deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-23624
Published: 2021-11-03
Description: This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-843
References: https://github.com/deoxxa/dotty/commit/88f61860dcc274a07a263c32cbe9d44c24ef02d7; https://snyk.io/vuln/SNYK-JS-DOTTY-1577292; https://github.com/deoxxa/dotty/commit/88f61860dcc274a07a263c32cbe9d44c24ef02d7
CVE: CVE-2021-23784
Published: 2021-11-03
Description: This affects the package tempura before 0.4.0. If the input to the esc function is of type object (i.e an array) it is returned without being escaped/sanitized, leading to a potential Cross-Site Scripting vulnerability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/lukeed/tempura/commit/58a5c3671e2f36b26810e77ead9e0dd471902f9b; https://github.com/lukeed/tempura/releases/tag/v0.4.0; https://snyk.io/vuln/SNYK-JS-TEMPURA-1569633
CVE: CVE-2021-23807
Published: 2021-11-03
Description: This affects the package jsonpointer before 5.0.0. A type confusion vulnerability can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-843
References: https://github.com/janl/node-jsonpointer/commit/a0345f3550cd9c4d89f33b126390202b89510ad4; https://github.com/janl/node-jsonpointer/pull/51; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1910273
CVE: CVE-2021-23820
Published: 2021-11-03
Description: This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-843
References: https://github.com/manuelstofer/json-pointer/blob/master/index.js%23L78; https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1910686; https://snyk.io/vuln/SNYK-JS-JSONPOINTER-1577287
CVE: CVE-2021-41134
Published: 2021-11-03
Description: nbdime provides tools for diffing and merging of Jupyter Notebooks. In affected versions a stored cross-site scripting (XSS) issue exists within the Jupyter-owned nbdime project. It appears that when reading the file name and path from disk, the extension does not sanitize the string it constructs before returning it to be displayed. The diffNotebookCheckpoint function within nbdime causes this issue. When attempting to display the name of the local notebook (diffNotebookCheckpoint), nbdime appears to simply append .ipynb to the name of the input file. The NbdimeWidget is then created, and the base string is passed through to the request API function. From there, the frontend simply renders the HTML tag and anything along with it. Users are advised to patch to the most recent version of the affected product.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://github.com/jupyter/nbdime/commit/e44a5cc7677f24b45ebafc756db49058c2f750ea; https://github.com/jupyter/nbdime/security/advisories/GHSA-p6rw-44q7-3fw4; https://github.com/jupyter/nbdime/commit/e44a5cc7677f24b45ebafc756db49058c2f750ea
CVE: CVE-2021-41174
Published: 2021-11-03
Description: Grafana is an open-source platform for monitoring and observability. In affected versions if an attacker is able to convince a victim to visit a URL referencing a vulnerable page, arbitrary JavaScript content may be executed within the context of the victim's browser. The user visiting the malicious link must be unauthenticated and the link must be for a page that contains the login button in the menu bar. The url has to be crafted to exploit AngularJS rendering and contain the interpolation binding for AngularJS expressions. AngularJS uses double curly braces for interpolation binding: {{ }} ex: {{constructor.constructor(‘alert(1)’)()}}. When the user follows the link and the page renders, the login button will contain the original link with a query parameter to force a redirect to the login page. The URL is not validated and the AngularJS rendering engine will execute the JavaScript expression contained in the URL. Users are advised to upgrade as soon as possible. If for some reason you cannot upgrade, you can use a reverse proxy or similar to block access to block the literal string {{ in the path.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/grafana/grafana/commit/31b78d51c693d828720a5b285107a50e6024c912; https://github.com/grafana/grafana/commit/3cb5214fa45eb5a571fd70d6c6edf0d729983f82; https://github.com/grafana/grafana/commit/fb85ed691290d211a5baa44d9a641ab137f0de88
CVE: CVE-2021-43140
Published: 2021-11-03
Description: SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/164968/Simple-Subscription-Website-1.0-SQL-Injection.html; https://github.com/Dir0x/CVE-2021-43140; https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-43140
CVE: CVE-2021-43141
Published: 2021-11-03
Description: Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in plan_application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Dir0x/CVE-2021-43141; https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-43141; https://streamable.com/8gydfs
CVE: CVE-2020-28416
Published: 2021-11-03
Description: HP has identified a security vulnerability with the I.R.I.S. OCR (Optical Character Recognition) software available with HP PageWide and OfficeJet printer software installations that could potentially allow unauthorized local code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.hp.com/us-en/document/c07051163; https://support.hp.com/us-en/document/c07051163
CVE: CVE-2020-6931
Published: 2021-11-03
Description: HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege.
