deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-41310
Published: 2021-11-01
Description: Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the Associated Projects feature (/secure/admin/AssociatedProjectsForCustomField.jspa). The affected versions are before version 8.5.19, from version 8.6.0 before 8.13.11, and from version 8.14.0 before 8.19.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://jira.atlassian.com/browse/JRASERVER-72800; https://jira.atlassian.com/browse/JRASERVER-72800
CVE: CVE-2021-25973
Published: 2021-11-02
Description: In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happens due to front-end restriction only.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285, CWE-669
References: https://github.com/publify/publify/commit/3447e0241e921b65f6eb1090453d8ea73e98387e; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25973; https://github.com/publify/publify/commit/3447e0241e921b65f6eb1090453d8ea73e98387e
CVE: CVE-2021-33593
Published: 2021-11-02
Description: Whale browser for iOS before 1.14.0 has an inconsistent user interface issue that allows an attacker to obfuscate the address bar which may lead to address bar spoofing.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-451
References: https://cve.naver.com/detail/cve-2021-43059; https://cve.naver.com/detail/cve-2021-43059
CVE: CVE-2021-3765
Published: 2021-11-02
Description: validator.js is vulnerable to Inefficient Regular Expression Complexity
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333, CWE-1333
References: https://github.com/validatorjs/validator.js/commit/496fc8b2a7f5997acaaec33cc44d0b8dba5fb5e1; https://huntr.dev/bounties/c37e975c-21a3-4c5f-9b57-04d63b28cfc9; https://github.com/validatorjs/validator.js/commit/496fc8b2a7f5997acaaec33cc44d0b8dba5fb5e1
CVE: CVE-2021-33611
Published: 2021-11-02
Description: Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 (Vaadin 14.0.0 through 14.4.4) allows remote attackers to execute malicious JavaScript in browser by opening crafted URL
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/vaadin/vaadin-menu-bar/pull/126; https://vaadin.com/security/cve-2021-33611; https://github.com/vaadin/vaadin-menu-bar/pull/126
CVE: CVE-2021-36560
Published: 2021-11-02
Description: Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to authentication bypass which leads to account takeover of the admin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-425
References: https://pratikkhalane91.medium.com/cve-2021-35559-bb62022dd08a; https://www.sourcecodester.com/; https://pratikkhalane91.medium.com/cve-2021-35559-bb62022dd08a
CVE: CVE-2020-27406
Published: 2021-11-02
Description: Cross Site Scripting (XSS) vulnerability in DynPG 4.9.1, allows authenticated attackers to execute arbitrary code via the groupname.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://dynpg.com; https://www.exploit-db.com/exploits/48865; http://dynpg.com
CVE: CVE-2020-35249
Published: 2021-11-02
Description: Cross Site Scripting (XSS) vulnerability in ElkarBackup 1.3.3, allows attackers to execute arbitrary code via the name parameter to the add client feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.exploit-db.com/exploits/48756; https://www.exploit-db.com/exploits/48756
CVE: CVE-2021-27722
Published: 2021-11-02
Description: An issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. The program can be crashed by entering 300 bytes char data into the "Key" or "Name" field while registering.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://www.exploit-db.com/exploits/49590; https://www.exploit-db.com/exploits/49638; https://www.exploit-db.com/exploits/49590
CVE: CVE-2021-27723
Published: 2021-11-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-37842
Published: 2021-11-02
Description: metakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information. Remote Cluster XDCR credentials can get leaked in debug logs. Config key tombstone purging was added in Couchbase Server 7.0.0. This issue happens when a config key, which is being logged, has a tombstone purger time-stamp attached to it.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://docs.couchbase.com/server/current/release-notes/relnotes.html; https://www.couchbase.com/alerts; https://docs.couchbase.com/server/current/release-notes/relnotes.html
CVE: CVE-2021-42763
Published: 2021-11-02
Description: Couchbase Server before 6.6.3 and 7.x before 7.0.2 stores Sensitive Information in Cleartext. The issue occurs when the cluster manager forwards a HTTP request from the pluggable UI (query workbench etc) to the specific service. In the backtrace, the Basic Auth Header included in the HTTP request, has the "@" user credentials of the node processing the UI request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://docs.couchbase.com/server/current/release-notes/relnotes.html; https://www.couchbase.com/alerts; https://docs.couchbase.com/server/current/release-notes/relnotes.html
CVE: CVE-2021-36922
Published: 2021-11-02
Description: RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB devices (Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure) via a crafted Device IO Control packet to a device.
