deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-21658
Published: 2021-05-25
Description: Jenkins Nuget Plugin 1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVSS Score: 9.1 (CRITICAL)
References: http://www.openwall.com/lists/oss-security/2021/05/25/3; https://www.jenkins.io/security/advisory/2021-05-25/#SECURITY-2340; http://www.openwall.com/lists/oss-security/2021/05/25/3
CVE: CVE-2021-21659
Published: 2021-05-25
Description: Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
CVSS Score: 8.1 (HIGH)
References: http://www.openwall.com/lists/oss-security/2021/05/25/3; https://www.jenkins.io/security/advisory/2021-05-25/#SECURITY-2341; http://www.openwall.com/lists/oss-security/2021/05/25/3
CVE: CVE-2021-21660
Published: 2021-05-25
Description: Jenkins Markdown Formatter Plugin 0.1.0 and earlier does not sanitize crafted link target URLs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with the ability to edit any description rendered using the configured markup formatter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2021/05/25/3; https://www.jenkins.io/security/advisory/2021-05-25/#SECURITY-2198; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-21660
CVE: CVE-2021-23937
Published: 2021-05-25
Description: A DNS proxy and possible amplification attack vulnerability in WebClientInfo of Apache Wicket allows an attacker to trigger arbitrary DNS lookups from the server when the X-Forwarded-For header is not properly sanitized. This DNS lookup can be engineered to overload an internal DNS server or to slow down request processing of the Apache Wicket application causing a possible denial of service on either the internal infrastructure or the web application itself. This issue affects Apache Wicket Apache Wicket 9.x version 9.2.0 and prior versions; Apache Wicket 8.x version 8.11.0 and prior versions; Apache Wicket 7.x version 7.17.0 and prior versions and Apache Wicket 6.x version 6.2.0 and later versions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://lists.apache.org/thread.html/r127c0c1f3cb71e5bc619ad1e4b898b97c49758d1f20a[PII_REDACTED]3e%40%3Cannounce.wicket.apache.org%3E; https://lists.apache.org/thread.html/r127c0c1f3cb71e5bc619ad1e4b898b97c49758d1f20a[PII_REDACTED]3e%40%3Cusers.wicket.apache.org%3E; https://lists.apache.org/thread.html/r8ccbd91b56ebf045d151bd4282bfeea7842a0698a0b76118fca8fe78%40%3Cdev.wicket.apache.org%3E
CVE: CVE-2021-29695
Published: 2021-05-25
Description: IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request that would allow them to delete arbitrary files on the system. IBM X-Force ID: 200558.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/200558; https://www.ibm.com/support/pages/node/6454303; https://exchange.xforce.ibmcloud.com/vulnerabilities/200558
CVE: CVE-2021-29708
Published: 2021-05-25
Description: IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow them to elevate their privileges. IBM X-Force ID: 200883.
CVSS Score: 6.7 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/200883; https://www.ibm.com/support/pages/node/6455629; https://exchange.xforce.ibmcloud.com/vulnerabilities/200883
CVE: CVE-2021-32638
Published: 2021-05-25
Description: Github's CodeQL action is provided to run CodeQL-based code scanning on non-GitHub CI/CD systems and requires a GitHub access token to connect to a GitHub repository. The runner and its documentation previously suggested passing the GitHub token as a command-line parameter to the process instead of reading it from a file, standard input, or an environment variable. This approach made the token visible to other processes on the same machine, for example in the output of the `ps` command. If the CI system publicly exposes the output of `ps`, for example by logging the output, then the GitHub access token can be exposed beyond the scope intended. Users of the CodeQL runner on 3rd-party systems, who are passing a GitHub token via the `--github-auth` flag, are affected. This applies to both GitHub.com and GitHub Enterprise users. Users of the CodeQL Action on GitHub Actions are not affected. The `--github-auth` flag is now considered insecure and deprecated. The undocumented `--external-repository-token` flag has been removed. To securely provide a GitHub access token to the CodeQL runner, users should **do one of the following instead**: Use the `--github-auth-stdin` flag and pass the token on the command line via standard input OR set the `GITHUB_TOKEN` environment variable to contain the token, then call the command without passing in the token. The old flag remains present for backwards compatibility with existing workflows. If the user tries to specify an access token using the `--github-auth` flag, there is a deprecation warning printed to the terminal that directs the user to one of the above options. All CodeQL runner releases codeql-bundle-20210304 onwards contain the patches. We recommend updating to a recent version of the CodeQL runner, storing a token in your CI system's secret storage mechanism, and passing the token to the CodeQL runner using `--github-auth-stdin` or the `GITHUB_TOKEN` environment variable. If still using the old flag, ensure that process output, such as from `ps`, is not persisted in CI logs.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-200, CWE-214, CWE-200
