deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-24215
Published: 2021-04-12
Description: An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284, CWE-425
References: https://m0ze.ru/vulnerability/%5B2021-03-18%5D-%5BWordPress%5D-%5BCWE-284%5D-Controlled-Admin-Access-WordPress-Plugin-v1.4.0.txt; https://wpscan.com/vulnerability/eec0f29f-a985-4285-8eed-d1855d204a20; https://m0ze.ru/vulnerability/%5B2021-03-18%5D-%5BWordPress%5D-%5BCWE-284%5D-Controlled-Admin-Access-WordPress-Plugin-v1.4.0.txt
CVE: CVE-2021-24217
Published: 2021-04-12
Description: The run_action function of the Facebook for WordPress plugin before 3.0.0 deserializes user supplied data making it possible for PHP objects to be supplied creating an Object Injection vulnerability. There was also a useable magic method in the plugin that could be used to achieve remote code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-502
References: https://wpscan.com/vulnerability/509f2754-a1a1-4142-9126-ae023a88533a; https://www.wordfence.com/blog/2021/03/two-vulnerabilities-patched-in-facebook-for-wordpress-plugin/; https://wpscan.com/vulnerability/509f2754-a1a1-4142-9126-ae023a88533a
CVE: CVE-2021-24218
Published: 2021-04-12
Description: The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin before 3.0.4 were vulnerable to CSRF due to a lack of nonce protection. The settings in the saveFbeSettings function had no sanitization allowing for script tags to be saved.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/169d21fc-d191-46ff-82e8-9ac887aed8a4; https://www.wordfence.com/blog/2021/03/two-vulnerabilities-patched-in-facebook-for-wordpress-plugin/; https://wpscan.com/vulnerability/169d21fc-d191-46ff-82e8-9ac887aed8a4
CVE: CVE-2021-24219
Published: 2021-04-12
Description: The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder WordPress plugin before 2.3.9.4, Thrive Apprentice WordPress plugin before 2.3.9.4, Thrive Visual Editor WordPress plugin before 2.6.7.4, Thrive Dashboard WordPress plugin before 2.3.9.3, Thrive Ovation WordPress plugin before 2.4.5, Thrive Clever Widgets WordPress plugin before 1.57.1 and Rise by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Squared by Thrive Themes WordPress theme before 2.0.0, Voice WordPress theme before 2.0.0, Performag by Thrive Themes WordPress theme before 2.0.0, Pressive by Thrive Themes WordPress theme before 2.0.0, Storied by Thrive Themes WordPress theme before 2.0.0, Thrive Themes Builder WordPress theme before 2.2.4 register a REST API endpoint associated with Zapier functionality. While this endpoint was intended to require an API key in order to access, it was possible to access it by supplying an empty api_key parameter in vulnerable versions if Zapier was not enabled. Attackers could use this endpoint to add arbitrary data to a predefined option in the wp_options table.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284, CWE-306
References: https://wpscan.com/vulnerability/35acd2d8-85fc-4af5-8f6c-224fa7d92900; https://www.wordfence.com/blog/2021/03/recently-patched-vulnerability-in-thrive-themes-actively-exploited-in-the-wild; https://wpscan.com/vulnerability/35acd2d8-85fc-4af5-8f6c-224fa7d92900
CVE: CVE-2021-24220
Published: 2021-04-12
Description: Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Squared by Thrive Themes WordPress theme before 2.0.0, Voice WordPress theme before 2.0.0, Performag by Thrive Themes WordPress theme before 2.0.0, Pressive by Thrive Themes WordPress theme before 2.0.0, Storied by Thrive Themes WordPress theme before 2.0.0 register a REST API endpoint to compress images using the Kraken image optimization engine. By supplying a crafted request in combination with data inserted using the Option Update vulnerability, it was possible to use this endpoint to retrieve malicious code from a remote URL and overwrite an existing file on the site with it or create a new file.This includes executable PHP files that contain malicious code.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-434
References: https://wpscan.com/vulnerability/a2[PII_REDACTED]-4f53-a24f-afc11f6c4cac; https://www.wordfence.com/blog/2021/03/recently-patched-vulnerability-in-thrive-themes-actively-exploited-in-the-wild; https://wpscan.com/vulnerability/a2[PII_REDACTED]-4f53-a24f-afc11f6c4cac
CVE: CVE-2021-24221
Published: 2021-04-12
Description: The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin before 7.1.12 did not sanitise the result_id GET parameter on pages with the [qsm_result] shortcode without id attribute, concatenating it in a SQL statement and leading to an SQL injection. The lowest role allowed to use this shortcode in post or pages being author, such user could gain unauthorised access to the DBMS. If the shortcode (without the id attribute) is embed on a public page or post, then unauthenticated users could exploit the injection.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2479603/; https://wpscan.com/vulnerability/3b52b25c-82a1-41c7-83ac-92e244f7c5ab; https://plugins.trac.wordpress.org/changeset/2479603/
CVE: CVE-2021-24222
Published: 2021-04-12
