deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-8293
Published: 2021-01-26
Description: A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://hackerone.com/reports/1018146; https://nextcloud.com/security/advisory/?id=NC-SA-2021-001; https://hackerone.com/reports/1018146
CVE: CVE-2020-8295
Published: 2021-01-26
Description: A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://hackerone.com/reports/812754; https://nextcloud.com/security/advisory/?id=NC-SA-2021-003; https://hackerone.com/reports/812754
CVE: CVE-2020-9492
Published: 2021-01-26
Description: In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://lists.apache.org/thread.html/r0a534f1cde7555f7208e9f9b791c1ab396d215eaaef283b3a9153429%40%3Ccommits.druid.apache.org%3E; https://lists.apache.org/thread.html/r49c9ab444ab1107c6a8be8a0d66602dec32a16d96c2631fec8d309fb%40%3Cissues.solr.apache.org%3E; https://lists.apache.org/thread.html/r4a57de5215494c35c8304cf114be75d42df7abc6c0c54bf163c3e370%40%3Cissues.solr.apache.org%3E
CVE: CVE-2021-21615
Published: 2021-01-26
Description: Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-check to time-of-use (TOCTOU) race condition.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-367
References: http://www.openwall.com/lists/oss-security/2021/01/26/2; https://www.jenkins.io/security/advisory/2021-01-26/#SECURITY-2197; http://www.openwall.com/lists/oss-security/2021/01/26/2
CVE: CVE-2021-21723
Published: 2021-01-26
Description: Some ZTE products have a DoS vulnerability. Due to the improper handling of memory release in some specific scenarios, a remote attacker can trigger the vulnerability by performing a series of operations, resulting in memory leak, which may eventually lead to device denial of service. This affects: ZXR10 9904, ZXR10 9908, ZXR10 9916, ZXR10 9904-S, ZXR10 9908-S; all versions up to V1.01.10.B12.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014424; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014424
CVE: CVE-2021-22697
Published: 2021-01-26
Description: A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-012-01; https://www.se.com/ww/en/download/document/SEVD-2021-012-02/; https://www.zerodayinitiative.com/advisories/ZDI-21-186/
CVE: CVE-2021-22698
Published: 2021-01-26
Description: A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-434
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-012-01; https://www.se.com/ww/en/download/document/SEVD-2021-012-02/; https://www.zerodayinitiative.com/advisories/ZDI-21-187/
CVE: CVE-2021-22871
Published: 2021-01-26
Description: Revive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious content in the URL website property, which is then displayed unsanitized in the affiliate-preview.php tag generation screen, leading to a persistent cross-site scripting (XSS) vulnerability.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/161070/Revive-Adserver-5.0.5-Cross-Site-Scripting-Open-Redirect.html; http://seclists.org/fulldisclosure/2021/Jan/60; https://github.com/revive-adserver/revive-adserver/commit/62a2a0439
CVE: CVE-2021-22872
Published: 2021-01-26
Description: Revive Adserver before 5.1.0 is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the publicly accessible afr.php delivery script. While this issue was previously addressed in modern browsers as CVE-2020-8115, some older browsers (e.g., IE10) that do not automatically URL encode parameters were still vulnerable.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://packetstormsecurity.com/files/161070/Revive-Adserver-5.0.5-Cross-Site-Scripting-Open-Redirect.html; http://seclists.org/fulldisclosure/2021/Jan/60; https://github.com/revive-adserver/revive-adserver/commit/00fdb8d0e
CVE: CVE-2021-22873
Published: 2021-01-26
Description: Revive Adserver before 5.1.0 is vulnerable to open redirects via the `dest`, `oadest`, and/or `ct0` parameters of the lg.php and ck.php delivery scripts. Such open redirects had previously been available by design to allow third party ad servers to track such metrics when delivering ads. However, third party click tracking via redirects is not a viable option anymore, leading to such open redirect functionality being removed and reclassified as a vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: http://packetstormsecurity.com/files/161070/Revive-Adserver-5.0.5-Cross-Site-Scripting-Open-Redirect.html; http://seclists.org/fulldisclosure/2021/Jan/60; https://github.com/revive-adserver/revive-adserver/issues/1068
CVE: CVE-2021-25863
Published: 2021-01-26
Description: Open5GS 2.1.3 listens on 0.0.0.0:3000 and has a default password of 1423 for the admin account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: https://github.com/open5gs/open5gs/issues/764; https://github.com/open5gs/open5gs/issues/764
CVE: CVE-2021-25864
Published: 2021-01-26
Description: node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/Foddy/node-red-contrib-huemagic/issues/217; https://github.com/Foddy/node-red-contrib-huemagic/issues/217
CVE: CVE-2021-25900
Published: 2021-01-26
Description: An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insert_many.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://rustsec.org/advisories/RUSTSEC-2021-0003.html; https://rustsec.org/advisories/RUSTSEC-2021-0003.html
CVE: CVE-2021-25901
Published: 2021-01-26
Description: An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. Lazy lacks a Send bound, leading to a data race.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-125
References: https://rustsec.org/advisories/RUSTSEC-2021-0004.html; https://rustsec.org/advisories/RUSTSEC-2021-0004.html
CVE: CVE-2021-25902
Published: 2021-01-26
Description: An issue was discovered in the glsl-layout crate before 0.4.0 for Rust. When a panic occurs, map_array can perform a double drop.
