deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-23031
Published: 2021-09-14
Description: On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, an authenticated user may perform a privilege escalation on the BIG-IP Advanced WAF and ASM Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://support.f5.com/csp/article/K41351250; https://support.f5.com/csp/article/K41351250
CVE: CVE-2021-23036
Published: 2021-09-14
Description: On version 16.0.x before 16.0.1.2, when a BIG-IP ASM and DataSafe profile are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://support.f5.com/csp/article/K05043394; https://support.f5.com/csp/article/K05043394
CVE: CVE-2021-23025
Published: 2021-09-14
Description: On version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all versions of 12.1.x and 11.6.x, an authenticated remote command execution vulnerability exists in the BIG-IP Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://support.f5.com/csp/article/K55543151; https://support.f5.com/csp/article/K55543151
CVE: CVE-2021-23028
Published: 2021-09-14
Description: On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, and 13.1.x before 13.1.4, when JSON content profiles are configured for URLs as part of an F5 Advanced Web Application Firewall (WAF)/BIG-IP ASM security policy and applied to a virtual server, undisclosed requests may cause the BIG-IP ASM bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://support.f5.com/csp/article/K00602225; https://support.f5.com/csp/article/K00602225
CVE: CVE-2021-23030
Published: 2021-09-14
Description: On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://support.f5.com/csp/article/K42051445; https://support.f5.com/csp/article/K42051445
CVE: CVE-2021-23026
Published: 2021-09-14
Description: BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x and all versions of BIG-IQ 8.x, 7.x, and 6.x are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://support.f5.com/csp/article/K53854428; https://support.f5.com/csp/article/K53854428
CVE: CVE-2021-23027
Published: 2021-09-14
Description: On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, and 14.1.x before 14.1.4.3, a DOM based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://support.f5.com/csp/article/K24301698; https://support.f5.com/csp/article/K24301698
CVE: CVE-2021-23029
Published: 2021-09-14
Description: On version 16.0.x before 16.0.1.2, insufficient permission checks may allow authenticated users with guest privileges to perform Server-Side Request Forgery (SSRF) attacks through F5 Advanced Web Application Firewall (WAF) and the BIG-IP ASM Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 8.8 (HIGH)
CWE: CWE-918, CWE-918
References: https://support.f5.com/csp/article/K52420610; https://support.f5.com/csp/article/K52420610
CVE: CVE-2021-3706
Published: 2021-09-15
Description: adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag
CVSS Score: 7.5 (HIGH)
CWE: CWE-1004, CWE-732
References: https://github.com/pi-hole/adminlte/commit/cf8602eedd4a31eadb72372fc878c12d342f8600; https://huntr.dev/bounties/ac7fd77b-b31b-4d02-aebd-f89ecbae3fce; https://github.com/pi-hole/adminlte/commit/cf8602eedd4a31eadb72372fc878c12d342f8600
CVE: CVE-2021-3751
Published: 2021-09-15
Description: libmobi is vulnerable to Out-of-bounds Write
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/bfabiszewski/libmobi/commit/ab5bf0e37e540eac682a14e628853b918626e72b; https://huntr.dev/bounties/fcb4383c-bc27-4b89-bfce-6b041f0cb769; https://github.com/bfabiszewski/libmobi/commit/ab5bf0e37e540eac682a14e628853b918626e72b
CVE: CVE-2021-3777
Published: 2021-09-15
Description: nodejs-tmpl is vulnerable to Inefficient Regular Expression Complexity
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/daaku/nodejs-tmpl/commit/4c654e4d1542f329ed561fd95ccd80f30c6872d6; https://huntr.dev/bounties/a07b547a-f457-41c9-9d89-ee48bee8a4df; https://github.com/daaku/nodejs-tmpl/commit/4c654e4d1542f329ed561fd95ccd80f30c6872d6
CVE: CVE-2021-3778
Published: 2021-09-15
Description: vim is vulnerable to Heap-based Buffer Overflow
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: http://www.openwall.com/lists/oss-security/2021/10/01/1; https://github.com/vim/vim/commit/65b605665997fad54ef39a93199e305af2fe4d7f; https://huntr.dev/bounties/d9c17308-2c99-4f9f-a706-f7f72c24c273
CVE: CVE-2020-35340
Published: 2021-09-15
Description: A local file inclusion vulnerability in ExpertPDF 9.5.0 through 14.1.0 allows attackers to read the file contents from files that the running ExpertPDF process has access to read.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://optionalctf.com/cve-2020-35340-local-file-inclusion-in-expertpdf-9-5-0-14-1-0/; https://optionalctf.com/cve-2020-35340-local-file-inclusion-in-expertpdf-9-5-0-14-1-0/
