deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-3939
Published: 2021-11-17
Description: Ubuntu-specific modifications to accountsservice (in patch file debian/patches/0010-set-language.patch) caused the fallback_locale variable, pointing to static storage, to be freed, in the user_change_language_authorized_cb function. This is reachable via the SetLanguage dbus function. This is fixed in versions 0.6.55-0ubuntu12~20.04.5, 0.6.55-0ubuntu13.3, 0.6.55-0ubuntu14.1.
CVSS Score: 7.8 (HIGH)
CWE: CWE-590, CWE-763
References: http://packetstormsecurity.com/files/172848/Ubuntu-accountsservice-Double-Free-Memory-Corruption.html; https://bugs.launchpad.net/ubuntu/+source/accountsservice/+bug/1950149; https://ubuntu.com/security/notices/USN-5149-1
CVE: CVE-2021-43337
Published: 2021-11-17
Description: SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control. On sites using the new AccountingStoreFlags=job_script and/or job_env options, the access control rules in SlurmDBD may permit users to request job scripts and environment files to which they should not have access.
CVSS Score: 6.5 (MEDIUM)
References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5VY34WSSPRPA6MISNYBZWHSGX2SYSEEE/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DUWNGDQTS7AWFI7FIHUWQOYJSD2IQTCG/; https://lists.schedmd.com/pipermail/slurm-announce/
CVE: CVE-2021-24598
Published: 2021-11-17
Description: The Testimonial WordPress plugin before 1.6.0 does not escape some testimonial fields which could allow high privilege users to perform Cross Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2606523/; https://wpscan.com/vulnerability/365c09a7-0b10-4145-a415-5c0e9f429ae0; https://plugins.trac.wordpress.org/changeset/2606523/
CVE: CVE-2021-24758
Published: 2021-11-17
Description: The Email Log WordPress plugin before 2.4.7 does not properly validate, sanitise and escape the "orderby" and "order" GET parameters before using them in SQL statement in the admin dashboard, leading to SQL injections
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://wpscan.com/vulnerability/8dd70db4-5845-440d-8b1d-012738abaac2; https://wpscan.com/vulnerability/8dd70db4-5845-440d-8b1d-012738abaac2
CVE: CVE-2021-24772
Published: 2021-11-17
Description: The Stream WordPress plugin before 3.8.2 does not sanitise and validate the order GET parameter from the Stream Records admin dashboard before using it in a SQL statement, leading to an SQL injection issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/changeset/2615811/stream; https://wpscan.com/vulnerability/b9d4f2ad-2f12-4822-817d-982a016af85d; https://plugins.trac.wordpress.org/changeset/2615811/stream
CVE: CVE-2021-24776
Published: 2021-11-17
Description: The WP Performance Score Booster WordPress plugin before 2.1 does not have CSRF check when saving its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/a59ebab8-5df7-4093-b853-da9472f53508; https://wpscan.com/vulnerability/a59ebab8-5df7-4093-b853-da9472f53508
CVE: CVE-2021-24787
Published: 2021-11-17
Description: The Client Invoicing by Sprout Invoices WordPress plugin before 19.9.7 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/c89bf498-f384-49de-820e-6cbd70390db2; https://wpscan.com/vulnerability/c89bf498-f384-49de-820e-6cbd70390db2
CVE: CVE-2021-24796
Published: 2021-11-17
Description: The My Tickets WordPress plugin before 1.8.31 does not properly sanitise and escape the Email field of booked tickets before outputting it in the Payment admin dashboard, which could allow unauthenticated users to perform Cross-Site Scripting attacks against admins
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/d973dc0f-3cb4-408d-a8b0-01abeb9ef951; https://wpscan.com/vulnerability/d973dc0f-3cb4-408d-a8b0-01abeb9ef951
CVE: CVE-2021-24802
Published: 2021-11-17
Description: The Colorful Categories WordPress plugin before 2.0.15 does not enforce nonce checks which could allow attackers to make a logged in admin or editor change taxonomy colors via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/d92db61f-341c-4f3f-b962-326194ddbd1e; https://wpscan.com/vulnerability/d92db61f-341c-4f3f-b962-326194ddbd1e
CVE: CVE-2021-24804
Published: 2021-11-17
Description: The Simple JWT Login WordPress plugin before 3.2.1 does not have nonce checks when saving its settings, allowing attackers to make a logged in admin changed them. Settings such as HMAC verification secret, account registering and default user roles can be updated, which could result in site takeover.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://wpscan.com/vulnerability/6f015e8e-462b-4ef7-a9a1-bb91e7d28e37; https://wpscan.com/vulnerability/6f015e8e-462b-4ef7-a9a1-bb91e7d28e37
CVE: CVE-2021-24815
Published: 2021-11-17
Description: The Accept Donations with PayPal WordPress plugin before 1.3.2 does not escape the Amount Menu Name field of created Buttons, which could allow a high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://wpscan.com/vulnerability/08f4ebf5-6bbe-4fb0-a9d2-c8a994afe39b; https://wpscan.com/vulnerability/08f4ebf5-6bbe-4fb0-a9d2-c8a994afe39b
CVE: CVE-2021-24833
Published: 2021-11-17