CVSS Score: 7.8 (HIGH)
References: https://support.hp.com/us-en/document/c06982375; https://support.hp.com/us-en/document/c06982375
CVE: CVE-2021-22960
Published: 2021-11-03
Description: The parse function in llhttp < 2.1.4 and < 6.0.6. ignores chunk extensions when parsing the body of chunked requests. This leads to HTTP Request Smuggling (HRS) under certain conditions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-444, CWE-444
References: https://hackerone.com/reports/1238099; https://www.debian.org/security/2022/dsa-5170; https://www.oracle.com/security-alerts/cpujan2022.html
CVE: CVE-2021-33800
Published: 2021-11-03
Description: In Druid 1.2.3, visiting the path with parameter in a certain function can lead to directory traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://security.alibaba.com/announcement/announcement?id=214; https://security.alibaba.com/announcement/announcement?id=214
CVE: CVE-2021-35053
Published: 2021-11-03
Description: Possible system denial of service in case of arbitrary changing Firefox browser parameters. An attacker could change specific Firefox browser parameters file in a certain way and then reboot the system to make the system unbootable.
CVSS Score: 7.5 (HIGH)
References: https://support.kaspersky.com/general/vulnerability.aspx?el=12430#01112021; https://www.zerodayinitiative.com/advisories/ZDI-21-1280/; https://www.zerodayinitiative.com/advisories/ZDI-22-431/
CVE: CVE-2021-38403
Published: 2021-11-03
Description: Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter supplier of the API maintenance, which may allow an attacker to remotely execute code.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02; https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02
CVE: CVE-2021-38407
Published: 2021-11-03
Description: Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter name of the API devices, which may allow an attacker to remotely execute code.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02; https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02
CVE: CVE-2021-38411
Published: 2021-11-03
Description: Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter deviceName of the API modbusWriter-Reader, which may allow an attacker to remotely execute code.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02; https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02
CVE: CVE-2021-38416
Published: 2021-11-03
Description: Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow an attacker to use DLL hijacking and takeover the system where the software is installed.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02; https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02
CVE: CVE-2021-38418
Published: 2021-11-03
Description: Delta Electronics DIALink versions 1.2.4.0 and prior runs by default on HTTP, which may allow an attacker to be positioned between the traffic and perform a machine-in-the-middle attack to access information without authorization.
CVSS Score: 8.8 (HIGH)
CWE: CWE-319
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02; https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02
CVE: CVE-2021-38420
Published: 2021-11-03
Description: Delta Electronics DIALink versions 1.2.4.0 and prior default permissions give extensive permissions to low-privileged user accounts, which may allow an attacker to modify the installation directory and upload malicious files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-276
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02; https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02
CVE: CVE-2021-38422
Published: 2021-11-03
Description: Delta Electronics DIALink versions 1.2.4.0 and prior stores sensitive information in cleartext, which may allow an attacker to have extensive access to the application directory and escalate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-312
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02; https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02
CVE: CVE-2021-38424
Published: 2021-11-03
Description: The tag interface of Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to an attacker injecting formulas into the tag data. Those formulas may then be executed when it is opened with a spreadsheet application.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1236
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02; https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02
CVE: CVE-2021-38428
Published: 2021-11-03
Description: Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter name of the API schedule, which may allow an attacker to remotely execute code.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02; https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02
CVE: CVE-2021-38488
Published: 2021-11-03
Description: Delta Electronics DIALink versions 1.2.4.0 and prior is vulnerable to cross-site scripting because an authenticated attacker can inject arbitrary JavaScript code into the parameter comment of the API events, which may allow an attacker to remotely execute code.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02; https://us-cert.cisa.gov/ics/advisories/icsa-21-294-02
CVE: CVE-2021-41492
Published: 2021-11-03
Description: Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System (POS) 1.0 via the (1) Product Code in the pos page in cashiering. (2) id parameter in manage_products and the (3) t paramater in actions.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://3xpl017.blogspot.com/2021/09/multiple-sql-injections-in.html; https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-41492; https://www.nu11secur1ty.com/2021/12/cve-2021-41492.html
CVE: CVE-2021-42772
Published: 2021-11-03
Description: Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, have a buffer overflow vulnerability in the remote GetDumpFile command that could allow a user to attempt various attacks. In non-secure mode, the user is unauthenticated
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://docs.broadcom.com/doc/elx_HBAManager-Lin-RN12811-101.pdf; https://docs.broadcom.com/doc/elx_HBAManager-Lin-RN12811-101.pdf
CVE: CVE-2021-43032
Published: 2021-11-03
Description: In XenForo through 2.2.7, a threat actor with access to the admin panel can create a new Advertisement via the Advertising function, and save an XSS payload in the body of the HTML document. This payload will execute globally on the client side.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/SakuraSamuraii/CVE-2021-43032; https://xenforo.com/community/forums/announcements/; https://github.com/SakuraSamuraii/CVE-2021-43032