Description: The WP-Curriculo Vitae Free WordPress plugin through 6.3 suffers from an arbitrary file upload issue in page where the [formCadastro] is embed. The form allows unauthenticated user to register and submit files for their profile picture as well as resume, without any file extension restriction, leading to RCE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/jinhuang1102/CVE-ID-Reports/blob/145fc4e34c9b9799275c8e19d6b02f544c88126b/WP_Curriculo_Free.md; https://wpscan.com/vulnerability/4d715de6-8595-4da9-808a-04a28e409900; https://github.com/jinhuang1102/CVE-ID-Reports/blob/145fc4e34c9b9799275c8e19d6b02f544c88126b/WP_Curriculo_Free.md
CVE: CVE-2021-24223
Published: 2021-04-12
Description: The N5 Upload Form WordPress plugin through 1.0 suffers from an arbitrary file upload issue in page where a Form from the plugin is embed, as any file can be uploaded. The uploaded filename might be hard to guess as it's generated with md5(uniqid(rand())), however, in the case of misconfigured servers with Directory listing enabled, accessing it is trivial.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/jinhuang1102/CVE-ID-Reports/blob/12863f80ced5361e2e2c3f7209566ab3730aa37b/N5_upload.md; https://wpscan.com/vulnerability/d7a72183-0cd1-45de-b98b-2e295b27e5db; https://github.com/jinhuang1102/CVE-ID-Reports/blob/12863f80ced5361e2e2c3f7209566ab3730aa37b/N5_upload.md
CVE: CVE-2021-24224
Published: 2021-04-12
Description: The EFBP_verify_upload_file AJAX action of the Easy Form Builder WordPress plugin through 1.0, available to authenticated users, does not have any security in place to verify uploaded files, allowing low privilege users to upload arbitrary files, leading to RCE.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/jinhuang1102/CVE-ID-Reports/blob/e4c33529b20fa70e3a764ff9b1125839fb9900b5/Easy%20Form%20Builder.md; https://wpscan.com/vulnerability/ed0c054b-54bf-4df8-9015-c76704c93484; https://github.com/jinhuang1102/CVE-ID-Reports/blob/e4c33529b20fa70e3a764ff9b1125839fb9900b5/Easy%20Form%20Builder.md
CVE: CVE-2021-24225
Published: 2021-04-12
Description: The Advanced Booking Calendar WordPress plugin before 1.6.7 did not sanitise the calId GET parameter in the "Seasons & Calendars" page before outputing it in an A tag, leading to a reflected XSS issue
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2503971/; https://wpscan.com/vulnerability/25ca8af5-ab48-4e6d-b2ef-fc291742f1d5; https://plugins.trac.wordpress.org/changeset/2503971/
CVE: CVE-2021-24226
Published: 2021-04-12
Description: In the AccessAlly WordPress plugin before 3.5.7, the file "resource/frontend/product/product-shortcode.php" responsible for the [accessally_order_form] shortcode is dumping serialize($_SERVER), which contains all environment variables. The leakage occurs on all public facing pages containing the [accessally_order_form] shortcode, no login or administrator role is required.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://wpscan.com/vulnerability/8e3e89fd-e380-4108-be23-00e87fbaad16; https://wpscan.com/vulnerability/8e3e89fd-e380-4108-be23-00e87fbaad16
CVE: CVE-2021-24227
Published: 2021-04-12
Description: The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that could be abused by anyone visiting the site. Using this attack vector, an attacker could leak important internal files like wp-config.php, which contains database credentials and cryptographic keys used in the generation of nonces and cookies.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-200
References: https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/; https://wpscan.com/vulnerability/f62df02d-7678-440f-84a1-ddbf09364016; https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/
CVE: CVE-2021-24228
Published: 2021-04-12
Description: The Jetpack Scan team identified a Reflected Cross-Site Scripting in the Login Form of the Patreon WordPress plugin before 1.7.2. The WordPress login form (wp-login.php) is hooked by the plugin and offers to allow users to authenticate on the site using their Patreon account. Unfortunately, some of the error logging logic behind the scene allowed user-controlled input to be reflected on the login page, unsanitized.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/; https://wpscan.com/vulnerability/7a5fadb1-3f1c-4779-8ff6-356fccb5269b; https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/
CVE: CVE-2021-24229
Published: 2021-04-12
Description: The Jetpack Scan team identified a Reflected Cross-Site Scripting via the patreon_save_attachment_patreon_level AJAX action of the Patreon WordPress plugin before 1.7.2. This AJAX hook is used to update the pledge level required by Patreon subscribers to access a given attachment. This action is accessible for user accounts with the ‘manage_options’ privilege (i.e.., only administrators). Unfortunately, one of the parameters used in this AJAX endpoint is not sanitized before being printed back to the user, so the risk it represents is the same as the previous XSS vulnerability.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/; https://wpscan.com/vulnerability/001755c4-add3-4566-a022-ab1f83546c1f; https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/
CVE: CVE-2021-24230
Published: 2021-04-12
Description: The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged in user overwrite or create arbitrary user metadata on the victim’s account once visited. If exploited, this bug can be used to overwrite the “wp_capabilities” meta, which contains the affected user account’s roles and privileges. Doing this would essentially lock them out of the site, blocking them from accessing paid content.
