deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-40525
Published: 2022-01-04
Description: Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path traversal, allowing reading and writing any file. This vulnerability had been patched in Apache James 3.6.1 and higher. We recommend the upgrade. Distributed and Cassandra based products are also not impacted.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-22
References: http://www.openwall.com/lists/oss-security/2022/01/04/4; http://www.openwall.com/lists/oss-security/2022/02/07/1; https://www.openwall.com/lists/oss-security/2022/01/04/4
CVE: CVE-2021-31833
Published: 2022-01-04
Description: Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 allows a locally logged in attacker to circumvent the application solidification protection provided by MACC, permitting them to run applications that would usually be prevented by MACC. This would require the attacker to rename the specified binary to match name of any configured updater and perform a specific set of steps, resulting in the renamed binary to be to run.
CVSS Score: 7.1 (HIGH)
CWE: CWE-269
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10370; https://kc.mcafee.com/corporate/index?page=content&id=SB10370
CVE: CVE-2021-44168
Published: 2022-01-04
Description: A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages.
CVSS Score: 3.3 (LOW)
CWE: CWE-494, CWE-494
References: https://fortiguard.com/psirt/FG-IR-21-201; https://fortiguard.com/psirt/FG-IR-21-201; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44168
CVE: CVE-2021-43711
Published: 2022-01-04
Description: The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters. The parameter name can be constructed for unauthenticated command execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://github.com/doudoudedi/ToTolink_EX200_Cmmand_Execute/blob/main/ToTolink%20EX200%20Comand%20Injection2.md; https://github.com/doudoudedi/ToTolink_EX200_Cmmand_Execute/blob/main/ToTolink%20EX200%20Comand%20Injection2.md
CVE: CVE-2021-3842
Published: 2022-01-04
Description: nltk is vulnerable to Inefficient Regular Expression Complexity
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/nltk/nltk/commit/2a50a3edc9d35f57ae42a921c621edc160877f4d; https://huntr.dev/bounties/761a761e-2be2-430a-8d92-6f74ffe9866a; https://github.com/nltk/nltk/commit/2a50a3edc9d35f57ae42a921c621edc160877f4d
CVE: CVE-2021-45913
Published: 2022-01-04
Description: A hardcoded key in ControlUp Real-Time Agent (cuAgent.exe) before 8.2.5 may allow a potential attacker to run OS commands via a WCF channel.
CVSS Score: 7.2 (HIGH)
CWE: CWE-798
References: https://controlup.com; https://www.controlup.com/security/security-advisory-hardcoded-key/; https://controlup.com
CVE: CVE-2021-45978
Published: 2022-01-04
Description: Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/dlehgus1023; https://github.com/dlehgus1023/CVE/tree/master/CVE-2021-45978; https://www.foxit.com/support/security-bulletins.html
CVE: CVE-2021-45979
Published: 2022-01-04
Description: Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript API.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://github.com/dlehgus1023; https://github.com/dlehgus1023/CVE/tree/master/CVE-2021-45979; https://www.foxit.com/support/security-bulletins.html
CVE: CVE-2021-45980
Published: 2022-01-04
Description: Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via getURL in the JavaScript API.