CVE: CVE-2021-43338
Published: 2021-11-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-43339. Reason: This candidate is a duplicate of CVE-2021-43339. Notes: All CVE users should reference CVE-2021-43339 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2021-43339
Published: 2021-11-03
Description: In Ericsson Network Location before 2021-07-31, it is possible for an authenticated attacker to inject commands via file_name in the export functionality. For example, a new admin user could be created.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://pentest.com.tr/blog/RCE-via-Meow-Variant-along-with-an-Example-0day-PacketHackingVillage-Defcon29.html; https://www.exploit-db.com/exploits/50468; https://www.exploit-db.com/exploits/50469
CVE: CVE-2021-41562
Published: 2021-11-03
Description: A vulnerability in Snow Snow Agent for Windows allows a non-admin user to cause arbitrary deletion of files. This issue affects: Snow Snow Agent for Windows version 5.0.0 to 6.7.1 on Windows.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-64
References: https://community.snowsoftware.com/s/group/0F91r000000QUhPCAW/news-updates; https://community.snowsoftware.com/s/group/0F91r000000QUhPCAW/news-updates
CVE: CVE-2020-25367
Published: 2021-11-04
Description: A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the Captcha field to Login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://d-link.com; https://github.com/sek1th/iot/blob/master/dir823g_3.md; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-34594
Published: 2021-11-04
Description: TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.0.194 are prone to a relative path traversal that allow administrators to create or delete any files on the system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-23, CWE-22
References: https://cert.vde.com/en/advisories/VDE-2021-051/; https://cert.vde.com/en/advisories/VDE-2021-051/
CVE: CVE-2021-34597
Published: 2021-11-04
Description: Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://cert.vde.com/en/advisories/VDE-2021-052/; https://cert.vde.com/en/advisories/VDE-2021-052/
CVE: CVE-2020-25366
Published: 2021-11-04
Description: An issue in the component /cgi-bin/upload_firmware.cgi of D-Link DIR-823G REVA1 1.02B05 allows attackers to cause a denial of service (DoS) via unspecified vectors.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-862
References: http://d-link.com; https://github.com/sek1th/iot/blob/master/dir823g_upfw_dos.md; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2020-25368
Published: 2021-11-04
Description: A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the PrivateLogin field to Login.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://d-link.com; https://github.com/sek1th/iot/blob/master/dir-823g_2.md; https://www.dlink.com/en/security-bulletin/
CVE: CVE-2021-42624
Published: 2021-11-04
Description: A local buffer overflow vulnerability exists in the latest version of Miniftpd in ftpproto.c through the tmp variable, where a crafted payload can be sent to the affected function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://github.com/Gabe-commiter/Miniftpd/issues/4; https://github.com/Gabe-commiter/Miniftpd/issues/4
CVE: CVE-2021-1500
Published: 2021-11-04
Description: A vulnerability in the web-based management interface of Cisco Webex Video Mesh could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the URL parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website. Attackers may use this type of vulnerability, known as an open redirect attack, as part of a phishing attack to persuade users to unknowingly visit malicious sites.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmesh-openred-AGNRmf5; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmesh-openred-AGNRmf5
CVE: CVE-2021-34701
Published: 2021-11-04
Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), and Cisco Unity Connection could allow an authenticated, remote attacker to access sensitive data on an affected device. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to an affected system. A successful exploit could allow the attacker to access sensitive files on the affected system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-path-trav-dKCvktvO; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-path-trav-dKCvktvO
CVE: CVE-2021-34731
Published: 2021-11-04
Description: A vulnerability in the web-based management interface of Cisco Prime Access Registrar could allow an authenticated, remote attacker to perform a stored cross-site scripting attack on an affected system. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker would need valid administrative credentials. Cisco expects to release software updates that address this vulnerability.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cpar-strd-xss-A4DCVETG; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cpar-strd-xss-A4DCVETG
CVE: CVE-2021-34739
Published: 2021-11-04
Description: A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges.
CVSS Score: 8.1 (HIGH)
CWE: CWE-613, CWE-613
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-switches-tokens-UzwpR4e5; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-switches-tokens-UzwpR4e5
CVE: CVE-2021-34741
Published: 2021-11-04
Description: A vulnerability in the email scanning algorithm of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to perform a denial of service (DoS) attack against an affected device. This vulnerability is due to insufficient input validation of incoming emails. An attacker could exploit this vulnerability by sending a crafted email through Cisco ESA. A successful exploit could allow the attacker to exhaust all the available CPU resources on an affected device for an extended period of time, preventing other emails from being processed and resulting in a DoS condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770, CWE-770
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-dos-JOm9ETfO; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-dos-JOm9ETfO
CVE: CVE-2021-34773
Published: 2021-11-04
Description: A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the targeted user. These actions could include modifying the device configuration and deleting (but not creating) user accounts.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucm-csrf-xrTkDu3H; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucm-csrf-xrTkDu3H