deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-1535
Published: 2021-05-06
Description: A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. To be affected by this vulnerability, the Cisco SD-WAN vManage Software must be in cluster mode. This vulnerability is due to the absence of authentication for sensitive information in the cluster management interface. An attacker could exploit this vulnerability by sending a crafted request to the cluster management interface of an affected system. A successful exploit could allow the attacker to allow the attacker to view sensitive information on the affected system.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-497
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmanageinfdis-LKrFpbv; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmanageinfdis-LKrFpbv
CVE: CVE-2021-21505
Published: 2021-05-06
Description: Dell EMC Integrated System for Microsoft Azure Stack Hub, versions 1906 – 2011, contain an undocumented default iDRAC account. A remote unauthenticated attacker, with the knowledge of the default credentials, could potentially exploit this to log in to the system to gain root privileges.
CVSS Score: 8.0 (HIGH)
CWE: CWE-255, CWE-1188
References: https://www.dell.com/support/kbdoc/en-us/000186008/dsa-2021-020-dell-emc-integrated-system-for-microsoft-azure-stack-hub-security-update-for-an-idrac-undocumented-account-vulnerability; https://www.dell.com/support/kbdoc/en-us/000186008/dsa-2021-020-dell-emc-integrated-system-for-microsoft-azure-stack-hub-security-update-for-an-idrac-undocumented-account-vulnerability
CVE: CVE-2021-21527
Published: 2021-05-06
Description: Dell PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulnerability. This vulnerability may allow an authenticated user with ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE privileges to escalate privileges.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://www.dell.com/support/kbdoc/000185978; https://www.dell.com/support/kbdoc/000185978
CVE: CVE-2021-21550
Published: 2021-05-06
Description: Dell EMC PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulnerability. This vulnerability can allow an authenticated user with ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE privileges to escalate privileges.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://www.dell.com/support/kbdoc/000185978; https://www.dell.com/support/kbdoc/000185978
CVE: CVE-2021-22211
Published: 2021-05-06
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7. GitLab Dependency Proxy, under certain circumstances, can impersonate a user resulting in possibly incorrect access handling.
CVSS Score: 3.1 (LOW)
CWE: CWE-863
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22211.json; https://gitlab.com/gitlab-org/gitlab/-/issues/298847; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22211.json
CVE: CVE-2021-24178
Published: 2021-05-06
Description: The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or delete form fields, which could also lead to Stored Cross-Site Scripting issues.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/700f3b04-8298-447c-8d3c-4581880a63b5; https://wpscan.com/vulnerability/700f3b04-8298-447c-8d3c-4581880a63b5
CVE: CVE-2021-24179
Published: 2021-05-06
Description: The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator import files. As the plugin also did not validate uploaded files, it could lead to RCE.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/c0a5cdde-732a-432a-86c2-776df5d130a7; https://wpscan.com/vulnerability/c0a5cdde-732a-432a-86c2-776df5d130a7
CVE: CVE-2021-24214
Published: 2021-05-06
Description: The OpenID Connect Generic Client WordPress plugin 3.8.0 and 3.8.1 did not sanitise the login error when output back in the login form, leading to a reflected Cross-Site Scripting issue. This issue does not require authentication and can be exploited with the default configuration.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/31cf0dfb-4025-4898-a5f4-fc7115565a10; https://wpscan.com/vulnerability/31cf0dfb-4025-4898-a5f4-fc7115565a10
CVE: CVE-2021-24236
Published: 2021-05-06
Description: The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Content-Type in the request to forbid dangerous files. This allows unauthenticated attackers to upload arbitrary files by using a valid image Content-Type along with a PHP filename and code, leading to RCE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://wpscan.com/vulnerability/8f24e74f-60e3-4100-9ab2-ec31b9c9cdea; https://wpscan.com/vulnerability/8f24e74f-60e3-4100-9ab2-ec31b9c9cdea
CVE: CVE-2021-24243
Published: 2021-05-06
