deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-36134
Published: 2021-09-27
Description: Out of bounds write vulnerability in the JPEG parsing code of Netop Vision Pro up to and including 9.7.2 allows an adjacent unauthenticated attacker to write to arbitrary memory potentially leading to a Denial of Service (DoS).
CVSS Score: 7.4 (HIGH)
CWE: CWE-787
References: https://www.mcafee.com/blogs/?p=127255&preview=true; https://www.mcafee.com/blogs/?p=127255&preview=true
CVE: CVE-2021-37761
Published: 2021-09-27
Description: Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.manageengine.com; https://www.manageengine.com/products/ad-manager/release-notes.html#7111; https://www.manageengine.com
CVE: CVE-2021-40329
Published: 2021-09-27
Description: The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management.
CVSS Score: 9.8 (CRITICAL)
References: https://docs.pingidentity.com/bundle/pingfederate-103/page/cou[PII_REDACTED]58.html; https://docs.pingidentity.com/bundle/pingfederate-103/page/cou[PII_REDACTED]58.html
CVE: CVE-2021-41558
Published: 2021-09-27
Description: The set_user extension module before 3.0.0 for PostgreSQL allows ProcessUtility_hook bypass via set_config.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/pgaudit/set_user/releases/tag/REL3_0_0; https://github.com/pgaudit/set_user/releases/tag/REL3_0_0
CVE: CVE-2021-41753
Published: 2021-09-27
Description: A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1.11B04 allows a remote unauthenticated attacker to disconnect a wireless client via sending specific spoofed SAE authentication frames.
CVSS Score: 7.5 (HIGH)
CWE: CWE-290
References: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10243; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10243
CVE: CVE-2021-20034
Published: 2021-09-27
Description: An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284, CWE-22
References: http://packetstormsecurity.com/files/164564/SonicWall-SMA-10.2.1.0-17sv-Password-Reset.html; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0021; http://packetstormsecurity.com/files/164564/SonicWall-SMA-10.2.1.0-17sv-Password-Reset.html
CVE: CVE-2021-20035
Published: 2021-09-27
Description: Improper neutralization of special elements in the SMA100 management interface allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user which potentially leads to DoS.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0022; https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0022; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20035
CVE: CVE-2021-41097
Published: 2021-09-27
Description: aurelia-path is part of the Aurelia platform and contains utilities for path manipulation. There is a prototype pollution vulnerability in aurelia-path before version 1.1.7. The vulnerability exposes Aurelia application that uses `aurelia-path` package to parse a string. The majority of this will be Aurelia applications that employ the `aurelia-router` package. An example is this could allow an attacker to change the prototype of base object class `Object` by tricking an application to parse the following URL: `https://aurelia.io/blog/?__proto__[asdf]=asdf`. The problem is patched in version `1.1.7`.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-1321, CWE-1321
References: https://github.com/aurelia/path/commit/7c4e235433a4a2df9acc313fbe891758084fdec1; https://github.com/aurelia/path/issues/44; https://github.com/aurelia/path/releases/tag/1.1.7
CVE: CVE-2021-41095
Published: 2021-09-27
Description: Discourse is an open source discussion platform. There is a cross-site scripting (XSS) vulnerability in versions 2.7.7 and earlier of the `stable` branch, versions 2.8.0.beta6 and earlier of the `beta` branch, and versions 2.8.0.beta6 and earlier of the `tests-passed` branch. Rendering of some error messages that contain user input can be susceptible to XSS attacks. This vulnerability only affects sites which have blocked watched words that contain HTML tags, modified or disabled Discourse's default Content Security Policy. This issue is patched in the latest `stable`, `beta` and `tests-passed` versions of Discourse. As a workaround, avoid modifying or disabling Discourse’s default Content Security Policy, and blocking watched words containing HTML tags.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/discourse/discourse/pull/14434/commits/40b776b9d39c41d9273d01eecf8fe03aa39fcb59; https://github.com/discourse/discourse/security/advisories/GHSA-qvqx-2h7w-m479; https://github.com/discourse/discourse/pull/14434/commits/40b776b9d39c41d9273d01eecf8fe03aa39fcb59
CVE: CVE-2021-41096
Published: 2021-09-27
