deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-38189
Published: 2021-08-08
Description: An issue was discovered in the lettre crate before 0.9.6 for Rust. In an e-mail message body, an attacker can place a . character after two <CR><LF> sequences and then inject arbitrary SMTP commands.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/lettre/RUSTSEC-2021-0069.md; https://rustsec.org/advisories/RUSTSEC-2021-0069.html; https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/lettre/RUSTSEC-2021-0069.md
CVE: CVE-2021-38190
Published: 2021-08-08
Description: An issue was discovered in the nalgebra crate before 0.27.1 for Rust. It allows out-of-bounds memory access because it does not ensure that the number of elements is equal to the product of the row count and column count.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/nalgebra/RUSTSEC-2021-0070.md; https://rustsec.org/advisories/RUSTSEC-2021-0070.html; https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/nalgebra/RUSTSEC-2021-0070.md
CVE: CVE-2021-38191
Published: 2021-08-08
Description: An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the wrong thread.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tokio/RUSTSEC-2021-0072.md; https://rustsec.org/advisories/RUSTSEC-2021-0072.html; https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tokio/RUSTSEC-2021-0072.md
CVE: CVE-2021-38192
Published: 2021-08-08
Description: An issue was discovered in the prost-types crate before 0.8.0 for Rust. An overflow can occur during conversion from Timestamp to SystemTime.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/prost-types/RUSTSEC-2021-0073.md; https://rustsec.org/advisories/RUSTSEC-2021-0073.html; https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/prost-types/RUSTSEC-2021-0073.md
CVE: CVE-2021-38193
Published: 2021-08-08
Description: An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ammonia/RUSTSEC-2021-0074.md; https://rustsec.org/advisories/RUSTSEC-2021-0074.html; https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ammonia/RUSTSEC-2021-0074.md
CVE: CVE-2021-38194
Published: 2021-08-08
Description: An issue was discovered in the ark-r1cs-std crate before 0.3.1 for Rust. It does not enforce any constraints in the FieldVar::mul_by_inverse method. Thus, a prover can produce a proof that is unsound but is nonetheless verified.
CVSS Score: 9.8 (CRITICAL)
References: https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ark-r1cs-std/RUSTSEC-2021-0075.md; https://rustsec.org/advisories/RUSTSEC-2021-0075.html; https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ark-r1cs-std/RUSTSEC-2021-0075.md
CVE: CVE-2021-38195
Published: 2021-08-08
Description: An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to be larger than the curve order, aka an overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347
References: https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libsecp256k1/RUSTSEC-2021-0076.md; https://rustsec.org/advisories/RUSTSEC-2021-0076.html; https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/libsecp256k1/RUSTSEC-2021-0076.md
CVE: CVE-2021-38196
Published: 2021-08-08
Description: An issue was discovered in the better-macro crate through 2021-07-22 for Rust. It intentionally demonstrates that remote attackers can execute arbitrary code via proc-macros, and otherwise has no legitimate purpose.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/better-macro/RUSTSEC-2021-0077.md; https://rustsec.org/advisories/RUSTSEC-2021-0077.html; https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/better-macro/RUSTSEC-2021-0077.md
CVE: CVE-2021-23419
Published: 2021-08-08
Description: This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying properties of Object.prototype using a __proto__ or constructor payload.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1321
References: https://github.com/samholmes/node-open-graph/commit/a0cef507a90adaac7dbbe9c404f09a50bdefb348; https://snyk.io/vuln/SNYK-JS-OPENGRAPH-1536747; https://github.com/samholmes/node-open-graph/commit/a0cef507a90adaac7dbbe9c404f09a50bdefb348
CVE: CVE-2021-38197
Published: 2021-08-08
Description: unarr.go in go-unarr (aka Go bindings for unarr) 0.1.1 allows Directory Traversal via ../ in a pathname within a TAR archive.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/gen2brain/go-unarr/issues/21; https://github.com/gen2brain/go-unarr/issues/21
CVE: CVE-2021-38198
Published: 2021-08-08
Description: arch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault.
