deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-29628
Published: 2021-05-28
Description: In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE before p7, a system call triggering a fault could cause SMAP protections to be disabled for the duration of the system call. This weakness could be combined with other kernel bugs to craft an exploit.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://security.FreeBSD.org/advisories/FreeBSD-SA-21:11.smap.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.FreeBSD.org/advisories/FreeBSD-SA-21:11.smap.asc
CVE: CVE-2021-29629
Published: 2021-05-28
Description: In FreeBSD 13.0-STABLE before n245765-bec0d2c9c841, 12.2-STABLE before r369859, 11.4-STABLE before r369866, 13.0-RELEASE before p1, 12.2-RELEASE before p7, and 11.4-RELEASE before p10, missing message validation in libradius(3) could allow malicious clients or servers to trigger denial of service in vulnerable servers or clients respectively.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://security.FreeBSD.org/advisories/FreeBSD-SA-21:12.libradius.asc; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.FreeBSD.org/advisories/FreeBSD-SA-21:12.libradius.asc
CVE: CVE-2021-3514
Published: 2021-05-28
Description: When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/389ds/389-ds-base/issues/4711; https://lists.debian.org/debian-lts-announce/2023/04/msg00026.html; https://github.com/389ds/389-ds-base/issues/4711
CVE: CVE-2020-15782
Published: 2021-05-28
Description: A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.5.0), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V2.9.2), SIMATIC S7-1500 Software Controller (All versions < V21.9), SIMATIC S7-PLCSIM Advanced (All versions < V4.0), SINAMICS PERFECT HARMONY GH180 Drives (Drives manufactured before 2021-08-13), SINUMERIK MC (All versions < V6.15), SINUMERIK ONE (All versions < V6.15). Affected devices are vulnerable to a memory protection bypass through a specific operation. A remote unauthenticated attacker with network access to port 102/tcp could potentially write arbitrary data and code to protected memory areas or read sensitive data to launch further attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://cert-portal.siemens.com/productcert/pdf/ssa-434534.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-434535.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-434536.pdf
CVE: CVE-2013-4536
Published: 2021-05-28
Description: An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (destination) host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://bugzilla.redhat.com/show_bug.cgi?id=1066401; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://bugzilla.redhat.com/show_bug.cgi?id=1066401
CVE: CVE-2021-32637
Published: 2021-05-28
Description: Authelia is a a single sign-on multi-factor portal for web apps. This affects uses who are using nginx ngx_http_auth_request_module with Authelia, it allows a malicious individual who crafts a malformed HTTP request to bypass the authentication mechanism. It additionally could theoretically affect other proxy servers, but all of the ones we officially support except nginx do not allow malformed URI paths. The problem is rectified entirely in v4.29.3. As this patch is relatively straightforward we can back port this to any version upon request. Alternatively we are supplying a git patch to 4.25.1 which should be relatively straightforward to apply to any version, the git patches for specific versions can be found in the references. The most relevant workaround is upgrading. You can also add a block which fails requests that contains a malformed URI in the internal location block.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-287
References: https://github.com/authelia/authelia/commit/c62dbd43d6e69ae81530e7c4f8763857f8ff1dda; https://github.com/authelia/authelia/security/advisories/GHSA-68wm-pfjf-wqp6; https://github.com/authelia/authelia/commit/c62dbd43d6e69ae81530e7c4f8763857f8ff1dda
CVE: CVE-2021-32642
Published: 2021-05-28
Description: radsecproxy is a generic RADIUS proxy that supports both UDP and TLS (RadSec) RADIUS transports. Missing input validation in radsecproxy's `naptr-eduroam.sh` and `radsec-dynsrv.sh` scripts can lead to configuration injection via crafted radsec peer discovery DNS records. Users are subject to Information disclosure, Denial of Service, Redirection of Radius connection to a non-authenticated server leading to non-authenticated network access. Updated example scripts are available in the master branch and 1.9 release. Note that the scripts are not part of the installation package and are not updated automatically. If you are using the examples, you have to update them manually. The dyndisc scripts work independently of the radsecproxy code. The updated scripts can be used with any version of radsecproxy.
