deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-29323
Published: 2021-11-19
Description: OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow via the component /modules/network/wifi/esp/modwifi.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/Moddable-OpenSource/moddable/issues/5; https://github.com/Moddable-OpenSource/moddable/issues/5
CVE: CVE-2021-29324
Published: 2021-11-19
Description: OpenSource Moddable v10.5.0 was discovered to contain a stack overflow via the component /moddable/xs/sources/xsScript.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-770
References: https://github.com/Moddable-OpenSource/moddable/issues/586; https://github.com/Moddable-OpenSource/moddable/issues/586
CVE: CVE-2021-29325
Published: 2021-11-19
Description: OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_String_prototype_repeat function at /moddable/xs/sources/xsString.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Moddable-OpenSource/moddable/issues/582; https://github.com/Moddable-OpenSource/moddable/issues/582
CVE: CVE-2021-29326
Published: 2021-11-19
Description: OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fxIDToString function at /moddable/xs/sources/xsSymbol.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Moddable-OpenSource/moddable/issues/583; https://github.com/Moddable-OpenSource/moddable/issues/583
CVE: CVE-2021-29327
Published: 2021-11-19
Description: OpenSource Moddable v10.5.0 was discovered to contain a heap buffer overflow in the fx_ArrayBuffer function at /moddable/xs/sources/xsDataView.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/Moddable-OpenSource/moddable/issues/580; https://github.com/Moddable-OpenSource/moddable/issues/580
CVE: CVE-2021-29328
Published: 2021-11-19
Description: OpenSource Moddable v10.5.0 was discovered to contain buffer over-read in the fxDebugThrow function at /moddable/xs/sources/xsDebug.c.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://github.com/Moddable-OpenSource/moddable/issues/585; https://github.com/Moddable-OpenSource/moddable/issues/585
CVE: CVE-2021-29329
Published: 2021-11-19
Description: OpenSource Moddable v10.5.0 was discovered to contain a stack overflow in the fxBinaryExpressionNodeDistribute function at /moddable/xs/sources/xsTree.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-770
References: https://github.com/Moddable-OpenSource/moddable/issues/587; https://github.com/Moddable-OpenSource/moddable/issues/587
CVE: CVE-2021-39921
Published: 2021-11-19
Description: NULL pointer exception in the Modbus dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39921.json; https://gitlab.com/wireshark/wireshark/-/issues/17703; https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html
CVE: CVE-2021-39922
Published: 2021-11-19
Description: Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39922.json; https://gitlab.com/wireshark/wireshark/-/issues/17636; https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html
CVE: CVE-2021-39923
Published: 2021-11-19
Description: Large loop in the PNRP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVSS Score: 7.5 (HIGH)
CWE: CWE-834
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39923.json; https://gitlab.com/wireshark/wireshark/-/issues/17684; https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html
CVE: CVE-2021-39924
Published: 2021-11-19
Description: Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVSS Score: 7.5 (HIGH)
CWE: CWE-834
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39924.json; https://gitlab.com/wireshark/wireshark/-/issues/17677; https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html
CVE: CVE-2021-39925
Published: 2021-11-19
Description: Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39925.json; https://gitlab.com/wireshark/wireshark/-/issues/17635; https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html
CVE: CVE-2021-39926
Published: 2021-11-19
Description: Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39926.json; https://gitlab.com/wireshark/wireshark/-/issues/17649; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6AJFIYIHS3TYDD2EBYBJ5KKE52X34BJ/
CVE: CVE-2021-39929
Published: 2021-11-19
Description: Uncontrolled Recursion in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-39929.json; https://gitlab.com/wireshark/wireshark/-/issues/17651; https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html
CVE: CVE-2021-3962
Published: 2021-11-19
Description: A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert processes. This flaw allows an attacker to create a specially crafted image that leads to a use-after-free vulnerability when processed by ImageMagick. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://bugzilla.redhat.com/show_bug.cgi?id=2023196; https://github.com/ImageMagick/ImageMagick/commit/82775af03bbb10a0a1d0e15c0156c75673b4525e; https://github.com/ImageMagick/ImageMagick/issues/4446
CVE: CVE-2021-44036
Published: 2021-11-19
Description: Team Password Manager (aka TeamPasswordManager) before 10.135.236 has a CSRF vulnerability during import.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://teampasswordmanager.com/docs/changelog/#10.135.236; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-059.txt; https://teampasswordmanager.com/docs/changelog/#10.135.236
CVE: CVE-2021-44037
Published: 2021-11-19
Description: Team Password Manager (aka TeamPasswordManager) before 10.135.236 allows password-reset poisoning.