References: https://github.com/github/codeql-action/commit/58defc0652e935f6f2ffc70a82828b98d75476fb; https://github.com/github/codeql-action/commit/88714e3a60e72ec53caa0e6a203652ee1f3fb1db; https://github.com/github/codeql-action/releases/tag/codeql-bundle-20210304
CVE: CVE-2021-3320
Published: 2021-05-25
Description: Type Confusion in 802154 ACK Frames Handling. Zephyr versions >= v2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-476, CWE-476, CWE-843
References: http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7; http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7
CVE: CVE-2020-20445
Published: 2021-05-25
Description: FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause a Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: https://lists.debian.org/debian-lts-announce/2021/11/msg00012.html; https://trac.ffmpeg.org/ticket/7996; https://www.debian.org/security/2021/dsa-4990
CVE: CVE-2020-20446
Published: 2021-05-25
Description: FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote malicious user to cause a Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: https://lists.debian.org/debian-lts-announce/2021/11/msg00012.html; https://trac.ffmpeg.org/ticket/7995; https://www.debian.org/security/2021/dsa-4990
CVE: CVE-2020-20448
Published: 2021-05-25
Description: FFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c, which allows a remote malicious user to cause a Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: https://trac.ffmpeg.org/ticket/7990; https://trac.ffmpeg.org/ticket/7990
CVE: CVE-2020-20450
Published: 2021-05-25
Description: FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://trac.ffmpeg.org/ticket/7993; https://www.debian.org/security/2021/dsa-4998; https://trac.ffmpeg.org/ticket/7993
CVE: CVE-2020-20451
Published: 2021-05-25
Description: Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://lists.debian.org/debian-lts-announce/2021/11/msg00012.html; https://trac.ffmpeg.org/ticket/8094; https://lists.debian.org/debian-lts-announce/2021/11/msg00012.html
CVE: CVE-2021-25934
Published: 2021-05-25
Description: In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the function `createRequisitionedNode()` does not perform any validation checks on the input sent to the `node-label` parameter. Due to this flaw an attacker could inject an arbitrary script which will be stored in the database.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/OpenNMS/opennms/commit/101e3aa06ec9a1f8f266335fc6f5685c062c6117; https://github.com/OpenNMS/opennms/commit/eb08b5ed4c5548f3e941a1f0d0363ae4439fa98c; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25934
CVE: CVE-2021-25935
Published: 2021-05-25
Description: In OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the function `add()` performs improper validation checks on the input sent to the `foreign-source` parameter. Due to this flaw an attacker could bypass the existing regex validation and inject an arbitrary script which will be stored in the database.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/OpenNMS/opennms/commit/101e3aa06ec9a1f8f266335fc6f5685c062c6117; https://github.com/OpenNMS/opennms/commit/eb08b5ed4c5548f3e941a1f0d0363ae4439fa98c; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25935
CVE: CVE-2021-25944
Published: 2021-05-25
Description: Prototype pollution vulnerability in 'deep-defaults' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25944; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25944
CVE: CVE-2021-25946
Published: 2021-05-25
Description: Prototype pollution vulnerability in `nconf-toml` versions 0.0.1 through 0.0.2 allows an attacker to cause a denial of service and may lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1321
References: https://github.com/RobLoach/nconf-toml/blob/8ade08cd1cfb9691ab7cc5c3514cc05c5085918f/index.js#L8; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25946; https://github.com/RobLoach/nconf-toml/blob/8ade08cd1cfb9691ab7cc5c3514cc05c5085918f/index.js#L8
CVE: CVE-2021-27562
Published: 2021-05-25
Description: In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mode.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://developer.arm.com/support/arm-security-updates; https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/tree/docs/security/security_advisories/svc_caller_sp_fetching_vulnerability.rst; https://developer.arm.com/support/arm-security-updates
CVE: CVE-2021-32640
Published: 2021-05-25
