11
Description: An arbitrary file upload vulnerability in the Template Upload function of Maccms10 allows attackers bypass the suffix whitelist verification to execute arbitrary code via adding a character to the end of the uploaded file's name.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/magicblack/maccms10/issues/80; https://github.com/magicblack/maccms10/issues/80
CVE: CVE-2020-21362
Published: 2021-08-11
Description: A cross site scripting (XSS) vulnerability in the background search function of Maccms10 allows attackers to execute arbitrary web scripts or HTML via the 'wd' parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/magicblack/maccms10/issues/78; https://github.com/magicblack/maccms10/issues/78
CVE: CVE-2020-21363
Published: 2021-08-11
Description: An arbitrary file deletion vulnerability exists within Maccms10.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-610
References: https://github.com/magicblack/maccms10/issues/79; https://github.com/magicblack/maccms10/issues/79
CVE: CVE-2020-25560
Published: 2021-08-11
Description: In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on “ping”, “traceroute” and “snmp” functions and execute code on the server. We also observed the same is true if the JSESSIONID is completely removed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://vuln.shellcoder.party/2020/09/19/cve-2020-25560-sapphireims-unauthenticated-remote-command-execution-on-server/; https://vuln.shellcoder.party/tags/sapphireims/; https://vuln.shellcoder.party/2020/09/19/cve-2020-25560-sapphireims-unauthenticated-remote-command-execution-on-server/
CVE: CVE-2020-25561
Published: 2021-08-11
Description: SapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server. This credential is saved in ServerConf.config file in the client.
CVSS Score: 7.8 (HIGH)
CWE: CWE-798
References: https://vuln.shellcoder.party/2020/09/19/cve-2020-25561-sapphireims-hardcoded-credentials/; https://vuln.shellcoder.party/tags/sapphireims/; https://vuln.shellcoder.party/2020/09/19/cve-2020-25561-sapphireims-hardcoded-credentials/
CVE: CVE-2020-25562
Published: 2021-08-11
Description: In SapphireIMS 5.0, there is no CSRF token present in the entire application. This can lead to CSRF vulnerabilities in critical application forms like account resent.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://vuln.shellcoder.party/2020/09/19/cve-2020-25562-sapphireims-csrf/; https://vuln.shellcoder.party/tags/sapphireims/; https://vuln.shellcoder.party/2020/09/19/cve-2020-25562-sapphireims-csrf/
CVE: CVE-2020-25563
Published: 2021-08-11
Description: In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave (Automation Tasks) feature and not having a JSESSIONID.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://vuln.shellcoder.party/2020/09/19/cve-2020-25563-sapphireims-unauthenticated-remote-command-execution-create-local-admin-on-clients/; https://vuln.shellcoder.party/tags/sapphireims/; https://vuln.shellcoder.party/2020/09/19/cve-2020-25563-sapphireims-unauthenticated-remote-command-execution-create-local-admin-on-clients/
CVE: CVE-2020-25564
Published: 2021-08-11
Description: In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user by directly accessing RemoteMgmtTaskSave (Automation Tasks) feature.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://vuln.shellcoder.party/2020/09/19/cve-2020-25564-sapphireims-unprivileged-user-remote-command-execution-create-local-admin-on-clients/; https://vuln.shellcoder.party/tags/sapphireims/; https://vuln.shellcoder.party/2020/09/19/cve-2020-25564-sapphireims-unprivileged-user-remote-command-execution-create-local-admin-on-clients/
CVE: CVE-2020-25565
Published: 2021-08-11
Description: In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire, password: ims) and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on “ping”, “traceroute” and “snmp” functions and execute code on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://vuln.shellcoder.party/2020/09/19/cve-2020-25565-sapphireims-unprivileged-user-remote-command-execution-on-server/; https://vuln.shellcoder.party/tags/sapphireims/; https://vuln.shellcoder.party/2020/09/19/cve-2020-25565-sapphireims-unprivileged-user-remote-command-execution-on-server/
CVE: CVE-2020-25566
Published: 2021-08-11
Description: In SapphireIMS 5.0, it is possible to take over an account by sending a request to the Save_Password form as shown in POC. Notice that we do not require a JSESSIONID in this request and can reset any user’s password by changing the username to that user and password to base64(desired password).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://vuln.shellcoder.party/2020/09/19/cve-2020-25566-sapphireims-unauthenticated-account-takeover/; https://vuln.shellcoder.party/tags/sapphireims/; https://vuln.shellcoder.party/2020/09/19/cve-2020-25566-sapphireims-unauthenticated-account-takeover/
CVE: CVE-2021-22098
Published: 2021-08-11
Description: UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along with redirection of UAA users to a malicious sites.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://www.cloudfoundry.org/blog/cve-2021-22098-open-redirect-vulnerability-in-uaa-server/; https://www.cloudfoundry.org/blog/cve-2021-22098-open-redirect-vulnerability-in-uaa-server/
CVE: CVE-2021-1106
Published: 2021-08-11
Description: NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privileges, complete denial of service, unconstrained information disclosure, and serious data tampering of all processes on the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5216; https://nvidia.custhelp.com/app/answers/detail/a_id/5259; https://nvidia.custhelp.com/app/answers/detail/a_id/5216
CVE: CVE-2021-1107
Published: 2021-08-11
Description: NVIDIA Linux kernel distributions contain a vulnerability in nvmap NVMAP_IOC_WRITE* paths, where improper access controls may lead to code execution, complete denial of service, and seriously compromised integrity of all system components.