CVSS Score: 7.0 (HIGH)
CWE: CWE-20, CWE-74
References: https://github.com/radsecproxy/radsecproxy/security/advisories/GHSA-56gw-9rj9-55rc; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HOC5AFG65NYLMMUTNSBOPC5F4LBAC7BR/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W7QK5M2SZVMCAFSRQMM6PRZZRQQ372XI/
CVE: CVE-2021-32646
Published: 2021-05-28
Description: Roomer is a discord bot cog (extension) which provides automatic voice channel generation as well as private voice and text channels. A vulnerability has been discovered allowing discord users to get the ``manage channel`` permissions in a private VC they have joined. This allowed them to make changes to or delete the voice channel they have taken over. The exploit does not allow access or control to any other channels in the server. Upgrade to version 1.0.1 for a patched version of the cog. As a workaround you may disable private VCs in your guild(server) or unload the roomer cog to render the exploit unusable.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://github.com/Dav-Git/Dav-Cogs/commit/fbe2ae8ec851a2e9e3e2370db3b812f268e8c8cb; https://github.com/Dav-Git/Dav-Cogs/security/advisories/GHSA-3f73-8j6q-28v8; https://github.com/Dav-Git/Dav-Cogs/commit/fbe2ae8ec851a2e9e3e2370db3b812f268e8c8cb
CVE: CVE-2021-33623
Published: 2021-05-28
Description: The trim-newlines package before 3.0.1 and 4.x before 4.0.1 for Node.js has an issue related to regular expression denial-of-service (ReDoS) for the .end() method.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/sindresorhus/trim-newlines/releases/tag/v4.0.1; https://lists.debian.org/debian-lts-announce/2022/12/msg00033.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-20267
Published: 2021-05-28
Description: A flaw was found in openstack-neutron's default Open vSwitch firewall rules. By sending carefully crafted packets, anyone in control of a server instance connected to the virtual switch can impersonate the IPv6 addresses of other systems on the network, resulting in denial of service or in some cases possibly interception of traffic intended for other destinations. Only deployments using the Open vSwitch driver are affected. Source: OpenStack project. Versions before openstack-neutron 15.3.3, openstack-neutron 16.3.1 and openstack-neutron 17.1.1 are affected.
CVSS Score: 7.1 (HIGH)
CWE: CWE-345
References: https://bugzilla.redhat.com/show_bug.cgi?id=1934330; https://security.openstack.org/ossa/OSSA-2021-001.html; https://bugzilla.redhat.com/show_bug.cgi?id=1934330
CVE: CVE-2020-26641
Published: 2021-05-28
Description: A Cross Site Request Forgery (CSRF) vulnerability was discovered in iCMS 7.0.16 which can allow an attacker to execute arbitrary web scripts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://bbs.pediy.com/thread-262308.htm; https://bbs.pediy.com/thread-262308.htm
CVE: CVE-2020-26642
Published: 2021-05-28
Description: A cross-site scripting (XSS) vulnerability has been discovered in the login page of SeaCMS version 11 which allows an attacker to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.chinapyg.com/thread-137805-1-1.html; https://www.chinapyg.com/thread-137805-1-1.html
CVE: CVE-2021-22519
Published: 2021-05-28
Description: Execute arbitrary code vulnerability in Micro Focus SiteScope product, affecting versions 11.40,11.41 , 2018.05(11.50), 2018.08(11.51), 2018.11(11.60), 2019.02(11.70), 2019.05(11.80), 2019.08(11.90), 2019.11(11.91), 2020.05(11.92), 2020.10(11.93). The vulnerability could allow remote attackers to execute arbitrary code on affected installations of SiteScope.
