deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-28361
Published: 2021-03-13
Description: An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with a zero length (but data is expected), the iSCSI target can crash with a NULL pointer dereference.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/spdk/spdk/releases/tag/v21.01.1; https://github.com/spdk/spdk/releases/tag/v21.01.1
CVE: CVE-2021-28373
Published: 2021-03-13
Description: The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code without a valid password. NOTE: this issue only affected the git master branch for a short time. However, all end users are explicitly directed to use the git master branch in production. Semantic version numbers such as 21.03 appear to exist, but are automatically generated from the year and month. They are not releases.
CVSS Score: 7.5 (HIGH)
CWE: CWE-863
References: https://community.tt-rss.org/t/check-password-not-called-if-otp-is-enabled-update-asap-if-youre-using-2fa/4502; https://git.tt-rss.org/fox/tt-rss/commit/4949e1a59059d9e72ba7a98f783cec312c06c6d2; https://community.tt-rss.org/t/check-password-not-called-if-otp-is-enabled-update-asap-if-youre-using-2fa/4502
CVE: CVE-2021-28374
Published: 2021-03-15
Description: The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash).
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://bugs.debian.org/984810; https://lists.debian.org/debian-lts-announce/2021/04/msg00011.html; https://bugs.debian.org/984810
CVE: CVE-2021-28375
Published: 2021-03-15
Description: An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://git.kernel.org/linus/20c40794eb85ea29852d7bc37c55713802a543d6; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OMRQVOTASD3VZP6GE4JJHE27QU6FHTZ6/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJPVQZPY3DHPV5I3IVNMSMO6D3PKZISX/
CVE: CVE-2021-28378
Published: 2021-03-15
Description: Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.
CVSS Score: 3.7 (LOW)
CWE: CWE-79
References: https://blog.gitea.io/2021/03/gitea-1.13.4-is-released/; https://github.com/PandatiX/CVE-2021-28378; https://github.com/go-gitea/gitea/pull/14898
CVE: CVE-2021-28379
Published: 2021-03-15
Description: web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/161836/VestaCP-0.9.8-Cross-Site-Request-Forgery.html; https://github.com/myvesta/vesta/commit/3402071e950e76b79fa8672a1e09b70d3860f355; http://packetstormsecurity.com/files/161836/VestaCP-0.9.8-Cross-Site-Request-Forgery.html
CVE: CVE-2021-27576
Published: 2021-03-15
Description: If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server. This issue was addressed in Apache OpenMeetings 6.0.0
CVSS Score: 7.5 (HIGH)
References: https://lists.apache.org/thread.html/r9bb615bd70a0197368f5f3ffc887162686caeb0b5fc30592a7a871e9%40%3Cuser.openmeetings.apache.org%3E; https://lists.apache.org/thread.html/r9bb615bd70a0197368f5f3ffc887162686caeb0b5fc30592a7a871e9%40%3Cuser.openmeetings.apache.org%3E
CVE: CVE-2020-35358
Published: 2021-03-15
Description: DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, both sessions using the changed password and old sessions in any other browser or device do not expire and remain active. Such flaws frequently give attackers unauthorized access to some system data or functionality.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-613
References: https://gist.github.com/anku-agar/0fec2ffd98308e550ce9b5d4b395d0d7; https://gist.github.com/anku-agar/0fec2ffd98308e550ce9b5d4b395d0d7
CVE: CVE-2021-20179
Published: 2021-03-15
Description: A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863, CWE-863
References: https://bugzilla.redhat.com/show_bug.cgi?id=1914379; https://github.com/dogtagpki/pki/pull/3474; https://github.com/dogtagpki/pki/pull/3475
CVE: CVE-2021-27208
Published: 2021-03-15
Description: When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code execution. Physical access and modification of the board assembly on which the Zynq-7000 SoC device mounted is needed to replace the original NAND flash memory with a NAND flash emulation device for this attack to be successful.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-120
References: http://www.onfi.org/specifications; https://www.xilinx.com/products/silicon-devices/soc/zynq-7000.html; https://www.xilinx.com/support/answers/76201.html
CVE: CVE-2021-26923
Published: 2021-03-15
Description: An issue was discovered in Argo CD before 1.8.4. Accessing the endpoint /api/version leaks internal information for the system, and this endpoint is not protected with authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/argoproj/argo-cd/compare/v1.8.3...v1.8.4; https://github.com/argoproj/argo-cd/security/advisories/GHSA-pfgj-mh5m-2p48; https://github.com/argoproj/argo-cd/compare/v1.8.3...v1.8.4
CVE: CVE-2021-26924
Published: 2021-03-15
Description: An issue was discovered in Argo CD before 1.8.4. Browser XSS protection is not activated due to the missing XSS protection header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/argoproj/argo-cd/compare/v1.8.3...v1.8.4; https://github.com/argoproj/argo-cd/security/advisories/GHSA-pg99-h5gc-446r; https://github.com/argoproj/argo-cd/compare/v1.8.3...v1.8.4
CVE: CVE-2021-27891
Published: 2021-03-15
Description: SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation. ConnectSecure on Windows is affected.