CVSS Score: 5.5 (MEDIUM)
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.11; https://github.com/torvalds/linux/commit/b1bd5cba3306691c771d558e94baa73e8b0b96b7; https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html
CVE: CVE-2021-38199
Published: 2021-08-08
Description: fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a denial of service (hanging of mounts) by arranging for those servers to be unreachable during trunking detection.
CVSS Score: 6.5 (MEDIUM)
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4; https://github.com/torvalds/linux/commit/dd99e9f98fbf423ff6d365b37a98e8879170f17c; https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html
CVE: CVE-2021-38200
Published: 2021-08-08
Description: arch/powerpc/perf/core-book3s.c in the Linux kernel before 5.12.13, on systems with perf_event_paranoid=-1 and no specific PMU driver support registered, allows local users to cause a denial of service (perf_instruction_pointer NULL pointer dereference and OOPS) via a "perf record" command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.13; https://github.com/torvalds/linux/commit/60b7ed54a41b550d50caf7f2418db4a7e75b5bdc; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.13
CVE: CVE-2021-38201
Published: 2021-08-08
Description: net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_base slab-out-of-bounds access) by performing many NFS 4.2 READ_PLUS operations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4; https://github.com/torvalds/linux/commit/6d1c0f3d28f98ea2736128ed3e46821496dc3a8c; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-38202
Published: 2021-08-08
Description: fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4; https://github.com/torvalds/linux/commit/7b08cf62b1239a4322427d677ea9363f0ab677c6; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-38203
Published: 2021-08-08
Description: btrfs in the Linux kernel before 5.13.4 allows attackers to cause a denial of service (deadlock) via processes that trigger allocation of new system chunks during times when there is a shortage of free space in the system space_info.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.4; https://github.com/torvalds/linux/commit/1cb3db1cf383a3c7dbda1aa0ce748b[PII_REDACTED]; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-38204
Published: 2021-08-08
Description: drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-416
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.6; https://github.com/torvalds/linux/commit/b5fdf5c6e6bee35837e160c00ac89327bdad031b; https://lists.debian.org/debian-lts-announce/2021/12/msg00012.html
CVE: CVE-2021-38205
Published: 2021-08-08
Description: drivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e., the real IOMEM pointer).
CVSS Score: 3.3 (LOW)
CWE: CWE-824
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.13.3; https://github.com/torvalds/linux/commit/d0d62baa7f505bd4c59cd169692ff07ec49dde37; https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html
CVE: CVE-2021-38206
Published: 2021-08-08
Description: The mac80211 subsystem in the Linux kernel before 5.12.13, when a device supporting only 5 GHz is used, allows attackers to cause a denial of service (NULL pointer dereference in the radiotap parser) by injecting a frame with 802.11a rates.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.13; https://github.com/torvalds/linux/commit/bddc0c411a45d3718ac535a070f349be8eca8d48; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.13
CVE: CVE-2021-38207
Published: 2021-08-08
Description: drivers/net/ethernet/xilinx/ll_temac_main.c in the Linux kernel before 5.12.13 allows remote attackers to cause a denial of service (buffer overflow and lockup) by sending heavy network traffic for about ten minutes.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.13; https://github.com/torvalds/linux/commit/c364df2489b8ef2f5e3159b1dff1ff1fdb16040d; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-38208
Published: 2021-08-08
Description: net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2021/08/17/1; http://www.openwall.com/lists/oss-security/2021/08/17/2; http://www.openwall.com/lists/oss-security/2021/08/24/2
CVE: CVE-2021-38209
Published: 2021-08-08
Description: net/netfilter/nf_conntrack_standalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked into all other net namespaces. This is related to the NF_SYSCTL_CT_MAX, NF_SYSCTL_CT_EXPECT_MAX, and NF_SYSCTL_CT_BUCKETS sysctls.