CVSS Score: 7.8 (HIGH)
References: https://github.com/dlehgus1023; https://github.com/dlehgus1023/CVE/tree/master/CVE-2021-45980; https://www.foxit.com/support/security-bulletins.html
CVE: CVE-2021-40148
Published: 2022-01-04
Description: In Modem EMM, there is a possible information disclosure due to a missing data encryption. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00716585; Issue ID: ALPS05886933.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-41789
Published: 2022-01-04
Description: In wifi driver, there is a possible system crash due to a missing validation check. This could lead to remote denial of service from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN[PII_REDACTED]5; Issue ID: GN[PII_REDACTED]5.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-45389
Published: 2022-01-04
Description: A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the authentication process, thus could escalate privileges. This affects StarWind SAN and NAS build 1578 and StarWind Command Center build 6864.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/; https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/; https://www.starwindsoftware.com/security/sw-20[PII_REDACTED]/
CVE: CVE-2021-45912
Published: 2022-01-04
Description: An unauthenticated Named Pipe channel in Controlup Real-Time Agent (cuAgent.exe) before 8.5 potentially allows an attacker to run OS commands via the ProcessActionRequest WCF method.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://controlup.com; https://www.controlup.com/security/security-advisory-local-privilege-escalation/; https://controlup.com
CVE: CVE-2022-20012
Published: 2022-01-04
Description: In mdp driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05836478; Issue ID: ALPS05836478.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2022-20013
Published: 2022-01-04
Description: In vow driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05837742; Issue ID: ALPS05837742.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2022-20014
Published: 2022-01-04
Description: In vow driver, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05857308; Issue ID: ALPS05857308.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2022-20015
Published: 2022-01-04
Description: In kd_camera_hw driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862966; Issue ID: ALPS05862966.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-908
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2022-20016
Published: 2022-01-04
Description: In vow driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862986; Issue ID: ALPS05862986.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-667
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2022-20018
Published: 2022-01-04
Description: In seninf driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05863018; Issue ID: ALPS05863018.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-908
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2022-20019
Published: 2022-01-04
Description: In libMtkOmxGsmDec, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05917620; Issue ID: ALPS05917620.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2022-20020
Published: 2022-01-04
Description: In libvcodecdrv, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05943906; Issue ID: ALPS05943906.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2022-20021
Published: 2022-01-04
Description: In Bluetooth, there is a possible application crash due to bluetooth does not properly handle the reception of multiple LMP_host_connection_req. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198513; Issue ID: ALPS06198513.
CVSS Score: 6.5 (MEDIUM)
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2022-20022
Published: 2022-01-04
Description: In Bluetooth, there is a possible link disconnection due to bluetooth does not properly handle a connection attempt from a host with the same BD address as the currently connected BT host. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198578; Issue ID: ALPS06198578.
CVSS Score: 6.5 (MEDIUM)
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2022-20023
Published: 2022-01-04
Description: In Bluetooth, there is a possible application crash due to bluetooth flooding a device with LMP_AU_rand packet. This could lead to remote denial of service of bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06198608; Issue ID: ALPS06198608.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://corp.mediatek.com/product-security-bulletin/January-2022; https://corp.mediatek.com/product-security-bulletin/January-2022
CVE: CVE-2021-3845
Published: 2022-01-04
Description: ws-scrcpy is vulnerable to External Control of File Name or Path
CVSS Score: 7.5 (HIGH)
CWE: CWE-73, CWE-610
References: https://github.com/netristv/ws-scrcpy/commit/e83cf65438bef83a3503b25358bba97bcc156fef; https://huntr.dev/bounties/dc7fc98f-4f4f-440a-b6f6-124a56ea36ef; https://github.com/netristv/ws-scrcpy/commit/e83cf65438bef83a3503b25358bba97bcc156fef
CVE: CVE-2021-39143
Published: 2022-01-04
Description: Spinnaker is an open source, multi-cloud continuous delivery platform. A path traversal vulnerability was discovered in uses of TAR files by AppEngine for deployments. This uses a utility to extract files locally for deployment without validating the paths in that deployment don't override system files. This would allow an attacker to override files on the container, POTENTIALLY introducing a MITM type attack vector by replacing libraries or injecting wrapper files. Users are advised to update as soon as possible. For users unable to update disable Google AppEngine deployments and/or disable artifacts that provide TARs.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/spinnaker/spinnaker/security/advisories/GHSA-34jx-3vmr-56v8; https://github.com/spinnaker/spinnaker/security/advisories/GHSA-34jx-3vmr-56v8