CVSS Score: 7.8 (HIGH)
References: https://www.realtek.com/images/safe-report/Realtek_RtsUpx_Security_Advisory_Report.pdf; https://www.sentinelone.com/resources/category/report/; https://www.realtek.com/images/safe-report/Realtek_RtsUpx_Security_Advisory_Report.pdf
CVE: CVE-2021-36923
Published: 2021-11-02
Description: RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB device privileged IN and OUT instructions (leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure) via a crafted Device IO Control packet to a device.
CVSS Score: 7.8 (HIGH)
References: https://www.realtek.com/images/safe-report/Realtek_RtsUpx_Security_Advisory_Report.pdf; https://www.sentinelone.com/resources/category/report/; https://www.realtek.com/images/safe-report/Realtek_RtsUpx_Security_Advisory_Report.pdf
CVE: CVE-2021-36924
Published: 2021-11-02
Description: RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve a pool overflow (leading to Escalation of Privileges, Denial of Service, and Code Execution) via a crafted Device IO Control packet to a device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-367
References: https://www.realtek.com/images/safe-report/Realtek_RtsUpx_Security_Advisory_Report.pdf; https://www.sentinelone.com/resources/category/report/; https://www.realtek.com/images/safe-report/Realtek_RtsUpx_Security_Advisory_Report.pdf
CVE: CVE-2021-36925
Published: 2021-11-02
Description: RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve an arbitrary read or write operation from/to physical memory (leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure) via a crafted Device IO Control packet to a device.
CVSS Score: 7.8 (HIGH)
References: https://www.realtek.com/images/safe-report/Realtek_RtsUpx_Security_Advisory_Report.pdf; https://www.sentinelone.com/resources/category/report/; https://www.realtek.com/images/safe-report/Realtek_RtsUpx_Security_Advisory_Report.pdf
CVE: CVE-2021-42568
Published: 2021-11-02
Description: Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function via a low-privileged account.
CVSS Score: 4.3 (MEDIUM)
References: https://support.sonatype.com; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]515-CVE-2021-42568-Nexus-Repository-Manager-3-Incorrect-Access-Control-October-27-2021; https://support.sonatype.com
CVE: CVE-2021-36794
Published: 2021-11-02
Description: In Siren Investigate before 11.1.4, when enabling the cluster feature of the Siren Alert application, TLS verifications are disabled globally in the Siren Investigate main process.
CVSS Score: 9.8 (CRITICAL)
References: https://community.siren.io/c/announcements; https://docs.siren.io/index; https://docs.siren.io/siren-platform-user-guide/11.1/release-notes.html#_security_fixes_3
CVE: CVE-2021-29737
Published: 2021-11-02
Description: IBM InfoSphere Data Flow Designer Engine (IBM InfoSphere Information Server 11.7 ) component has improper validation of the REST API server certificate. IBM X-Force ID: 201301.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/201301; https://www.ibm.com/support/pages/node/6509086; https://exchange.xforce.ibmcloud.com/vulnerabilities/201301
CVE: CVE-2021-29738
Published: 2021-11-02
Description: IBM InfoSphere Data Flow Designer (IBM InfoSphere Information Server 11.7 ) is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 201302.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/201302; https://www.ibm.com/support/pages/node/6509084; https://exchange.xforce.ibmcloud.com/vulnerabilities/201302
CVE: CVE-2021-29771
Published: 2021-11-02
Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/202773; https://www.ibm.com/support/pages/node/6509614; https://exchange.xforce.ibmcloud.com/vulnerabilities/202773
CVE: CVE-2021-29875
Published: 2021-11-02
Description: IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information due to a insecure third party domain access vulnerability. IBM X-Force ID: 206572.