CVSS Score: 8.8 (HIGH)
References: https://info.ssh.com/tectia-vulnerability-cve-2021-27891; https://info.ssh.com/tectia-vulnerability-cve-2021-27891
CVE: CVE-2021-27892
Published: 2021-03-15
Description: SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation. ConnectSecure on Windows is affected.
CVSS Score: 7.8 (HIGH)
References: https://info.ssh.com/tectia-vulnerability-cve-2021-27892; https://info.ssh.com/tectia-vulnerability-cve-2021-27892
CVE: CVE-2021-27893
Published: 2021-03-15
Description: SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in nonstandard conditions. ConnectSecure on Windows is affected.
CVSS Score: 7.0 (HIGH)
References: https://info.ssh.com/tectia-vulnerability-cve-2021-27893; https://info.ssh.com/tectia-vulnerability-cve-2021-27893
CVE: CVE-2020-4184
Published: 2021-03-15
Description: IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 174802..
CVSS Score: 7.3 (HIGH)
CWE: CWE-269
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/174802; https://www.ibm.com/support/pages/node/6429569; https://exchange.xforce.ibmcloud.com/vulnerabilities/174802
CVE: CVE-2021-20440
Published: 2021-03-15
Description: IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended recepient. An attacker who is a valid user in the user registry used by API Manager can use a stolen invitation link and register themselves as a member of an API provider organization. IBM X-Force ID: 196536.
CVSS Score: 4.3 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196536; https://www.ibm.com/support/pages/node/6430107; https://exchange.xforce.ibmcloud.com/vulnerabilities/196536
CVE: CVE-2021-3167
Published: 2021-03-15
Description: In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-532
References: https://docs.cloudera.com/data-engineering/cloud/release-notes/topics/cde-general-known-issues.html; https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html; https://my.cloudera.com/knowledge/TSB-2021-466-CDE-authentication-tokens-exposed-in-pod-and?id=310163
CVE: CVE-2020-24877
Published: 2021-03-15
Description: A SQL injection vulnerability in zzzphp v1.8.0 through /form/index.php?module=getjson may lead to a possible access restriction bypass.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/h4ckdepy/zzzphp/issues/1; https://github.com/h4ckdepy/zzzphp/issues/1
CVE: CVE-2020-25236
Published: 2021-03-15
Description: A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions), LOGO! 24CE (6ED1052-1CC08-0BA1) (All versions), LOGO! 24CEo (6ED1052-2CC08-0BA1) (All versions), LOGO! 24RCE (6ED1052-1HB08-0BA1) (All versions), LOGO! 24RCEo (6ED1052-2HB08-0BA1) (All versions), SIPLUS LOGO! 12/24RCE (6AG1052-1MD08-7BA1) (All versions), SIPLUS LOGO! 12/24RCEo (6AG1052-2MD08-7BA1) (All versions), SIPLUS LOGO! 230RCE (6AG1052-1FB08-7BA1) (All versions), SIPLUS LOGO! 230RCEo (6AG1052-2FB08-7BA1) (All versions), SIPLUS LOGO! 24CE (6AG1052-1CC08-7BA1) (All versions), SIPLUS LOGO! 24CEo (6AG1052-2CC08-7BA1) (All versions), SIPLUS LOGO! 24RCE (6AG1052-1HB08-7BA1) (All versions), SIPLUS LOGO! 24RCEo (6AG1052-2HB08-7BA1) (All versions). The control logic (CL) the LOGO! 8 executes could be manipulated in a way that could cause the device
executing the CL to improperly handle the manipulation and crash. After successful execution of the attack, the device needs to be manually reset.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755
References: https://cert-portal.siemens.com/productcert/html/ssa-783481.html; https://cert-portal.siemens.com/productcert/pdf/ssa-783481.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-783481.pdf
CVE: CVE-2020-25239
Published: 2021-03-15
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). The webserver could allow unauthorized actions via special urls for unpriviledged users. The settings of the UMC authorization server could be changed to add a rogue server by an attacker authenticating with unprivilege user rights.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://cert-portal.siemens.com/productcert/pdf/ssa-731317.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-731317.pdf
CVE: CVE-2020-25240
Published: 2021-03-15
Description: A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). Unpriviledged users can access services when guessing the url. An attacker could impact availability, integrity and gain information from logs and templates of the service.
