deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-26184
Published: 2022-06-01
Description: Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain an Improper Certificate Validation vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295, CWE-295
References: https://www.dell.com/support/article/en-us/sln322935/dsa-2020-245-dell-bsafe-micro-edition-suite-multiple-vulnerabilities?lang=en; https://www.oracle.com/security-alerts/cpujul2022.html; https://www.dell.com/support/article/en-us/sln322935/dsa-2020-245-dell-bsafe-micro-edition-suite-multiple-vulnerabilities?lang=en
CVE: CVE-2020-26185
Published: 2022-06-01
Description: Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain a Buffer Over-Read Vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-125
References: https://www.dell.com/support/article/en-us/sln322935/dsa-2020-245-dell-bsafe-micro-edition-suite-multiple-vulnerabilities?lang=en; https://www.oracle.com/security-alerts/cpujul2022.html; https://www.dell.com/support/article/en-us/sln322935/dsa-2020-245-dell-bsafe-micro-edition-suite-multiple-vulnerabilities?lang=en
CVE: CVE-2022-29098
Published: 2022-06-01
Description: Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement vulnerability. An administrator may create an account with no password. A remote attacker may potentially exploit this leading to a user account compromise.
CVSS Score: 8.1 (HIGH)
CWE: CWE-521, CWE-521
References: https://www.dell.com/support/kbdoc/en-us/000200128/dsa-2022-082-dell-emc-powerscale-onefs-security-update?lang=en; https://www.dell.com/support/kbdoc/en-us/000200128/dsa-2022-082-dell-emc-powerscale-onefs-security-update?lang=en
CVE: CVE-2021-27914
Published: 2022-06-01
Description: A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/mautic/mautic/security/advisories/GHSA-jrwm-pr9x-cgq3; https://github.com/mautic/mautic/security/advisories/GHSA-jrwm-pr9x-cgq3
CVE: CVE-2022-24848
Published: 2022-06-01
Description: DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability affects the `/api/programs/orgUnits?programs=` API endpoint in DHIS2 versions prior to 2.36.10.1 and 2.37.6.1. The system is vulnerable to attack only from users that are logged in to DHIS2, and there is no known way of exploiting the vulnerability without first being logged in as a DHIS2 user. The vulnerability is not exposed to a non-malicious user and requires a conscious attack to be exploited. A successful exploit of this vulnerability could allow the malicious user to read, edit and delete data in the DHIS2 instance's database. Security patches are now available for DHIS2 versions 2.36.10.1 and 2.37.6.1. One may apply mitigations at the web proxy level as a workaround. More information about these mitigations is available in the GitHub Security Advisory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/dhis2/dhis2-core/commit/3b245d04a58b78f0dc9bae8559f36ee4ca36dfac; https://github.com/dhis2/dhis2-core/commit/ef04483a9b177d62e48dcf4e498b302a11f95e7d; https://github.com/dhis2/dhis2-core/pull/10953
CVE: CVE-2022-31000
Published: 2022-06-01
Description: solidus_backend is the admin interface for the Solidus e-commerce framework. Versions prior to 3.1.6, 3.0.6, and 2.11.16 contain a cross-site request forgery (CSRF) vulnerability. The vulnerability allows attackers to change the state of an order's adjustments if they hold its number, and the execution happens on a store administrator's computer. Users should upgrade to solidus_backend 3.1.6, 3.0.6, or 2.11.16 to receive a patch.
CVSS Score: 2.3 (LOW)
CWE: CWE-352
References: https://github.com/solidusio/solidus/commit/de796a2e0be7f154cae48b46e267501559d9716c; https://github.com/solidusio/solidus/security/advisories/GHSA-8639-qx56-r428; https://github.com/solidusio/solidus/commit/de796a2e0be7f154cae48b46e267501559d9716c
CVE: CVE-2022-26905
Published: 2022-06-01
Description: Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVSS Score: 4.3 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26905; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26905; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-30127
Published: 2022-06-01
Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score: 8.3 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30127; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30127; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-30128
Published: 2022-06-01
Description: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score: 8.3 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30128; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30128; https://security.gentoo.org/glsa/202208-25
CVE: CVE-2022-30190
Published: 2022-06-01
Description: A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights.
Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30190; http://packetstormsecurity.com/files/167438/Microsoft-Office-Word-MSDTJS-Code-Execution.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30190
CVE: CVE-2022-31022
Published: 2022-06-01
Description: Bleve is a text indexing library for go. Bleve includes HTTP utilities under bleve/http package, that are used by its sample application. These HTTP methods pave way for exploitation of a node’s filesystem where the bleve index resides, if the user has used bleve’s own HTTP (bleve/http) handlers for exposing the access to the indexes. For instance, the CreateIndexHandler (`http/index_create.go`) and DeleteIndexHandler (`http/index_delete.go`) enable an attacker to create a bleve index (directory structure) anywhere where the user running the server has the write permissions and to delete recursively any directory owned by the same user account. Users who have used the bleve/http package for exposing access to bleve index without the explicit 
handling for the Role Based Access Controls(RBAC) of the index assets would be impacted by this issue. Version 2.5.0 relocated the `http/` dir used _only_ by bleve-explorer to `blevesearch/bleve-explorer`, thereby addressing the issue. However, the http package is purely intended to be used for demonstration purposes. Bleve was never designed handle the RBACs, nor it was ever advertised to be used in that way. The collaborators of this project have decided to stay away from adding any authentication or authorization to bleve project at the moment. The bleve/http package is mainly for demonstration purposes and it lacks exhaustive validation of the user inputs as well as any authentication and authorization measures. It is recommended to not use bleve/http in production use cases.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-288, CWE-306, CWE-306
References: https://github.com/blevesearch/bleve/commit/1c7509d6a17d36f265c90b4e8f4e3a3182fe79ff; https://github.com/blevesearch/bleve/commit/af9e3111dadfedf9d30f0448506b4a57fecc8550; https://github.com/blevesearch/bleve/security/advisories/GHSA-9w9f-6mg8-jp7w
CVE: CVE-2022-29169
Published: 2022-06-01
Description: BigBlueButton is an open source web conferencing system. Versions starting with 2.2 and prior to 2.3.19, 2.4.7, and 2.5.0-beta.2 are vulnerable to regular expression denial of service (ReDoS) attacks. By using specific a RegularExpression, an attacker can cause denial of service for the bbb-html5 service. The useragent library performs checking of device by parsing the input of User-Agent header and lets it go through lookupUserAgent() (alias of useragent.lookup() ). This function handles input by regexing and attackers can abuse that by providing some ReDos payload using `SmartWatch`. The maintainers removed `htmlclient/useragent` from versions 2.3.19, 2.4.7, and 2.5.0-beta.2. As a workaround, disable NginX forwarding the requests to the handler according to the directions in the GitHub Security Advisory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-1333
References: https://github.com/bigbluebutton/bigbluebutton/pull/14886; https://github.com/bigbluebutton/bigbluebutton/pull/14896; https://github.com/bigbluebutton/bigbluebutton/security/advisories/GHSA-rwrv-p665-4vwp
CVE: CVE-2022-29232
Published: 2022-06-01
Description: BigBlueButton is an open source web conferencing system. Starting with version 2.2 and prior to versions 2.3.9 and 2.4-beta-1, an attacker can circumvent access controls to obtain the content of public chat messages from different meetings on the server. The attacker must be a participant in a meeting on the server. BigBlueButton versions 2.3.9 and 2.4-beta-1 contain a patch for this issue. There are currently no known workarounds.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/bigbluebutton/bigbluebutton/pull/12861; https://github.com/bigbluebutton/bigbluebutton/releases/tag/v2.3.9; https://github.com/bigbluebutton/bigbluebutton/releases/tag/v2.4-beta-1
CVE: CVE-2022-29233
Published: 2022-06-02
