deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-41036
Published: 2021-11-03
Description: In versions prior to 1.1 of the Eclipse Paho MQTT C Client, the client does not check rem_len size in readpacket.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/eclipse/paho.mqtt.embedded-c/issues/96; https://github.com/eclipse/paho.mqtt.embedded-c/issues/96
CVE: CVE-2020-5955
Published: 2021-11-03
Description: An issue was discovered in Int15MicrocodeSmm in Insyde InsydeH2O before 2021-10-14 on Intel client chipsets. A caller may be able to escalate privileges.
CVSS Score: 9.8 (CRITICAL)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.insyde.com/products; https://www.insyde.com/security-pledge/SA-2021002
CVE: CVE-2021-29991
Published: 2021-11-03
Description: Firefox incorrectly accepted a newline in a HTTP/3 header, interpretting it as two separate headers. This allowed for a header splitting attack against servers using HTTP/3. This vulnerability affects Firefox < 91.0.1 and Thunderbird < 91.0.1.
CVSS Score: 8.1 (HIGH)
CWE: CWE-444
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1724896; https://www.mozilla.org/security/advisories/mfsa2021-37/; https://bugzilla.mozilla.org/show_bug.cgi?id=1724896
CVE: CVE-2021-29993
Published: 2021-11-03
Description: Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI spoofs. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 92.
CVSS Score: 8.1 (HIGH)
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1712242%2C1708767%2C1712240%2C1708544%2C1729259; https://www.mozilla.org/security/advisories/mfsa2021-38/; https://bugzilla.mozilla.org/buglist.cgi?bug_id=1712242%2C1708767%2C1712240%2C1708544%2C1729259
CVE: CVE-2021-38491
Published: 2021-11-03
Description: Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded. This vulnerability affects Firefox < 92.
CVSS Score: 6.5 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1551886; https://security.gentoo.org/glsa/202202-03; https://www.mozilla.org/security/advisories/mfsa2021-38/
CVE: CVE-2021-38492
Published: 2021-11-03
Description: When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. *This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 92, Thunderbird < 91.1, Thunderbird < 78.14, Firefox ESR < 78.14, and Firefox ESR < 91.1.
CVSS Score: 6.5 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1721107; https://security.gentoo.org/glsa/202208-14; https://www.mozilla.org/security/advisories/mfsa2021-38/
CVE: CVE-2021-38493
Published: 2021-11-03
Description: Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.14, Thunderbird < 78.14, and Firefox < 92.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1723391%2C1724101%2C1724107; https://security.gentoo.org/glsa/202202-03; https://security.gentoo.org/glsa/202208-14
CVE: CVE-2021-38494
Published: 2021-11-03
Description: Mozilla developers reported memory safety bugs present in Firefox 91. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 92.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1723920%2C1725638; https://www.mozilla.org/security/advisories/mfsa2021-38/; https://bugzilla.mozilla.org/buglist.cgi?bug_id=1723920%2C1725638
CVE: CVE-2021-38495
Published: 2021-11-03
Description: Mozilla developers reported memory safety bugs present in Thunderbird 78.13.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.1 and Firefox ESR < 91.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1723391%2C1723920%2C1724101%2C1724107; https://security.gentoo.org/glsa/202202-03; https://security.gentoo.org/glsa/202208-14
CVE: CVE-2021-38496
Published: 2021-11-03
Description: During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.15, Thunderbird < 91.2, Firefox ESR < 91.2, Firefox ESR < 78.15, and Firefox < 93.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1725335; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html; https://www.debian.org/security/2022/dsa-5034
CVE: CVE-2021-38497
Published: 2021-11-03
Description: Through use of reportValidity() and window.open(), a plain-text validation message could have been overlaid on another origin, leading to possible user confusion and spoofing attacks. This vulnerability affects Firefox < 93, Thunderbird < 91.2, and Firefox ESR < 91.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-346
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1726621; https://www.mozilla.org/security/advisories/mfsa2021-43/; https://www.mozilla.org/security/advisories/mfsa2021-45/
CVE: CVE-2021-38498
Published: 2021-11-03
Description: During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 93, Thunderbird < 91.2, and Firefox ESR < 91.2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1729642; https://www.mozilla.org/security/advisories/mfsa2021-43/; https://www.mozilla.org/security/advisories/mfsa2021-45/
CVE: CVE-2021-38499
Published: 2021-11-03
Description: Mozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 93.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1667102%2C1723170%2C1725356%2C1727364; https://www.mozilla.org/security/advisories/mfsa2021-43/; https://bugzilla.mozilla.org/buglist.cgi?bug_id=1667102%2C1723170%2C1725356%2C1727364
CVE: CVE-2021-38500
Published: 2021-11-03
Description: Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 78.15, Thunderbird < 91.2, Firefox ESR < 91.2, Firefox ESR < 78.15, and Firefox < 93.