CVSS Score: 7.5 (HIGH)
References: https://rustsec.org/advisories/RUSTSEC-2021-0005.html; https://rustsec.org/advisories/RUSTSEC-2021-0005.html
CVE: CVE-2021-25903
Published: 2021-01-26
Description: An issue was discovered in the cache crate through 2021-01-01 for Rust. A raw pointer is dereferenced.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://rustsec.org/advisories/RUSTSEC-2021-0006.html; https://rustsec.org/advisories/RUSTSEC-2021-0006.html
CVE: CVE-2021-25904
Published: 2021-01-26
Description: An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://rustsec.org/advisories/RUSTSEC-2021-0007.html; https://rustsec.org/advisories/RUSTSEC-2021-0007.html
CVE: CVE-2021-25905
Published: 2021-01-26
Description: An issue was discovered in the bra crate before 0.1.1 for Rust. It lacks soundness because it can read uninitialized memory.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-908
References: https://rustsec.org/advisories/RUSTSEC-2021-0008.html; https://rustsec.org/advisories/RUSTSEC-2021-0008.html
CVE: CVE-2021-25906
Published: 2021-01-26
Description: An issue was discovered in the basic_dsp_matrix crate before 0.9.2 for Rust. When a TransformContent panic occurs, a double drop can be performed.
CVSS Score: 7.5 (HIGH)
References: https://rustsec.org/advisories/RUSTSEC-2021-0009.html; https://rustsec.org/advisories/RUSTSEC-2021-0009.html
CVE: CVE-2021-25907
Published: 2021-01-26
Description: An issue was discovered in the containers crate before 0.9.11 for Rust. When a panic occurs, a util::{mutate,mutate2} double drop can be performed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: https://rustsec.org/advisories/RUSTSEC-2021-0010.html; https://rustsec.org/advisories/RUSTSEC-2021-0010.html
CVE: CVE-2021-25908
Published: 2021-01-26
Description: An issue was discovered in the fil-ocl crate through 2021-01-04 for Rust. From<EventList> can lead to a double free.
CVSS Score: 7.5 (HIGH)
CWE: CWE-415
References: https://rustsec.org/advisories/RUSTSEC-2021-0011.html; https://rustsec.org/advisories/RUSTSEC-2021-0011.html
CVE: CVE-2021-26025
Published: 2021-01-26
Description: PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDStd!zlibVersion+0x[PII_REDACTED]004e5e via a crafted BMP image.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://github.com/secluck/pentest/blob/main/000022.md; https://github.com/secluck/pentest/blob/main/000022.md
CVE: CVE-2021-26026
Published: 2021-01-26
Description: PlugIns\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDStd!JPEGTransW+0x[PII_REDACTED]00c7f4 via a crafted BMP image.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://github.com/secluck/pentest/blob/main/000033.md; https://github.com/secluck/pentest/blob/main/000033.md
CVE: CVE-2021-26266
Published: 2021-01-26
Description: cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578).
CVSS Score: 7.5 (HIGH)
References: https://docs.cpanel.net/changelogs/92-change-log/; https://docs.cpanel.net/changelogs/92-change-log/
CVE: CVE-2021-26267
Published: 2021-01-26
Description: cPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass suspension (SEC-579).