Description: The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability, which exists in the Admin preview module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to insufficient validation of question and answer text parameters in Create Poll module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2605368; https://wpscan.com/vulnerability/7cb39087-fbab-463d-9592-003e3fca6d34; https://www.fortiguard.com/zeroday/FG-VD-21-052
CVE: CVE-2021-24834
Published: 2021-11-17
Description: The YOP Poll WordPress plugin before 6.3.1 is affected by a stored Cross-Site Scripting vulnerability which exists in the Create Poll - Options module where a user with a role as low as author is allowed to execute arbitrary script code within the context of the application. This vulnerability is due to insufficient validation of custom label parameters - vote button label , results link label and back to vote caption label.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2605368; https://wpscan.com/vulnerability/72f58b14-e5cb-4f1c-a16f-621238c6ebbf; https://www.fortiguard.com/zeroday/FG-VD-21-053
CVE: CVE-2021-24841
Published: 2021-11-17
Description: The Helpful WordPress plugin before 4.4.59 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://mikadmin.fr/tech/XSS-Stored-Helpful-5b10bc7f40ab319f9797eb4abad4f420660.pdf; https://wpscan.com/vulnerability/55d11acf-8c47-40da-be47-24f74fd7566e; https://mikadmin.fr/tech/XSS-Stored-Helpful-5b10bc7f40ab319f9797eb4abad4f420660.pdf
CVE: CVE-2021-24847
Published: 2021-11-17
Description: The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticated user, does not properly sanitise the offset parameter before using it in a SQL statement, leading an SQL injection when the redirection plugin is also installed
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://wpscan.com/vulnerability/679ca6ed-2343-43f3-9c3e-2c12e12407c1; https://wpscan.com/vulnerability/679ca6ed-2343-43f3-9c3e-2c12e12407c1
CVE: CVE-2021-24850
Published: 2021-11-17
Description: The Insert Pages WordPress plugin before 3.7.0 adds a shortcode that prints out other pages' content and custom fields. It can be used by users with a role as low as Contributor to perform Cross-Site Scripting attacks by storing the payload/s in another post's custom fields.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/2d6f9be0-b9fd-48e5-bd68-94eeb3822c0a; https://wpscan.com/vulnerability/2d6f9be0-b9fd-48e5-bd68-94eeb3822c0a
CVE: CVE-2021-24851
Published: 2021-11-17
Description: The Insert Pages WordPress plugin before 3.7.0 allows users with a role as low as Contributor to access content and metadata from arbitrary posts/pages regardless of their author and status (ie private), using a shortcode. Password protected posts/pages are not affected by such issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863, CWE-862
References: https://plugins.trac.wordpress.org/changeset/2614442/insert-pages; https://wpscan.com/vulnerability/919e67a1-3a50-4940-bb4f-5c5cc2017a83; https://plugins.trac.wordpress.org/changeset/2614442/insert-pages
CVE: CVE-2021-24852
Published: 2021-11-17
Description: The MouseWheel Smooth Scroll WordPress plugin before 5.7 does not have CSRF check in place on its settings page, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://wpscan.com/vulnerability/1069fb40-44f0-468e-9fd4-7a0fb8cde5a5; https://wpscan.com/vulnerability/1069fb40-44f0-468e-9fd4-7a0fb8cde5a5
CVE: CVE-2021-24853
Published: 2021-11-17
Description: The QR Redirector WordPress plugin before 1.6 does not have capability and CSRF checks when saving bulk QR Redirector settings via the qr_save_bulk AJAX action, which could allow any authenticated user, such as subscriber to change the redirect response status code of arbitrary QR Redirects
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284, CWE-352
References: https://wpscan.com/vulnerability/240bed24-0315-4bbf-ba17-e4947e5ecacb; https://wpscan.com/vulnerability/240bed24-0315-4bbf-ba17-e4947e5ecacb
CVE: CVE-2021-24854
Published: 2021-11-17
Description: The QR Redirector WordPress plugin before 1.6.1 does not sanitise and escape some of the QR Redirect fields, which could allow users with a role as low as Contributor perform Stored Cross-Site Scripting attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0d422397-69ff-4d05-aafa-7a572e460e5f; https://wpscan.com/vulnerability/0d422397-69ff-4d05-aafa-7a572e460e5f
CVE: CVE-2021-24856
Published: 2021-11-17
Description: The Shared Files WordPress plugin before 1.6.61 does not sanitise and escape the Download Counter Text settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://mikadmin.fr/tech/XSS-Stored-Shared-Files-a837703ad010d111be11ffdf478aa6114F0lK656bV.pdf; https://wpscan.com/vulnerability/8fd483fb-d399-4b4f-b4ef-bbfad1b5cf1b; https://mikadmin.fr/tech/XSS-Stored-Shared-Files-a837703ad010d111be11ffdf478aa6114F0lK656bV.pdf
CVE: CVE-2021-32600
Published: 2021-11-17
Description: An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, 6.0.x and 5.6.x may allow a local and authenticated user assigned to a specific VDOM to retrieve other VDOMs information such as the admin account list and the network interface list.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: https://fortiguard.com/advisory/FG-IR-20-243; https://fortiguard.com/advisory/FG-IR-20-243
