deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-22300
Published: 2021-02-06
Description: There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file contains sensitive information. This allows attackers to obtain information by inter-process access that requires other methods.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-312
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-cgp-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-cgp-en
CVE: CVE-2021-22303
Published: 2021-02-06
Description: There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). There is a lack of muti-thread protection when a function is called. Attackers can exploit this vulnerability by performing malicious operation to cause pointer double free. This may lead to module crash, compromising normal service.
CVSS Score: 3.3 (LOW)
CWE: CWE-415
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-02-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-02-smartphone-en
CVE: CVE-2021-22306
Published: 2021-02-06
Description: There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause out-of-bound, compromising normal service.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-05-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-05-smartphone-en
CVE: CVE-2021-22499
Published: 2021-02-06
Description: Persistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow persistent XSS attack.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://softwaresupport.softwaregrp.com/doc/KM03775253; https://softwaresupport.softwaregrp.com/doc/KM03775253
CVE: CVE-2020-9118
Published: 2021-02-06
Description: There is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does not check certain software package's integrity sufficiently. Successful exploit could allow an attacker to load a crafted software package to the device. Affected product versions include:AIS-BW80H-00 versions 9.0.3.1(H100SP13C00),9.0.3.1(H100SP18C00),9.0.3.1(H100SP3C00),9.0.3.1(H100SP9C00),9.0.3.2(H100SP1C00),9.0.3.2(H100SP2C00),9.0.3.2(H100SP5C00),9.0.3.2(H100SP8C00),9.0.3.3(H100SP1C00).
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-354
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-01-ais-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-01-ais-en
CVE: CVE-2020-9205
Published: 2021-02-06
Description: There has a CSV injection vulnerability in ManageOne 8.0.1. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this vulnerability to inject CSV files to the target device.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-1236
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-csvinjection-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-csvinjection-en
CVE: CVE-2021-22298
Published: 2021-02-06
Description: There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions include: ManageOne versions 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090.
CVSS Score: 6.5 (MEDIUM)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-01-gauss-en; https://www.oracle.com/security-alerts/cpujan2022.html; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-01-gauss-en
CVE: CVE-2021-22299
Published: 2021-02-06
Description: There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Affected product versions include: ManageOne versions 6.5.0,6.5.0.SPC100.B210,6.5.1.1.B010,6.5.1.1.B020,6.5.1.1.B030,6.5.1.1.B040,6.5.1.SPC100.B050,6.5.1.SPC101.B010,6.5.1.SPC101.B040,6.5.1.SPC200,6.5.1.SPC200.B010,6.5.1.SPC200.B030,6.5.1.SPC200.B040,6.5.1.SPC200.B050,6.5.1.SPC200.B060,6.5.1.SPC200.B070,6.5.1RC1.B060,6.5.1RC2.B020,6.5.1RC2.B030,6.5.1RC2.B040,6.5.1RC2.B050,6.5.1RC2.B060,6.5.1RC2.B070,6.5.1RC2.B080,6.5.1RC2.B090,6.5.RC2.B050,8.0.0,8.0.0-LCND81,8.0.0.SPC100,8.0.1,8.0.RC2,8.0.RC3,8.0.RC3.B041,8.0.RC3.SPC100; NFV_FusionSphere versions 6.5.1.SPC23,8.0.0.SPC12; SMC2.0 versions V600R019C00,V600R019C10; iMaster MAE-M versions MAE-TOOL(FusionSphereBasicTemplate_Euler_X86)V100R020C10SPC220.
CVSS Score: 7.8 (HIGH)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210120-02-privilege-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210120-02-privilege-en
CVE: CVE-2021-22500
Published: 2021-02-06
Description: Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executing actions of the attacker's choosing.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://softwaresupport.softwaregrp.com/doc/KM03775253; https://softwaresupport.softwaregrp.com/doc/KM03775253
CVE: CVE-2021-22292
Published: 2021-02-06
Description: There is a denial of service (DoS) vulnerability in eCNS280 versions V100R005C00, V100R005C10. Due to a design defect, remote unauthorized attackers send a large number of specific messages to affected devices, causing system resource exhaustion and web application DoS.