CVSS Score: 9.8 (CRITICAL)
References: https://softwaresupport.softwaregrp.com/doc/KM03811028; https://softwaresupport.softwaregrp.com/doc/KM03811028
CVE: CVE-2021-33587
Published: 2021-05-28
Description: The css-what package 4.0.0 through 5.0.0 for Node.js does not ensure that attribute parsing has Linear Time Complexity relative to the size of the input.
CVSS Score: 7.5 (HIGH)
References: https://github.com/fb55/css-what/releases/tag/v5.0.1; https://lists.debian.org/debian-lts-announce/2023/03/msg00001.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2020-18392
Published: 2021-05-28
Description: Stack overflow vulnerability in parse_array Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://cwe.mitre.org/data/definitions/674.html; https://github.com/cesanta/mjs/issues/106; https://cwe.mitre.org/data/definitions/674.html
CVE: CVE-2020-18395
Published: 2021-05-28
Description: A NULL-pointer deference issue was discovered in GNU_gama::set() in ellipsoid.h in Gama 2.04 which can lead to a denial of service (DOS) via segment faults caused by crafted inputs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://lists.gnu.org/archive/html/bug-gama/2019-04/msg00001.html; http://lists.gnu.org/archive/html/bug-gama/2019-04/msg00001.html
CVE: CVE-2020-36366
Published: 2021-05-28
Description: Stack overflow vulnerability in parse_value Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/cesanta/mjs/issues/106; https://github.com/cesanta/mjs/issues/106
CVE: CVE-2020-36367
Published: 2021-05-28
Description: Stack overflow vulnerability in parse_block Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/cesanta/mjs/issues/135; https://github.com/cesanta/mjs/issues/135
CVE: CVE-2020-36368
Published: 2021-05-28
Description: Stack overflow vulnerability in parse_statement Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/cesanta/mjs/issues/135; https://github.com/cesanta/mjs/issues/135
CVE: CVE-2020-36369
Published: 2021-05-28
Description: Stack overflow vulnerability in parse_statement_list Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/cesanta/mjs/issues/135; https://github.com/cesanta/mjs/issues/135
CVE: CVE-2020-36370
Published: 2021-05-28
Description: Stack overflow vulnerability in parse_unary Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/cesanta/mjs/issues/136; https://github.com/cesanta/mjs/issues/136
CVE: CVE-2020-36371
Published: 2021-05-28
Description: Stack overflow vulnerability in parse_mul_div_rem Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/cesanta/mjs/issues/136; https://github.com/cesanta/mjs/issues/136
CVE: CVE-2020-36372
Published: 2021-05-28
Description: Stack overflow vulnerability in parse_plus_minus Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/cesanta/mjs/issues/136; https://github.com/cesanta/mjs/issues/136
CVE: CVE-2020-36373
Published: 2021-05-28
Description: Stack overflow vulnerability in parse_shifts Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/cesanta/mjs/issues/136; https://github.com/cesanta/mjs/issues/136
CVE: CVE-2020-36374
Published: 2021-05-28
Description: Stack overflow vulnerability in parse_comparison Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/cesanta/mjs/issues/136; https://github.com/cesanta/mjs/issues/136
CVE: CVE-2020-36375
Published: 2021-05-28
Description: Stack overflow vulnerability in parse_equality Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/cesanta/mjs/issues/136; https://github.com/cesanta/mjs/issues/136
CVE: CVE-2021-29492
Published: 2021-05-28
Description: Envoy is a cloud-native edge/middle/service proxy. Envoy does not decode escaped slash sequences `%2F` and `%5C` in HTTP URL paths in versions 1.18.2 and before. A remote attacker may craft a path with escaped slashes, e.g. `/something%2F..