deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-40881
Published: 2021-09-15
Description: An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/sanluan/PublicCMS/issues/57; https://github.com/sanluan/PublicCMS/issues/57
CVE: CVE-2021-39128
Published: 2021-09-16
Description: Affected versions of Atlassian Jira Server or Data Center using the Jira Service Management addon allow remote attackers with JIRA Administrators access to execute arbitrary Java code via a server-side template injection vulnerability in the Email Template feature. The affected versions of Jira Server or Data Center are before version 8.13.12, and from version 8.14.0 before 8.19.1.
CVSS Score: 7.2 (HIGH)
CWE: CWE-1336, CWE-94
References: https://jira.atlassian.com/browse/JRASERVER-72804; https://jira.atlassian.com/browse/JRASERVER-72804
CVE: CVE-2020-14109
Published: 2021-09-16
Description: There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version =< 1.1.12
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=25&locale=zh; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=25&locale=zh
CVE: CVE-2020-14130
Published: 2021-09-16
Description: Some js interfaces in the Xiaomi community were exposed, causing sensitive functions to be maliciously called on Xiaomi community app Affected Version <3.0.210809
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668
References: https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=25&locale=zh; https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=25&locale=zh
CVE: CVE-2021-40066
Published: 2021-09-16
Description: The access controls on the Mobility read-only API improperly validate user access permissions. Attackers with both network access to the API and valid credentials can read data from it; regardless of access control group membership settings. This vulnerability is fixed in Mobility v11.76 and Mobility v12.14.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: https://www.netmotionsoftware.com/security-advisories/cve-2021-40066; https://www.netmotionsoftware.com/security-advisories/cve-2021-40066
CVE: CVE-2021-40067
Published: 2021-09-16
Description: The access controls on the Mobility read-write API improperly validate user access permissions; this API is disabled by default. If the API is manually enabled, attackers with both network access to the API and valid credentials can read and write data to it; regardless of access control group membership settings. This vulnerability is fixed in Mobility v12.14.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-732
References: https://www.netmotionsoftware.com/security-advisories/cve-2021-40067; https://www.netmotionsoftware.com/security-advisories/cve-2021-40067
CVE: CVE-2020-14119
Published: 2021-09-16
Description: There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom< 1.1.12
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=16; https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=16
CVE: CVE-2020-14124
Published: 2021-09-16
Description: There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM version =rom< 1.1.12.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=17; https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=17
CVE: CVE-2021-34571
Published: 2021-09-16
Description: Multiple Wireless M-Bus devices by Enbra use Hard-coded Credentials in Security mode 5 without an option to change the encryption key. An adversary can learn all information that is available in Enbra EWM.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-798
References: https://www.fit.vutbr.cz/~polcak/CVE-2021-34571.en; https://www.fit.vutbr.cz/~polcak/CVE-2021-34571.en
CVE: CVE-2021-34572
Published: 2021-09-16
Description: Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead timestamps of the sensor are replaced by the time of the readout even if the data is a replay of earlier data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-345
References: https://www.fit.vutbr.cz/~polcak/CVE-2021-34572.en; https://www.fit.vutbr.cz/~polcak/CVE-2021-34572.en
CVE: CVE-2021-34573
Published: 2021-09-16
Description: In Enbra EWM in Version 1.7.29 together with several tested wireless M-Bus Sensors the events backflow and "no flow" are not reconized or misinterpreted. This may lead to wrong values and missing events.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-682
References: https://www.fit.vutbr.cz/~polcak/CVE-2021-34573.en; https://www.fit.vutbr.cz/~polcak/CVE-2021-34573.en
CVE: CVE-2021-34576
Published: 2021-09-16
Description: In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give sensitive information (water consumption without distinct values) to third parties.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-203
References: https://www.fit.vutbr.cz/~polcak/CVE-2021-34576.en; https://www.fit.vutbr.cz/~polcak/CVE-2021-34576.en
CVE: CVE-2021-27340
Published: 2021-09-16
Description: OpenSIS Community Edition version <= 7.6 is affected by a reflected XSS vulnerability in EmailCheck.php via the "opt" parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/OS4ED/openSIS-Classic/commit/f78407d5291c686c3f416073dcb9143f3a3d5489#diff-24b751f2072f058259d[PII_REDACTED]01f9fa29884ebcc09ce7eb88def3421e5ba; https://github.com/OS4ED/openSIS-Classic/issues/158; https://github.com/OS4ED/openSIS-Classic/releases
CVE: CVE-2021-27341
Published: 2021-09-16