CVSS Score: 8.1 (HIGH)
CWE: CWE-352, CWE-352
References: https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/; https://wpscan.com/vulnerability/2deefa2d-3043-42e5-afef-a42c37703531; https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/
CVE: CVE-2021-24231
Published: 2021-04-12
Description: The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged administrator disconnect the site from Patreon by visiting a specially crafted link.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/; https://wpscan.com/vulnerability/f8ab6855-a319-47ac-82fb-58b181e77500; https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/
CVE: CVE-2021-25925
Published: 2021-04-12
Description: in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server. Therefore, an attacker can inject arbitrary JavaScript code inside the application, and possibly steal a user’s sensitive information.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/SiCKRAGE/SiCKRAGE/commit/9f42426727e16609ad3d1337f6637588b8ed28e4; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25925; https://github.com/SiCKRAGE/SiCKRAGE/commit/9f42426727e16609ad3d1337f6637588b8ed28e4
CVE: CVE-2021-25926
Published: 2021-04-12
Description: In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly in the `quicksearch` feature. Therefore, an attacker can steal a user's sessionID to masquerade as a victim user, to carry out any actions in the context of the user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/SiCKRAGE/SiCKRAGE/commit/9f42426727e16609ad3d1337f6637588b8ed28e4; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25926%2C; https://github.com/SiCKRAGE/SiCKRAGE/commit/9f42426727e16609ad3d1337f6637588b8ed28e4
CVE: CVE-2019-17656
Published: 2021-04-12
Description: A Stack-based Buffer Overflow vulnerability in the HTTPD daemon of FortiOS 6.0.10 and below, 6.2.2 and below and FortiProxy 1.0.x, 1.1.x, 1.2.9 and below, 2.0.0 and below may allow an authenticated remote attacker to crash the service by sending a malformed PUT request to the server. Fortinet is not aware of any successful exploitation of this vulnerability that would lead to code execution.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-787
References: https://fortiguard.com/advisory/FG-IR-19-248; https://fortiguard.com/advisory/FG-IR-21-007; https://fortiguard.com/advisory/FG-IR-19-248
CVE: CVE-2020-15942
Published: 2021-04-12
Description: An information disclosure vulnerability in Web Vulnerability Scan profile of Fortinet's FortiWeb version 6.2.x below 6.2.4 and version 6.3.x below 6.3.5 may allow a remote authenticated attacker to read the password used by the FortiWeb scanner to access the device defined in the scan profile.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-522
References: https://fortiguard.com/advisory/FG-IR-20-076; https://www.fortiguard.com/psirt/FG-IR-20-076; https://fortiguard.com/advisory/FG-IR-20-076
CVE: CVE-2021-22190
Published: 2021-04-12
Description: A path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT token
CVSS Score: 8.5 (HIGH)
CWE: CWE-22
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22190.json; https://gitlab.com/gitlab-org/gitlab/-/issues/300281; https://hackerone.com/reports/1040786
CVE: CVE-2021-24024
Published: 2021-04-12
Description: A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-532
References: https://fortiguard.com/advisory/FG-IR-19-244; https://fortiguard.com/advisory/FG-IR-19-244
CVE: CVE-2021-27486
Published: 2021-04-12
Description: FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-098-01; https://us-cert.cisa.gov/ics/advisories/icsa-21-098-01
CVE: CVE-2021-3465
Published: 2021-04-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2020-15734
Published: 2021-04-12
Description: An Origin Validation Error vulnerability in Bitdefender Safepay allows an attacker to manipulate the browser's file upload capability into accessing other files in the same directory or sub-directories. This issue affects: Bitdefender Safepay versions prior to 25.0.7.29.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-346, CWE-346