CVSS Score: 7.8 (HIGH)
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5216; https://nvidia.custhelp.com/app/answers/detail/a_id/5259; https://nvidia.custhelp.com/app/answers/detail/a_id/5216
CVE: CVE-2021-1108
Published: 2021-08-11
Description: NVIDIA Linux kernel distributions contain a vulnerability in FuSa Capture (VI/ISP), where integer underflow due to lack of input validation may lead to complete denial of service, partial integrity, and serious confidentiality loss for all processes in the system.
CVSS Score: 7.3 (HIGH)
CWE: CWE-191
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5216; https://nvidia.custhelp.com/app/answers/detail/a_id/5259; https://nvidia.custhelp.com/app/answers/detail/a_id/5216
CVE: CVE-2021-1109
Published: 2021-08-11
Description: NVIDIA camera firmware contains a multistep, timing-related vulnerability where an unauthorized modification by camera resources may result in loss of data integrity or denial of service across several streams.
CVSS Score: 7.2 (HIGH)
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5216; https://nvidia.custhelp.com/app/answers/detail/a_id/5216
CVE: CVE-2021-1110
Published: 2021-08-11
Description: NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change input data after validation, which may lead to complete denial of service and serious data corruption of all kernel components.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5216; https://nvidia.custhelp.com/app/answers/detail/a_id/5216
CVE: CVE-2021-1111
Published: 2021-08-11
Description: Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds check, which may lead to buffer overflow, resulting in limited information disclosure, limited data integrity, and denial of service across all components.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-119, CWE-125
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5216; https://nvidia.custhelp.com/app/answers/detail/a_id/5216
CVE: CVE-2021-1112
Published: 2021-08-11
Description: NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where a null pointer dereference may lead to complete denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5216; https://nvidia.custhelp.com/app/answers/detail/a_id/5216
CVE: CVE-2021-1113
Published: 2021-08-11
Description: NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unauthorized modification to camera resources, which may result in complete denial of service and partial loss of data integrity for all clients.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-284
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5216; https://nvidia.custhelp.com/app/answers/detail/a_id/5216
CVE: CVE-2021-1114
Published: 2021-08-11
Description: NVIDIA Linux kernel distributions contain a vulnerability in the kernel crypto node, where use after free may lead to complete denial of service.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-416
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5216; https://nvidia.custhelp.com/app/answers/detail/a_id/5216
CVE: CVE-2021-38563
Published: 2021-08-11
Description: An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It mishandles situations in which an array size (derived from a /Size entry) is smaller than the maximum indirect object number, and thus there is an attempted incorrect array access (leading to a NULL pointer dereference, or out-of-bounds read or write).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-129
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2021-38564
Published: 2021-08-11
Description: An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows an out-of-bounds read via util.scand.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2021-38565
Published: 2021-08-11
Description: An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows writing to arbitrary files via submitForm.
CVSS Score: 7.5 (HIGH)
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2021-38566
Published: 2021-08-11
Description: An issue was discovered in Foxit PDF Reader before 11.0.1 and PDF Editor before 11.0.1. It allows stack consumption during recursive processing of embedded XML nodes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2021-38567
Published: 2021-08-11
Description: An issue was discovered in Foxit PDF Editor before 11.0.1 and PDF Reader before 11.0.1 on macOS. It mishandles missing dictionary entries, leading to a NULL pointer dereference, aka CNVD-C-2021-95204.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2021-38568
Published: 2021-08-11
Description: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows memory corruption during conversion of a PDF document to a different document format.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php
CVE: CVE-2021-38569
Published: 2021-08-11
Description: An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows stack consumption via recursive function calls during the handling of XFA forms or link objects.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://www.foxitsoftware.com/support/security-bulletins.php; https://www.foxitsoftware.com/support/security-bulletins.php