CVSS Score: 7.5 (HIGH)
CWE: CWE-640
References: https://teampasswordmanager.com/docs/changelog/#10.135.236; https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-060.txt; https://teampasswordmanager.com/docs/changelog/#10.135.236
CVE: CVE-2021-41569
Published: 2021-11-19
Description: SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library (included by default) in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro. Users can escape the context of the configured user-controllable variable and append additional functions native to the macro but not included as variables within the library. This includes a function that retrieves files from the host OS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-829
References: https://support.sas.com/kb/68/641.html; https://www.mindpointgroup.com/blog/high-risk-vulnerability-discovery-localfileinclusion-sas; https://support.sas.com/kb/68/641.html
CVE: CVE-2021-21899
Published: 2021-11-19
Description: A code execution vulnerability exists in the dwgCompressor::copyCompBytes21 functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://lists.debian.org/debian-lts-announce/2021/12/msg00002.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDI3HCTCACMIC7I4ILB3NRU6DCMADI5H/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTIAMP7QJDKV4ADDLR4GVVX2TXYLHVOZ/
CVE: CVE-2021-21900
Published: 2021-11-19
Description: A code execution vulnerability exists in the dxfRW::processLType() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dxf file can lead to a use-after-free vulnerability. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://lists.debian.org/debian-lts-announce/2021/12/msg00002.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDI3HCTCACMIC7I4ILB3NRU6DCMADI5H/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTIAMP7QJDKV4ADDLR4GVVX2TXYLHVOZ/
CVE: CVE-2021-22951
Published: 2021-11-19
Description: Unauthorized individuals could view password protected files using view_inline in Concrete CMS (previously concrete 5) prior to version 8.5.7. Concrete CMS now checks to see if a file has a password in view_inline and, if it does, the file is not rendered.For version 8.5.6, the following mitigations were put in place a. restricting file types for view_inline to images only b. putting a warning in the file manager to advise users.Credit for discovery: "Solar Security Research Team"Concrete CMS security team CVSS scoring is 5.3: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NThis fix is also in Concrete version 9.0.0
CVSS Score: 7.5 (HIGH)
CWE: CWE-639, CWE-639
References: https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes; https://hackerone.com/reports/1102014; https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes
CVE: CVE-2021-22965
Published: 2021-11-19
Description: A vulnerability in Pulse Connect Secure before 9.1R12.1 could allow an unauthenticated administrator to causes a denial of service when a malformed request is sent to the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF; https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44879/?kA13Z000000L3ZF
CVE: CVE-2021-22966
Published: 2021-11-19
Description: Privilege escalation from Editor to Admin using Groups in Concrete CMS versions 8.5.6 and below. If a group is granted "view" permissions on the bulkupdate page, then users in that group can escalate to being an administrator with a specially crafted curl. Fixed by adding a check for group permissions before allowing a group to be moved. Concrete CMS Security team CVSS scoring: 7.1 AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HCredit for discovery: "Adrian Tiron from FORTBRIDGE ( https://www.fortbridge.co.uk/ )"This fix is also in Concrete version 9.0.0
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes; https://hackerone.com/reports/1362747; https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes
CVE: CVE-2021-22967
Published: 2021-11-19
Description: In Concrete CMS (formerly concrete 5) below 8.5.7, IDOR Allows Unauthenticated User to Access Restricted Files If Allowed to Add Message to a Conversation.To remediate this, a check was added to verify a user has permissions to view files before attaching the files to a message in "add / edit message”.Concrete CMS security team gave this a CVSS v3.1 score of 4.3 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NCredit for discovery Adrian H
CVSS Score: 7.5 (HIGH)
CWE: CWE-639, CWE-639
References: https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes; https://hackerone.com/reports/869612; https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes
CVE: CVE-2021-22968
Published: 2021-11-19
Description: A bypass of adding remote files in Concrete CMS (previously concrete5) File Manager leads to remote code execution in Concrete CMS (concrete5) versions 8.5.6 and below.The external file upload feature stages files in the public directory even if they have disallowed file extensions. They are stored in a directory with a random name, but it's possible to stall the uploads and brute force the directory name. You have to be an admin with the ability to upload files, but this bug gives you the ability to upload restricted file types and execute them depending on server configuration.To fix this, a check for allowed file extensions was added before downloading files to a tmp directory.Concrete CMS Security Team gave this a CVSS v3.1 score of 5.4 AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:NThis fix is also in Concrete version 9.0.0
