deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-39928
Published: 2021-11-18
Description: NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39928.json; https://gitlab.com/wireshark/wireshark/-/issues/17704; https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html
CVE: CVE-2021-43017
Published: 2021-11-18
Description: Adobe Creative Cloud version 5.5 (and earlier) are affected by an Application denial of service vulnerability in the Creative Cloud Desktop installer. An authenticated attacker with root privileges could leverage this vulnerability to achieve denial of service by planting a malicious file on the victim's local machine. User interaction is required before product installation to abuse this vulnerability.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-379
References: https://helpx.adobe.com/security/products/creative-cloud/apsb21-111.html; https://helpx.adobe.com/security/products/creative-cloud/apsb21-111.html
CVE: CVE-2021-37322
Published: 2021-11-18
Description: GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=99188; https://gcc.gnu.org/bugzilla/show_bug.cgi?id=99188
CVE: CVE-2021-40129
Published: 2021-11-19
Description: A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to submit a SQL query through the CSPC configuration dashboard. This vulnerability is due to insufficient input validation of uploaded files. An attacker could exploit this vulnerability by uploading a file containing a SQL query to the configuration dashboard. A successful exploit could allow the attacker to read restricted information from the CSPC SQL database.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CSPC-SQLI-unVPTn5; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CSPC-SQLI-unVPTn5
CVE: CVE-2021-40130
Published: 2021-11-19
Description: A vulnerability in the web application of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to specify non-log files as sources for syslog reporting. This vulnerability is due to improper restriction of the syslog configuration. An attacker could exploit this vulnerability by configuring non-log files as sources for syslog reporting through the web application. A successful exploit could allow the attacker to read non-log files on the CSPC.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-284
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CSPC-ILR-8qmW8y8X; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CSPC-ILR-8qmW8y8X
CVE: CVE-2021-40131
Published: 2021-11-19
Description: A vulnerability in the web-based management interface of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input that is processed by the web-based management interface. An attacker could exploit this vulnerability by adding malicious code to the configuration by using the web-based management interface. A successful exploit could allow the attacker to execute arbitrary code in the context of the interface or access sensitive, browser-based information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-87, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CSPC-XSS-KjrNbM3p; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CSPC-XSS-KjrNbM3p
CVE: CVE-2021-41278
Published: 2021-11-19
Description: Functions SDK for EdgeX is meant to provide all the plumbing necessary for developers to get started in processing/transforming/exporting data out of the EdgeX IoT platform. In affected versions broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to decrypt messages via unspecified vectors. The app-functions-sdk exports an “aes” transform that user scripts can optionally call to encrypt data in the processing pipeline. No decrypt function is provided. Encryption is not enabled by default, but if used, the level of protection may be less than the user may expects due to a broken implementation. Version v2.1.0 (EdgeX Foundry Jakarta release and later) of app-functions-sdk-go/v2 deprecates the “aes” transform and provides an improved “aes256” transform in its place. The broken implementation will remain in a deprecated state until it is removed in the next EdgeX major release to avoid breakage of existing software that depends on the broken implementation. As the broken transform is a library function that is not invoked by default, users who do not use the AES transform in their processing pipelines are unaffected. Those that are affected are urged to upgrade to the Jakarta EdgeX release and modify processing pipelines to use the new "aes256" transform.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-327
