deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-40366
Published: 2021-11-09
Description: A vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.42), Climatix POL909 (AWM module) (All versions < V11.34). The web server of affected devices transmits data without TLS encryption. This could allow an unauthenticated remote attacker in a man-in-the-middle position to read sensitive data, such as administrator credentials, or modify data in transit.
CVSS Score: 7.4 (HIGH)
CWE: CWE-311, CWE-319
References: https://cert-portal.siemens.com/productcert/pdf/ssa-703715.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-703715.pdf
CVE: CVE-2021-42015
Published: 2021-11-09
Description: A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All versions < V8.18.12), Mendix Applications using Mendix 9 (All versions < V9.6.1). Applications built with affected versions of Mendix Studio Pro do not prevent file documents from being cached when files are opened or downloaded using a browser. This could allow a local attacker to read those documents by exploring the browser cache.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-525
References: https://cert-portal.siemens.com/productcert/pdf/ssa-338732.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-338732.pdf
CVE: CVE-2021-42021
Published: 2021-11-09
Description: A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2), Siveillance Video DLNA Server (2019 R3), Siveillance Video DLNA Server (2020 R1), Siveillance Video DLNA Server (2020 R2), Siveillance Video DLNA Server (2020 R3), Siveillance Video DLNA Server (2021 R1). The affected application contains a path traversal vulnerability that could allow to read arbitrary files on the server that are outside the application’s web document directory. An unauthenticated remote attacker could exploit this issue to access sensitive information for subsequent attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-26, CWE-22
References: https://cert-portal.siemens.com/productcert/pdf/ssa-755517.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-755517.pdf
CVE: CVE-2021-42025
Published: 2021-11-09
Description: A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2). Applications built with affected versions of Mendix Studio Pro do not properly control write access for certain client actions. This could allow authenticated attackers to manipulate the content of System.FileDocument objects in some cases, regardless whether they have write access to it.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863
References: https://cert-portal.siemens.com/productcert/pdf/ssa-779699.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-779699.pdf
CVE: CVE-2021-42026
Published: 2021-11-09
Description: A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2). Applications built with affected versions of Mendix Studio Pro do not properly control read access for certain client actions. This could allow authenticated attackers to retrieve the changedDate attribute of arbitrary objects, even when they don't have read access to them.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://cert-portal.siemens.com/productcert/pdf/ssa-779699.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-779699.pdf
CVE: CVE-2021-43466
Published: 2021-11-09
Description: In the thymeleaf-spring5:3.0.12 component, thymeleaf combined with specific scenarios in template injection may lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://gitee.com/wayne_wwang/wayne_wwang/blob/master/2021/10/31/ruoyi+thymeleaf-rce/index.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://vuldb.com/?id.186365
CVE: CVE-2021-43114
Published: 2021-11-09
Description: FORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate. This will lead to RTR clients such as BGP routers to lose access to the RPKI VRP data set, effectively disabling Route Origin Validation.
CVSS Score: 7.5 (HIGH)
References: https://github.com/NICMx/FORT-validator/commit/274dc14aed1eb9b3350029d1063578a6b9c77b54; https://github.com/NICMx/FORT-validator/commit/425e0f4037b4543fe8044ac96ca71d6d02d7d8c5; https://github.com/NICMx/FORT-validator/commit/673c679b6bf3f4187cd5242c31a795bf8a6c22b3
CVE: CVE-2021-43519
Published: 2021-11-09
Description: Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-674
References: http://lua-users.org/lists/lua-l/2021-10/msg00123.html; http://lua-users.org/lists/lua-l/2021-11/msg00015.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C7XHFYHGSZKL53VCLSJSAJ6VMFGAIXKO/
CVE: CVE-2019-18916
Published: 2021-11-09
Description: A potential security vulnerability has been identified for HP LaserJet Solution Software (for certain HP LaserJet Printers) which may lead to unauthorized elevation of privilege on the client.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.hp.com/us-en/document/c06586963; https://support.hp.com/us-en/document/c06586963
CVE: CVE-2021-3641
Published: 2021-11-09
Description: Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-59, CWE-59
References: https://www.bitdefender.com/support/security-advisories/improper-link-resolution-before-file-access-in-bitdefender-gravityzone-va-9921; https://www.zerodayinitiative.com/advisories/ZDI-22-143/; https://www.bitdefender.com/support/security-advisories/improper-link-resolution-before-file-access-in-bitdefender-gravityzone-va-9921
CVE: CVE-2019-16240
Published: 2021-11-09
Description: A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro Printers before 001.1937D exists; A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the printer produces a core dump to a local device.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-120
References: https://support.hp.com/us-en/document/c06458150; https://support.hp.com/us-en/document/c06458150
CVE: CVE-2019-18912
Published: 2021-11-09
Description: A potential security vulnerability has been identified for certain HP printers and MFPs with Troy solutions. For affected printers with FutureSmart Firmware bundle version 4.9 or 4.9.0.1 the potential vulnerability may cause instability in the solution.