CVSS Score: 7.5 (HIGH)
References: https://docs.cpanel.net/changelogs/92-change-log/; https://docs.cpanel.net/changelogs/92-change-log/
CVE: CVE-2021-3114
Published: 2021-01-26
Description: In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-682
References: https://github.com/golang/go/commit/d95ca9138026cbe40e0857d76a81a16d03230871; https://groups.google.com/g/golang-announce/c/mperVMGa98w; https://lists.debian.org/debian-lts-announce/2021/03/msg00014.html
CVE: CVE-2021-3115
Published: 2021-01-26
Description: Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo (for example, cgo can execute a gcc program from an untrusted download).
CVSS Score: 7.5 (HIGH)
CWE: CWE-427
References: https://blog.golang.org/path-security; https://groups.google.com/g/golang-announce/c/mperVMGa98w; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWAYJGXWC232SG3UR3TR574E6BP3OSQQ/
CVE: CVE-2021-3152
Published: 2021-01-26
Description: Home Assistant before 2021.1.3 does not have a protection layer that can help to prevent directory-traversal attacks against custom integrations. NOTE: the vendor's perspective is that the vulnerability itself is in custom integrations written by third parties, not in Home Assistant; however, Home Assistant does have a security update that is worthwhile in addressing this situation
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://www.home-assistant.io/blog/2021/01/14/security-bulletin/; https://www.home-assistant.io/blog/2021/01/22/security-disclosure/; https://www.home-assistant.io/blog/2021/01/14/security-bulletin/
CVE: CVE-2021-3164
Published: 2021-01-26
Description: ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://github.com/Little-Ben/ChurchRota; https://github.com/rmccarth/cve-2021-3164; https://github.com/Little-Ben/ChurchRota
CVE: CVE-2021-3185
Published: 2021-01-26
Description: A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1917192; https://security.gentoo.org/glsa/202208-31; https://bugzilla.redhat.com/show_bug.cgi?id=1917192
CVE: CVE-2021-3186
Published: 2021-01-26
Description: A Stored Cross-site scripting (XSS) vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47_multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/161119/Tenda-AC5-AC1200-Wireless-Cross-Site-Scripting.html; https://www.hackingarticles.in/exploiting-stored-cross-site-scripting-at-tenda-ac5-ac1200/; http://packetstormsecurity.com/files/161119/Tenda-AC5-AC1200-Wireless-Cross-Site-Scripting.html
CVE: CVE-2021-3188
Published: 2021-01-26
Description: phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1236
References: https://wehackmx.com/security-research/WeHackMX-2021-001/; https://wehackmx.com/security-research/WeHackMX-2021-001/
CVE: CVE-2021-3190
Published: 2021-01-26
Description: The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://advisory.checkmarx.net/advisory/CX-2021-4772; https://github.com/omrilotan/async-git/pull/13; https://github.com/omrilotan/async-git/pull/13/commits/611823bd97dd41e9e8127c38066868ff9dcfa57a
CVE: CVE-2021-3193
Published: 2021-01-26
Description: Improper access and command validation in the Nagios Docker Config Wizard before 1.1.2, as used in Nagios XI through 5.7, allows an unauthenticated attacker to execute remote code as the apache user.