References: https://github.com/edgexfoundry/app-functions-sdk-go/commit/8fa13c6388ce76a6b878b54490eac61aa7d81165; https://github.com/edgexfoundry/app-functions-sdk-go/security/advisories/GHSA-6c7m-qwxj-mvhp; https://github.com/edgexfoundry/app-functions-sdk-go/commit/8fa13c6388ce76a6b878b54490eac61aa7d81165
CVE: CVE-2021-44025
Published: 2021-11-19
Description: Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to XSS in handling an attachment's filename extension when displaying a MIME type warning message.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugs.debian.org/1000156; https://github.com/roundcube/roundcubemail/commit/7d7b1dfeff795390b69905ceb63d6391b5b0dfe7; https://github.com/roundcube/roundcubemail/commit/faf99bf8a2b7b7562206fa047e8de652861e624a
CVE: CVE-2021-44026
Published: 2021-11-19
Description: Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://bugs.debian.org/1000156; https://github.com/roundcube/roundcubemail/commit/c8947ecb762d9e89c2091bda28d[PII_REDACTED]3f1; https://github.com/roundcube/roundcubemail/commit/ee809bde2dcaa04857a919397808a7296681dcfa
CVE: CVE-2021-44033
Published: 2021-11-19
Description: In Ionic Identity Vault before 5.0.5, the protection mechanism for invalid unlock attempts can be bypassed.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-307
References: http://packetstormsecurity.com/files/165027/Ionic-Identity-Vault-5.0.4-PIN-Unlock-Lockout-Bypass.html; http://seclists.org/fulldisclosure/2021/Nov/41; https://ionic.io/docs/identity-vault/changelog
CVE: CVE-2021-42338
Published: 2021-11-19
Description: 4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-285, CWE-287
References: https://www.twcert.org.tw/tw/cp-132-5313-45bde-1.html; https://www.twcert.org.tw/tw/cp-132-5313-45bde-1.html
CVE: CVE-2021-36372
Published: 2021-11-19
Description: In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata database and can be retrieved with authenticated users with permission to the key. Authenticated users may use them even after access is revoked.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-273, CWE-273
References: http://www.openwall.com/lists/oss-security/2021/11/19/1; https://mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3C5029c1ac-4685-8492-e3cb-ab48c5c370cf%40apache.org%3E; http://www.openwall.com/lists/oss-security/2021/11/19/1
CVE: CVE-2021-39231
Published: 2021-11-19
Description: In Apache Ozone versions prior to 1.2.0, Various internal server-to-server RPC endpoints are available for connections, making it possible for an attacker to download raw data from Datanode and Ozone manager and modify Ratis replication configuration.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-862, CWE-862
References: http://www.openwall.com/lists/oss-security/2021/11/19/2; https://mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3C110cd117-75ed-364b-cd38-3effd20f2183%40apache.org%3E; http://www.openwall.com/lists/oss-security/2021/11/19/2
CVE: CVE-2021-39232
Published: 2021-11-19
Description: In Apache Ozone versions prior to 1.2.0, certain admin related SCM commands can be executed by any authenticated users, not just by admins.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: http://www.openwall.com/lists/oss-security/2021/11/19/3; https://mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3C3c30a7f2-13a4-345e-6c8a-c23a2b937041%40apache.org%3E; http://www.openwall.com/lists/oss-security/2021/11/19/3
CVE: CVE-2021-39233
Published: 2021-11-19
Description: In Apache Ozone versions prior to 1.2.0, Container related Datanode requests of Ozone Datanode were not properly authorized and can be called by any client.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306
References: http://www.openwall.com/lists/oss-security/2021/11/19/4; https://mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3C394a9a73-44dd-b5db-84d8-607c3226eb00%40apache.org%3E; http://www.openwall.com/lists/oss-security/2021/11/19/4
CVE: CVE-2021-39234