CVSS Score: 8.8 (HIGH)
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1725854%2C1728321; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html; https://www.debian.org/security/2022/dsa-5034
CVE: CVE-2021-38501
Published: 2021-11-03
Description: Mozilla developers reported memory safety bugs present in Firefox 92 and Firefox ESR 91.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 93, Thunderbird < 91.2, and Firefox ESR < 91.2.
CVSS Score: 8.8 (HIGH)
References: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1685354%2C1715755%2C1723176; https://www.mozilla.org/security/advisories/mfsa2021-43/; https://www.mozilla.org/security/advisories/mfsa2021-45/
CVE: CVE-2021-38502
Published: 2021-11-03
Description: Thunderbird ignored the configuration to require STARTTLS security for an SMTP connection. A MITM could perform a downgrade attack to intercept transmitted messages, or could take control of the authenticated session to execute SMTP commands chosen by the MITM. If an unprotected authentication method was configured, the MITM could obtain the authentication credentials, too. This vulnerability affects Thunderbird < 91.2.
CVSS Score: 5.9 (MEDIUM)
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1733366; https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html; https://www.debian.org/security/2022/dsa-5034
CVE: CVE-2021-39237
Published: 2021-11-03
Description: Certain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed printers may be vulnerable to potential information disclosure.
CVSS Score: 4.6 (MEDIUM)
References: https://support.hp.com/us-en/document/ish_5[PII_REDACTED]148-16; https://support.hp.com/us-en/document/ish_5[PII_REDACTED]148-16
CVE: CVE-2021-39238
Published: 2021-11-03
Description: Certain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnerable to potential buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://support.hp.com/us-en/document/ish_5[PII_REDACTED]409-16; https://support.hp.com/us-en/document/ish_5[PII_REDACTED]409-16
CVE: CVE-2021-41312
Published: 2021-11-03
Description: Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from Jira Service Management to enable and disable Issue Collectors on Jira Service Management projects via an Improper Authentication vulnerability in the /secure/ViewCollectors endpoint. The affected versions are before version 8.19.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-287
References: https://jira.atlassian.com/browse/JRASERVER-72801; https://jira.atlassian.com/browse/JRASERVER-72801
CVE: CVE-2021-33210
Published: 2021-11-03
Description: An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can (in the WebUI) obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: https://fimeronline.sharepoint.com/:b:/s/GLB-publicsp/EZGyNsndR-hNgtWtDsxoRAoBchaLX4o7RWdTiX1qgD19WQ?e=I9uW0p; https://twitter.com/FIMERspa; https://fimeronline.sharepoint.com/:b:/s/GLB-publicsp/EZGyNsndR-hNgtWtDsxoRAoBchaLX4o7RWdTiX1qgD19WQ?e=I9uW0p
CVE: CVE-2021-33209
Published: 2021-11-03
Description: An issue was discovered in Fimer Aurora Vision before 2.97.10. The response to a failed login attempt discloses whether the username or password is wrong, helping an attacker to enumerate usernames. This can make a brute-force attack easier.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-307
References: https://fimeronline.sharepoint.com/:b:/s/GLB-publicsp/EeKCnV76jG5Pn9Ud30fTlesBlk-SZS3uFU80Gt8IEWiE4Q?e=Tdmabs; https://twitter.com/FIMERspa; https://fimeronline.sharepoint.com/:b:/s/GLB-publicsp/EeKCnV76jG5Pn9Ud30fTlesBlk-SZS3uFU80Gt8IEWiE4Q?e=Tdmabs
CVE: CVE-2021-36192
Published: 2021-11-03
Description: An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiManager 7.0.1 and below, 6.4.6 and below, 6.2.x, 6.0.x, 5.6.0 may allow a FortiGate user to see scripts from other ADOMS.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-200
References: https://fortiguard.com/advisory/FG-IR-21-103; https://fortiguard.com/advisory/FG-IR-21-103
CVE: CVE-2021-40848
Published: 2021-11-03
Description: In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, exported CSV files could contain characters that a spreadsheet program could interpret as a command, leading to execution of a malicious string locally on a device, aka CSV injection.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1236
References: https://bugs.launchpad.net/mahara/+bug/1930471; https://mahara.org/interaction/forum/topic.php?id=8950; https://bugs.launchpad.net/mahara/+bug/1930471
CVE: CVE-2021-40849
Published: 2021-11-03
Description: In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, the account associated with a web services token is vulnerable to being exploited and logged into, resulting in information disclosure (at a minimum) and often escalation of privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613
References: https://bugs.launchpad.net/mahara/+bug/1930469; https://mahara.org/interaction/forum/topic.php?id=8949; https://bugs.launchpad.net/mahara/+bug/1930469
CVE: CVE-2021-36697
Published: 2021-11-03
Description: With an admin account, the .htaccess file in Artica Pandora FMS <=755 can be overwritten with the File Manager component. The new .htaccess file contains a Rewrite Rule with a type definition. A normal PHP file can be uploaded with this new "file type" and the code can be executed with an HTTP request.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-74