Description: OpenSIS Community Edition version <= 7.6 is affected by a local file inclusion vulnerability in DownloadWindow.php via the "filename" parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/OS4ED/openSIS-Classic/commit/f78407d5291c686c3f416073dcb9143f3a3d5489#diff-24b751f2072f058259d[PII_REDACTED]01f9fa29884ebcc09ce7eb88def3421e5ba; https://github.com/OS4ED/openSIS-Classic/issues/158; https://github.com/OS4ED/openSIS-Classic/releases
CVE: CVE-2021-34798
Published: 2021-09-16
Description: Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476, CWE-476
References: http://httpd.apache.org/security/vulnerabilities_24.html; https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf; https://kc.mcafee.com/corporate/index?page=content&id=SB10379
CVE: CVE-2021-36160
Published: 2021-09-16
Description: A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-125
References: http://httpd.apache.org/security/vulnerabilities_24.html; https://lists.apache.org/thread.html/r2eb200ac1340f69aa22af61ab34780c531d110437910cb9c0ece3b37%40%3Cbugs.httpd.apache.org%3E; https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432%40%3Cusers.httpd.apache.org%3E
CVE: CVE-2021-39208
Published: 2021-09-16
Description: SharpCompress is a fully managed C# library to deal with many compression types and formats. Versions prior to 0.29.0 are vulnerable to partial path traversal. SharpCompress recreates a hierarchy of directories under destinationDirectory if ExtractFullPath is set to true in options. In order to prevent extraction outside the destination directory the destinationFileName path is verified to begin with fullDestinationDirectoryPath. However, prior to version 0.29.0, it is not enforced that fullDestinationDirectoryPath ends with slash. If the destinationDirectory is not slash terminated like `/home/user/dir` it is possible to create a file with a name thats begins as the destination directory one level up from the directory, i.e. `/home/user/dir.sh`. Because of the file name and destination directory constraints the arbitrary file creation impact is limited and depends on the use case. This issue is fixed in SharpCompress version 0.29.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/adamhathcock/sharpcompress/pull/614; https://github.com/adamhathcock/sharpcompress/releases/tag/0.29.0; https://github.com/adamhathcock/sharpcompress/security/advisories/GHSA-jp7f-grcv-6mjf
CVE: CVE-2021-39214
Published: 2021-09-16
Description: mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.2 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/response through mitmproxy as part of another request/response's HTTP message body. While a smuggled request is still captured as part of another request's body, it does not appear in the request list and does not go through the usual mitmproxy event hooks, where users may have implemented custom access control checks or input sanitization. Unless one uses mitmproxy to protect an HTTP/1 service, no action is required. The vulnerability has been fixed in mitmproxy 7.0.3 and above.
CVSS Score: 8.1 (HIGH)
CWE: CWE-444
References: https://github.com/mitmproxy/mitmproxy/security/advisories/GHSA-22gh-3r9q-xf38; https://github.com/mitmproxy/mitmproxy/security/advisories/GHSA-22gh-3r9q-xf38
CVE: CVE-2021-39239
Published: 2021-09-16
Description: A vulnerability in XML processing in Apache Jena, in versions up to 4.1.0, may allow an attacker to execute XML External Entities (XXE), including exposing the contents of local files to a remote server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://lists.apache.org/thread.html/r0f03ae7e102c3e8587fdd36531fc[PII_REDACTED]8156dfbd7d9c1bf45%40%3Cdev.jena.apache.org%3E; https://lists.apache.org/thread.html/rce5241b228a1f0e5880f6b2bfdb7ae9ee420e94cb692738a0bbfed9d%40%3Cdev.jena.apache.org%3E; https://lists.apache.org/thread.html/rf44d529c54ef1d0097e813f576a0823a727e1669a9f610d3221d493d%40%3Cannounce.apache.org%3E
CVE: CVE-2021-39275
Published: 2021-09-16
Description: ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf; https://httpd.apache.org/security/vulnerabilities_24.html; https://lists.apache.org/thread.html/r3925e167d5eb1c75def3750c155d753064e1d34a143028bb32910432%40%3Cusers.httpd.apache.org%3E
CVE: CVE-2021-40438
Published: 2021-09-16
Description: A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://cert-portal.siemens.com/productcert/pdf/ssa-685781.pdf; https://httpd.apache.org/security/vulnerabilities_24.html; https://lists.apache.org/thread.html/r210807d0bb55f4aa6fbe1512be6bcc4dacd64e84940429fba329967a%40%3Cusers.httpd.apache.org%3E
CVE: CVE-2021-41079
Published: 2021-09-16
Description: Apache Tomcat 8.5.0 to 8.5.63, 9.0.0-M1 to 9.0.43 and 10.0.0-M1 to 10.0.2 did not properly validate incoming TLS packets. When Tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted packet could be used to trigger an infinite loop resulting in a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-835
References: https://lists.apache.org/thread.html/r6b6b674e3f168dd010e67dbe6848b866e2acf26371452fdae313b98a%40%3Cusers.tomcat.apache.org%3E; https://lists.apache.org/thread.html/rb4de81ac647043541a32881099aa6eb5a23f1b7fd116f713f8ab9dbe%40%3Cdev.tomcat.apache.org%3E; https://lists.apache.org/thread.html/rccdef0349fdf4fb73a4e[PII_REDACTED]d7fe6264e0a58e2df5c6799434%40%3Cannounce.tomcat.apache.org%3E
CVE: CVE-2021-29752
Published: 2021-09-16
Description: IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under specific conditions. IBM X-Fporce ID: 201780.
