deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-5774
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none
CVE: CVE-2017-5775
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none
CVE: CVE-2017-5776
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none
CVE: CVE-2017-5777
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none
CVE: CVE-2017-5778
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none
CVE: CVE-2020-12896
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12906
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12909
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12910
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12913
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12914
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12915
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12916
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12917
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12919
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12921
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12922
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12923
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12924
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12925
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12935
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12936
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12941
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12957
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12959
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12968
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12969
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12970
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12971
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12972
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12973
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12974
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12975
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12976
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12977
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12978
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12979
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12980
Published: 2021-06-11
Description: An out of bounds write and read vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-787
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
CVE: CVE-2020-12981
Published: 2021-06-11
Description: An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the driver, potentially causing memory corruptions in high privileged processes, which can lead to escalation of privileges or denial of service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
CVE: CVE-2020-12982
Published: 2021-06-11
Description: An invalid object pointer free vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-763
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
CVE: CVE-2020-12983
Published: 2021-06-11
Description: An out of bounds write vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privileges or denial of service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
CVE: CVE-2020-12984
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12985
Published: 2021-06-11
Description: An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
CVE: CVE-2020-12986
Published: 2021-06-11
Description: An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may cause arbitrary code execution in the kernel, leading to escalation of privilege or denial of service.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
CVE: CVE-2020-12987
Published: 2021-06-11
Description: A heap information leak/kernel pool address disclosure vulnerability in the AMD Graphics Driver for Windows 10 may lead to KASLR bypass.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1000
CVE: CVE-2020-12988
Published: 2021-06-11
Description: A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted.
CVSS Score: 7.5 (HIGH)
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE: CVE-2020-12989
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12990
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12991
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12992
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12993
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12994
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12995
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12996
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12997
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12998
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-12999
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-13000
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-13001
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-13002
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-13003
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-13004
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-13005
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-13006
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-13007
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-13008
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2020-13009
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none
CVE: CVE-2021-3525
Published: 2021-06-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-32547
Published: 2021-06-12
Description: It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-lts package apport hooks, it could expose private data to other local users.
CVSS Score: 7.3 (HIGH)
CWE: CWE-59, CWE-61, CWE-59
References: https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904; https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904
CVE: CVE-2021-32548
Published: 2021-06-12
Description: It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-8 package apport hooks, it could expose private data to other local users.
CVSS Score: 7.3 (HIGH)
CWE: CWE-59, CWE-61, CWE-59
References: https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904; https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904
CVE: CVE-2021-32549
Published: 2021-06-12
Description: It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-13 package apport hooks, it could expose private data to other local users.
CVSS Score: 7.3 (HIGH)
CWE: CWE-59, CWE-61, CWE-59
References: https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904; https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904
CVE: CVE-2021-32550
Published: 2021-06-12
Description: It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package apport hooks, it could expose private data to other local users.
CVSS Score: 7.3 (HIGH)
CWE: CWE-59, CWE-61, CWE-59
References: https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904; https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904
CVE: CVE-2021-32551
Published: 2021-06-12
Description: It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-15 package apport hooks, it could expose private data to other local users.
CVSS Score: 7.3 (HIGH)
CWE: CWE-59, CWE-61, CWE-59
References: https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904; https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904
CVE: CVE-2021-32552
Published: 2021-06-12
Description: It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-16 package apport hooks, it could expose private data to other local users.
CVSS Score: 7.3 (HIGH)
CWE: CWE-59, CWE-61, CWE-59
References: https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904; https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904
CVE: CVE-2021-32553
Published: 2021-06-12
Description: It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users.
CVSS Score: 7.3 (HIGH)
CWE: CWE-59, CWE-61, CWE-59
References: https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904; https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904
CVE: CVE-2021-32554
Published: 2021-06-12
Description: It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other local users.
CVSS Score: 7.3 (HIGH)
CWE: CWE-59, CWE-61, CWE-59
References: https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904; https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904
CVE: CVE-2021-32555
Published: 2021-06-12
Description: It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg-hwe-18.04 package apport hooks, it could expose private data to other local users.
CVSS Score: 7.3 (HIGH)
CWE: CWE-59, CWE-61, CWE-59
References: https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904; https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904
CVE: CVE-2021-32556
Published: 2021-06-12
Description: It was discovered that the get_modified_conffiles() function in backends/packaging-apt-dpkg.py allowed injecting modified package names in a manner that would confuse the dpkg(1) call.
CVSS Score: 3.8 (LOW)
CWE: CWE-78, CWE-78
References: https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904; https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904
CVE: CVE-2021-32557
Published: 2021-06-12
Description: It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-59, CWE-61, CWE-59
References: https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904; https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1917904
CVE: CVE-2021-31811
Published: 2021-06-12
Description: In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-789, CWE-770
References: http://www.openwall.com/lists/oss-security/2021/06/12/2; https://lists.apache.org/thread.html/r132e9dbbe0ebdc08b39583d8be0a575fdba573d60a42d940228bceff%40%3Cnotifications.ofbiz.apache.org%3E; https://lists.apache.org/thread.html/r143fd8445e0e778f4a85187bd79438630b96b8040e9401751fdb8aea%40%3Ccommits.ofbiz.apache.org%3E
CVE: CVE-2021-31812
Published: 2021-06-12
Description: In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-834, CWE-835
References: http://www.openwall.com/lists/oss-security/2021/06/12/1; https://lists.apache.org/thread.html/r132e9dbbe0ebdc08b39583d8be0a575fdba573d60a42d940228bceff%40%3Cnotifications.ofbiz.apache.org%3E; https://lists.apache.org/thread.html/r143fd8445e0e778f4a85187bd79438630b96b8040e9401751fdb8aea%40%3Ccommits.ofbiz.apache.org%3E
CVE: CVE-2021-34682
Published: 2021-06-12
Description: Receita Federal IRPF 2021 1.7 allows a man-in-the-middle attack against the update feature.
CVSS Score: 3.7 (LOW)
References: https://www.youtube.com/watch?v=vClCaAAfzGg; https://www.youtube.com/watch?v=vClCaAAfzGg
CVE: CVE-2021-23394
Published: 2021-06-13
Description: The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP.
CVSS Score: 8.1 (HIGH)
CWE: CWE-434
References: https://blog.sonarsource.com/elfinder-case-study-of-web-file-manager-vulnerabilities/; https://github.com/Studio-42/elFinder; https://github.com/Studio-42/elFinder/commit/75ea92decc16a5daf7f618f85dc621d1b534b5e1