Description: Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm (RSA/ECB/PKCS1Padding). The issue will be patched in v2.3 for release builds and 426 onwards for nightly builds. As a workaround, one may disable an advance security feature if not required.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://github.com/mayankmetha/Rucky/commit/5e3a477365009f488a73efd26a91168502de1b93; https://github.com/mayankmetha/Rucky/security/advisories/GHSA-32m7-456v-wgfw; https://github.com/mayankmetha/Rucky/commit/5e3a477365009f488a73efd26a91168502de1b93
CVE: CVE-2021-41098
Published: 2021-09-27
Description: Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri v1.12.4 and earlier, on JRuby only, the SAX parser resolves external entities by default. Users of Nokogiri on JRuby who parse untrusted documents using any of these classes are affected: Nokogiri::XML::SAX::Parse, Nokogiri::HTML4::SAX::Parser or its alias Nokogiri::HTML::SAX::Parser, Nokogiri::XML::SAX::PushParser, and Nokogiri::HTML4::SAX::PushParser or its alias Nokogiri::HTML::SAX::PushParser. JRuby users should upgrade to Nokogiri v1.12.5 or later to receive a patch for this issue. There are no workarounds available for v1.12.4 or earlier. CRuby users are not affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://github.com/sparklemotion/nokogiri/commit/5bf729ff3cc84709ee3c3248c981584088bf9f6d; https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-2rr5-8q37-2w7h; https://github.com/sparklemotion/nokogiri/commit/5bf729ff3cc84709ee3c3248c981584088bf9f6d
CVE: CVE-2020-24930
Published: 2021-09-27
Description: Beijing Wuzhi Internet Technology Co., Ltd. Wuzhi CMS 4.0.1 is an open source content management system. The five fingers CMS backend in***.php file has arbitrary file deletion vulnerability. Attackers can use vulnerabilities to delete arbitrary files.
CVSS Score: 8.1 (HIGH)
References: https://github.com/wuzhicms/wuzhicms/issues/191; https://www.cnvd.org.cn/flaw/show/2394661; https://github.com/wuzhicms/wuzhicms/issues/191
CVE: CVE-2021-37270
Published: 2021-09-27
Description: There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5.0. Attackers can use this vulnerability to directly access the specified background path without logging in to the background to obtain the background administrator authority.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://github.com/purple-WL/S-cms-Unauthorized; https://www.cnvd.org.cn/flaw/show/2815129; https://github.com/purple-WL/S-cms-Unauthorized
CVE: CVE-2021-37274
Published: 2021-09-27
Description: Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes.
CVSS Score: 8.8 (HIGH)
References: https://github.com/purple-WL/CNVD-2020-75301/issues/1; https://www.cnvd.org.cn/flaw/show/2740765; https://github.com/purple-WL/CNVD-2020-75301/issues/1
CVE: CVE-2020-20691
Published: 2021-09-27
Description: An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extension filter and uploading crafted HTML files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434
References: https://github.com/monstra-cms/monstra/issues/461; https://github.com/monstra-cms/monstra/issues/461
CVE: CVE-2020-20692
Published: 2021-09-27
Description: GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://test.lingdong.store/2019/10/13/SQL-injection-in-Gila-CMS-version-1-11-4/; https://github.com/GilaCMS/gila/issues/50; http://test.lingdong.store/2019/10/13/SQL-injection-in-Gila-CMS-version-1-11-4/
CVE: CVE-2020-20693
Published: 2021-09-27
Description: A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/GilaCMS/gila/issues/51; https://github.com/GilaCMS/gila/issues/51
CVE: CVE-2020-20695
Published: 2021-09-27
Description: A stored cross-site scripting (XSS) vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/GilaCMS/gila/issues/52; https://github.com/GilaCMS/gila/issues/52
CVE: CVE-2020-20696
Published: 2021-09-27
Description: A cross-site scripting (XSS) vulnerability in /admin/content/post of GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Tags field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/GilaCMS/gila/issues/53; https://github.com/GilaCMS/gila/issues/53
CVE: CVE-2021-33600
Published: 2021-09-28
Description: A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs because of an attacker can trigger assertion via malformed HTTP packet to web interface. An unauthenticated attacker could exploit this vulnerability by sending a large username parameter. A successful exploitation could lead to a denial-of-service of the product.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-617
References: https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame; https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33600; https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame
CVE: CVE-2021-33601
Published: 2021-09-28
Description: A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through the web user interface in a way that could lead to an arbitrary code execution on the F-Secure Internet Gatekeeper server.