CVSS Score: 7.2 (HIGH)
CWE: CWE-98, CWE-330, CWE-434
References: https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes; https://hackerone.com/reports/1350444; https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes
CVE: CVE-2021-22969
Published: 2021-11-19
Description: Concrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an attacker the ability to fetch cloud IAAS (ex AWS) IAM keys.To fix this Concrete CMS no longer allows downloads from the local network and specifies the validated IP when downloading rather than relying on DNS.Discoverer: Adrian Tiron from FORTBRIDGE ( https://www.fortbridge.co.uk/ )The Concrete CMS team gave this a CVSS 3.1 score of 3.5 AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N . Please note that Cloud IAAS provider mis-configurations are not Concrete CMS vulnerabilities. A mitigation for this vulnerability is to make sure that the IMDS configurations are according to a cloud provider's best practices.This fix is also in Concrete version 9.0.0
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-918, CWE-918
References: https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes; https://hackerone.com/reports/1369312; https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes
CVE: CVE-2021-22970
Published: 2021-11-19
Description: Concrete CMS (formerly concrete5) versions 8.5.6 and below and version 9.0.0 allow local IP importing causing the system to be vulnerable toa. SSRF attacks on the private LAN servers by reading files from the local LAN. An attacker can pivot in the private LAN and exploit local network appsandb. SSRF Mitigation Bypass through DNS RebindingConcrete CMS security team gave this a CVSS score of 3.5 AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:NConcrete CMS is maintaining Concrete version 8.5.x until 1 May 2022 for security fixes.This CVE is shared with HackerOne Reports https://hackerone.com/reports/1364797 and https://hackerone.com/reports/1360016Reporters: Adrian Tiron from FORTBRIDGE (https://www.fortbridge.co.uk/ ) and Bipul Jaiswal
CVSS Score: 7.5 (HIGH)
CWE: CWE-918, CWE-918
References: https://documentation.concretecms.org/developers/introduction/version-history/857-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/901-release-notes; https://hackerone.com/reports/1364797
CVE: CVE-2021-26248
Published: 2021-11-19
Description: Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-708
References: https://us-cert.cisa.gov/ics/advisories/icsma-21-313-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security; https://us-cert.cisa.gov/ics/advisories/icsma-21-313-01
CVE: CVE-2021-26262
Published: 2021-11-19
Description: Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-286
References: https://us-cert.cisa.gov/ics/advisories/icsma-21-313-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security; https://us-cert.cisa.gov/ics/advisories/icsma-21-313-01
CVE: CVE-2021-36884
Published: 2021-11-19
Description: Authenticated Persistent Cross-Site Scripting (XSS) vulnerability discovered in WordPress Backup Migration plugin <= 1.1.5 versions.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/backup-backup/wordpress-backup-migration-plugin-1-1-5-authenticated-persistent-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/backup-backup/#developers; https://patchstack.com/database/vulnerability/backup-backup/wordpress-backup-migration-plugin-1-1-5-authenticated-persistent-cross-site-scripting-xss-vulnerability
CVE: CVE-2021-40391
Published: 2021-11-19
Description: An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (commit b5f1eacd), and the forked version of Gerbv (commit 71493260). A specially-crafted drill file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-390, CWE-755, CWE-787
References: https://lists.debian.org/debian-lts-announce/2021/12/msg00003.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TUM5GIUZJ7AVHVCXDZW6ZVCAPV2ISN47/; https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1402
CVE: CVE-2021-42254
Published: 2021-11-19
Description: BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-668
References: https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0008/MNDT-2021-0008.md; https://www.beyondtrust.com/blog; https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0008/MNDT-2021-0008.md
CVE: CVE-2021-42744
Published: 2021-11-19
Description: Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-552
References: https://us-cert.cisa.gov/ics/advisories/icsma-21-313-01; https://www.usa.philips.com/healthcare/about/customer-support/product-security; https://us-cert.cisa.gov/ics/advisories/icsma-21-313-01
CVE: CVE-2021-43555
Published: 2021-11-19
Description: mySCADA myDESIGNER Versions 8.20.0 and prior fails to properly validate contents of an imported project file, which may make the product vulnerable to a path traversal payload. This vulnerability may allow an attacker to plant files on the file system in arbitrary locations or overwrite existing files, resulting in remote code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-23, CWE-22
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-313-04; https://us-cert.cisa.gov/ics/advisories/icsa-21-313-04
CVE: CVE-2021-44038
Published: 2021-11-19
Description: An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested spec file allow users (with control of the non-root-owned directory /etc/quagga) to escalate their privileges to root upon package installation or update.