%2Fadmin`, to bypass access control, e.g. a block on `/admin`. A backend server could then decode slash sequences and normalize path and provide an attacker access beyond the scope provided for by the access control policy. ### Impact Escalation of Privileges when using RBAC or JWT filters with enforcement based on URL path. Users with back end servers that interpret `%2F` and `/` and `%5C` and `\` interchangeably are impacted. ### Attack Vector URL paths containing escaped slash characters delivered by untrusted client. Patches in versions 1.18.3, 1.17.3, 1.16.4, 1.15.5 contain new path normalization option to decode escaped slash characters. As a workaround, if back end servers treat `%2F` and `/` and `%5C` and `\` interchangeably and a URL path based access control is configured, one may reconfigure the back end server to not treat `%2F` and `/` and `%5C` and `\` interchangeably.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://github.com/envoyproxy/envoy/security/advisories/GHSA-4987-27fx-x6cf; https://github.com/envoyproxy/envoy/security/advisories/GHSA-4987-27fx-x6cf
CVE: CVE-2021-29505
Published: 2021-05-28
Description: XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94, CWE-502, CWE-502
References: https://github.com/x-stream/xstream/commit/24fac82191292c6ae25f94508d28b9823f83624f; https://github.com/x-stream/xstream/commit/f0c4a8d861b68ffc3119cfbbbd632deee624e227; https://github.com/x-stream/xstream/security/advisories/GHSA-7chv-rrw6-w6fc
CVE: CVE-2021-29507
Published: 2021-05-28
Description: GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. All the applications which are using the configuration file could fail to generate their dlt logs in system. As of time of publication, no patch exists. As a workaround, one may check the integrity of information in configuration file manually.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-20
References: https://github.com/GENIVI/dlt-daemon/security/advisories/GHSA-7cqp-2hqj-mh3f; https://github.com/GENIVI/dlt-daemon/security/advisories/GHSA-7cqp-2hqj-mh3f
CVE: CVE-2021-32616
Published: 2021-05-28
Description: 1CDN is open-source file sharing software. In 1CDN before commit f88a2730fa50fc2c2aeab09011f6f142fd90ec25, there is a basic cross-site scripting vulnerability that allows an attacker to inject /<script>//code</script> and execute JavaScript code on the client side.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79
References: https://github.com/onedotprojects/cdn/commit/f88a2730fa50fc2c2aeab09011f6f142fd90ec25; https://github.com/onedotprojects/cdn/security/advisories/GHSA-g5c4-48rw-hjgh; https://github.com/onedotprojects/cdn/commit/f88a2730fa50fc2c2aeab09011f6f142fd90ec25
CVE: CVE-2021-32619
Published: 2021-05-28
Description: Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. In Deno versions 1.5.0 to 1.10.1, modules that are dynamically imported through `import()` or `new Worker` might have been able to bypass network and file system permission checks when statically importing other modules. The vulnerability has been patched in Deno release 1.10.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-285, CWE-863
References: https://github.com/denoland/deno/security/advisories/GHSA-xpwj-7v8q-mcgj; https://github.com/denoland/deno/security/advisories/GHSA-xpwj-7v8q-mcgj
CVE: CVE-2021-32620
Published: 2021-05-28
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 11.10.13, 12.6.7, and 12.10.2, a user disabled on a wiki using email verification for registration canouldre-activate themself by using the activation link provided for his registration. The problem has been patched in the following versions of XWiki: 11.10.13, 12.6.7, 12.10.2, 13.0. It is possible to workaround the issue by resetting the `validkey` property of the disabled XWiki users. This can be done by editing the user profile with object editor.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285, CWE-863
References: https://github.com/xwiki/xwiki-platform/commit/f9a677408ffb06f309be46ef9d8df1915d9099a4; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-76mp-659p-rw65; https://jira.xwiki.org/browse/XWIKI-17942
CVE: CVE-2021-32621
Published: 2021-05-28
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 12.6.7 and 12.10.3, a user without Script or Programming right is able to execute script requiring privileges by editing gadget titles in the dashboard. The issue has been patched in XWiki 12.6.7, 12.10.3 and 13.0RC1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/xwiki/xwiki-platform/commit/bb7068bd911f91e5511f3cfb03276c7ac81100bc; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-h353-hc43-95vc; https://jay-from-future.github.io/cve/2021/06/17/xwiki-rce-cve.html