CVSS Score: 7.6 (HIGH)
References: https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame; https://www.f-secure.com/en/business/support-and-downloads/security-advisories/cve-2021-33601; https://www.f-secure.com/en/business/programs/vulnerability-reward-program/hall-of-fame
CVE: CVE-2021-36165
Published: 2021-09-28
Description: RICON Industrial Cellular Router S9922L 16.10.3(3794) is affected by cleartext storage of sensitive information and sends username and password as base64.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-312, CWE-319
References: https://yunus-shn.medium.com/ricon-industrial-cellular-router-cleartext-credentials-e236052415d; https://yunus-shn.medium.com/ricon-industrial-cellular-router-cleartext-credentials-e236052415d
CVE: CVE-2021-41533
Published: 2021-09-28
Description: A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak information in the context of the current process (ZDI-CAN-13565).
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-740908.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-1117/
CVE: CVE-2021-41534
Published: 2021-09-28
Description: A vulnerability has been identified in NX 1980 Series (All versions < V1984), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak information in the context of the current process (ZDI-CAN-13703).
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-740908.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-1118/
CVE: CVE-2021-41535
Published: 2021-09-28
Description: A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process (ZDI-CAN-13771).
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://cert-portal.siemens.com/productcert/pdf/ssa-328042.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-1119/
CVE: CVE-2021-41536
Published: 2021-09-28
Description: A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process (ZDI-CAN-13778).
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-1120/; https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf
CVE: CVE-2021-41537
Published: 2021-09-28
Description: A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process (ZDI-CAN-13789).
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-1121/; https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf
CVE: CVE-2021-41538
Published: 2021-09-28
Description: A vulnerability has been identified in NX 1953 Series (All versions < V1973.3700), NX 1980 Series (All versions < V1988), Solid Edge SE2021 (All versions < SE2021MP8). The affected application is vulnerable to information disclosure by unexpected access to an uninitialized pointer while parsing user-supplied OBJ files. An attacker could leverage this vulnerability to leak information from unexpected memory locations (ZDI-CAN-13770).
CVSS Score: 3.3 (LOW)
CWE: CWE-824, CWE-824
References: https://cert-portal.siemens.com/productcert/pdf/ssa-328042.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-1122/
CVE: CVE-2021-41539
Published: 2021-09-28
Description: A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process (ZDI-CAN-13773).
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-1123/; https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf
CVE: CVE-2021-41540
Published: 2021-09-28
Description: A vulnerability has been identified in Solid Edge SE2021 (All versions < SE2021MP8). The affected application contains a use-after-free vulnerability while parsing OBJ files. An attacker could leverage this vulnerability to execute code in the context of the current process (ZDI-CAN-13776).