References: http://artica.com; http://pandora.com; https://k4m1ll0.com/chained_exploit_htaccess.html
CVE: CVE-2021-36698
Published: 2021-11-03
Description: Pandora FMS through 755 allows XSS via a new Event Filter with a crafted name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://artica.com; http://pandora.com; https://k4m1ll0.com/chained_exploit_htaccess.html
CVE: CVE-2021-43130
Published: 2021-11-03
Description: An SQL Injection vulnerability exists in Sourcecodester Customer Relationship Management System (CRM) 1.0 via the username parameter in customer/login.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-43130; https://www.exploit-db.com/exploits/50158; https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-43130
CVE: CVE-2021-43324
Published: 2021-11-03
Description: LibreNMS through 21.10.2 allows XSS via a widget title.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/librenms/librenms/commit/99d2462b80435b91a35236639b909eebee432126; https://github.com/librenms/librenms/commit/99d2462b80435b91a35236639b909eebee432126
CVE: CVE-2021-37147
Published: 2021-11-03
Description: Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-444, CWE-20, CWE-444
References: https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164; https://www.debian.org/security/2022/dsa-5153; https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164
CVE: CVE-2021-37148
Published: 2021-11-03
Description: Improper input validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.0.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164; https://www.debian.org/security/2022/dsa-5153; https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164
CVE: CVE-2021-37149
Published: 2021-11-03
Description: Improper Input Validation vulnerability in header parsing of Apache Traffic Server allows an attacker to smuggle requests. This issue affects Apache Traffic Server 8.0.0 to 8.1.2 and 9.0.0 to 9.1.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164; https://www.debian.org/security/2022/dsa-5153; https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164
CVE: CVE-2021-38161
Published: 2021-11-03
Description: Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server allows for man in the middle attacks. This issue affects Apache Traffic Server 8.0.0 to 8.0.8.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287, CWE-287
References: https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164; https://www.debian.org/security/2022/dsa-5153; https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164
CVE: CVE-2021-41585
Published: 2021-11-03
Description: Improper Input Validation vulnerability in accepting socket connections in Apache Traffic Server allows an attacker to make the server stop accepting new connections. This issue affects Apache Traffic Server 5.0.0 to 9.1.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164; https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164
CVE: CVE-2021-43082
Published: 2021-11-03
Description: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the stats-over-http plugin of Apache Traffic Server allows an attacker to overwrite memory. This issue affects Apache Traffic Server 9.1.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164; https://lists.apache.org/thread/k01797hyncx53659wr3o72s5cvkc3164
CVE: CVE-2020-20982
Published: 2021-11-03
Description: Cross Site Scripting (XSS) vulnerability in shadoweb wdja v1.5.1, allows attackers to execute arbitrary code and gain escalated privileges, via the backurl parameter to /php/passport/index.php.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://github.com/shadoweb/wdja/issues/1; https://github.com/shadoweb/wdja/issues/1
CVE: CVE-2020-23109
Published: 2021-11-03
Description: Buffer overflow vulnerability in function convert_colorspace in heif_colorconversion.cc in libheif v1.6.2, allows attackers to cause a denial of service and disclose sensitive information, via a crafted HEIF file.
CVSS Score: 8.1 (HIGH)
CWE: CWE-120
References: https://github.com/strukturag/libheif/issues/207; https://github.com/strukturag/libheif/issues/207
CVE: CVE-2020-23126
Published: 2021-11-03
Description: Chamilo LMS version 1.11.10 contains an XSS vulnerability in the personal profile edition form, affecting the user him/herself and social network friends.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-42-2020-04-23-High-risk-low-impact-XSS-in-extended-users-profile-fields; https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-42-2020-04-23-High-risk-low-impact-XSS-in-extended-users-profile-fields
CVE: CVE-2020-23679
Published: 2021-11-03
Description: Buffer overflow vulnerability in Renleilei1992 Linux_Network_Project 1.0, allows attackers to execute arbitrary code, via the password field.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/Renleilei1992/Linux_Network_Project/issues/1; https://github.com/Renleilei1992/Linux_Network_Project/issues/1
CVE: CVE-2020-23680
Published: 2021-11-03
Description: An issue was discovered in function StartPage in text2pdf.c in pdfcorner text2pdf 1.1, allows attackers to cause denial of service or possibly other undisclosed impacts.