Description: ws is an open source WebSocket client and server library for Node.js. A specially crafted value of the `Sec-Websocket-Protocol` header can be used to significantly slow down a ws server. The vulnerability has been fixed in ws@7.4.6 (https://github.com/websockets/ws/commit/00c425ec77993773d823f018f64a5c44e17023ff). In vulnerable versions of ws, the issue can be mitigated by reducing the maximum allowed length of the request headers using the [`--max-http-header-size=size`](https://nodejs.org/api/cli.html#cli_max_http_header_size_size) and/or the [`maxHeaderSize`](https://nodejs.org/api/http.html#http_http_createserver_options_requestlistener) options.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://github.com/websockets/ws/commit/00c425ec77993773d823f018f64a5c44e17023ff; https://github.com/websockets/ws/security/advisories/GHSA-6fc8-4gx4-v693; https://lists.apache.org/thread.html/rdfa7b6253c4d6271e31566ecd5f30b7ce1b8fb2c89d52b8c4e0f4e30%40%3Ccommits.tinkerpop.apache.org%3E
CVE: CVE-2020-20453
Published: 2021-05-25
Description: FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause a Denial of Service
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-369
References: https://lists.debian.org/debian-lts-announce/2021/11/msg00012.html; https://trac.ffmpeg.org/ticket/8003; https://www.debian.org/security/2021/dsa-4990
CVE: CVE-2020-25672
Published: 2021-05-25
Description: A memory leak vulnerability was found in Linux kernel in llcp_sock_connect
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://www.openwall.com/lists/oss-security/2020/11/01/1; https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html; https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
CVE: CVE-2021-20209
Published: 2021-05-25
Description: A memory leak vulnerability was found in Privoxy before 3.0.29 in the show-status CGI handler when no action files are configured.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401, CWE-401
References: https://bugzilla.redhat.com/show_bug.cgi?id=1928726; https://security.gentoo.org/glsa/202107-16; https://www.privoxy.org/3.0.29/user-manual/whatsnew.html
CVE: CVE-2016-20011
Published: 2021-05-25
Description: libgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds, allowing remote attackers to manipulate the contents of feeds without detection. This occurs because of the default behavior of SoupSessionSync.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://bugzilla.gnome.org/show_bug.cgi?id=772647; https://gitlab.gnome.org/GNOME/libgrss/-/issues/4; https://gitlab.gnome.org/GNOME/libgrss/-/merge_requests/7.patch
CVE: CVE-2021-33570
Published: 2021-05-25
Description: Postbird 0.8.4 allows stored XSS via the onerror attribute of an IMG element in any PostgreSQL database table. This can result in reading local files via vectors involving XMLHttpRequest and open of a file:/// URL, or discovering PostgreSQL passwords via vectors involving Window.localStorage and savedConnections.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/162831/Postbird-0.8.4-Cross-Site-Scripting-Local-File-Inclusion.html; http://packetstormsecurity.com/files/162872/Postbird-0.8.4-XSS-LFI-Insecure-Data-Storage.html; https://github.com/Paxa/postbird/issues/132
CVE: CVE-2021-33574
Published: 2021-05-25
Description: The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJYYIMDDYOHTP2PORLABTOHYQYYREZDD/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RBUUWUGXVILQXVWEOU7N42ICHPJNAEUP/
CVE: CVE-2021-33575
Published: 2021-05-25
Description: The Pixar ruby-jss gem before 1.6.0 allows remote attackers to execute arbitrary code because of the Plist gem's documented behavior of using Marshal.load during XML document processing.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/PixarAnimationStudios/ruby-jss/blob/e6d48dd8c77f9275c76787d60d3472615fcd9b77/CHANGES.md#160---2021-05-24; https://github.com/patsplat/plist/tree/ce8f9ae42a114f603ea200c955e420782bffc4ad#label-Security+considerations; https://github.com/PixarAnimationStudios/ruby-jss/blob/e6d48dd8c77f9275c76787d60d3472615fcd9b77/CHANGES.md#160---2021-05-24
CVE: CVE-2021-31924
Published: 2021-05-26
Description: Yubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and the application used, could lead to a local PIN bypass. This issue does not allow user presence (touch) or cryptographic signature verification to be bypassed, so an attacker would still need to physically possess and interact with the YubiKey or another enrolled authenticator. If pam-u2f is configured to require PIN authentication, and the application using pam-u2f allows the user to submit NULL as the PIN, pam-u2f will attempt to perform a FIDO2 authentication without PIN. If this authentication is successful, the PIN requirement is bypassed.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: https://developers.yubico.com/pam-u2f/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CRBVOZEMVO72FV4Z5O4GBGSURXHWRGD3/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IL3I5AKECLMK4ADLLACLOEF7H5CMNDP2/
CVE: CVE-2021-29252
Published: 2021-05-26
Description: RSA Archer before 6.9 SP1 P1 (6.9.1.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer user with access to modify link name fields could potentially exploit this vulnerability to execute code in a victim's browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://community.rsa.com/t5/archer-product-advisories/rsa-2021-04-archer-an-rsa-business-update-for-multiple/ta-p/603223; https://www.rsa.com/en-us/company/vulnerability-response-policy; https://community.rsa.com/t5/archer-product-advisories/rsa-2021-04-archer-an-rsa-business-update-for-multiple/ta-p/603223