Description: BigBlueButton is an open source web conferencing system. In BigBlueButton starting with 2.2 but before 2.3.18 and 2.4-rc-1, an attacker can circumvent access controls to gain access to all breakout rooms of the meeting they are in. The permission checks rely on knowledge of internal ids rather than on verification of the role of the user. Versions 2.3.18 and 2.4-rc-1 contain a patch for this issue. There are currently no known workarounds.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://github.com/bigbluebutton/bigbluebutton/pull/13117; https://github.com/bigbluebutton/bigbluebutton/pull/14265; https://github.com/bigbluebutton/bigbluebutton/releases/tag/v2.3.18
CVE: CVE-2022-29234
Published: 2022-06-02
Description: BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4.1, an attacker could send messages to a locked chat within a grace period of 5s any lock setting in the meeting was changed. The attacker needs to be a participant in the meeting. Versions 2.3.18 and 2.4.1 contain a patch for this issue. There are currently no known workarounds.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://github.com/bigbluebutton/bigbluebutton/pull/13850; https://github.com/bigbluebutton/bigbluebutton/pull/14265; https://github.com/bigbluebutton/bigbluebutton/releases/tag/v2.3.18
CVE: CVE-2022-29235
Published: 2022-06-02
Description: BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc-6, an attacker who is able to obtain the meeting identifier for a meeting on a server can find information related to an external video being shared, like the current timestamp and play/pause. The problem has been patched in versions 2.3.18 and 2.4-rc-6 by modifying the stream to send the data only for users in the meeting. There are currently no known workarounds.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/bigbluebutton/bigbluebutton/pull/13788; https://github.com/bigbluebutton/bigbluebutton/pull/14265; https://github.com/bigbluebutton/bigbluebutton/releases/tag/v2.3.18
CVE: CVE-2022-29236
Published: 2022-06-02
Description: BigBlueButton is an open source web conferencing system. Starting in version 2.2 and prior to versions 2.3.18 and 2.4-rc-6, an attacker can circumvent access restrictions for drawing on the whiteboard. The permission check is inadvertently skipped on the server, due to a previously introduced grace period. The attacker must be a meeting participant. The problem has been patched in versions 2.3.18 and 2.4-rc-6. There are currently no known workarounds.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://github.com/bigbluebutton/bigbluebutton/pull/13803; https://github.com/bigbluebutton/bigbluebutton/pull/14265; https://github.com/bigbluebutton/bigbluebutton/releases/tag/v2.3.18
CVE: CVE-2019-12349
Published: 2022-06-02
Description: An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dl_sendsms.php via the id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/cby234/zzcms/issues/2; https://github.com/cby234/zzcms/issues/2
CVE: CVE-2019-12350
Published: 2022-06-02
Description: An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_download.php via an id parameter value with a trailing comma.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/cby234/zzcms/issues/4; https://github.com/cby234/zzcms/issues/4
CVE: CVE-2019-12351
Published: 2022-06-02
Description: An issue was discovered in zzcms 2019. SQL Injection exists in dl/dl_print.php via an id parameter value with a trailing comma.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/cby234/zzcms/issues/3; https://github.com/cby234/zzcms/issues/3
CVE: CVE-2020-20971
Published: 2022-06-02
Description: Cross Site Request Forgery (CSRF) vulnerability in PbootCMS v2.0.3 via /admin.php?p=/User/index.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/TplusSs/PbootCMS/issues/1; https://github.com/TplusSs/PbootCMS/issues/1
CVE: CVE-2020-28246
Published: 2022-06-02
Description: A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL. NOTE: the email templating service was removed after 2020. Additionally, the vendor disputes this issue indicating this is sandboxed and only executable by admins.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74, CWE-74
References: https://github.com/formio/enterprise-release/blob/master/API-Server-Change-Log.md; https://github.com/formio/formio; https://github.com/formio/enterprise-release/blob/master/API-Server-Change-Log.md
CVE: CVE-2021-26633
Published: 2022-06-02
Description: SQL injection and Local File Inclusion (LFI) vulnerabilities in MaxBoard can cause information leakage and privilege escalation. This vulnerabilities can be exploited by manipulating a variable with a desired value and inserting and arbitrary file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66745; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66745