CVSS Score: 7.8 (HIGH)
References: https://support.hp.com/us-en/document/c06513924; https://support.hp.com/us-en/document/c06513924
CVE: CVE-2019-18914
Published: 2021-11-09
Description: A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripting in a client’s browser by clicking on a third-party malicious link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://support.hp.com/us-en/document/c06546034; https://support.hp.com/us-en/document/c06546034
CVE: CVE-2021-43183
Published: 2021-11-09
Description: In JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed.
CVSS Score: 9.8 (CRITICAL)
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43184
Published: 2021-11-09
Description: In JetBrains YouTrack before 2021.3.21051, stored XSS is possible.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43185
Published: 2021-11-09
Description: JetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43186
Published: 2021-11-09
Description: JetBrains YouTrack before 2021.3.24402 is vulnerable to stored XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43187
Published: 2021-11-09
Description: In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information.
CVSS Score: 5.3 (MEDIUM)
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43188
Published: 2021-11-09
Description: In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete.
CVSS Score: 7.3 (HIGH)
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43189
Published: 2021-11-09
Description: In JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete.
CVSS Score: 7.3 (HIGH)
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43190
Published: 2021-11-09
Description: In JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible.
CVSS Score: 5.3 (MEDIUM)
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43191
Published: 2021-11-09
Description: JetBrains YouTrack Mobile before 2021.2, is missing the security screen on Android and iOS.
CVSS Score: 5.3 (MEDIUM)
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43192
Published: 2021-11-09
Description: In JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible.
CVSS Score: 5.3 (MEDIUM)
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43193
Published: 2021-11-09
Description: In JetBrains TeamCity before 2021.1.2, remote code execution via the agent push functionality is possible.
CVSS Score: 9.8 (CRITICAL)
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43194
Published: 2021-11-09
Description: In JetBrains TeamCity before 2021.1.2, user enumeration was possible.
CVSS Score: 5.3 (MEDIUM)
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43195
Published: 2021-11-09
Description: In JetBrains TeamCity before 2021.1.2, some HTTP security headers were missing.
CVSS Score: 5.3 (MEDIUM)
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43196
Published: 2021-11-09
Description: In JetBrains TeamCity before 2021.1, information disclosure via the Docker Registry connection dialog is possible.
CVSS Score: 7.5 (HIGH)
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43197
Published: 2021-11-09
Description: In JetBrains TeamCity before 2021.1.2, email notifications could include unescaped HTML for XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43198
Published: 2021-11-09
Description: In JetBrains TeamCity before 2021.1.2, stored XSS is possible.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43199
Published: 2021-11-09
Description: In JetBrains TeamCity before 2021.1.2, permission checks in the Create Patch functionality are insufficient.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43200
Published: 2021-11-09
Description: In JetBrains TeamCity before 2021.1.2, permission checks in the Agent Push functionality were insufficient.
CVSS Score: 9.8 (CRITICAL)
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43201
Published: 2021-11-09
Description: In JetBrains TeamCity before 2021.1.3, a newly created project could take settings from an already deleted project.