CVSS Score: 9.8 (CRITICAL)
References: https://www.nagios.com/products/security/; https://www.nagios.com/products/security/
CVE: CVE-2021-3195
Published: 2021-01-26
Description: bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has implemented dumpwallet restrictions
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/bitcoin/bitcoin/issues/20866; https://github.com/bitcoin/bitcoin/issues/20866
CVE: CVE-2021-3199
Published: 2021-01-26
Description: Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563; https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py; https://github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py
CVE: CVE-2021-3223
Published: 2021-01-26
Description: Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/node-red/node-red-dashboard/issues/669; https://github.com/node-red/node-red-dashboard/releases/tag/2.26.2; https://github.com/node-red/node-red-dashboard/issues/669
CVE: CVE-2021-3278
Published: 2021-01-26
Description: Local Service Search Engine Management System 1.0 has a vulnerability through authentication bypass using SQL injection . Using this vulnerability, an attacker can bypass the login page.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/162919/Local-Service-Search-Engine-Management-System-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/49163; https://www.sourcecodester.com/php/14607/local-service-search-engine-management-system-using-phpmysqli-source-code.html
CVE: CVE-2021-3285
Published: 2021-01-26
Description: jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-295
References: https://sir.ext.ti.com/jira/browse/EXT_EP-10212; https://sir.ext.ti.com/jira/browse/EXT_EP-10212
CVE: CVE-2021-3286
Published: 2021-01-26
Description: SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload may be used. NOTE: this issue exists because of an incomplete fix for CVE-2020-35545.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/spotweb/spotweb/issues/653; https://github.com/spotweb/spotweb/issues/653
CVE: CVE-2021-3291
Published: 2021-01-26
Description: Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://packetstormsecurity.com/files/161613/Zen-Cart-1.5.7b-Remote-Code-Execution.html; https://github.com/MucahitSaratar/zencart_auth_rce_poc; http://packetstormsecurity.com/files/161613/Zen-Cart-1.5.7b-Remote-Code-Execution.html
CVE: CVE-2021-3297
Published: 2021-01-26
Description: On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-287
References: https://codeberg.org/nieldk/vulnerabilities/src/branch/main/zyxel%20nbg2105/Admin%20bypass; https://github.com/nieldk/vulnerabilities/blob/main/zyxel%20nbg2105/Admin%20bypass; https://www.zyxel.com/support/SupportLandingSR.shtml?c=gb&l=en&kbid=M-01490&md=NBG2105
CVE: CVE-2021-3304
Published: 2021-01-26
Description: Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://twitter.com/j0nh4t/status/[PII_REDACTED]79840769; https://twitter.com/j0nh4t/status/[PII_REDACTED]79840769
CVE: CVE-2020-13582
Published: 2021-01-26
Description: A denial-of-service vulnerability exists in the HTTP Server functionality of Micrium uC-HTTP 3.01.00. A specially crafted HTTP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-690, CWE-476
References: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1193; https://talosintelligence.com/vulnerability_reports/TALOS-2020-1193
CVE: CVE-2020-27274
Published: 2021-01-26
Description: Some parsing functions in the affected product do not check the return value of malloc and the thread handling the message is forced to close, which may lead to a denial-of-service condition on the OPC UA Tunneller (versions prior to 6.3.0.8233).
CVSS Score: 7.5 (HIGH)
CWE: CWE-754, CWE-754
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03; https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03
CVE: CVE-2020-27297
Published: 2021-01-26
Description: The affected product is vulnerable to a heap-based buffer overflow, which may allow an attacker to manipulate memory with controlled values and remotely execute code on the OPC UA Tunneller (versions prior to 6.3.0.8233).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03; https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03
CVE: CVE-2020-27299
Published: 2021-01-26
Description: The affected product is vulnerable to an out-of-bounds read, which may allow an attacker to obtain and disclose sensitive data information or cause the device to crash on the OPC UA Tunneller (versions prior to 6.3.0.8233).
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125, CWE-125
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03; https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03
CVE: CVE-2021-23272
Published: 2021-01-26
Description: The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BPM Enterprise: versions 4.3.0 and below and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric: versions 4.3.0 and below.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: http://www.tibco.com/services/support/advisories; http://www.tibco.com/services/support/advisories
CVE: CVE-2020-27295
Published: 2021-01-26
Description: The affected product has uncontrolled resource consumption issues, which may allow an attacker to cause a denial-of-service condition on the OPC UA Tunneller (versions prior to 6.3.0.8233).
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03; https://us-cert.cisa.gov/ics/advisories/icsa-21-021-03
CVE: CVE-2021-22159
Published: 2021-01-26
Description: Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Management (formerly ObserveIT) Agent for Windows before 7.4.3, 7.5.4, 7.6.5, 7.7.5, 7.8.4, 7.9.3, 7.10.2, and 7.11.0.25 as well as versions 7.3 and earlier is missing authentication for a critical function, which allows a local authenticated Windows user to run arbitrary commands with the privileges of the Windows SYSTEM user. Agents for MacOS, Linux, and ITM Cloud are not affected.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306
References: https://www.proofpoint.com/us/security/security-advisories; https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0001; https://www.proofpoint.com/us/security/security-advisories
CVE: CVE-2021-3308
Published: 2021-01-26
Description: An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host.
CVSS Score: 5.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2021/01/26/4; http://xenbits.xen.org/xsa/advisory-360.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5C42TMQYB6SDVT2MPFEWY65A6RSUVBN/