deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-35943
Published: 2021-02-09
Description: A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload. (It is possible to bypass CSRF protection by simply not including a nonce parameter.)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://www.wordfence.com/blog/2021/02/severe-vulnerabilities-patched-in-nextgen-gallery-affect-over-800000-wordpress-sites/; https://www.wordfence.com/blog/2021/02/severe-vulnerabilities-patched-in-nextgen-gallery-affect-over-800000-wordpress-sites/
CVE: CVE-2021-25666
Published: 2021-02-09
Description: A vulnerability has been identified in SCALANCE W780 and W740 (IEEE 802.11n) family (All versions < V6.3). Sending specially crafted packets through the ARP protocol to an affected device could cause a partial denial-of-service, preventing the device to operate normally for a short period of time.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770
References: https://cert-portal.siemens.com/productcert/pdf/ssa-686152.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-21-040-07; https://cert-portal.siemens.com/productcert/pdf/ssa-686152.pdf
CVE: CVE-2019-17582
Published: 2021-02-09
Description: A use-after-free in the _zip_dirent_read function of zip_dirent.c in libzip 1.2.0 allows attackers to have an unspecified impact by attempting to unzip a malformed ZIP archive. NOTE: the discoverer states "This use-after-free is triggered prior to the double free reported in CVE-2017-12858."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://github.com/nih-at/libzip/commit/2217022b7d[PII_REDACTED]d891e00b3d2d9179b796; https://github.com/nih-at/libzip/issues/5; https://libzip.org/libzip-discuss/
CVE: CVE-2020-13117
Published: 2021-02-09
Description: Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://blog.0xlabs.com/2021/02/wavlink-rce-CVE-2020-13117.html; https://github.com/ice-wzl/Wavlink-WN530G3A-Cmd-Injection/blob/main/README.md; https://blog.0xlabs.com/2021/02/wavlink-rce-CVE-2020-13117.html
CVE: CVE-2020-18215
Published: 2021-02-09
Description: Multiple SQL Injection vulnerabilities in PHPSHE 1.7 in phpshe/admin.php via the (1) ad_id, (2) menu_id, and (3) cashout_id parameters, which could let a remote malicious user execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://gitee.com/koyshe/phpshe/issues/ITLK2; https://github.com/lemon666/vuln/blob/master/Phpshe1.7_sql1.md; https://gitee.com/koyshe/phpshe/issues/ITLK2
CVE: CVE-2020-28644
Published: 2021-02-09
Description: The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version < 10.6.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://owncloud.com/security-advisories/cross-site-request-forgery-in-the-ocs-api/; https://owncloud.com/security-advisories/cross-site-request-forgery-in-the-ocs-api/
CVE: CVE-2020-28645
Published: 2021-02-09
Description: Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow users to register themselves and have the data directory in the web root. This affects ownCloud/core versions < 10.6.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: https://owncloud.com/security-advisories/missing-user-validation-leading-to-information-disclosure/; https://owncloud.com/security-advisories/missing-user-validation-leading-to-information-disclosure/
CVE: CVE-2021-22267
Published: 2021-02-09
Description: Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP through T0320L01^ABZ, T0952L01^AAH through T0952L01^AAR, T0986L01 through T0986L01^AAF, T0665L01^AAP, and T0662L01^AAP (L) and T0320H01^ABO through T0320H01^ABY, T0952H01^AAG through T0952H01^AAQ, T0986H01 through T0986H01^AAE, T0665H01^AAO, and T0662H01^AAO (J and H).
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-294
References: https://idelji.com; https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbns04076en_us; https://techpartner.ext.hpe.com/TechPartner/PartnerDetail.xhtml?Partner=Idelji
CVE: CVE-2021-3191
Published: 2021-02-09
Description: Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0952L01^AAR through T0952L01^AAX, and T0986L01^AAD through T0986L01^AAJ (L) and T0320H01^ABW through T0320H01^ACC, T0952H01^AAQ through T0952H01^AAW, and T0986H01^AAC through T0986H01^AAI (J and H).