CVSS Score: 3.3 (LOW)
CWE: CWE-203
References: https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.2; https://github.com/torvalds/linux/commit/2671fa4dc0109d3fb581bc3078fdf17b5d9080f6; https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.12.2
CVE: CVE-2021-24304
Published: 2021-08-09
Description: The Newsmag WordPress theme before 5.0 does not sanitise the td_block_id parameter in its td_ajax_block AJAX action, leading to an unauthenticated Reflected Cross-site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/bb71f2f9-76bd-43f4-a8c9-35771dd28dff; https://wpscan.com/vulnerability/bb71f2f9-76bd-43f4-a8c9-35771dd28dff
CVE: CVE-2021-24467
Published: 2021-08-09
Description: The Leaflet Map WordPress plugin before 3.0.0 does not verify the CSRF nonce when saving its settings, which allows attackers to make a logged in admin update the settings via a Cross-Site Request Forgery attack. This could lead to Cross-Site Scripting issues by either changing the URL of the JavaScript library being used, or using malicious attributions which will be executed in all page with an embed map from the plugin
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-352, CWE-79, CWE-352
References: https://wpscan.com/vulnerability/ac32d265-066e-49ec-9042-3145cd99e2e8; https://wpscan.com/vulnerability/ac32d265-066e-49ec-9042-3145cd99e2e8
CVE: CVE-2021-24495
Published: 2021-08-09
Description: The Marmoset Viewer WordPress plugin before 1.9.3 does not property sanitize, validate or escape the 'id' parameter before outputting back in the page, leading to a reflected Cross-Site Scripting issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://johnjhacking.com/blog/cve-2021-24495-improper-neutralization-of-input-during-web-page-generation-on-id-parameter-in-wordpress-marmoset-viewer-plugin-versions-1.9.3-leads-to-reflected-cross-site-scripting/; https://wpscan.com/vulnerability/d11b79a3-f762-49ab-b7c8-3174624d7638; https://johnjhacking.com/blog/cve-2021-24495-improper-neutralization-of-input-during-web-page-generation-on-id-parameter-in-wordpress-marmoset-viewer-plugin-versions-1.9.3-leads-to-reflected-cross-site-scripting/
CVE: CVE-2021-24499
Published: 2021-08-09
Description: The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request is from a valid user in any other way. The endpoints allowed for uploading arbitrary files to the uploads/workreap-temp directory. Uploaded files were neither sanitized nor validated, allowing an unauthenticated visitor to upload executable code such as php scripts.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434, CWE-434
References: http://packetstormsecurity.com/files/172876/WordPress-Workreap-2.2.2-Shell-Upload.html; https://jetpack.com/2021/07/07/multiple-vulnerabilities-in-workreap-theme/; https://wpscan.com/vulnerability/74611d5f-afba-42ae-bc19-777cdf2808cb
CVE: CVE-2021-24500
Published: 2021-08-09
Description: Several AJAX actions available in the Workreap WordPress theme before 2.2.2 lacked CSRF protections, as well as allowing insecure direct object references that were not validated. This allows an attacker to trick a logged in user to submit a POST request to the vulnerable site, potentially modifying or deleting arbitrary objects on the target site.
CVSS Score: 8.1 (HIGH)
CWE: CWE-283, CWE-284, CWE-862, CWE-352
References: https://jetpack.com/2021/07/07/multiple-vulnerabilities-in-workreap-theme/; https://wpscan.com/vulnerability/0c4b5ecc-54d0-45ec-9f92-b2ca3cadbe56; https://jetpack.com/2021/07/07/multiple-vulnerabilities-in-workreap-theme/
CVE: CVE-2021-24501
Published: 2021-08-09
Description: The Workreap WordPress theme before 2.2.2 had several AJAX actions missing authorization checks to verify that a user was authorized to perform critical operations such as modifying or deleting objects. This allowed a logged in user to modify or delete objects belonging to other users on the site.