CVSS Score: 5.3 (MEDIUM)
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43203
Published: 2021-11-09
Description: In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43180
Published: 2021-11-09
Description: In JetBrains Hub before 2021.1.13690, information disclosure via avatar metadata is possible.
CVSS Score: 7.5 (HIGH)
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43181
Published: 2021-11-09
Description: In JetBrains Hub before 2021.1.13690, stored XSS is possible.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43182
Published: 2021-11-09
Description: In JetBrains Hub before 2021.1.13415, a DoS via user information is possible.
CVSS Score: 7.5 (HIGH)
References: https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/; https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/
CVE: CVE-2021-43172
Published: 2021-11-09
Description: NLnet Labs Routinator prior to 0.10.2 happily processes a chain of RRDP repositories of infinite length causing it to never finish a validation run. In RPKI, a CA can choose the RRDP repository it wishes to publish its data in. By continuously generating a new child CA that only consists of another CA using a different RRDP repository, a malicious CA can create a chain of CAs of de-facto infinite length. Routinator prior to version 0.10.2 did not contain a limit on the length of such a chain and will therefore continue to process this chain forever. As a result, the validation run will never finish, leading to Routinator continuing to serve the old data set or, if in the initial validation run directly after starting, never serve any data at all.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674, CWE-835
References: https://www.nlnetlabs.nl/downloads/routinator/CVE-2021-43172_CVE-2021-43173_CVE-2021-43174.txt; https://www.nlnetlabs.nl/downloads/routinator/CVE-2021-43172_CVE-2021-43173_CVE-2021-43174.txt
CVE: CVE-2021-43173
Published: 2021-11-09
Description: In NLnet Labs Routinator prior to 0.10.2, a validation run can be delayed significantly by an RRDP repository by not answering but slowly drip-feeding bytes to keep the connection alive. This can be used to effectively stall validation. While Routinator has a configurable time-out value for RRDP connections, this time-out was only applied to individual read or write operations rather than the complete request. Thus, if an RRDP repository sends a little bit of data before that time-out expired, it can continuously extend the time it takes for the request to finish. Since validation will only continue once the update of an RRDP repository has concluded, this delay will cause validation to stall, leading to Routinator continuing to serve the old data set or, if in the initial validation run directly after starting, never serve any data at all.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755, CWE-400
References: https://www.debian.org/security/2021/dsa-5033; https://www.debian.org/security/2022/dsa-5041; https://www.nlnetlabs.nl/downloads/routinator/CVE-2021-43172_CVE-2021-43173_CVE-2021-43174.txt
CVE: CVE-2021-43174
Published: 2021-11-09
Description: NLnet Labs Routinator versions 0.9.0 up to and including 0.10.1, support the gzip transfer encoding when querying RRDP repositories. This encoding can be used by an RRDP repository to cause an out-of-memory crash in these versions of Routinator. RRDP uses XML which allows arbitrary amounts of white space in the encoded data. The gzip scheme compresses such white space extremely well, leading to very small compressed files that become huge when being decompressed for further processing, big enough that Routinator runs out of memory when parsing input data waiting for the next XML element.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1325, CWE-787
References: https://www.debian.org/security/2022/dsa-5041; https://www.nlnetlabs.nl/downloads/routinator/CVE-2021-43172_CVE-2021-43173_CVE-2021-43174.txt; https://www.debian.org/security/2022/dsa-5041
CVE: CVE-2020-28419
Published: 2021-11-09
Description: During installation with certain driver software or application packages an arbitrary code execution could occur.
CVSS Score: 8.8 (HIGH)
References: https://support.hp.com/us-en/document/c07058567; https://support.hp.com/us-en/document/c07058567
CVE: CVE-2021-20119
Published: 2021-11-09
Description: The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that allow any logged-in user to change the administrator password.