CVSS Score: 7.5 (HIGH)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-02-dos-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-02-dos-en
CVE: CVE-2021-22293
Published: 2021-02-06
Description: Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Affected product versions include: CampusInsight versions V100R019C10; ManageOne versions 6.5.1.1, 6.5.1.SPC100, 6.5.1.SPC200, 6.5.1RC1, 6.5.1RC2, 8.0.RC2. Affected product versions include: Taurus-AL00A versions 10.0.0.1(C00E1R1P1).
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210120-01-http-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210120-01-http-en
CVE: CVE-2021-22302
Published: 2021-02-06
Description: There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module does not verify the some input. Attackers can exploit this vulnerability by sending malicious input through specific app. This could cause out-of-bound, compromising normal service.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-smartphone-en
CVE: CVE-2021-22304
Published: 2021-02-06
Description: There is a use after free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module may refer to some memory after it has been freed while dealing with some messages. Attackers can exploit this vulnerability by sending specific message to the affected module. This may lead to module crash, compromising normal service.
CVSS Score: 3.3 (LOW)
CWE: CWE-416
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-03-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-03-smartphone-en
CVE: CVE-2021-22305
Published: 2021-02-06
Description: There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause buffer overflow, compromising normal service.
CVSS Score: 3.3 (LOW)
CWE: CWE-120
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-04-smartphone-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-04-smartphone-en
CVE: CVE-2021-26723
Published: 2021-02-06
Description: Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/161303/Jenzabar-9.2.2-Cross-Site-Scripting.html; https://gist.github.com/Y0ung-DST/d1b6b65be6248b0ffc2b2f2120deb205; https://jenzabar.com/blog
CVE: CVE-2020-36242
Published: 2021-02-07
Description: In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-190, CWE-787
References: https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst; https://github.com/pyca/cryptography/compare/3.3.1...3.3.2; https://github.com/pyca/cryptography/issues/5615
CVE: CVE-2020-36243
Published: 2021-02-07
Description: The Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injection vulnerability in /interface/main/backup.php. To exploit the vulnerability, an authenticated attacker can send a POST request that executes arbitrary OS commands via shell metacharacters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerability; https://community.open-emr.org/t/openemr-5-0-2-patch-5-has-been-released/15431; https://community.sonarsource.com/t/openemr-5-0-2-1-command-injection-vulnerability-puts-health-records-at-risk/33592
CVE: CVE-2021-3122
Published: 2021-02-07
Description: CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within an XML document sent to port 8089) that enables the remote, unauthenticated execution of an arbitrary command as SYSTEM, as exploited in the wild in 2020 and/or 2021. NOTE: the vendor's position is that exploitation occurs only on devices with a certain "misconfiguration."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/roughb8722/CVE-2021-3122-Details/blob/main/CVE-2021-3122; https://rdf2.alohaenterprise.com/client/CMCInst.zip; https://www.tetradefense.com/incident-response-services/active-exploit-a-remote-code-execution-rce-vulnerability-for-ncr-aloha-point-of-sale/
CVE: CVE-2021-26843
Published: 2021-02-07
Description: An issue was discovered in sthttpd through 2.27.1. On systems where the strcpy function is implemented with memcpy, the de_dotdot function may cause a Denial-of-Service (daemon crash) due to overlapping memory ranges being passed to memcpy. This can triggered with an HTTP GET request for a crafted filename. NOTE: this is similar to CVE-2017-10671, but occurs in a different part of the de_dotdot function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://github.com/blueness/sthttpd/issues/14; https://github.com/blueness/sthttpd/issues/14