CVSS Score: 8.8 (HIGH)
CWE: CWE-863
References: https://cert-portal.siemens.com/productcert/pdf/ssa-731317.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-731317.pdf
CVE: CVE-2020-25241
Published: 2021-03-15
Description: A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP RST packages. An attacker could exploit this to terminate arbitrary TCP sessions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1285, CWE-129
References: https://cert-portal.siemens.com/productcert/pdf/ssa-599268.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-599268.pdf
CVE: CVE-2020-28385
Published: 2021-03-15
Description: A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing DFT files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12049)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-715184.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-21-103-06
CVE: CVE-2020-28387
Published: 2021-03-15
Description: A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP3). When opening a specially crafted SEECTCXML file, the application could disclose arbitrary files to remote attackers. This is because of the passing of specially crafted content to the underlying XML parser without taking proper restrictions such as prohibiting an external dtd. (ZDI-CAN-11923)
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-611
References: https://cert-portal.siemens.com/productcert/pdf/ssa-715184.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-715184.pdf
CVE: CVE-2021-23355
Published: 2021-03-15
Description: This affects all versions of package ps-kill. If (attacker-controlled) user input is given to the kill function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization in the index.js file. PoC (provided by reporter): var ps_kill = require('ps-kill'); ps_kill.kill('$(touch success)',function(){});
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-78
References: https://snyk.io/vuln/SNYK-JS-PSKILL-1078529; https://snyk.io/vuln/SNYK-JS-PSKILL-1078529
CVE: CVE-2021-23356
Published: 2021-03-15
Description: This affects all versions of package kill-process-by-name. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization in the index.js file.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-78
References: https://snyk.io/vuln/SNYK-JS-KILLPROCESSBYNAME-1078534; https://snyk.io/vuln/SNYK-JS-KILLPROCESSBYNAME-1078534
CVE: CVE-2021-23357
Published: 2021-03-15
Description: All versions of package github.com/tyktechnologies/tyk/gateway are vulnerable to Directory Traversal via the handleAddOrUpdateApi function. This function is able to delete arbitrary JSON files on the disk where Tyk is running via the management API. The APIID is provided by the user and this value is then used to create a file on disk. If there is a file found with the same name then it will be deleted and then re-created with the contents of the API creation request.
CVSS Score: 3.3 (LOW)
CWE: CWE-22
References: https://github.com/TykTechnologies/tyk/issues/3390; https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMTYKTECHNOLOGIESTYKGATEWAY-1078516; https://github.com/TykTechnologies/tyk/issues/3390
CVE: CVE-2021-25667
Published: 2021-03-15
Description: A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC-200 (All versions < V4.1), SCALANCE XF-200BA (All versions < V4.1), SCALANCE XM400 (All versions < V6.2), SCALANCE XP-200 (All versions < V4.1), SCALANCE XR-300WG (All versions < V4.1), SCALANCE XR500 (All versions < V6.2). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-979775.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-21-068-03; https://cert-portal.siemens.com/productcert/pdf/ssa-979775.pdf
CVE: CVE-2021-25672
Published: 2021-03-15
Description: A vulnerability has been identified in Mendix Forgot Password Appstore module (All Versions < V3.2.1). The Forgot Password Marketplace module does not properly control access. An attacker could take over accounts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://cert-portal.siemens.com/productcert/pdf/ssa-917115.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-917115.pdf
CVE: CVE-2021-25673
Published: 2021-03-15
Description: A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, the application could enter an infinite loop, become unresponsive and must be restarted to restore the service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf
CVE: CVE-2021-25674
Published: 2021-03-15
Description: A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a NULL pointer deference condition could cause the application to terminate unexpectedly and must be restarted to restore the service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf
CVE: CVE-2021-25675
Published: 2021-03-15
Description: A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a divide by zero operation could occur and cause the application to terminate unexpectedly and must be restarted to restore the service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-369
References: https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf
CVE: CVE-2021-25676
Published: 2021-03-15
Description: A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions. When triggered, the device will reboot automatically.