CVSS Score: 8.8 (HIGH)
References: https://idelji.com; https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbns04081en_us; https://techpartner.ext.hpe.com/TechPartner/PartnerDetail.xhtml?Partner=Idelji
CVE: CVE-2020-22839
Published: 2021-02-09
Description: Reflected cross-site scripting vulnerability (XSS) in the evoadm.php file in b2evolution cms version 6.11.6-stable allows remote attackers to inject arbitrary webscript or HTML code via the tab3 parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/161363/b2evolution-CMS-6.11.6-Cross-Site-Scripting.html; https://sohambakore.medium.com/b2evolution-cms-reflected-xss-in-tab-type-parameter-in-evoadm-php-38886216cdd3; https://www.exploit-db.com/exploits/49555
CVE: CVE-2021-26549
Published: 2021-02-09
Description: An XSS issue was discovered in SmartFoxServer 2.17.0. Input passed to the AdminTool console is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/161335/SmartFoxServer-2X-2.17.0-God-Mode-Console-WebSocket-Cross-Site-Scripting.html; https://www.smartfoxserver.com; https://www.zeroscience.mk/en/vulnerabilities/
CVE: CVE-2021-26550
Published: 2021-02-09
Description: An issue was discovered in SmartFoxServer 2.17.0. Cleartext password disclosure can occur via /config/server.xml.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312
References: http://packetstormsecurity.com/files/161337/SmartFoxServer-2X-2.17.0-Credential-Disclosure.html; https://www.smartfoxserver.com/; https://www.zeroscience.mk/en/vulnerabilities/
CVE: CVE-2021-26551
Published: 2021-02-09
Description: An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and editing /config/admin/admintool.xml to enable the Console module.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/161340/SmartFoxServer-2X-2.17.0-Remote-Code-Execution.html; https://www.smartfoxserver.com; https://www.zeroscience.mk/en/vulnerabilities/
CVE: CVE-2021-26937
Published: 2021-02-09
Description: encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or possibly have unspecified other impact via a crafted UTF-8 character sequence.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-88
References: http://www.openwall.com/lists/oss-security/2021/02/09/8; https://ftp.gnu.org/gnu/screen/; https://lists.debian.org/debian-lts-announce/2021/02/msg00031.html
CVE: CVE-2020-14343
Published: 2021-02-09
Description: A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1860466; https://github.com/SeldonIO/seldon-core/issues/2252; https://github.com/yaml/pyyaml/issues/420
CVE: CVE-2021-21444
Published: 2021-02-09
Description: SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the response headers, which may not be predictably treated by all user agents. This could, as a result, nullify the added X-Frame-Options header leading to Clickjacking attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1021
References: https://launchpad.support.sap.com/#/notes/2935791; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543; https://launchpad.support.sap.com/#/notes/2935791
CVE: CVE-2021-21472
Published: 2021-02-09
Description: SAP Software Provisioning Manager 1.0 (SAP NetWeaver Master Data Management Server 7.1) does not have an option to set password during its installation, this allows an authenticated attacker to perform various security attacks like Directory Traversal, Password Brute force Attack, SMB Relay attack, Security Downgrade.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://launchpad.support.sap.com/#/notes/2998173; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543; https://launchpad.support.sap.com/#/notes/2998173
CVE: CVE-2021-21474
Published: 2021-02-09
Description: SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML Assertion issued for an SAP HANA instance might be able to tamper with it and alter it in a way that the digest continues to be the same and without invalidating the digital signature, this allows them to impersonate as user in HANA database and be able to read the contents in the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-326
References: https://launchpad.support.sap.com/#/notes/2992154; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543; https://launchpad.support.sap.com/#/notes/2992154
CVE: CVE-2021-21475
Published: 2021-02-09
Description: Under specific circumstances SAP Master Data Management, versions - 710, 710.750, allows an unauthorized attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are passed through to the file APIs. Due to this Directory Traversal vulnerability the attacker could read content of arbitrary files on the remote server and expose sensitive data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://launchpad.support.sap.com/#/notes/3000897; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543; https://launchpad.support.sap.com/#/notes/3000897