CVSS Score: 7.1 (HIGH)
CWE: CWE-863
References: https://www.tenable.com/security/research/tra-2021-49; https://www.tenable.com/security/research/tra-2021-49
CVE: CVE-2021-43568
Published: 2021-11-09
Description: The verify function in the Stark Bank Elixir ECDSA library (ecdsa-elixir) 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347
References: https://github.com/starkbank/ecdsa-elixir/releases/tag/v1.0.1; https://research.nccgroup.com/2021/11/08/technical-advisory-arbitrary-signature-forgery-in-stark-bank-ecdsa-libraries/; https://github.com/starkbank/ecdsa-elixir/releases/tag/v1.0.1
CVE: CVE-2021-43569
Published: 2021-11-09
Description: The verify function in the Stark Bank .NET ECDSA library (ecdsa-dotnet) 1.3.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347
References: https://github.com/starkbank/ecdsa-dotnet/releases/tag/v1.3.2; https://research.nccgroup.com/2021/11/08/technical-advisory-arbitrary-signature-forgery-in-stark-bank-ecdsa-libraries/; https://github.com/starkbank/ecdsa-dotnet/releases/tag/v1.3.2
CVE: CVE-2021-43570
Published: 2021-11-09
Description: The verify function in the Stark Bank Java ECDSA library (ecdsa-java) 1.0.0 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347
References: https://github.com/starkbank/ecdsa-java/releases/tag/v1.0.1; https://research.nccgroup.com/2021/11/08/technical-advisory-arbitrary-signature-forgery-in-stark-bank-ecdsa-libraries/; https://github.com/starkbank/ecdsa-java/releases/tag/v1.0.1
CVE: CVE-2021-43571
Published: 2021-11-09
Description: The verify function in the Stark Bank Node.js ECDSA library (ecdsa-node) 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347
References: https://github.com/starkbank/ecdsa-node/releases/tag/v1.1.3; https://research.nccgroup.com/2021/11/08/technical-advisory-arbitrary-signature-forgery-in-stark-bank-ecdsa-libraries/; https://github.com/starkbank/ecdsa-node/releases/tag/v1.1.3
CVE: CVE-2021-43572
Published: 2021-11-09
Description: The verify function in the Stark Bank Python ECDSA library (aka starkbank-escada or ecdsa-python) before 2.0.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-347
References: https://github.com/starkbank/ecdsa-python/commit/d136170666e9510eb63c[PII_REDACTED]807bd4c17f; https://github.com/starkbank/ecdsa-python/releases/tag/v2.0.1; https://research.nccgroup.com/2021/11/08/technical-advisory-arbitrary-signature-forgery-in-stark-bank-ecdsa-libraries/
CVE: CVE-2021-35488
Published: 2021-11-09
Description: Thruk 2.40-2 allows /thruk/#cgi-bin/status.cgi?style=combined&title={TITLE] Reflected XSS via the host or title parameter. An attacker could inject arbitrary JavaScript into status.cgi. The payload would be triggered every time an authenticated user browses the page containing it.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.gruppotim.it/redteam; https://www.thruk.org/changelog.html; https://www.gruppotim.it/redteam
CVE: CVE-2021-35489
Published: 2021-11-09
Description: Thruk 2.40-2 allows /thruk/#cgi-bin/extinfo.cgi?type=2&host={HOSTNAME]&service={SERVICENAME]&backend={BACKEND] Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browses the page containing it.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.gruppotim.it/redteam; https://www.thruk.org/changelog.html; https://www.gruppotim.it/redteam
CVE: CVE-2021-43575
Published: 2021-11-09
Description: KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information, a similar issue to CVE-2021-36799. NOTE: The vendor disputes this because it is not the responsibility of the ETS to securely store cryptographic key material when it is not being exported
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-798
References: https://github.com/robertguetzkow/ets5-password-recovery; https://github.com/robertguetzkow/ets5-password-recovery
CVE: CVE-2021-37157
Published: 2021-11-10
Description: An issue was discovered in OpenGamePanel OGP-Agent-Linux through 2021-08-14. $HOME/OGP/Cfg/Config.pm has the root password in cleartext.
CVSS Score: 8.8 (HIGH)
CWE: CWE-312
References: https://github.com/OpenGamePanel/OGP-Agent-Linux/commits/master; https://www.exploit-db.com/exploits/50373; https://github.com/OpenGamePanel/OGP-Agent-Linux/commits/master