Published: 2021-11-19
Description: In Apache Ozone versions prior to 1.2.0, Authenticated users knowing the ID of an existing block can craft specific request allowing access those blocks, bypassing other security checks like ACL.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20, CWE-863
References: http://www.openwall.com/lists/oss-security/2021/11/19/5; https://mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3C97d65498-7f8c-366f-1bea-5a74b6378f0d%40apache.org%3E; http://www.openwall.com/lists/oss-security/2021/11/19/5
CVE: CVE-2021-39235
Published: 2021-11-19
Description: In Apache Ozone before 1.2.0, Ozone Datanode doesn't check the access mode parameter of the block token. Authenticated users with valid READ block token can do any write operation on the same block.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732, CWE-732
References: http://www.openwall.com/lists/oss-security/2021/11/19/6; https://mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3C93f88246-4320-7423-0dac-ec7a07f47455%40apache.org%3E; http://www.openwall.com/lists/oss-security/2021/11/19/6
CVE: CVE-2021-39236
Published: 2021-11-19
Description: In Apache Ozone before 1.2.0, Authenticated users with valid Ozone S3 credentials can create specific OM requests, impersonating any other user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: http://www.openwall.com/lists/oss-security/2021/11/19/7; https://issues.apache.org/jira/browse/HDDS-4763; https://mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3C0fd74baa-88a0-39a2-8f3a-b982acb25d5a%40apache.org%3E
CVE: CVE-2021-41532
Published: 2021-11-19
Description: In Apache Ozone before 1.2.0, Recon HTTP endpoints provide access to OM, SCM and Datanode metadata. Due to a bug, any unauthenticated user can access the data from these endpoints.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2021/11/19/8; https://mail-archives.apache.org/mod_mbox/ozone-dev/202111.mbox/%3Ce0bc6598-9669-b897-fc28-de8a896e36aa%40apache.org%3E; http://www.openwall.com/lists/oss-security/2021/11/19/8
CVE: CVE-2021-3974
Published: 2021-11-19
Description: vim is vulnerable to Use After Free
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://www.openwall.com/lists/oss-security/2022/01/15/1; https://github.com/vim/vim/commit/64066b9acd9f8cffdf4840f797748f938a13f2d6; https://huntr.dev/bounties/e402cb2c-8ec4-4828-a692-c95f8e0de6d4
CVE: CVE-2021-3976
Published: 2021-11-19
Description: kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/kevinpapst/kimai2/commit/b28e9c120c87222e21a238f1b03a609d6a5d506e; https://huntr.dev/bounties/0567048a-118c-42ec-9f94-b[PII_REDACTED]6; https://github.com/kevinpapst/kimai2/commit/b28e9c120c87222e21a238f1b03a609d6a5d506e
CVE: CVE-2021-3950
Published: 2021-11-19
Description: django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/django-helpdesk/django-helpdesk/commit/04483bdac3b[PII_REDACTED]398b5ce0383875a5c60; https://huntr.dev/bounties/4d7a5fdd-b2de-467a-ade0-3f2fb386638e; https://github.com/django-helpdesk/django-helpdesk/commit/04483bdac3b[PII_REDACTED]398b5ce0383875a5c60
CVE: CVE-2021-3957
Published: 2021-11-19
Description: kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/kevinpapst/kimai2/commit/6b49535b523dcd36ec59462ee4e67e2b3a9151f3; https://huntr.dev/bounties/5fa3098a-ba02-45e0-af56-645e34dbc691; https://github.com/kevinpapst/kimai2/commit/6b49535b523dcd36ec59462ee4e67e2b3a9151f3
CVE: CVE-2021-3961
Published: 2021-11-19
Description: snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/snipe/snipe-it/commit/7ce5993f5ae9d713a0955c2fd8e2dff7a7ce886e; https://huntr.dev/bounties/5987aed5-6613-4937-8a3e-d48009b7da10; https://github.com/snipe/snipe-it/commit/7ce5993f5ae9d713a0955c2fd8e2dff7a7ce886e
CVE: CVE-2021-3963
Published: 2021-11-19
Description: kimai2 is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/kevinpapst/kimai2/commit/95796ab2560ad93f44068a88f0fad758c2053514; https://huntr.dev/bounties/3abf308b-7dbd-4864-b1a9-5c45b876def8; https://github.com/kevinpapst/kimai2/commit/95796ab2560ad93f44068a88f0fad758c2053514
CVE: CVE-2021-3968
Published: 2021-11-19
Description: vim is vulnerable to Heap-based Buffer Overflow
CVSS Score: 8.0 (HIGH)
CWE: CWE-122, CWE-787