CVSS Score: 7.5 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/206572; https://www.ibm.com/support/pages/node/6509616; https://exchange.xforce.ibmcloud.com/vulnerabilities/206572
CVE: CVE-2021-29888
Published: 2021-11-02
Description: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 207123.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/207123; https://www.ibm.com/support/pages/node/6509618; https://exchange.xforce.ibmcloud.com/vulnerabilities/207123
CVE: CVE-2021-38948
Published: 2021-11-02
Description: IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 211402.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-91
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/211402; https://www.ibm.com/support/pages/node/6509632; https://exchange.xforce.ibmcloud.com/vulnerabilities/211402
CVE: CVE-2020-12814
Published: 2021-11-02
Description: A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or commands via specifically crafted requests to the web GUI.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-20-092; https://fortiguard.com/advisory/FG-IR-20-092
CVE: CVE-2020-15940
Published: 2021-11-02
Description: An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a remote authenticated attacker to inject malicious script/tags via the name parameter of various sections of the server.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-20-067; https://fortiguard.com/advisory/FG-IR-20-067
CVE: CVE-2020-18438
Published: 2021-11-02
Description: Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the title parameter to admin.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/qinggan/phpok/issues/4; https://github.com/qinggan/phpok/issues/4
CVE: CVE-2020-18439
Published: 2021-11-02
Description: An issue was discoverered in in function edit_save_f in framework/admin/tpl_control.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell.
CVSS Score: 9.1 (CRITICAL)
References: https://github.com/qinggan/phpok/issues/4; https://github.com/qinggan/phpok/issues/4
CVE: CVE-2020-18440
Published: 2021-11-02
Description: Buffer overflow vulnerability in framework/init.php in qinggan phpok 5.1, allows attackers to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/qinggan/phpok/issues/4; https://github.com/qinggan/phpok/issues/4
CVE: CVE-2020-20657
Published: 2021-11-02
Description: Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denial of service via an unexpected packet while trying to connect.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/fcovatti/libiec_iccp_mod/issues/1; https://github.com/fcovatti/libiec_iccp_mod/issues/1
CVE: CVE-2020-20658
Published: 2021-11-02
Description: Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denail of service when trying to calloc an unexpectiedly large space.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/fcovatti/libiec_iccp_mod/issues/2; https://github.com/fcovatti/libiec_iccp_mod/issues/2
CVE: CVE-2020-21572
Published: 2021-11-02
Description: Buffer overflow vulnerability in function src_parser_trans_stage_1_2_3 trgil gilcc before commit 803969389ca9c06237075a7f8eeb1a19e6651759, allows attackers to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/trgil/gilcc/commit/803969389ca9c06237075a7f8eeb1a19e6651759; https://github.com/trgil/gilcc/issues/1; https://github.com/trgil/gilcc/commit/803969389ca9c06237075a7f8eeb1a19e6651759
CVE: CVE-2020-21573
Published: 2021-11-02
Description: An issue was discoverered in in abhijitnathwani image-processing v0.1.0, allows local attackers to cause a denial of service via a crafted image file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400
References: https://github.com/abhijitnathwani/image-processing/issues/3; https://github.com/abhijitnathwani/image-processing/issues/3
CVE: CVE-2020-21574
Published: 2021-11-02
Description: Buffer overflow vulnerability in YotsuyaNight c-http v0.1.0, allows attackers to cause a denial of service via a long url request which is passed to the delimitedread function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/YotsuyaNight/c-http/issues/1; https://github.com/YotsuyaNight/c-http/issues/1