CVE: CVE-2022-0086
Published: 2022-01-04
Description: uppy is vulnerable to Server-Side Request Forgery (SSRF)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-918
References: https://github.com/transloadit/uppy/commit/fc137e30a2a3102eb191141f280d5de20dacdf8f; https://huntr.dev/bounties/c1c03ef6-3f18-4976-a9ad-08c251279122; https://github.com/transloadit/uppy/commit/fc137e30a2a3102eb191141f280d5de20dacdf8f
CVE: CVE-2021-24042
Published: 2022-01-04
Description: The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp for iOS prior to v2.21.230, WhatsApp Business for iOS prior to v2.21.230, WhatsApp for KaiOS prior to v2.2143, WhatsApp Desktop prior to v2.2146 could have allowed an out-of-bounds write if a user makes a 1:1 call to a malicious actor.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787, CWE-787
References: https://www.whatsapp.com/security/advisories/2021/; https://www.whatsapp.com/security/advisories/2021/
CVE: CVE-2021-41141
Published: 2022-01-04
Description: PJSIP is a free and open source multimedia communication library written in the C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In various parts of PJSIP, when error/failure occurs, it is found that the function returns without releasing the currently held locks. This could result in a system deadlock, which cause a denial of service for the users. No release has yet been made which contains the linked fix commit. All versions up to an including 2.11.1 are affected. Users may need to manually apply the patch.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-667, CWE-667
References: https://github.com/pjsip/pjproject/commit/1aa2c0e0fb60a1b0bf793e0d834073ffe50fb196; https://github.com/pjsip/pjproject/security/advisories/GHSA-8fmx-hqw7-6gmc; https://lists.debian.org/debian-lts-announce/2022/03/msg00035.html
CVE: CVE-2021-41236
Published: 2022-01-04
Description: OroPlatform is a PHP Business Application Platform. In affected versions the email template preview is vulnerable to XSS payload added to email template content. An attacker must have permission to create or edit an email template. For successful payload, execution the attacked user must preview a vulnerable email template. There are no workarounds that address this vulnerability. Users are advised to upgrade as soon as is possible.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/oroinc/platform/commit/2a089c971fc70bc63baf8770d29ee515ce5a415a; https://github.com/oroinc/platform/security/advisories/GHSA-qv7g-j98v-8pp7; https://github.com/oroinc/platform/commit/2a089c971fc70bc63baf8770d29ee515ce5a415a
CVE: CVE-2021-41610
Published: 2022-01-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-27339. Reason: This candidate is a reservation duplicate of CVE-2020-27339. Notes: All CVE users should reference CVE-2020-27339 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2021-43677
Published: 2022-01-04
Description: Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://fluxbb.com; https://github.com/fluxbb/fluxbb; http://fluxbb.com
CVE: CVE-2021-43832
Published: 2022-01-04
Description: Spinnaker is an open source, multi-cloud continuous delivery platform. Spinnaker has improper permissions allowing pipeline creation & execution. This lets an arbitrary user with access to the gate endpoint to create a pipeline and execute it without authentication. If users haven't setup Role-based access control (RBAC) with-in spinnaker, this enables remote execution and access to deploy almost any resources on any account. Patches are available on the latest releases of the supported branches and users are advised to upgrade as soon as possible. Users unable to upgrade should enable RBAC on ALL accounts and applications. This mitigates the ability of a pipeline to affect any accounts. Block application access unless permission are enabled. Users should make sure ALL application creation is restricted via appropriate wildcards.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://github.com/spinnaker/spinnaker/security/advisories/GHSA-9h7c-rfrp-gvgp; https://github.com/spinnaker/spinnaker/security/advisories/GHSA-9h7c-rfrp-gvgp
CVE: CVE-2021-43850
Published: 2022-01-04
Description: Discourse is an open source platform for community discussion. In affected versions admins users can trigger a Denial of Service attack via the `/message-bus/_diagnostics` path. The impact of this vulnerability is greater on multisite Discourse instances (where multiple forums are served from a single application server) where any admin user on any of the forums are able to visit the `/message-bus/_diagnostics` path. The problem has been patched. Please upgrade to 2.8.0.beta10 or 2.7.12. No workarounds for this issue exist.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://github.com/discourse/discourse/commit/7a8ec129fb54f188b2da6588c9d24d3a36eb0d39; https://github.com/discourse/discourse/security/advisories/GHSA-59jr-pj65-qmvr; https://github.com/discourse/discourse/commit/7a8ec129fb54f188b2da6588c9d24d3a36eb0d39
CVE: CVE-2021-43852
Published: 2022-01-04
Description: OroPlatform is a PHP Business Application Platform. In affected versions by sending a specially crafted request, an attacker could inject properties into existing JavaScript language construct prototypes, such as objects. Later this injection may lead to JS code execution by libraries that are vulnerable to Prototype Pollution. This issue has been patched in version 4.2.8. Users unable to upgrade may configure a firewall to drop requests containing next strings: `__proto__` , `constructor[prototype]`, and `constructor.prototype` to mitigate this issue.