References: http://www.openwall.com/lists/oss-security/2022/01/15/1; https://github.com/vim/vim/commit/a062006b9de0b2947ab5fb376c6e67ef92a8cd69; https://huntr.dev/bounties/00d62924-a7b4-4a61-ba29-acab2eaa1528
CVE: CVE-2021-3973
Published: 2021-11-19
Description: vim is vulnerable to Heap-based Buffer Overflow
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: http://www.openwall.com/lists/oss-security/2022/01/15/1; https://github.com/vim/vim/commit/615ddd5342b50a6878a907062aa471740bd9a847; https://huntr.dev/bounties/ce6e8609-77c6-4e17-b9fc-a2e5abed052e
CVE: CVE-2021-41435
Published: 2021-11-19
Description: A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote attacker to attempt any number of login attempts via sending a specific HTTP request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: http://asus.com; https://rog.asus.com/networking/rog-rapture-gt-ax11000-model/helpdesk_bios; https://www.asus.com/Networking-IoT-Servers/Whole-Home-Mesh-WiFi-System/ZenWiFi-WiFi-Systems/ASUS-ZenWiFi-AX-XT8-/HelpDesk_BIOS/
CVE: CVE-2021-41436
Published: 2021-11-19
Description: An HTTP request smuggling in web application in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX86 Series(RT-AX86U/RT-AX86S), RT-AX86U ZAKU II EDITION, RT-AX88U, RT-AX92U, TUF Gaming AX3000, TUF Gaming AX5400 (TUF-AX5400), ASUS ZenWiFi XD6, ASUS ZenWiFi AX (XT8) before 3.0.0.4.386.45898, and RT-AX68U before 3.0.0.4.386.45911, allows a remote unauthenticated attacker to DoS via sending a specially crafted HTTP packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-444
References: http://asus.com; https://rog.asus.com/networking/rog-rapture-gt-ax11000-model/helpdesk_bios; https://www.asus.com/Networking-IoT-Servers/Whole-Home-Mesh-WiFi-System/ZenWiFi-WiFi-Systems/ASUS-ZenWiFi-AX-XT8-/HelpDesk_BIOS/
CVE: CVE-2021-3920
Published: 2021-11-19
Description: grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/getgrav/grav-plugin-admin/commit/6463135bf046d8131189c163158cd5db8f7a9675; https://huntr.dev/bounties/ab564760-90c6-4e1d-80c2-852f45034cd1; https://github.com/getgrav/grav-plugin-admin/commit/6463135bf046d8131189c163158cd5db8f7a9675
CVE: CVE-2021-37592
Published: 2021-11-19
Description: Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://forum.suricata.io/t/suricata-6-0-4-and-5-0-8-released/1942; https://github.com/OISF/suricata/releases; https://redmine.openinfosecfoundation.org/issues/4569
CVE: CVE-2021-22053
Published: 2021-11-19
Description: Applications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to execute code submitted within the request URI path during the resolution of view templates. When a request is made at `/hystrix/monitor;[user-provided data]`, the path elements following `hystrix/monitor` are being evaluated as SpringEL expressions, which can lead to code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://tanzu.vmware.com/security/cve-2021-22053; https://tanzu.vmware.com/security/cve-2021-22053
CVE: CVE-2021-33850
Published: 2021-11-19
Description: There is a Cross-Site Scripting vulnerability in Microsoft Clarity version 0.3. The XSS payload executes whenever the user changes the clarity configuration in Microsoft Clarity version 0.3. The payload is stored on the configuring project Id page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2021-33850-stored-cross-site-scripting-xss-in-wordpress-microsoft-clarity-plugin.html; https://cybersecurityworks.com/zerodays/cve-2021-33850-stored-cross-site-scripting-xss-in-wordpress-microsoft-clarity-plugin.html
CVE: CVE-2021-36003
Published: 2021-11-19
Description: Adobe Audition version 14.2 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose arbitrary memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/audition/apsb21-62.html; https://helpx.adobe.com/security/products/audition/apsb21-62.html
CVE: CVE-2021-39353
Published: 2021-11-19
Description: The Easy Registration Forms WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the ajax_add_form function found in the ~/includes/class-form.php file which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 2.1.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/easy-registration-forms/tags/2.1.1/includes/class-form.php#L256; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-39353; https://plugins.trac.wordpress.org/browser/easy-registration-forms/tags/2.1.1/includes/class-form.php#L256