CVE: CVE-2020-23685
Published: 2021-11-02
Description: SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the username parameter to login.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/vtime-tech/188Jianzhan/issues/2; https://github.com/vtime-tech/188Jianzhan/issues/2
CVE: CVE-2020-23686
Published: 2021-11-02
Description: Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified impacts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/loadream/AyaCMS/issues/1; https://github.com/loadream/AyaCMS/issues/1
CVE: CVE-2020-23718
Published: 2021-11-02
Description: Cross site scripting (XSS) vulnerability in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the route parameter to index.php.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://github.com/xujinliang/zibbs/issues/4; https://github.com/xujinliang/zibbs/issues/4
CVE: CVE-2020-23719
Published: 2021-11-02
Description: Cross site scripting (XSS) vulnerability in application/controllers/AdminController.php in xujinliang zibbs 1.0, allows attackers to execute arbitrary code via the bbsmeta parameter.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://github.com/xujinliang/zibbs/issues/5; https://github.com/xujinliang/zibbs/issues/5
CVE: CVE-2020-23754
Published: 2021-11-02
Description: Cross Site Scripting (XSS) vulnerability in infusions/member_poll_panel/poll_admin.php in PHP-Fusion 9.03.50, allows attackers to execute arbitrary code, via the polls feature.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://github.com/php-fusion/PHP-Fusion/issues/2315; https://user-images.githubusercontent.com/62001260/81574006-6fb70480-93cf-11ea-814c-55a96d2fe95e.PNG; https://user-images.githubusercontent.com/62001260/8[PII_REDACTED]e100-93cf-11ea-9493-615a70162034.PNG
CVE: CVE-2021-26107
Published: 2021-11-02
Description: An improper access control vulnerability [CWE-284] in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile to modify the VPN tunnel status of other VDOMs using VPN Manager.
CVSS Score: 6.3 (MEDIUM)
References: https://fortiguard.com/advisory/FG-IR-21-043; https://www.fortiguard.com/psirt?date=11-2021&risk=3; https://fortiguard.com/advisory/FG-IR-21-043
CVE: CVE-2021-32595
Published: 2021-11-02
Description: Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a single low-privileged user to induce a denial of service via multiple HTTP requests.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://fortiguard.com/advisory/FG-IR-21-096; https://fortiguard.com/advisory/FG-IR-21-096
CVE: CVE-2021-36172
Published: 2021-11-02
Description: An improper restriction of XML external entity reference vulnerability in the parser of XML responses of FortiPortal before 6.0.6 may allow an attacker who controls the producer of XML reports consumed by FortiPortal to trigger a denial of service or read arbitrary files from the underlying file system by means of specifically crafted XML documents.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-611
References: https://fortiguard.com/advisory/FG-IR-21-104; https://fortiguard.com/advisory/FG-IR-21-104
CVE: CVE-2021-36181
Published: 2021-11-02
Description: A concurrent execution using shared resource with improper Synchronization vulnerability ('Race Condition') in the customer database interface of FortiPortal before 6.0.6 may allow an authenticated, low-privilege user to bring the underlying database data into an inconsistent state via specific coordination of web requests.
CVSS Score: 3.1 (LOW)
CWE: CWE-362
References: https://fortiguard.com/advisory/FG-IR-21-102; https://fortiguard.com/advisory/FG-IR-21-102
CVE: CVE-2021-41019
Published: 2021-11-02
Description: An improper validation of certificate with host mismatch [CWE-297] vulnerability in FortiOS versions 6.4.6 and below may allow the connection to a malicious LDAP server via options in GUI, leading to disclosure of sensitive information, such as AD credentials.