CVE: CVE-2021-22161
Published: 2021-02-07
Description: In OpenWrt 19.07.x before 19.07.7, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set. This affects the netifd and odhcp6c packages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-835
References: https://openwrt.org/advisory/2021-02-02-1; https://openwrt.org/advisory/2021-02-02-1
CVE: CVE-2021-26754
Published: 2021-02-08
Description: wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php?action=get_wdtable order[0][dir] SQL injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://n4nj0.github.io/advisories/wordpress-plugin-wpdatatables-i/; https://wordpress.org/plugins/wpdatatables/#developers; https://wpdatatables.com/help/whats-new-changelog/
CVE: CVE-2020-11915
Published: 2021-02-08
Description: An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. By sending a set_params.cgi?telnetd=1&save=1&reboot=1 request to the webserver, it is possible to enable the telnet interface on the device. The telnet interface can then be used to obtain access to the device with root privileges via a reecam4debug default password. This default telnet password is the same across all Siime Eye devices. In order for the attack to be exploited, an attacker must be physically close in order to connect to the device's Wi-Fi access point.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-1188, CWE-1188
References: http://seclists.org/fulldisclosure/2024/Jul/14; https://www.pentestpartners.com/security-blog/vulnerable-wi-fi-dildo-camera-endoscope-yes-really/; http://seclists.org/fulldisclosure/2024/Jul/14
CVE: CVE-2020-11920
Published: 2021-02-08
Description: An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. A command injection vulnerability resides in the HOST/IP section of the NFS settings menu in the webserver running on the device. By injecting Bash commands via shell metacharacters here, the device executes arbitrary code with root privileges (all of the device's services are running as root).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://seclists.org/fulldisclosure/2024/Jul/14; https://www.pentestpartners.com/security-blog/vulnerable-wi-fi-dildo-camera-endoscope-yes-really/; http://seclists.org/fulldisclosure/2024/Jul/14
CVE: CVE-2020-35700
Published: 2021-02-08
Description: A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the sort_order parameter against the /ajax/form/widget-settings endpoint.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/librenms/librenms/blob/master/app/Http/Controllers/Widgets/TopDevicesController.php; https://github.com/librenms/librenms/issues/12405; https://github.com/librenms/librenms/pull/12422
CVE: CVE-2020-1779
Published: 2021-02-08
Description: When dynamic templates are used (OTRSTicketForms), admin can use OTRS tags which are not masked properly and can reveal sensitive information. This issue affects: OTRS AG OTRSTicketForms 6.0.x version 6.0.40 and prior versions; 7.0.x version 7.0.29 and prior versions; 8.0.x version 8.0.3 and prior versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://otrs.com/release-notes/otrs-security-advisory-2020-17/; https://otrs.com/release-notes/otrs-security-advisory-2020-17/
CVE: CVE-2021-21434
Published: 2021-02-08
Description: Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface (i.e. another agent who wants to make changes in the survey). This issue affects: OTRS AG Survey 6.0.x version 6.0.20 and prior versions; 7.0.x version 7.0.19 and prior versions.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://otrs.com/release-notes/otrs-security-advisory-2021-01/; https://otrs.com/release-notes/otrs-security-advisory-2021-01/
CVE: CVE-2021-21435
Published: 2021-02-08
Description: Article Bcc fields and agent personal information are shown when customer prints the ticket (PDF) via external interface. This issue affects: OTRS AG OTRS 7.0.x version 7.0.23 and prior versions; 8.0.x version 8.0.10 and prior versions.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://otrs.com/release-notes/otrs-security-advisory-2021-02/; https://otrs.com/release-notes/otrs-security-advisory-2021-02/
CVE: CVE-2021-21436
Published: 2021-02-08
Description: Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions.