CVSS Score: 7.8 (HIGH)
References: http://www.eprg.org/pdfcorner/text2pdf/; https://github.com/philips/text2pdf/issues/1; http://www.eprg.org/pdfcorner/text2pdf/
CVE: CVE-2020-24000
Published: 2021-11-03
Description: SQL Injection vulnerability in eyoucms cms v1.4.7, allows attackers to execute arbitrary code and disclose sensitive information, via the tid parameter to index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/eyoucms/eyoucms/issues/13; https://github.com/eyoucms/eyoucms/issues/13
CVE: CVE-2020-24743
Published: 2021-11-03
Description: An issue was found in /showReports.do Zoho ManageEngine Applications Manager up to 14550, allows attackers to gain escalated privileges via the resourceid parameter.
CVSS Score: 9.8 (CRITICAL)
References: https://www.manageengine.com/products/applications_manager/issues.html#v14550; https://www.manageengine.com/products/applications_manager/issues.html#v14550
CVE: CVE-2021-26786
Published: 2021-11-03
Description: An issue was discoverered in in customercentric-selling-poland PlayTube, allows authenticated attackers to execute arbitrary code via the purchace code to the config.php.
CVSS Score: 8.8 (HIGH)
References: https://github.com/customercentric-selling-poland/playtuber/issues/1; https://github.com/customercentric-selling-poland/playtuber/issues/1
CVE: CVE-2021-27836
Published: 2021-11-03
Description: An issue was discoverered in in function xls_getWorkSheet in xls.c in libxls 1.6.2, allows attackers to cause a denial of service, via a crafted XLS file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/libxls/libxls/issues/94; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5D7XXCVFYRRMI4ENXYSD3MZEBS6SMI7E/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SFOE4Z6T46LA47VXWUVET4ELXRZQ3BWB/
CVE: CVE-2021-40985
Published: 2021-11-03
Description: A stack-based buffer under-read in htmldoc before 1.9.12, allows attackers to cause a denial of service via a crafted BMP image to image_load_bmp.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/michaelrsweet/htmldoc/commit/f12b9666e582a8e7b70f11b28e5ffc49ad625d43; https://github.com/michaelrsweet/htmldoc/issues/444; https://lists.debian.org/debian-lts-announce/2022/02/msg00022.html
CVE: CVE-2020-18259
Published: 2021-11-03
Description: ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting (XSS) vulnerability in the component sposts.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the Post title or Post content fields.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/chilin89117/ED01-CMS/issues/1; https://github.com/chilin89117/ED01-CMS/issues/1
CVE: CVE-2020-18261
Published: 2021-11-03
Description: An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/chilin89117/ED01-CMS/issues/2; https://github.com/chilin89117/ED01-CMS/issues/2
CVE: CVE-2020-18262
Published: 2021-11-03
Description: ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/chilin89117/ED01-CMS/issues/3; https://github.com/chilin89117/ED01-CMS/issues/3
CVE: CVE-2020-18263
Published: 2021-11-03
Description: PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/harshitbansal373/PHP-CMS/issues/1; https://github.com/harshitbansal373/PHP-CMS/issues/1
CVE: CVE-2021-23472
Published: 2021-11-03
Description: This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array (instead of a string) even if the escape attribute is set.
CVSS Score: 3.1 (LOW)
CWE: CWE-843
References: https://github.com/wenzhixin/bootstrap-table/blob/develop/src/utils/index.js%23L218; https://security.snyk.io/vuln/SNYK-JS-BOOTSTRAPTABLE-1657597; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1910690
CVE: CVE-2021-23509
Published: 2021-11-03
Description: This affects the package json-ptr before 3.0.0. A type confusion vulnerability can lead to a bypass of CVE-2020-7766 when the user-provided keys used in the pointer parameter are arrays.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-843
References: https://github.com/flitbit/json-ptr%23security-vulnerabilities-resolved; https://github.com/flitbit/json-ptr/commit/5dc458fbad1c382a2e3ca6d62e66ede3d92849ca; https://github.com/flitbit/json-ptr/pull/42