CVSS Score: 4.4 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/201780; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6489489
CVE: CVE-2021-29763
Published: 2021-09-16
Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and cause a denial of service. IBM X-Force ID: 202267.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-770
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/202267; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6489493
CVE: CVE-2021-29825
Published: 2021-09-16
Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BACKUP. IBM X-Force ID: 204470.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/204470; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6489499
CVE: CVE-2021-29842
Published: 2021-09-16
Description: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 205202.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-307
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/205202; https://www.ibm.com/support/pages/node/6489485; https://exchange.xforce.ibmcloud.com/vulnerabilities/205202
CVE: CVE-2021-40669
Published: 2021-09-16
Description: SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/wuzhicms/wuzhicms/issues/196; https://github.com/wuzhicms/wuzhicms/issues/196
CVE: CVE-2021-40670
Published: 2021-09-16
Description: SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/wuzhicms/wuzhicms/issues/197; https://github.com/wuzhicms/wuzhicms/issues/197
CVE: CVE-2020-21529
Published: 2021-09-16
Description: fig2dev 3.2.7b contains a stack buffer overflow in the bezier_spline function in genepic.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html; https://lists.debian.org/debian-lts-announce/2023/01/msg00044.html; https://sourceforge.net/p/mcj/tickets/65/
CVE: CVE-2020-21530
Published: 2021-09-16
Description: fig2dev 3.2.7b contains a segmentation fault in the read_objects function in read.c.
CVSS Score: 5.5 (MEDIUM)
References: https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html; https://sourceforge.net/p/mcj/tickets/61/; https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html
CVE: CVE-2020-21531
Published: 2021-09-16
Description: fig2dev 3.2.7b contains a global buffer overflow in the conv_pattern_index function in gencgm.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html; https://lists.debian.org/debian-lts-announce/2023/01/msg00044.html; https://sourceforge.net/p/mcj/tickets/63/
CVE: CVE-2020-21532
Published: 2021-09-16
Description: fig2dev 3.2.7b contains a global buffer overflow in the setfigfont function in genepic.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html; https://lists.debian.org/debian-lts-announce/2023/01/msg00044.html; https://sourceforge.net/p/mcj/tickets/64/
CVE: CVE-2020-21533
Published: 2021-09-16
Description: fig2dev 3.2.7b contains a stack buffer overflow in the read_textobject function in read.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html; https://sourceforge.net/p/mcj/tickets/59/; https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html
CVE: CVE-2020-21534
Published: 2021-09-16
Description: fig2dev 3.2.7b contains a global buffer overflow in the get_line function in read.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html; https://sourceforge.net/p/mcj/tickets/58/; https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html
CVE: CVE-2020-21535
Published: 2021-09-16
Description: fig2dev 3.2.7b contains a segmentation fault in the gencgm_start function in gencgm.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://cwe.mitre.org/data/definitions/125.html; https://lists.debian.org/debian-lts-announce/2021/10/msg00002.html; https://sourceforge.net/p/mcj/tickets/62/
CVE: CVE-2020-21594
Published: 2021-09-16
Description: libde265 v1.0.4 contains a heap buffer overflow in the put_epel_hv_fallback function, which can be exploited via a crafted a file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/strukturag/libde265/issues/233; https://www.debian.org/security/2023/dsa-5346; https://github.com/strukturag/libde265/issues/233
CVE: CVE-2020-21595
Published: 2021-09-16
Description: libde265 v1.0.4 contains a heap buffer overflow in the mc_luma function, which can be exploited via a crafted a file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/strukturag/libde265/issues/239; https://www.debian.org/security/2023/dsa-5346; https://github.com/strukturag/libde265/issues/239
CVE: CVE-2020-21596
Published: 2021-09-16
Description: libde265 v1.0.4 contains a global buffer overflow in the decode_CABAC_bit function, which can be exploited via a crafted a file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/strukturag/libde265/issues/236; https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html; https://www.debian.org/security/2023/dsa-5346
CVE: CVE-2020-21597
Published: 2021-09-16
Description: libde265 v1.0.4 contains a heap buffer overflow in the mc_chroma function, which can be exploited via a crafted a file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/strukturag/libde265/issues/238; https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html; https://www.debian.org/security/2023/dsa-5346