CVE: CVE-2021-26634
Published: 2022-06-02
Description: SQL injection and file upload attacks are possible due to insufficient validation of input values in some parameters and variables of files compromising Maxboard, which may lead to arbitrary code execution or privilege escalation. Attackers can use these vulnerabilities to perform attacks such as stealing server management rights using a web shell.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-288, CWE-434, CWE-434
References: https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66746; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66746
CVE: CVE-2021-26635
Published: 2022-06-02
Description: In the code that verifies the file size in the ark library, it is possible to manipulate the offset read from the target file due to the wrong use of the data type. An attacker could use this vulnerability to cause a stack buffer overflow and as a result, perform an attack such as remote code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-843
References: https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66747; https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66747
CVE: CVE-2021-32546
Published: 2022-06-02
Description: Missing input validation in internal/db/repo_editor.go in Gogs before 0.12.8 allows an attacker to execute code remotely. An unprivileged attacker (registered user) can overwrite the Git configuration in his repository. This leads to Remote Command Execution, because that configuration can contain an option such as sshCommand, which is executed when a master branch is a remote branch (using an ssh:// URI). The remote branch can also be configured by editing the Git configuration file. One can create a new file in a new repository, using the GUI, with "\" as its name, and then rename this file to .git/config with the custom configuration content (and then save it).
CVSS Score: 8.8 (HIGH)
References: https://github.com/gogs/gogs/releases; https://github.com/gogs/gogs/security/advisories/GHSA-56j7-2pm8-rgmx; https://github.com/gogs/gogs/releases
CVE: CVE-2021-33254
Published: 2022-06-02
Description: An issue was discovered in src/http/httpLib.c in EmbedThis Appweb Community Edition 8.2.1, allows attackers to cause a denial of service via the stream paramter to the parseUri function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://awxylitol.github.io/2021/05/09/embedthis-appweb-npd-bug.html; https://awxylitol.github.io/2021/05/09/embedthis-appweb-npd-bug.html
CVE: CVE-2021-33504
Published: 2022-06-02
Description: Couchbase Server before 7.1.0 has Incorrect Access Control.
CVSS Score: 4.9 (MEDIUM)
References: https://docs.couchbase.com/server/current/release-notes/relnotes.html; https://www.couchbase.com/alerts; https://docs.couchbase.com/server/current/release-notes/relnotes.html
CVE: CVE-2021-33615
Published: 2022-06-02
Description: RSA Archer 6.8.00500.1003 P5 allows Unrestricted Upload of a File with a Dangerous Type.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://community.rsa.com/t5/archer-product-advisories/tkb-p/archer-product-advisories; https://github.com/fireeye/Vulnerability-Disclosures; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2022/MNDT-2022-0027/MNDT-2022-0027.md
CVE: CVE-2021-34078
Published: 2022-06-02
Description: lifion-verify-dependencies through 1.1.0 is vulnerable to OS command injection via a crafted dependency name on the scanned project's package.json file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://advisory.checkmarx.net/advisory/CX-2021-4785; https://github.com/lifion/lifion-verify-deps/commit/be1133d5b78e3caa0004fa60207013dca4e1bf38; https://advisory.checkmarx.net/advisory/CX-2021-4785
CVE: CVE-2021-34079
Published: 2022-06-02
Description: OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://advisory.checkmarx.net/advisory/CX-2021-4786; https://www.npmjs.com/package/docker-tester; https://advisory.checkmarx.net/advisory/CX-2021-4786
CVE: CVE-2021-34080
Published: 2022-06-02
Description: OS Command Injection vulnerability in es128 ssl-utils 1.0.0 for Node.js allows attackers to execute arbitrary commands via unsanitized shell metacharacters provided to the createCertRequest() and the createCert() functions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://advisory.checkmarx.net/advisory/CX-2021-4782; https://advisory.checkmarx.net/advisory/CX-2021-4782