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://bugzilla.suse.com/show_bug.cgi?id=1191890; https://github.com/Quagga/quagga/releases; https://bugzilla.suse.com/show_bug.cgi?id=1191890
CVE: CVE-2021-21898
Published: 2021-11-19
Description: A code execution vulnerability exists in the dwgCompressor::decompress18() functionality of LibreCad libdxfrw 2.2.0-rc2-19-ge02f3580. A specially-crafted .dwg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://lists.debian.org/debian-lts-announce/2021/12/msg00002.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDI3HCTCACMIC7I4ILB3NRU6DCMADI5H/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTIAMP7QJDKV4ADDLR4GVVX2TXYLHVOZ/
CVE: CVE-2021-23433
Published: 2021-11-19
Description: The package algoliasearch-helper before 3.6.2 are vulnerable to Prototype Pollution due to use of the merge function in src/SearchParameters/index.jsSearchParameters._parseNumbers without any protection against prototype properties. Note that this vulnerability is only exploitable if the implementation allows users to define arbitrary search patterns.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1321
References: https://github.com/algolia/algoliasearch-helper-js/blob/3.5.5/src/SearchParameters/index.js%23L291; https://github.com/algolia/algoliasearch-helper-js/commit/4ff542b70b92a6b81cce8b9255700b0bc0817edd; https://snyk.io/vuln/SNYK-JS-ALGOLIASEARCHHELPER-1570421
CVE: CVE-2021-41280
Published: 2021-11-19
Description: Sharetribe Go is a source available marketplace software. In affected versions operating system command injection is possible on installations of Sharetribe Go, that do not have a secret AWS Simple Notification Service (SNS) notification token configured via the `sns_notification_token` configuration parameter. This configuration parameter is unset by default. The vulnerability has been patched in version 10.2.1. Users who are unable to upgrade should set the`sns_notification_token` configuration parameter to a secret value.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://github.com/sharetribe/sharetribe/commit/5b844f8108c5458d89f0d7ba974f42d7917b5f80; https://github.com/sharetribe/sharetribe/releases/tag/v10.2.1; https://github.com/sharetribe/sharetribe/security/advisories/GHSA-hjjc-p9hr-424c
CVE: CVE-2021-39198
Published: 2021-11-19
Description: OroCRM is an open source Client Relationship Management (CRM) application. Affected versions we found to suffer from a vulnerability which could an attacker is able to disqualify any Lead with a Cross-Site Request Forgery (CSRF) attack. There are no workarounds that address this vulnerability and all users are advised to update their package.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/oroinc/crm/security/advisories/GHSA-vf7h-6246-hm43; https://github.com/oroinc/crm/security/advisories/GHSA-vf7h-6246-hm43
CVE: CVE-2021-34358
Published: 2021-11-20
Description: We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 ( 2021/08/25 ) and later
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: https://www.qnap.com/en/security-advisory/qsa-21-49; https://www.qnap.com/en/security-advisory/qsa-21-49
CVE: CVE-2021-38681
Published: 2021-11-20
Description: A reflected cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already disabled and removed Ragic Cloud DB from the QNAP App Center, pending a security patch from Ragic.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-79
References: https://www.qnap.com/en/security-advisory/qsa-21-48; https://www.qnap.com/en/security-advisory/qsa-21-48
CVE: CVE-2021-36306
Published: 2021-11-20
Description: Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://www.dell.com/support/kbdoc/en-us/000193076; https://www.dell.com/support/kbdoc/en-us/000193076