References: https://www.bitdefender.com/support/security-advisories/origin-policy-vulnerability-bitdefender-safepay/; https://www.bitdefender.com/support/security-advisories/origin-policy-vulnerability-bitdefender-safepay/
CVE: CVE-2020-7924
Published: 2021-04-12
Description: Usage of specific command line parameter in MongoDB Tools which was originally intended to just skip hostname checks, may result in MongoDB skipping all certificate validation. This may result in accepting invalid certificates.This issue affects: MongoDB Inc. MongoDB Database Tools 3.6 versions later than 3.6.5; 3.6 versions prior to 3.6.21; 4.0 versions prior to 4.0.21; 4.2 versions prior to 4.2.11; 100 versions prior to 100.2.0. MongoDB Inc. Mongomirror 0 versions later than 0.6.0.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-295, CWE-295
References: https://jira.mongodb.org/browse/TOOLS-2587; https://jira.mongodb.org/browse/TOOLS-2587
CVE: CVE-2020-4920
Published: 2021-04-12
Description: IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191396.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/191396; https://www.ibm.com/support/pages/node/6441803; https://exchange.xforce.ibmcloud.com/vulnerabilities/191396
CVE: CVE-2020-4964
Published: 2021-04-12
Description: IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.
CVSS Score: 4.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/192419; https://www.ibm.com/support/pages/node/6441803; https://exchange.xforce.ibmcloud.com/vulnerabilities/192419
CVE: CVE-2020-4965
Published: 2021-04-12
Description: IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/192422; https://www.ibm.com/support/pages/node/6441803; https://exchange.xforce.ibmcloud.com/vulnerabilities/192422
CVE: CVE-2021-20519
Published: 2021-04-12
Description: IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/198441; https://www.ibm.com/support/pages/node/6441803; https://exchange.xforce.ibmcloud.com/vulnerabilities/198441
CVE: CVE-2020-15390
Published: 2021-04-12
Description: pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-269
References: https://jayaramyalla.medium.com/sensitive-information-disclosure-due-to-improper-access-control-cve-2020-15390-124573c15824; https://jayaramyalla.medium.com/sensitive-information-disclosure-due-to-improper-access-control-cve-2020-15390-124573c15824
CVE: CVE-2021-23270
Published: 2021-04-12
Description: In Gargoyle OS 1.12.0, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.
CVSS Score: 7.5 (HIGH)
CWE: CWE-834
References: https://github.com/ericpaulbishop/gargoyle/commit/24afe944a6ffff53d84a748384e276a4e95912ec; https://github.com/ericpaulbishop/gargoyle/commit/24afe944a6ffff53d84a748384e276a4e95912ec
CVE: CVE-2021-29302
Published: 2021-04-12
Description: TP-Link TL-WR802N(US), Archer_C50v5_US v4_200 <= 2020.06 contains a buffer overflow vulnerability in the httpd process in the body message. The attack vector is: The attacker can get shell of the router by sending a message through the network, which may lead to remote code execution.
CVSS Score: 8.1 (HIGH)
CWE: CWE-120
References: https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-29302; https://static.tp-link.com/beta/2021/202103/20210319/TL-WR802Nv4_US_0.9.1_3.17_up_boot%5B210317-rel64474%5D.zip; https://www.tp-link.com/us/support/download/tl-wr802n/#Firmware
CVE: CVE-2021-29357
Published: 2021-04-12
Description: The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 (and LifeTime management console before 11.7.0) allows SSRF for arbitrary outbound HTTP requests.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: https://labs.integrity.pt/advisories/cve-2021-29357/; https://success.outsystems.com/Support/Security/Vulnerabilities/Vulnerability_RTAF-2226; https://labs.integrity.pt/advisories/cve-2021-29357/
CVE: CVE-2021-3125
Published: 2021-04-12
Description: In TP-Link TL-XDR3230 < 1.0.12, TL-XDR1850 < 1.0.9, TL-XDR1860 < 1.0.14, TL-XDR3250 < 1.0.2, TL-XDR6060 Turbo < 1.1.8, TL-XDR5430 < 1.0.11, and possibly others, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set.
CVSS Score: 7.5 (HIGH)
CWE: CWE-834
References: https://service.tp-link.com.cn/detail_download_8719.html; https://service.tp-link.com.cn/detail_download_8720.html; https://service.tp-link.com.cn/detail_download_8722.html