CVSS Score: 3.5 (LOW)
CWE: CWE-295
References: https://fortiguard.com/advisory/FG-IR-21-074; https://fortiguard.com/advisory/FG-IR-21-074
CVE: CVE-2021-41232
Published: 2021-11-02
Description: Thunderdome is an open source agile planning poker tool in the theme of Battling for points. In affected versions there is an LDAP injection vulnerability which affects instances with LDAP authentication enabled. The provided username is not properly escaped. This issue has been patched in version 1.16.3. If users are unable to update they should disable the LDAP feature if in use.
CVSS Score: 8.1 (HIGH)
CWE: CWE-74, CWE-90, CWE-74, CWE-116
References: https://github.com/StevenWeathers/thunderdome-planning-poker/commit/f1524d01e8a0f2d6c3db5461c742456c692dd8c1; https://github.com/StevenWeathers/thunderdome-planning-poker/security/advisories/GHSA-26cm-qrc6-mfgj; https://github.com/github/securitylab/issues/464#issuecomment-957094994
CVE: CVE-2021-41238
Published: 2021-11-02
Description: Hangfire is an open source system to perform background job processing in a .NET or .NET Core applications. No Windows Service or separate process required. Dashboard UI in Hangfire.Core uses authorization filters to protect it from showing sensitive data to unauthorized users. By default when no custom authorization filters specified, `LocalRequestsOnlyAuthorizationFilter` filter is being used to allow only local requests and prohibit all the remote requests to provide sensible, protected by default settings. However due to the recent changes, in version 1.7.25 no authorization filters are used by default, allowing remote requests to succeed. If you are using `UseHangfireDashboard` method with default `DashboardOptions.Authorization` property value, then your installation is impacted. If any other authorization filter is specified in the `DashboardOptions.Authorization` property, the you are not impacted. Patched versions (1.7.26) are available both on Nuget.org and as a tagged release on the github repo. Default authorization rules now prohibit remote requests by default again by including the `LocalRequestsOnlyAuthorizationFilter` filter to the default settings. Please upgrade to the newest version in order to mitigate the issue. For users who are unable to upgrade it is possible to mitigate the issue by using the `LocalRequestsOnlyAuthorizationFilter` explicitly when configuring the Dashboard UI.
CVSS Score: 8.6 (HIGH)
CWE: CWE-862, CWE-862
References: https://github.com/HangfireIO/Hangfire/issues/1958; https://github.com/HangfireIO/Hangfire/security/advisories/GHSA-7rq6-7gv8-c37h; https://github.com/HangfireIO/Hangfire/issues/1958
CVE: CVE-2020-15935
Published: 2021-11-02
Description: A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as users LDAP passwords and RADIUS shared secret by deobfuscating the passwords entry fields.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-312
References: https://fortiguard.com/advisory/FG-IR-20-044; https://fortiguard.com/advisory/FG-IR-20-044
CVE: CVE-2021-36174
Published: 2021-11-02
Description: A memory allocation with excessive size value vulnerability in the license verification function of FortiPortal before 6.0.6 may allow an attacker to perform a denial of service attack via specially crafted license blobs.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-770
References: https://fortiguard.com/advisory/FG-IR-21-109; https://fortiguard.com/advisory/FG-IR-21-109
CVE: CVE-2021-36176
Published: 2021-11-02
Description: Multiple uncontrolled resource consumption vulnerabilities in the web interface of FortiPortal before 6.0.6 may allow a single low-privileged user to induce a denial of service via multiple HTTP requests.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://fortiguard.com/advisory/FG-IR-21-100; https://fortiguard.com/advisory/FG-IR-21-100
CVE: CVE-2021-36183
Published: 2021-11-02
Description: An improper authorization vulnerability [CWE-285] in FortiClient for Windows versions 7.0.1 and below and 6.4.2 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for Forticlient updates.
CVSS Score: 7.4 (HIGH)
References: https://fortiguard.com/advisory/FG-IR-20-079; https://fortiguard.com/advisory/FG-IR-20-079