CVE: CVE-2021-41931
Published: 2021-11-17
Description: The Company's Recruitment Management System in id=2 of the parameter from view_vacancy app on-page appears to be vulnerable to SQL injection. The payloads 19424269' or '1309'='1309 and 39476597' or '2917'='2923 were each submitted in the id parameter. These two requests resulted in different responses, indicating that the input is being incorporated into a SQL query in an unsafe way.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-20-100121; https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/CVE-nu11-20-100121
CVE: CVE-2021-42956
Published: 2021-11-17
Description: Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dump all sensitive information including DB Connection string, entire IT infrastructure details, commands executed by IT admin including credentials, secrets, private keys and more.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://medium.com/nestedif/vulnerability-disclosure-sensitive-info-leakage-agent-memory-dump-zoho-r-a-p-3d5ebc8928af; https://medium.com/nestedif/vulnerability-disclosure-sensitive-info-leakage-agent-memory-dump-zoho-r-a-p-3d5ebc8928af
CVE: CVE-2021-42954
Published: 2021-11-17
Description: Zoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by incorrect access control. The installation directory is vulnerable to weak file permissions by allowing full control for Windows Everyone user group (non-admin or any guest users), thereby allowing privilege escalation, unauthorized password reset, stealing of sensitive data, access to credentials in plaintext, access to registry values, tampering with configuration files, etc.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://medium.com/nestedif/vulnerability-disclosure-improper-filesystem-permission-misconfigured-acls-zoho-r-a-p-56e195464b51; https://medium.com/nestedif/vulnerability-disclosure-improper-filesystem-permission-misconfigured-acls-zoho-r-a-p-56e195464b51
CVE: CVE-2021-42955
Published: 2021-11-17
Description: Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized password reset vulnerability. Because of the designed password reset mechanism, any non-admin Windows user can reset the password of the Remote Access Plus Server Admin account.
CVSS Score: 7.3 (HIGH)
CWE: CWE-732
References: https://medium.com/nestedif/vulnerability-disclosure-improper-acl-unauthorized-password-reset-zoho-r-a-p-62efcdceb7a6; https://medium.com/nestedif/vulnerability-disclosure-improper-acl-unauthorized-password-reset-zoho-r-a-p-62efcdceb7a6
CVE: CVE-2021-29860
Published: 2021-11-17
Description: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library to expose sensitive information. IBM X-Force ID: 206084.
CVSS Score: 6.2 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/206084; https://www.ibm.com/support/pages/node/6516774; https://exchange.xforce.ibmcloud.com/vulnerabilities/206084
CVE: CVE-2021-29861
Published: 2021-11-17
Description: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sensitive information. IBM X-Force ID: 206085.
CVSS Score: 6.2 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/206085; https://www.ibm.com/support/pages/node/6516786; https://exchange.xforce.ibmcloud.com/vulnerabilities/206085
CVE: CVE-2021-38959
Published: 2021-11-17
Description: IBM SPSS Statistics for Windows 24.0, 25.0, 26.0, 27.0, 27.0.1, and 28.0 could allow a local user to cause a denial of service by writing arbitrary files to admin protected directories on the system. IBM X-Force ID: 212046.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/212046; https://www.ibm.com/support/pages/node/6516680; https://exchange.xforce.ibmcloud.com/vulnerabilities/212046
CVE: CVE-2021-42250
Published: 2021-11-17
Description: Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-117, CWE-116
References: http://www.openwall.com/lists/oss-security/2021/11/17/2; https://lists.apache.org/thread/53lkszw6d3tybp5t99nvgcj538b9trw9; http://www.openwall.com/lists/oss-security/2021/11/17/2
CVE: CVE-2021-40745
Published: 2021-11-17
Description: Adobe Campaign version 21.2.1 (and earlier) is affected by a Path Traversal vulnerability that could lead to reading arbitrary server files. By leveraging an exposed XML file, an unauthenticated attacker can enumerate other files on the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://helpx.adobe.com/security/products/campaign/apsb21-52.html; https://helpx.adobe.com/security/products/campaign/apsb21-52.html
CVE: CVE-2021-32234
Published: 2021-11-17
Description: SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://csirt.divd.nl/cases/DIVD-2021-00006/; https://www.smartertools.com/smartermail/release-notes/current; https://csirt.divd.nl/cases/DIVD-2021-00006/
CVE: CVE-2021-43975
Published: 2021-11-17
Description: In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=b922f622592af76b57cbc566eaeccda0b31a3496; https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X24M7KDC4OJOZNS3RDSYC7ELNELOLQ2N/
CVE: CVE-2021-43976
Published: 2021-11-17
Description: In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to cause a denial of service (skb_over_panic).