CVSS Score: 8.8 (HIGH)
CWE: CWE-74, CWE-1321
References: https://github.com/oroinc/platform/commit/62c26936b3adee9c20255dcd9f8ee5c299b464a9; https://github.com/oroinc/platform/security/advisories/GHSA-jx5q-g37m-h5hj; https://github.com/oroinc/platform/commit/62c26936b3adee9c20255dcd9f8ee5c299b464a9
CVE: CVE-2022-21643
Published: 2022-01-04
Description: USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via register.php. In particular usernames, email addresses, and passwords provided by the user were not sanitized and were used directly to construct a sql statement. Users are advised to upgrade as soon as possible. There are not workarounds for this issue.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/Aaron-Junker/USOC/commit/21e8bfd7a9ab0b7f9344a7a3a7c32a7cdd5a0b69; https://github.com/Aaron-Junker/USOC/security/advisories/GHSA-fjp4-phjh-jgmc; https://github.com/Aaron-Junker/USOC/commit/21e8bfd7a9ab0b7f9344a7a3a7c32a7cdd5a0b69
CVE: CVE-2022-21644
Published: 2022-01-04
Description: USOC is an open source CMS with a focus on simplicity. In affected versions USOC allows for SQL injection via usersearch.php. In search terms provided by the user were not sanitized and were used directly to construct a sql statement. The only users permitted to search are site admins. Users are advised to upgrade as soon as possible. There are not workarounds for this issue.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/Aaron-Junker/USOC/commit/06217c66c8f9b114726b21633eabcd88ac9034aa; https://github.com/Aaron-Junker/USOC/security/advisories/GHSA-89jg-6fr3-9q4h; https://github.com/Aaron-Junker/USOC/commit/06217c66c8f9b114726b21633eabcd88ac9034aa
CVE: CVE-2022-21647
Published: 2022-01-04
Description: CodeIgniter is an open source PHP full-stack web framework. Deserialization of Untrusted Data was found in the `old()` function in CodeIgniter4. Remote attackers may inject auto-loadable arbitrary objects with this vulnerability, and possibly execute existing PHP code on the server. We are aware of a working exploit, which can lead to SQL injection. Users are advised to upgrade to v4.1.6 or later. Users unable to upgrade as advised to not use the `old()` function and form_helper nor `RedirectResponse::withInput()` and `redirect()->withInput()`.
CVSS Score: 7.7 (HIGH)
CWE: CWE-502, CWE-502
References: https://github.com/codeigniter4/CodeIgniter4/commit/ce95ed5765256e2f09f3513e7d42790e0d6948f5; https://github.com/codeigniter4/CodeIgniter4/security/advisories/GHSA-w6jr-wj64-mc9x; https://github.com/codeigniter4/CodeIgniter4/commit/ce95ed5765256e2f09f3513e7d42790e0d6948f5
CVE: CVE-2022-21648
Published: 2022-01-04
Description: Latte is an open source template engine for PHP. Versions since 2.8.0 Latte has included a template sandbox and in affected versions it has been found that a sandbox escape exists allowing for injection into web pages generated from Latte. This may lead to XSS attacks. The issue is fixed in the versions 2.8.8, 2.9.6 and 2.10.8. Users unable to upgrade should not accept template input from untrusted sources.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/nette/latte/commit/9e1b4f7d70f7a9c3fa6753ffa7d7e450a3d4abb0; https://github.com/nette/latte/security/advisories/GHSA-36m2-8rhx-f36j; https://github.com/nette/latte/commit/9e1b4f7d70f7a9c3fa6753ffa7d7e450a3d4abb0
CVE: CVE-2022-21649
Published: 2022-01-04
Description: Convos is an open source multi-user chat that runs in a web browser. Characters starting with "https://" in the chat window create an <a> tag. Stored XSS vulnerability using onfocus and autofocus occurs because escaping exists for "<" or ">" but escaping for double quotes does not exist. Through this vulnerability, an attacker is capable to execute malicious scripts. Users are advised to update as soon as possible.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://blog.pocas.kr/2021/12/30/2021-12-30-s-xss-convos-chat/#Second-vulnerability; https://github.com/convos-chat/convos/commit/86b2193de375005ba71d9dd53843562c6ac1847c; https://github.com/convos-chat/convos/security/advisories/GHSA-xmpj-xwm3-vww7