Description: An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.6 did not have capability checks nor sanitization, allowing low privilege users (subscriber+) to call it and set XSS payloads, which will be triggered in all backend pages.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://codecanyon.net/item/visual-composer-clipboard/8897711; https://wpscan.com/vulnerability/3bc0733a-b949-40c9-a5fb-f56814fc4af3; https://codecanyon.net/item/visual-composer-clipboard/8897711
CVE: CVE-2021-24244
Published: 2021-05-06
Description: An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://codecanyon.net/item/visual-composer-clipboard/8897711; https://wpscan.com/vulnerability/354b98d8-46a1-4189-b347-198701ea59b9; https://codecanyon.net/item/visual-composer-clipboard/8897711
CVE: CVE-2021-24245
Published: 2021-05-06
Description: The Stop Spammers WordPress plugin before 2021.9 did not escape user input when blocking requests (such as matching a spam word), outputting it in an attribute after sanitising it to remove HTML tags, which is not sufficient and lead to a reflected Cross-Site Scripting issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/162623/WordPress-Stop-Spammers-2021.8-Cross-Site-Scripting.html; https://wpscan.com/vulnerability/5e7accd6-08dc-4c6e-9d19-73e2d7e97735; http://packetstormsecurity.com/files/162623/WordPress-Stop-Spammers-2021.8-Cross-Site-Scripting.html
CVE: CVE-2021-24246
Published: 2021-05-06
Description: The Workscout Core WordPress plugin before 1.3.4, used by the WorkScout Theme did not sanitise the chat messages sent via the workscout_send_message_chat AJAX action, leading to Stored Cross-Site Scripting and Cross-Frame Scripting issues
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://m0ze.ru/vulnerability/%5B2021-02-10%5D-%5BWordPress%5D-%5BCWE-79%5D-WorkScout-WordPress-Theme-v2.0.33.txt; https://wpscan.com/vulnerability/2365a9d0-f6f4-4602-9804-5af23d0cb11d; https://m0ze.ru/vulnerability/%5B2021-02-10%5D-%5BWordPress%5D-%5BCWE-79%5D-WorkScout-WordPress-Theme-v2.0.33.txt
CVE: CVE-2021-24247
Published: 2021-05-06
Description: The Contact Form Check Tester WordPress plugin through 1.0.2 settings are visible to all registered users in the dashboard and are lacking any sanitisation. As a result, any registered user, such as subscriber, can leave an XSS payload in the plugin settings, which will be triggered by any user visiting them, and could allow for privilege escalation. The vendor decided to close the plugin.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/e2990a7a-d4f0-424e-b01d-ecf67cf9c9f3; https://wpscan.com/vulnerability/e2990a7a-d4f0-424e-b01d-ecf67cf9c9f3
CVE: CVE-2021-24248
Published: 2021-05-06
Description: The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://wpscan.com/vulnerability/ca886a34-cd2b-4032-9de1-8089b5cf3001; https://wpscan.com/vulnerability/ca886a34-cd2b-4032-9de1-8089b5cf3001
CVE: CVE-2021-24249
Published: 2021-05-06
Description: The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files, which could then be downloaded by the attacker to get access to PII, such as email, home addresses etc
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/fc4cf749-34ef-43b8-a529-5065d698ab81; https://wpscan.com/vulnerability/fc4cf749-34ef-43b8-a529-5065d698ab81
CVE: CVE-2021-24250
Published: 2021-05-06
Description: The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripting issues across various pages of the plugin.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e23bf712-d891-4df7-99cc-9ef64f19f685; https://wpscan.com/vulnerability/e23bf712-d891-4df7-99cc-9ef64f19f685
CVE: CVE-2021-24251
Published: 2021-05-06
Description: The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator update arbitrary payment history, such as change their status (from pending to completed to example)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/c9911236-4af3-4557-9bc0-217face534e1; https://wpscan.com/vulnerability/c9911236-4af3-4557-9bc0-217face534e1
CVE: CVE-2021-24252
Published: 2021-05-06
Description: The Event Banner WordPress plugin through 1.3 does not verify the uploaded image file, allowing admin accounts to upload arbitrary files, such as .exe, .php, or others executable, leading to RCE. Due to the lack of CSRF check, the issue can also be used via such vector to achieve the same result, or via a LFI as authorisation checks are missing (but would require WP to be loaded)
CVSS Score: 7.2 (HIGH)
CWE: CWE-434, CWE-434
References: https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/Event%20Banner.md; https://wpscan.com/vulnerability/91e81c6d-f24d-4f87-bc13-746715af8f7c; https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/Event%20Banner.md
CVE: CVE-2021-24253
Published: 2021-05-06