CVE: CVE-2021-42363
Published: 2021-11-19
Description: The Preview E-Mails for WooCommerce WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the search_order parameter found in the ~/views/form.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.6.8.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2625941/woo-preview-emails/trunk/views/form.php; https://www.wordfence.com/blog/2021/11/woocommerce-extension-reflected-xss-vulnerability/; https://www.wordfence.com/vulnerability-advisories/#CVE-2021-42363
CVE: CVE-2021-43408
Published: 2021-11-19
Description: The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vulnerabilities occur when client supplied data is included within an SQL Query insecurely. SQL Injection can typically be exploited to read, modify and delete SQL table data. In many cases it also possible to exploit features of SQL server to execute system commands and/or access the local file system. This particular vulnerability can be exploited by any authenticated user who has been granted access to use the Duplicate Post plugin. By default, this is limited to Administrators, however the plugin presents the option to permit access to the Editor, Author, Contributor and Subscriber roles.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://appcheck-ng.com/security-advisory-duplicate-post-wordpress-plugin-sql-injection-vulnerability/; https://plugins.trac.wordpress.org/browser/copy-delete-posts/tags/1.2.0/post/handler.php#L510; https://appcheck-ng.com/security-advisory-duplicate-post-wordpress-plugin-sql-injection-vulnerability/
CVE: CVE-2021-43409
Published: 2021-11-19
Description: The “WPO365 | LOGIN” WordPress plugin (up to and including version 15.3) by wpo365.com is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability (also known as Stored or Second-Order XSS). Persistent XSS vulnerabilities occur when the application stores and retrieves client supplied data without proper handling of dangerous content. This type of XSS vulnerability is exploited by submitting malicious script content to the application which is then retrieved and executed by other application users. The attacker could exploit this to conduct a range of attacks against users of the affected application such as session hijacking, account take over and accessing sensitive data. In this case, the XSS payload can be submitted by any anonymous user, the payload then renders and executes when a WordPress administrator authenticates and accesses the WordPress Dashboard. The injected payload can carry out actions on behalf of the administrator including adding other administrative users and changing application settings. This flaw could be exploited to ultimately provide full control of the affected system to the attacker.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-79, CWE-79
References: https://appcheck-ng.com/wordpress-microsoft-office-365-azure-ad-login-persistent-cross-site-scripting/; https://www.wpo365.com/change-log/; https://appcheck-ng.com/wordpress-microsoft-office-365-azure-ad-login-persistent-cross-site-scripting/
CVE: CVE-2021-22028
Published: 2021-11-19
Description: In versions of Greenplum database prior to 5.28.6 and 6.14.0, greenplum database contains a file path traversal vulnerability leading to information disclosure from the file system. A malicious user can read/write information from the file system using this vulnerability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22, CWE-22
References: https://github.com/greenplum-db/gpdb/security/advisories/GHSA-hqh5-m87w-57w2; https://github.com/greenplum-db/gpdb/security/advisories/GHSA-hqh5-m87w-57w2
CVE: CVE-2021-22030
Published: 2021-11-19
Description: In versions of Greenplum database prior to 5.28.14 and 6.17.0, certain statements execution led to the storage of sensitive(credential) information in the logs of the database. A malicious user with access to logs can read sensitive(credentials) information about users
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://github.com/greenplum-db/gpdb/security/advisories/GHSA-c7w8-gx27-h4mr; https://github.com/greenplum-db/gpdb/security/advisories/GHSA-c7w8-gx27-h4mr