CVE: CVE-2021-34081
Published: 2022-06-02
Description: OS Command Injection vulnerability in bbultman gitsome through 0.2.3 allows attackers to execute arbitrary commands via a crafted tag name of the target git repository.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://advisory.checkmarx.net/advisory/CX-2021-4780; https://www.npmjs.com/package/gitsome; https://advisory.checkmarx.net/advisory/CX-2021-4780
CVE: CVE-2021-34082
Published: 2022-06-02
Description: OS Command Injection vulnerability in allenhwkim proctree through 0.1.1 and commit 0ac10ae[PII_REDACTED]38f14e21d5996f2fa5c7593 for Node.js, allows attackers to execute arbitrary commands via the fix function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://advisory.checkmarx.net/advisory/CX-2021-4783; https://github.com/allenhwkim/proctree/blob/master/index.js#L46; https://advisory.checkmarx.net/advisory/CX-2021-4783
CVE: CVE-2021-34083
Published: 2022-06-02
Description: Google-it is a Node.js package which allows its users to send search queries to Google and receive the results in a JSON format. When using the 'Open in browser' option in versions up to 1.6.2, google-it will unsafely concat the result's link retrieved from google to a shell command, potentially exposing the server to RCE.
CVSS Score: 8.1 (HIGH)
CWE: CWE-78
References: https://advisory.checkmarx.net/advisory/CX-2021-4777; https://github.com/PatNeedham/google-it/blob/v1.6.2/lib/googleIt.js#L59; https://github.com/PatNeedham/google-it/blob/v1.6.2/src/googleIt.js#L34
CVE: CVE-2021-34084
Published: 2022-06-02
Description: OS command injection vulnerability in Turistforeningen node-s3-uploader through 2.0.3 for Node.js allows attackers to execute arbitrary commands via the metadata() function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://advisory.checkmarx.net/advisory/CX-2021-4776; https://advisory.checkmarx.net/advisory/CX-2021-4776
CVE: CVE-2021-36866
Published: 2022-06-02
Description: Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Easy Pricing Tables plugin <= 3.1.2 at WordPress.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/easy-pricing-tables/wordpress-easy-pricing-tables-plugin-3-1-2-authenticated-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/easy-pricing-tables/#developers; https://patchstack.com/database/vulnerability/easy-pricing-tables/wordpress-easy-pricing-tables-plugin-3-1-2-authenticated-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2021-36890
Published: 2022-06-02
Description: Cross-Site Request Forgery (CSRF) vulnerability in Social Share Buttons by Supsystic plugin <= 2.2.2 at WordPress.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://patchstack.com/database/vulnerability/social-share-buttons-by-supsystic/wordpress-social-share-buttons-by-supsystic-plugin-2-2-2-cross-site-request-forgery-csrf-vulnerability; https://wordpress.org/plugins/social-share-buttons-by-supsystic/; https://patchstack.com/database/vulnerability/social-share-buttons-by-supsystic/wordpress-social-share-buttons-by-supsystic-plugin-2-2-2-cross-site-request-forgery-csrf-vulnerability
CVE: CVE-2021-3676
Published: 2022-06-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-40186
Published: 2022-06-02
Description: The AppCheck research team identified a Server-Side Request Forgery (SSRF) vulnerability within the DNN CMS platform, formerly known as DotNetNuke. SSRF vulnerabilities allow the attacker to exploit the target system to make network requests on their behalf, allowing a range of possible attacks. In the most common scenario, the attacker exploits SSRF vulnerabilities to attack systems behind the firewall and access sensitive information from Cloud Provider metadata services.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://appcheck-ng.com/dnn-cms-server-side-request-forgery-cve-2021-40186; https://appcheck-ng.com/dnn-cms-server-side-request-forgery-cve-2021-40186
CVE: CVE-2021-42195
Published: 2022-06-02
Description: An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the function handleEditText() located in swfdump.c. It allows an attacker to cause code Execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/matthiaskramm/swftools/issues/174; https://github.com/matthiaskramm/swftools/issues/174