CVE: CVE-2021-21476
Published: 2021-02-09
Description: SAP UI5 versions before 1.38.49, 1.52.49, 1.60.34, 1.71.31, 1.78.18, 1.84.5, 1.85.4, 1.86.1 allows an unauthenticated attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://launchpad.support.sap.com/#/notes/3014303; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543; https://launchpad.support.sap.com/#/notes/3014303
CVE: CVE-2021-21477
Published: 2021-02-09
Description: SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required privileges to edit drools rules, an authenticated attacker with this privilege will be able to inject malicious code in the drools rules which when executed leads to Remote Code Execution vulnerability enabling the attacker to compromise the underlying host enabling him to impair confidentiality, integrity and availability of the application.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-94
References: https://launchpad.support.sap.com/#/notes/3014121; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543; https://launchpad.support.sap.com/#/notes/3014121
CVE: CVE-2021-21478
Published: 2021-02-09
Description: SAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: https://launchpad.support.sap.com/#/notes/2974582; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543; https://launchpad.support.sap.com/#/notes/2974582
CVE: CVE-2021-21479
Published: 2021-02-09
Description: In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-74
References: https://github.com/SAP/scimono/security/advisories/GHSA-29q4-gxjq-rx5c; https://github.com/SAP/scimono/security/advisories/GHSA-29q4-gxjq-rx5c
CVE: CVE-2020-26191
Published: 2021-02-09
Description: Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain a privilege escalation vulnerability. A user with ISI_PRIV_JOB_ENGINE may use the PermissionRepair job to grant themselves the highest level of RBAC privileges thus being able to read arbitrary data, tamper with system software or deny service to users.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE: CVE-2020-26192
Published: 2021-02-09
Description: Dell EMC PowerScale OneFS versions 8.2.0 - 9.1.0 contain a privilege escalation vulnerability. A non-admin user with either ISI_PRIV_LOGIN_CONSOLE or ISI_PRIV_LOGIN_SSH may potentially exploit this vulnerability to read arbitrary data, tamper with system software or deny service to users. Note: no non-admin users or roles have these privileges by default.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306, CWE-306
References: https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE: CVE-2020-26193
Published: 2021-02-09
Description: Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain an improper input validation vulnerability. A user with the ISI_PRIV_CLUSTER privilege may exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-78
References: https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE: CVE-2020-26194
Published: 2021-02-09
Description: Dell EMC PowerScale OneFS versions 8.1.2 and 8.2.2 contain an Incorrect Permission Assignment for a Critical Resource vulnerability. This may allow a non-admin user with either ISI_PRIV_LOGIN_CONSOLE or ISI_PRIV_LOGIN_SSH privileges to exploit the vulnerability, leading to compromised cryptographic operations. Note: no non-admin users or roles have these privileges by default.
CVSS Score: 7.0 (HIGH)
CWE: CWE-732, CWE-732
References: https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE: CVE-2020-26195
Published: 2021-02-09
Description: Dell EMC PowerScale OneFS versions 8.1.2 – 9.1.0 contain an issue where the OneFS SMB directory auto-create may erroneously create a directory for a user. A remote unauthenticated attacker may take advantage of this issue to slow down the system.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-280, CWE-755
References: https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE: CVE-2020-26196
Published: 2021-02-09
Description: Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue. A user with the BackupAdmin role may potentially exploit this vulnerability resulting in the ability to write data outside of the intended file system location.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE: CVE-2020-35125
Published: 2021-02-09
Description: A cross-site scripting (XSS) vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript via mautic[return] (a different attack method than CVE-2020-35124, but also related to the Referer concept).