Description: The Classyfrieds WordPress plugin through 3.8 does not properly check the uploaded file when an authenticated user adds a listing, only checking the content-type in the request. This allows any authenticated user to upload arbitrary PHP files via the Add Listing feature of the plugin, leading to RCE.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/classyfrieds.md; https://wpscan.com/vulnerability/ee42c233-0ff6-4b27-a5ec-ad3246bef079; https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/classyfrieds.md
CVE: CVE-2021-24254
Published: 2021-05-06
Description: The College publisher Import WordPress plugin through 0.1 does not check for the uploaded CSV file to import, allowing high privilege users to upload arbitrary files, such as PHP, leading to RCE. Due to the lack of CSRF check, the issue could also be exploited via a CSRF attack.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/College%20Puglisher%20Import.md; https://wpscan.com/vulnerability/bb3e56dd-ae2e-45c2-a6c9-a59ae5fc1dc4; https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/College%20Puglisher%20Import.md
CVE: CVE-2021-26543
Published: 2021-05-06
Description: The "gitDiff" function in Wayfair git-parse <=1.0.4 has a command injection vulnerability. Clients of the git-parse library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. The issue has been resolved in version 1.0.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://advisory.checkmarx.net/advisory/CX-2020-4302; https://www.npmjs.com/package/git-parse; https://advisory.checkmarx.net/advisory/CX-2020-4302
CVE: CVE-2021-27216
Published: 2021-05-06
Description: Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-362
References: https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28007-LFDIR.txt; https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28007-LFDIR.txt
CVE: CVE-2021-29490
Published: 2021-05-06
Description: Jellyfin is a free software media system that provides media from a dedicated server to end-user devices via multiple apps. Verions prior to 10.7.3 vulnerable to unauthenticated Server-Side Request Forgery (SSRF) attacks via the imageUrl parameter. This issue potentially exposes both internal and external HTTP servers or other resources available via HTTP `GET` that are visible from the Jellyfin server. The vulnerability is patched in version 10.7.3. As a workaround, disable external access to the API endpoints `/Items/*/RemoteImages/Download`, `/Items/RemoteSearch/Image` and `/Images/Remote` via reverse proxy, or limit to known-friendly IPs.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-918
References: https://github.com/jellyfin/jellyfin/security/advisories/GHSA-rgjw-4fwc-9v96; https://github.com/jellyfin/jellyfin/security/advisories/GHSA-rgjw-4fwc-9v96
CVE: CVE-2021-29491
Published: 2021-05-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-28860. Reason: This candidate is a reservation duplicate of CVE-2021-28860. Notes: All CVE users should reference CVE-2021-28860 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2021-29921
Published: 2021-05-06
Description: In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attackers to bypass access control that is based on IP addresses.
CVSS Score: 9.8 (CRITICAL)
References: https://bugs.python.org/issue36384; https://docs.python.org/3/library/ipaddress.html; https://github.com/python/cpython/blob/63298930fb531ba2bb4f23bc3b915dbf1e17e9e1/Misc/NEWS.d/3.8.0a4.rst
CVE: CVE-2021-31245
Published: 2021-05-06
Description: omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: https://github.com/Ysurac/openmptcprouter-vps-admin; https://github.com/Ysurac/openmptcprouter-vps-admin/commit/a01cbc8c3d3b8bb7720bf3ff234671b4c0e1859c#diff-b89ee68e63302a732d4bde35eb04a205b06f1611147e139642356f173195ab80; https://medium.com/d3crypt/timing-attack-on-openmptcprouter-vps-admin-authentication-cve-2021-31245-12dd92303e1
CVE: CVE-2021-31409
Published: 2021-05-06
Description: Unsafe validation RegEx in EmailValidator component in com.vaadin:vaadin-compatibility-server versions 8.0.0 through 8.12.4 (Vaadin versions 8.0.0 through 8.12.4) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://github.com/vaadin/framework/issues/12240; https://github.com/vaadin/framework/pull/12241; https://vaadin.com/security/cve-2021-31409
CVE: CVE-2021-31532
Published: 2021-05-06
Description: NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i.MX RT600 (silicon rev A0, B0), LPC55S6x, LPC55S2x, LPC552x (silicon rev 0A, 1B), LPC55S1x, LPC551x (silicon rev 0A) and LPC55S0x, LPC550x (silicon rev 0A) include an undocumented ROM patch peripheral that allows unsigned, non-persistent modification of the internal ROM.