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf; https://www.zerodayinitiative.com/advisories/ZDI-21-1124/; https://cert-portal.siemens.com/productcert/pdf/ssa-728618.pdf
CVE: CVE-2021-37146
Published: 2021-09-28
Description: An infinite loop in Open Robotics ros_comm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of Service in ros_comm via a crafted XMLRPC call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://discourse.ros.org/t/new-packages-for-melodic-2021-09-27/22446; https://discourse.ros.org/t/new-packages-for-noetic-2021-09-27/22447; https://github.com/ros/ros_comm
CVE: CVE-2021-22535
Published: 2021-09-28
Description: Unauthorized information security disclosure vulnerability on Micro Focus Directory and Resource Administrator (DRA) product, affecting all DRA versions prior to 10.1 Patch 1. The vulnerability could lead to unauthorized information disclosure.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-863
References: https://support.microfocus.com/kb/doc.php?id=7025273; https://support.microfocus.com/kb/doc.php?id=7025273
CVE: CVE-2021-34636
Published: 2021-09-28
Description: The Countdown and CountUp, WooCommerce Sales Timers WordPress plugin is vulnerable to Cross-Site Request Forgery via the save_theme function found in the ~/includes/admin/coundown_theme_page.php file due to a missing nonce check which allows attackers to inject arbitrary web scripts, in versions up to and including 1.5.7.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/changeset/2605523/countdown-wpdevart-extended/trunk/includes/admin/coundown_theme_page.php; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-34636; https://plugins.trac.wordpress.org/changeset/2605523/countdown-wpdevart-extended/trunk/includes/admin/coundown_theme_page.php
CVE: CVE-2021-38124
Published: 2021-09-28
Description: Remote Code Execution vulnerability in Micro Focus ArcSight Enterprise Security Manager (ESM) product, affecting versions 7.0.2 through 7.5. The vulnerability could be exploited resulting in remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://portal.microfocus.com/s/article/KM000001960; https://portal.microfocus.com/s/article/KM000001960
CVE: CVE-2021-37104
Published: 2021-09-28
Description: There is a server-side request forgery vulnerability in HUAWEI P40 versions 10.1.0.118(C00E116R3P3). This vulnerability is due to insufficient validation of parameters while dealing with some messages. A successful exploit could allow the attacker to gain access to certain resource which the attacker are supposed not to do.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210922-01-ssrf-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210922-01-ssrf-en
CVE: CVE-2021-37105
Published: 2021-09-28
Description: There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0. Due to the improper verification of file to be uploaded and does not strictly restrict the file access path, attackers may upload malicious files to the device, resulting in the service abnormal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210922-01-upload-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210922-01-upload-en
CVE: CVE-2021-37106
Published: 2021-09-28
Description: There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default certificate file. The software constructs part of a command using external special input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands to the system.
CVSS Score: 7.2 (HIGH)
CWE: CWE-77
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210922-01-commandinjection-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210922-01-commandinjection-en
CVE: CVE-2021-29358
Published: 2021-09-28
Description: A buffer overflow vulnerability in FORMATS!ReadPVR_W+0xfa of Irfanview 4.57 allows attackers to cause a denial of service (DOS) via a crafted PVR file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/moshekaplan/Research/tree/main/IrfanView; https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE: CVE-2021-29360
Published: 2021-09-28
Description: A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x37a of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/moshekaplan/Research/tree/main/IrfanView; https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE: CVE-2021-29361
Published: 2021-09-28
Description: A buffer overflow vulnerability in FORMATS!Read_Utah_RLE+0x340 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/moshekaplan/Research/tree/main/IrfanView; https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE: CVE-2021-29362
Published: 2021-09-28
Description: A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa30 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/moshekaplan/Research/tree/main/IrfanView; https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE: CVE-2021-29363
Published: 2021-09-28
Description: A buffer overflow vulnerability in FORMATS!ReadRAS_W+0xa74 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.0xa74
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/moshekaplan/Research/tree/main/IrfanView; https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE: CVE-2021-29364
Published: 2021-09-28
Description: A buffer overflow vulnerability in Formats!ReadRAS_W+0x1001 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/moshekaplan/Research/tree/main/IrfanView; https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE: CVE-2021-29365
Published: 2021-09-28
Description: Irfanview 4.57 is affected by an infinite loop when processing a crafted BMP file in the EFFECTS!AutoCrop_W component. This can cause a denial of service (DOS).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://github.com/moshekaplan/Research/tree/main/IrfanView; https://github.com/moshekaplan/Research/tree/main/IrfanView
CVE: CVE-2021-29366
Published: 2021-09-28
Description: A buffer overflow vulnerability in FORMATS!GetPlugInInfo+0x2de9 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/moshekaplan/Research/tree/main/IrfanView; https://github.com/moshekaplan/Research/tree/main/IrfanView