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://forum.mautic.org/c/announcements/16; https://github.com/mautic/mautic/security/advisories/GHSA-42q7-95j7-w62m; https://www.horizon3.ai/disclosures/mautic-unauth-xss-to-rce
CVE: CVE-2021-21502
Published: 2021-02-09
Description: Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISI_PRIV_AUTH_SSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before account expiration. This may by a high privileged account and hence Dell recommends customers upgrade at the earliest opportunity.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE: CVE-2021-26951
Published: 2021-02-09
Description: An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::set_len is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-908
References: https://rustsec.org/advisories/RUSTSEC-2021-0015.html; https://rustsec.org/advisories/RUSTSEC-2021-0015.html
CVE: CVE-2021-26952
Published: 2021-02-09
Description: An issue was discovered in the ms3d crate before 0.1.3 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via IoReader::read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: https://rustsec.org/advisories/RUSTSEC-2021-0016.html; https://rustsec.org/advisories/RUSTSEC-2021-0016.html
CVE: CVE-2021-26953
Published: 2021-02-09
Description: An issue was discovered in the postscript crate before 0.14.0 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via a user-provided Read implementation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: https://rustsec.org/advisories/RUSTSEC-2021-0017.html; https://rustsec.org/advisories/RUSTSEC-2021-0017.html
CVE: CVE-2021-26954
Published: 2021-02-09
Description: An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insert_slice_clone can perform a double drop.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-415
References: https://rustsec.org/advisories/RUSTSEC-2021-0018.html; https://rustsec.org/advisories/RUSTSEC-2021-0018.html
CVE: CVE-2021-26955
Published: 2021-02-09
Description: An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name() calls std::str::from_utf8_unchecked() on unvalidated bytes from an X server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-252
References: https://rustsec.org/advisories/RUSTSEC-2021-0019.html; https://rustsec.org/advisories/RUSTSEC-2021-0019.html
CVE: CVE-2021-26956
Published: 2021-02-09
Description: An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because bytes from an X server can be interpreted as any data type returned by xcb::xproto::GetPropertyReply::value.
CVSS Score: 9.8 (CRITICAL)
References: https://rustsec.org/advisories/RUSTSEC-2021-0019.html; https://rustsec.org/advisories/RUSTSEC-2021-0019.html
CVE: CVE-2021-26957
Published: 2021-02-09
Description: An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because there is an out-of-bounds read in xcb::xproto::change_property(), as demonstrated by a format=32 T=u8 situation where out-of-bounds bytes are sent to an X server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://rustsec.org/advisories/RUSTSEC-2021-0019.html; https://rustsec.org/advisories/RUSTSEC-2021-0019.html
CVE: CVE-2021-26958
Published: 2021-02-09
Description: An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because transmutation to the wrong type can happen after xcb::base::cast_event uses std::mem::transmute to return a reference to an arbitrary type.
CVSS Score: 8.8 (HIGH)
CWE: CWE-252
References: https://rustsec.org/advisories/RUSTSEC-2021-0019.html; https://rustsec.org/advisories/RUSTSEC-2021-0019.html
CVE: CVE-2021-26959
Published: 2021-02-09
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-21299. Reason: This candidate is a duplicate of CVE-2021-21299. Notes: All CVE users should reference CVE-2021-21299 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-28870
Published: 2021-02-10
Description: In InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to lack of validations in /modules/sys/form_personalization/json_fp.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-94
References: https://www.exploit-db.com/exploits/48946; https://www.exploit-db.com/exploits/48946
CVE: CVE-2020-28871
Published: 2021-02-10
Description: Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an insecure file upload.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://packetstormsecurity.com/files/163263/Monitorr-1.7.6m-Bypass-Information-Disclosure-Shell-Upload.html; http://packetstormsecurity.com/files/170974/Monitorr-1.7.6-Shell-Upload.html; http://packetstormsecurity.com/files/171429/Monitorr-1.7.6m-1.7.7d-Remote-Code-Execution.html
CVE: CVE-2020-36244
Published: 2021-02-10
Description: The daemon in GENIVI diagnostic log and trace (DLT), is vulnerable to a heap-based buffer overflow that could allow an attacker to remotely execute arbitrary code on the DLT-Daemon (versions prior to 2.18.6).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/GENIVI/dlt-daemon/compare/v2.18.5...v2.18.6; https://github.com/GENIVI/dlt-daemon/issues/265; https://lists.debian.org/debian-lts-announce/2022/12/msg00016.html
CVE: CVE-2021-20654
Published: 2021-02-10
Description: Wekan, open source kanban board system, between version 3.12 and 4.11, is vulnerable to multiple stored cross-site scripting. This is named 'Fieldbleed' in the vendor's site.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://jvn.jp/en/jp/JVN80785288/; https://wekan.github.io/hall-of-fame/fieldbleed/; https://jvn.jp/en/jp/JVN80785288/