CVE: CVE-2021-32635
Published: 2021-05-28
Description: Singularity is an open source container platform. In verions 3.7.2 and 3.7.3, Dde to incorrect use of a default URL, `singularity` action commands (`run`/`shell`/`exec`) specifying a container using a `library://` URI will always attempt to retrieve the container from the default remote endpoint (`cloud.sylabs.io`) rather than the configured remote endpoint. An attacker may be able to push a malicious container to the default remote endpoint with a URI that is identical to the URI used by a victim with a non-default remote endpoint, thus executing the malicious container. Only action commands (`run`/`shell`/`exec`) against `library://` URIs are affected. Other commands such as `pull` / `push` respect the configured remote endpoint. The vulnerability is patched in Singularity version 3.7.4. Two possible workarounds exist: Users can only interact with the default remote endpoint, or an installation can have an execution control list configured to restrict execution to containers signed with specific secure keys.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20, CWE-923
References: https://github.com/sylabs/singularity/releases/tag/v3.7.4; https://github.com/sylabs/singularity/security/advisories/GHSA-5mv9-q7fq-9394; https://security.gentoo.org/glsa/202107-50
CVE: CVE-2021-30461
Published: 2021-05-29
Description: A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value (which might contain PHP code) is injected into config/configuration.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://ssd-disclosure.com/ssd-advisory--voipmonitor-unauth-rce; https://ssd-disclosure.com/ssd-advisory--voipmonitor-unauth-rce
CVE: CVE-2021-31702
Published: 2021-05-29
Description: Frontier ichris through 5.18 mishandles making a DNS request for the hostname in the HTTP Host header, as demonstrated by submitting 127.0.0.1 multiple times for DoS.
CVSS Score: 7.5 (HIGH)
References: https://github.com/l00neyhacker/CVE-2021-31702; https://github.com/l00neyhacker/CVE-2021-31702
CVE: CVE-2021-31703
Published: 2021-05-29
Description: Frontier ichris through 5.18 allows users to upload malicious executable files that might later be downloaded and run by any client user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/l00neyhacker/CVE-2021-31703; https://github.com/l00neyhacker/CVE-2021-31703
CVE: CVE-2021-33564
Published: 2021-05-29
Description: An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verify_url option is disabled. This may lead to code execution. The problem occurs because the generate and process features mishandle use of the ImageMagick convert utility.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-88
References: https://github.com/markevans/dragonfly/commit/25399297bb457f7fcf8e3f91e85945b255b111b5; https://github.com/markevans/dragonfly/compare/v1.3.0...v1.4.0; https://github.com/markevans/dragonfly/issues/513
CVE: CVE-2021-33790
Published: 2021-05-31
Description: The RebornCore library before 4.7.3 allows remote code execution because it deserializes untrusted data in ObjectInputStream.readObject as part of reborncore.common.network.ExtendedPacketBuffer. An attacker can instantiate any class on the classpath with any data. A class usable for exploitation might or might not be present, depending on what Minecraft modifications are installed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://github.com/TechReborn/RebornCore/security/advisories/GHSA-r7pg-4xrf-7mrm; https://vuln.ryotak.me/advisories/45; https://www.curseforge.com/minecraft/mc-mods/reborncore
CVE: CVE-2020-10666
Published: 2021-05-31
Description: The restapps (aka Rest Phone apps) module for Sangoma FreePBX and PBXact 13, 14, and 15 through 15.0.19.2 allows remote code execution via a URL variable to an AMI command.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://wiki.freepbx.org/display/FOP/2020-03-12+SECURITY%3A+Potential+Rest+Phone+Apps+RCE; https://wiki.freepbx.org/display/FOP/List+of+Securities+Vulnerabilities; https://wiki.freepbx.org/display/FOP/2020-03-12+SECURITY%3A+Potential+Rest+Phone+Apps+RCE