CVSS Score: 8.1 (HIGH)
CWE: CWE-283, CWE-862
References: https://jetpack.com/2021/07/07/multiple-vulnerabilities-in-workreap-theme/; https://wpscan.com/vulnerability/66e4aaf4-5ef7-4da8-a45c-e24f449c363e; https://jetpack.com/2021/07/07/multiple-vulnerabilities-in-workreap-theme/
CVE: CVE-2021-24502
Published: 2021-08-09
Description: The WP Google Map WordPress plugin before 1.7.7 did not sanitise or escape the Map Title before outputting them in the page, leading to a Stored Cross-Site Scripting issue by high privilege users, even when the unfiltered_html capability is disallowed
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://drive.google.com/file/d/1CbBlsf0Vt1QLBTnSC-vod2UCMm_NnZ2p/view?usp=sharing; https://wpscan.com/vulnerability/f95c3a48-5228-4047-9b92-de985741d157; https://drive.google.com/file/d/1CbBlsf0Vt1QLBTnSC-vod2UCMm_NnZ2p/view?usp=sharing
CVE: CVE-2021-24505
Published: 2021-08-09
Description: The Forms WordPress plugin before 1.12.3 did not sanitise its input fields, leading to Stored Cross-Site scripting issues. The plugin was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability within the Forms "Add new" field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/550e08ac-4c3a-4e22-8e98-bc5bfc020ca9; https://wpscan.com/vulnerability/550e08ac-4c3a-4e22-8e98-bc5bfc020ca9
CVE: CVE-2021-24507
Published: 2021-08-09
Description: The Astra Pro Addon WordPress plugin before 3.5.2 did not properly sanitise or escape some of the POST parameters from the astra_pagination_infinite and astra_shop_pagination_infinite AJAX action (available to both unauthenticated and authenticated user) before using them in SQL statement, leading to an SQL Injection issues
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://wpastra.com/changelog/astra-pro-addon/; https://wpscan.com/vulnerability/a1a0dc0b-c351-4d46-ac9b-b297ce4d251c; https://wpastra.com/changelog/astra-pro-addon/
CVE: CVE-2021-24509
Published: 2021-08-09
Description: The Page View Count WordPress plugin before 2.4.9 does not escape the postid parameter of pvc_stats shortcode, allowing users with a role as low as Contributor to perform Stored XSS attacks. A post made by a contributor would still have to be approved by an admin to have the XSS triggered in the frontend, however, higher privilege users, such as editor could exploit this without the need of approval, and even when the blog disallows the unfiltered_html capability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/06df2729-21da-4c22-ae1e-dda1f15bdf8f; https://wpscan.com/vulnerability/06df2729-21da-4c22-ae1e-dda1f15bdf8f
CVE: CVE-2021-24520
Published: 2021-08-09
Description: The Stock in & out WordPress plugin through 1.0.4 lacks proper sanitization before passing variables to an SQL request, making it vulnerable to SQL Injection attacks. Users with a role of contributor or higher can exploit this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/pang0lin/CVEproject/blob/main/wordpress_Stock-in-and-out_sqli.md; https://wpscan.com/vulnerability/f903aadd-17af-4ddf-8635-abb3338ac815; https://github.com/pang0lin/CVEproject/blob/main/wordpress_Stock-in-and-out_sqli.md
CVE: CVE-2021-24521
Published: 2021-08-09
Description: The Side Menu Lite – add sticky fixed buttons WordPress plugin before 2.2.1 does not properly sanitize input values from the browser when building an SQL statement. Users with the administrator role or permission to manage this plugin could perform an SQL Injection attack.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/pang0lin/CVEproject/blob/main/wordpress_side-menu-lite_sqli.md; https://wpscan.com/vulnerability/eb21ebc5-265c-4378-b2c6-62f6bc2f69cd; https://github.com/pang0lin/CVEproject/blob/main/wordpress_side-menu-lite_sqli.md
CVE: CVE-2021-24522
Published: 2021-08-09
Description: The User Registration, User Profile, Login & Membership – ProfilePress (Formerly WP User Avatar) WordPress plugin before 3.1.11's widget for tabbed login/register was not properly escaped and could be used in an XSS attack which could lead to wp-admin access. Further, the plugin in several places assigned $_POST as $_GET which meant that in some cases this could be replicated with just $_GET parameters and no need for $_POST values.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/25b51add-197c-4aff-b1a8-b92fb11d8697; https://wpscan.com/vulnerability/25b51add-197c-4aff-b1a8-b92fb11d8697