CVSS Score: 6.8 (MEDIUM)
References: https://oxide.computer/blog/lpc55/; https://www.nxp.com; https://oxide.computer/blog/lpc55/
CVE: CVE-2021-31616
Published: 2021-05-06
Description: Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.1.0 allow a stack buffer overflow via crafted messages. The overflow in ethereum_extractThorchainSwapData() in ethereum.c can circumvent stack protections and lead to code execution. The vulnerable interface is reachable remotely over WebUSB.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://blog.inhq.net/posts/keepkey-CVE-2021-31616/; https://github.com/keepkey/keepkey-firmware/commit/e49d45594002d4d3fbc1f03488e6dfc0a0a65836; https://github.com/keepkey/keepkey-firmware/releases/tag/v7.1.0
CVE: CVE-2021-32062
Published: 2021-05-06
Description: MapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and 7.6.x before 7.6.3 does not properly enforce the MS_MAP_NO_PATH and MS_MAP_PATTERN restrictions that are intended to control the locations from which a mapfile may be loaded (with MapServer CGI).
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNORAZCJ7AIPJFUY6WGLYIA3QVPWFXFY/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVWUC4EOW5WZAZGPLRTZS5QXNUEBPQ5/; https://mapserver.org/development/changelog/changelog-7-0.html
CVE: CVE-2021-3501
Published: 2021-05-06
Description: A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1950136; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c4f2ee3f68c9a4bf1653d15f1a9a435ae33f7a; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-22206
Published: 2021-05-06
Description: An issue has been discovered in GitLab affecting all versions starting from 11.6. Pull mirror credentials are exposed that allows other maintainers to be able to view the credentials in plain-text,
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-312
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22206.json; https://gitlab.com/gitlab-org/gitlab/-/issues/230864; https://hackerone.com/reports/928074
CVE: CVE-2021-22208
Published: 2021-05-06
Description: An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check could allow the change of timestamp for issue creation or update.
CVSS Score: 4.3 (MEDIUM)
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22208.json; https://gitlab.com/gitlab-org/gitlab/-/issues/301212; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22208.json
CVE: CVE-2021-22209
Published: 2021-05-06
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.8. GitLab was not properly validating authorisation tokens which resulted in GraphQL mutation being executed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22209.json; https://gitlab.com/gitlab-org/gitlab/-/issues/327155; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22209.json
CVE: CVE-2021-22210
Published: 2021-05-06
Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2. When querying the repository branches through API, GitLab was ignoring a query parameter and returning a considerable amount of results.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22210.json; https://gitlab.com/gitlab-org/gitlab/-/issues/322500; https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22210.json
CVE: CVE-2021-28128
Published: 2021-05-06
Description: In Strapi through 3.6.0, the admin panel allows the changing of one's own password without entering the current password. An attacker who gains access to a valid session can use this to take over an account by changing the password.
CVSS Score: 8.1 (HIGH)
CWE: CWE-640
References: https://github.com/strapi/strapi/releases; https://strapi.io/changelog; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-008.txt
CVE: CVE-2020-35519
Published: 2021-05-06
Description: An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check failure allows a local attacker with a user account on the system to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1908251; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://bugzilla.redhat.com/show_bug.cgi?id=1908251
CVE: CVE-2021-20204
Published: 2021-05-06
Description: A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously crafted dirfile databases. This degrades the confidentiality, integrity and availability of third-party software that uses libgetdata as a library. This vulnerability may lead to arbitrary code execution or privilege escalation depending on input/skills of attacker.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=1956348; https://lists.debian.org/debian-lts-announce/2021/05/msg00015.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43JTGEMYMCTHD3LHFD7ENBNSWCNBCYEY/
CVE: CVE-2021-30473
Published: 2021-05-06
Description: aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-763
References: https://aomedia.googlesource.com/aom/+/4efe20e99dcd9b6f8eadc8de8acc825be7416578; https://bugs.chromium.org/p/aomedia/issues/detail?id=2998; https://lists.debian.org/debian-lts-announce/2023/09/msg00003.html