CVE: CVE-2020-21598
Published: 2021-09-16
Description: libde265 v1.0.4 contains a heap buffer overflow in the ff_hevc_put_unweighted_pred_8_sse function, which can be exploited via a crafted a file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://cwe.mitre.org/data/definitions/122.html; https://github.com/strukturag/libde265/issues/237; https://lists.debian.org/debian-lts-announce/2023/01/msg00020.html
CVE: CVE-2020-21599
Published: 2021-09-16
Description: libde265 v1.0.4 contains a heap buffer overflow in the de265_image::available_zscan function, which can be exploited via a crafted a file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/strukturag/libde265/issues/235; https://lists.debian.org/debian-lts-announce/2022/12/msg00027.html; https://www.debian.org/security/2023/dsa-5346
CVE: CVE-2020-21600
Published: 2021-09-16
Description: libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_pred_avg_16_fallback function, which can be exploited via a crafted a file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cwe.mitre.org/data/definitions/122.html; https://github.com/strukturag/libde265/issues/243; https://www.debian.org/security/2023/dsa-5346
CVE: CVE-2020-21601
Published: 2021-09-16
Description: libde265 v1.0.4 contains a stack buffer overflow in the put_qpel_fallback function, which can be exploited via a crafted a file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/strukturag/libde265/issues/241; https://www.debian.org/security/2023/dsa-5346; https://github.com/strukturag/libde265/issues/241
CVE: CVE-2020-21602
Published: 2021-09-16
Description: libde265 v1.0.4 contains a heap buffer overflow in the put_weighted_bipred_16_fallback function, which can be exploited via a crafted a file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://cwe.mitre.org/data/definitions/122.html; https://github.com/strukturag/libde265/issues/242; https://www.debian.org/security/2023/dsa-5346
CVE: CVE-2020-21603
Published: 2021-09-16
Description: libde265 v1.0.4 contains a heap buffer overflow in the put_qpel_0_0_fallback_16 function, which can be exploited via a crafted a file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/strukturag/libde265/issues/240; https://www.debian.org/security/2023/dsa-5346; https://github.com/strukturag/libde265/issues/240
CVE: CVE-2020-21604
Published: 2021-09-16
Description: libde265 v1.0.4 contains a heap buffer overflow fault in the _mm_loadl_epi64 function, which can be exploited via a crafted a file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/strukturag/libde265/issues/231; https://www.debian.org/security/2023/dsa-5346; https://github.com/strukturag/libde265/issues/231
CVE: CVE-2020-21605
Published: 2021-09-16
Description: libde265 v1.0.4 contains a segmentation fault in the apply_sao_internal function, which can be exploited via a crafted a file.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/strukturag/libde265/issues/234; https://www.debian.org/security/2023/dsa-5346; https://github.com/strukturag/libde265/issues/234
CVE: CVE-2020-21606
Published: 2021-09-16
Description: libde265 v1.0.4 contains a heap buffer overflow fault in the put_epel_16_fallback function, which can be exploited via a crafted a file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/strukturag/libde265/issues/232; https://www.debian.org/security/2023/dsa-5346; https://github.com/strukturag/libde265/issues/232
CVE: CVE-2021-41314
Published: 2021-09-16
Description: Certain NETGEAR smart switches are affected by a \n injection in the web UI's password field, which - due to several faulty aspects of the authentication scheme - allows the attacker to create (or overwrite) a file with specific content (e.g., the "2" string). This leads to admin session crafting and therefore gaining full web UI admin privileges by an unauthenticated attacker. This affects GC108P before 1.0.8.2, GC108PP before 1.0.8.2, GS108Tv3 before 7.0.7.2, GS110TPP before 7.0.7.2, GS110TPv3 before 7.0.7.2, GS110TUP before 1.0.5.3, GS308T before 1.0.3.2, GS310TP before 1.0.3.2, GS710TUP before 1.0.5.3, GS716TP before 1.0.4.2, GS716TPP before 1.0.4.2, GS724TPP before 2.0.6.3, GS724TPv2 before 2.0.6.3, GS728TPPv2 before 6.0.8.2, GS728TPv2 before 6.0.8.2, GS750E before 1.0.1.10, GS752TPP before 6.0.8.2, GS752TPv2 before 6.0.8.2, MS510TXM before 1.0.4.2, and MS510TXUP before 1.0.4.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74
References: https://gynvael.coldwind.pl/?id=742; https://kb.netgear.com/000063978/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Smart-Switches-PSV-2021-0140-PSV-2021-0144-PSV-2021-0145; https://gynvael.coldwind.pl/?id=742
CVE: CVE-2021-20790
Published: 2021-09-17
Description: Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execute an arbitrary command or code via unspecified vectors.
CVSS Score: 9.6 (CRITICAL)
References: https://jscom.jp/news-20210910_2/; https://jvn.jp/en/jp/JVN81658818/index.html; https://jscom.jp/news-20210910_2/