CVE: CVE-2021-29253
Published: 2021-05-26
Description: The Tableau integration in RSA Archer 6.4 P1 (6.4.0.1) through 6.9 P2 (6.9.0.2) is affected by an insecure credential storage vulnerability. An malicious attacker with access to the Tableau workbook file may obtain access to credential information to use it in further attacks.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-522
References: https://community.rsa.com/t5/archer-product-advisories/rsa-2021-04-archer-an-rsa-business-update-for-multiple/ta-p/603223; https://www.rsa.com/en-us/company/vulnerability-response-policy; https://community.rsa.com/t5/archer-product-advisories/rsa-2021-04-archer-an-rsa-business-update-for-multiple/ta-p/603223
CVE: CVE-2020-25670
Published: 2021-05-26
Description: A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might lead to privilege escalations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2020/11/01/1; http://www.openwall.com/lists/oss-security/2021/05/11/4; https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
CVE: CVE-2020-25671
Published: 2021-05-26
Description: A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2020/11/01/1; https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html; https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
CVE: CVE-2020-25673
Published: 2021-05-26
Description: A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: http://www.openwall.com/lists/oss-security/2020/11/01/1; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PW3OASG7OEMHANDWBM5US5WKTOC76KMH/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UTVACC6PGS6OSD3EYY7FZUAZT2EUMFH5/
CVE: CVE-2021-22543
Published: 2021-05-26
Description: An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: http://www.openwall.com/lists/oss-security/2021/06/26/1; https://github.com/google/security-research/security/advisories/GHSA-7wq5-phmq-m584; https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html
CVE: CVE-2021-26032
Published: 2021-05-26
Description: An issue was discovered in Joomla! 3.0.0 through 3.9.26. HTML was missing in the executable block list of MediaHelper::canUpload, leading to XSS attack vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-adding-html-to-the-executable-block-list-of-mediahelper-canupload.html; https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-adding-html-to-the-executable-block-list-of-mediahelper-canupload.html
CVE: CVE-2021-26033
Published: 2021-05-26
Description: An issue was discovered in Joomla! 3.0.0 through 3.9.26. A missing token check causes a CSRF vulnerability in the AJAX reordering endpoint.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-csrf-in-ajax-reordering-endpoint.html; https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-csrf-in-ajax-reordering-endpoint.html
CVE: CVE-2021-26034
Published: 2021-05-26
Description: An issue was discovered in Joomla! 3.0.0 through 3.9.26. A missing token check causes a CSRF vulnerability in data download endpoints in com_banners and com_sysinfo.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://developer.joomla.org/security-centre/[PII_REDACTED]3-core-csrf-in-data-download-endpoints.html; https://developer.joomla.org/security-centre/[PII_REDACTED]3-core-csrf-in-data-download-endpoints.html
CVE: CVE-2021-27676
Published: 2021-05-26
Description: Centreon version 20.10.2 is affected by a cross-site scripting (XSS) vulnerability. The dep_description (Dependency Description) and dep_name (Dependency Name) parameters are vulnerable to stored XSS. A user has to log in and go to the Configuration > Notifications > Hosts page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://centreon.com; https://github.com/centreon/centreon/pull/9587; http://centreon.com
CVE: CVE-2019-14836
Published: 2021-05-26
Description: A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An attacker could use this flaw to access unauthorized information or conduct further attacks.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://bugzilla.redhat.com/show_bug.cgi?id=1847605; https://bugzilla.redhat.com/show_bug.cgi?id=1847605
CVE: CVE-2020-25668
Published: 2021-05-26
Description: A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-662
References: http://www.openwall.com/lists/oss-security/2020/10/30/1; http://www.openwall.com/lists/oss-security/2020/11/04/3; https://bugzilla.redhat.com/show_bug.cgi?id=1893287%2C
CVE: CVE-2020-25669
Published: 2021-05-26
Description: A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkbd_disconnect, there is still an alias in sunkbd_reinit causing Use After Free.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2020/11/05/2; http://www.openwall.com/lists/oss-security/2020/11/20/5; https://github.com/torvalds/linux/commit/77e70d351db7de07a46ac49b87a6c3c7a60fca7e