CVSS Score: 4.6 (MEDIUM)
References: https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=04d80663f67ccef893061b49ec8a42ff7045ae84; https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html; https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html
CVE: CVE-2021-43977
Published: 2021-11-17
Description: SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://csirt.divd.nl/cases/DIVD-2021-00006/; https://www.smartertools.com/smartermail/release-notes/current; https://csirt.divd.nl/cases/DIVD-2021-00006/
CVE: CVE-2021-33479
Published: 2021-11-17
Description: A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in measure_pitch() in pgm2asc.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1962861; https://security.gentoo.org/glsa/202401-28; https://sourceforge.net/p/jocr/bugs/39/
CVE: CVE-2021-33480
Published: 2021-11-17
Description: An use-after-free vulnerability was discovered in gocr through 0.53-20200802 in context_correction() in pgm2asc.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=1962854; https://security.gentoo.org/glsa/202401-28; https://sourceforge.net/p/jocr/bugs/40/
CVE: CVE-2021-33481
Published: 2021-11-17
Description: A stack-based buffer overflow vulnerability was discovered in gocr through 0.53-20200802 in try_to_divide_boxes() in pgm2asc.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1962865; https://security.gentoo.org/glsa/202401-28; https://sourceforge.net/p/jocr/bugs/42/
CVE: CVE-2021-35528
Published: 2021-11-17
Description: Improper Access Control vulnerability in the application authentication and authorization of Hitachi Energy Retail Operations, Counterparty Settlement and Billing (CSB) allows an attacker to execute a modified signed Java Applet JAR file. A successful exploitation may lead to data extraction or modification of data inside the application. This issue affects: Hitachi Energy Retail Operations 5.7.3 and prior versions. Hitachi Energy Counterparty Settlement and Billing (CSB) 5.7.3 prior versions.
CVSS Score: 7.2 (HIGH)
CWE: CWE-284
References: https://search.abb.com/library/Download.aspx?DocumentID=8DBD000067&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000068&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=8DBD000067&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2021-42360
Published: 2021-11-17
Description: On sites that also had the Elementor plugin for WordPress installed, it was possible for users with the edit_posts capability, which includes Contributor-level users, to import blocks onto any page using the astra-page-elementor-batch-process AJAX action. An attacker could craft and host a block containing malicious JavaScript on a server they controlled, and then use it to overwrite any post or page by sending an AJAX request with the action set to astra-page-elementor-batch-process and the url parameter pointed to their remotely-hosted malicious block, as well as an id parameter containing the post or page to overwrite. Any post or page that had been built with Elementor, including published pages, could be overwritten by the imported block, and the malicious JavaScript in the imported block would then be executed in the browser of any visitors to that page.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-99, CWE-284
References: https://www.wordfence.com/blog/2021/11/over-1-million-sites-impacted-by-vulnerability-in-starter-templates-plugin/; https://www.wordfence.com/blog/2021/11/over-1-million-sites-impacted-by-vulnerability-in-starter-templates-plugin/
CVE: CVE-2021-42362
Published: 2021-11-17
Description: The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can be used to obtain remote code execution, in versions up to and including 5.3.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/165376/WordPress-Popular-Posts-5.3.2-Remote-Code-Execution.html; https://blog.nintechnet.com/improper-input-validation-fixed-in-wordpress-popular-posts-plugin/; https://github.com/cabrerahector/wordpress-popular-posts/commit/d9b274cf6812eb446e4103cb18f69897ec6fe601
CVE: CVE-2021-0096
Published: 2021-11-17
Description: Improper authentication in the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00568.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00568.html
CVE: CVE-2021-0121
Published: 2021-11-17
Description: Improper access control in the installer for some Intel(R) Iris(R) Xe MAX Dedicated Graphics Drivers for Windows 10 before version 27.20.100.9466 may allow authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00566.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00566.html