CVSS Score: 3.5 (LOW)
CWE: CWE-264, CWE-276
References: https://otrs.com/release-notes/otrs-security-advisory-2021-04/; https://otrs.com/release-notes/otrs-security-advisory-2021-04/
CVE: CVE-2020-26051
Published: 2021-02-08
Description: College Management System Php 1.0 suffers from SQL injection vulnerabilities in the index.php page from POST parameters 'unametxt' and 'pwdtxt', which are not filtered before passing a SQL query.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.exploit-db.com/exploits/48593; https://www.exploit-db.com/exploits/48593
CVE: CVE-2020-26052
Published: 2021-02-08
Description: Online Marriage Registration System 1.0 is affected by stored cross-site scripting (XSS) vulnerabilities in multiple parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/48522; https://www.exploit-db.com/exploits/48522
CVE: CVE-2020-16629
Published: 2021-02-08
Description: PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a PHP file to the target path.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Gh0stF/phpok_cve/issues/1; https://github.com/Gh0stF/phpok_cve/issues/1
CVE: CVE-2021-20358
Published: 2021-02-08
Description: IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This information could be obtained by a user with permissions to read log files. IBM X-Force ID: 194965.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/194965; https://www.ibm.com/support/pages/node/6412345; https://exchange.xforce.ibmcloud.com/vulnerabilities/194965
CVE: CVE-2021-20359
Published: 2021-02-08
Description: IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentially sensitive information in log files that could be obtained by an unauthorized user. IBM X-Force ID: 194966.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/194966; https://www.ibm.com/support/pages/node/6412345; https://exchange.xforce.ibmcloud.com/vulnerabilities/194966
CVE: CVE-2021-26825
Published: 2021-02-08
Description: An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::load_image() function at line: const size_t buffer_size = (tga_header.image_width * tga_header.image_height) * pixel_size; The bug leads to Dynamic stack buffer overflow. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://github.com/godotengine/godot/pull/45702; https://github.com/godotengine/godot/pull/45702/files; https://github.com/godotengine/godot/pull/45702
CVE: CVE-2021-26826
Published: 2021-02-08
Description: A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/godotengine/godot/pull/45701; https://github.com/godotengine/godot/pull/45701/commits/403e4fd08b0b212e96f53d926e6273e0745eaa5a; https://github.com/godotengine/godot/pull/45701
CVE: CVE-2021-3293
Published: 2021-02-08
Description: emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/emlog/emlog/issues/62; https://github.com/thinkgad/Bugs/blob/main/emlog%20v5.3.1%20has%20Full%20Path%20Disclosure%20vulnerability.md; https://github.com/emlog/emlog/issues/62
CVE: CVE-2020-6649
Published: 2021-02-08
Description: An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613
References: https://fortiguard.com/advisory/FG-IR-20-011; https://fortiguard.com/advisory/FG-IR-20-011
CVE: CVE-2021-22122
Published: 2021-02-08
Description: An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload in different vulnerable API end-points.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-20-122; https://fortiguard.com/advisory/FG-IR-20-122
CVE: CVE-2021-26539
Published: 2021-02-08
Description: Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name (IDN) which could allow an attacker to bypass hostname whitelist validation set by the "allowedIframeHostnames" option.
CVSS Score: 5.3 (MEDIUM)
References: https://advisory.checkmarx.net/advisory/CX-2021-4308; https://github.com/apostrophecms/sanitize-html/blob/main/CHANGELOG.md#231-2021-01-22; https://github.com/apostrophecms/sanitize-html/pull/458
CVE: CVE-2021-26540
Published: 2021-02-08
Description: Apostrophe Technologies sanitize-html before 2.3.2 does not properly validate the hostnames set by the "allowedIframeHostnames" option when the "allowIframeRelativeUrls" is set to true, which allows attackers to bypass hostname whitelist for iframe element, related using an src value that starts with "/\\example.com".
CVSS Score: 5.3 (MEDIUM)
References: https://advisory.checkmarx.net/advisory/CX-2021-4309; https://github.com/apostrophecms/sanitize-html/blob/main/CHANGELOG.md#232-2021-01-26; https://github.com/apostrophecms/sanitize-html/pull/460
CVE: CVE-2021-26541
Published: 2021-02-08
Description: The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://advisory.checkmarx.net/advisory/CX-2020-4301; https://github.com/domharrington/node-gitlog/pull/65; https://www.npmjs.com/package/gitlog
CVE: CVE-2021-21304
Published: 2021-02-08
Description: Dynamoose is an open-source modeling tool for Amazon's DynamoDB. In Dynamoose from version 2.0.0 and before version 2.7.0 there was a prototype pollution vulnerability in the internal utility method "lib/utils/object/set.ts". This method is used throughout the codebase for various operations throughout Dynamoose. We have not seen any evidence of this vulnerability being exploited. There is no evidence this vulnerability impacts versions 1.x.x since the vulnerable method was added as part of the v2 rewrite. This vulnerability also impacts v2.x.x beta/alpha versions. Version 2.7.0 includes a patch for this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-915, CWE-1321, CWE-1321
References: https://github.com/dynamoose/dynamoose/commit/324c62b[PII_REDACTED]931a187362f8999805b1d8e; https://github.com/dynamoose/dynamoose/releases/tag/v2.7.0; https://github.com/dynamoose/dynamoose/security/advisories/GHSA-rrqm-p222-8ph2