CVSS Score: 7.5 (HIGH)
CWE: CWE-307
References: https://cert-portal.siemens.com/productcert/pdf/ssa-296266.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-21-068-02; https://cert-portal.siemens.com/productcert/pdf/ssa-296266.pdf
CVE: CVE-2021-27380
Published: 2021-03-15
Description: A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12532)
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-715184.pdf; https://us-cert.cisa.gov/ics/advisories/icsa-21-103-06
CVE: CVE-2021-27381
Published: 2021-03-15
Description: A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP3). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds read past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12534)
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://cert-portal.siemens.com/productcert/pdf/ssa-715184.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-715184.pdf
CVE: CVE-2021-27695
Published: 2021-03-15
Description: Multiple stored cross-site scripting (XSS) vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or HTML via any "Add" sections, such as Add Card Building & Floor, or others in the Name and Code Parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://openmaint.com; https://www.exploit-db.com/exploits/49649; http://openmaint.com
CVE: CVE-2021-27817
Published: 2021-03-15
Description: A remote command execution vulnerability in shopxo 1.9.3 allows an attacker to upload malicious code generated by phar where the suffix is JPG, which is uploaded after modifying the phar suffix.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/gongfuxiang/shopxo; https://github.com/h4ckdepy/vuls/blob/main/shopxo.md; https://github.com/gongfuxiang/shopxo
CVE: CVE-2021-27889
Published: 2021-03-15
Description: Cross-site Scripting (XSS) vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/161908/MyBB-1.8.25-Remote-Command-Execution.html; https://blog.sonarsource.com/mybb-remote-code-execution-chain; https://github.com/mybb/mybb/security/advisories/GHSA-xhj7-3349-mqcm
CVE: CVE-2020-24982
Published: 2021-03-15
Description: An issue was discovered in Quadbase ExpressDashboard (EDAB) 7 Update 9. It allows CSRF. An attacker may be able to trick an authenticated user into changing the email address associated with their account.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://c41nc.co.uk/cve-2020-24982/; https://c41nc.co.uk/cve-2020-24982/
CVE: CVE-2020-24985
Published: 2021-03-15
Description: An issue was discovered in Quadbase EspressReports ES 7 Update 9. An authenticated user is able to navigate to the MenuPage section of the application, and change the frmsrc parameter value to retrieve and execute external files or payloads.
CVSS Score: 8.1 (HIGH)
CWE: CWE-829
References: https://c41nc.co.uk/cve-2020-24985/; https://c41nc.co.uk/cve-2020-24985/
CVE: CVE-2020-28149
Published: 2021-03-15
Description: myDBR 5.8.3/4262 is affected by: Cross Site Scripting (XSS). The impact is: execute arbitrary code (remote). The component is: CSRF Token. The attack vector is: CSRF token injection to XSS.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://c41nc.co.uk/cve-2020-28149/; https://c41nc.co.uk/cve-2020-28149/
CVE: CVE-2020-29555
Published: 2021-03-15
Description: The BackupDelete functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to delete arbitrary files on the underlying server by exploiting a path-traversal technique. (This vulnerability can also be exploited by an unauthenticated attacker due to a lack of CSRF protection.)
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://blog.bssi.fr/cve-2020-29553-cve-2020-29555-cve-2020-29556-multiple-vulnerabilities-within-cms-grav/; https://blog.bssi.fr/cve-2020-29553-cve-2020-29555-cve-2020-29556-multiple-vulnerabilities-within-cms-grav/