CVE: CVE-2021-37211
Published: 2021-08-09
Description: The bulletin function of Flygo does not filter special characters while a new announcement is added. Remoter attackers can use the vulnerability with general user’s credential to inject JavaScript and execute stored XSS attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.twcert.org.tw/tw/cp-132-4988-8f642-1.html; https://www.twcert.org.tw/tw/cp-132-4988-8f642-1.html
CVE: CVE-2021-37212
Published: 2021-08-09
Description: The bulletin function of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the bulletin ID in specific Url parameters and access and modify bulletin particular content.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-706, CWE-639
References: https://www.twcert.org.tw/tw/cp-132-4989-5d955-1.html; https://www.twcert.org.tw/tw/cp-132-4989-5d955-1.html
CVE: CVE-2021-37213
Published: 2021-08-09
Description: The check-in record page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID and date in specific parameters to access particular employee’s check-in record.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-706, CWE-639
References: https://www.twcert.org.tw/tw/cp-132-4990-0c75d-1.html; https://www.twcert.org.tw/tw/cp-132-4990-0c75d-1.html
CVE: CVE-2021-37214
Published: 2021-08-09
Description: The employee management page of Flygo contains Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID in specific parameters to arbitrary access employee's data, modify it, and then obtain administrator privilege and execute arbitrary command.
CVSS Score: 8.8 (HIGH)
CWE: CWE-706, CWE-639
References: https://www.twcert.org.tw/tw/cp-132-4991-658b1-1.html; https://www.twcert.org.tw/tw/cp-132-4991-658b1-1.html
CVE: CVE-2021-37215
Published: 2021-08-09
Description: The employee management page of Flygo contains an Insecure Direct Object Reference (IDOR) vulnerability. After being authenticated as a general user, remote attacker can manipulate the user data and then over-write another employee’s user data by specifying that employee’s ID in the API parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-706, CWE-639
References: https://www.twcert.org.tw/tw/cp-132-4992-dac66-1.html; https://www.twcert.org.tw/tw/cp-132-4992-dac66-1.html
CVE: CVE-2021-38290
Published: 2021-08-09
Description: A host header attack vulnerability exists in FUEL CMS 1.5.0 through fuel/modules/fuel/config/fuel_constants.php and fuel/modules/fuel/libraries/Asset.php. An attacker can use a man in the middle attack such as phishing.
CVSS Score: 8.1 (HIGH)
CWE: CWE-74
References: https://github.com/daylightstudio/FUEL-CMS/commit/8a0d88ad6869623c90e24b3b2ea33352049d39a7; https://github.com/daylightstudio/FUEL-CMS/issues/580; https://github.com/daylightstudio/FUEL-CMS/commit/8a0d88ad6869623c90e24b3b2ea33352049d39a7
CVE: CVE-2021-22910
Published: 2021-08-09
Description: A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an endpoint which could result in a NoSQL injection, potentially leading to RCE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-75
References: https://blog.sonarsource.com/nosql-injections-in-rocket-chat/; https://hackerone.com/reports/1130874; https://blog.sonarsource.com/nosql-injections-in-rocket-chat/
CVE: CVE-2021-34660
Published: 2021-08-09
Description: The WP Fusion Lite WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the startdate parameter found in the ~/includes/admin/logging/class-log-table-list.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.37.18.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-fusion-lite/trunk/includes/admin/logging/class-log-table-list.php?rev=2497097#L427; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34660; https://plugins.trac.wordpress.org/browser/wp-fusion-lite/trunk/includes/admin/logging/class-log-table-list.php?rev=2497097#L427