CVE: CVE-2021-22147
Published: 2021-09-15
Description: Elasticsearch before 7.14.0 did not apply document and field level security to searchable snapshots. This could lead to an authenticated user gaining access to information that they are unauthorized to view.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-732, CWE-862
References: https://discuss.elastic.co/t/elastic-stack-7-14-0-security-update/280344; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.elastic.co/community/security/
CVE: CVE-2021-22148
Published: 2021-09-15
Description: Elastic Enterprise Search App Search versions before 7.14.0 was vulnerable to an issue where API keys were not bound to the same engines as their creator. This could lead to a less privileged user gaining access to unauthorized engines.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://discuss.elastic.co/t/elastic-stack-7-14-0-security-update/280344; https://www.elastic.co/community/security/; https://discuss.elastic.co/t/elastic-stack-7-14-0-security-update/280344
CVE: CVE-2021-22149
Published: 2021-09-15
Description: Elastic Enterprise Search App Search versions before 7.14.0 are vulnerable to an issue where API keys were missing authorization via an alternate route. Using this vulnerability, an authenticated attacker could utilize API keys belonging to higher privileged users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732, CWE-862
References: https://discuss.elastic.co/t/elastic-stack-7-14-0-security-update/280344; https://www.elastic.co/community/security/; https://discuss.elastic.co/t/elastic-stack-7-14-0-security-update/280344
CVE: CVE-2021-26434
Published: 2021-09-15
Description: Visual Studio Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26434; https://www.zerodayinitiative.com/advisories/ZDI-21-1077/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26434
CVE: CVE-2021-26435
Published: 2021-09-15
Description: Windows Scripting Engine Memory Corruption Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26435; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26435
CVE: CVE-2021-26437
Published: 2021-09-15
Description: Visual Studio Code Spoofing Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26437; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26437
CVE: CVE-2021-36952
Published: 2021-09-15
Description: Visual Studio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36952; https://www.zerodayinitiative.com/advisories/ZDI-21-1076/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36952
CVE: CVE-2021-36954
Published: 2021-09-15
Description: Windows Bind Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36954; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36954
CVE: CVE-2021-36955
Published: 2021-09-15
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36955; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36955; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-36955
CVE: CVE-2021-36956
Published: 2021-09-15
Description: Azure Sphere Information Disclosure Vulnerability
CVSS Score: 4.4 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36956; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36956
CVE: CVE-2021-36959
Published: 2021-09-15
Description: Windows Authenticode Spoofing Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36959; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36959
CVE: CVE-2021-36960
Published: 2021-09-15
Description: Windows SMB Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36960; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36960
CVE: CVE-2021-36961
Published: 2021-09-15
Description: Windows Installer Denial of Service Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36961; https://www.zerodayinitiative.com/advisories/ZDI-21-1078/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36961
CVE: CVE-2021-36962
Published: 2021-09-15
Description: Windows Installer Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36962; https://www.zerodayinitiative.com/advisories/ZDI-21-1103/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36962
CVE: CVE-2021-36963
Published: 2021-09-15
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36963; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36963
CVE: CVE-2021-36964
Published: 2021-09-15
Description: Windows Event Tracing Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36964; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36964
CVE: CVE-2021-36965
Published: 2021-09-15
Description: Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36965; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36965
CVE: CVE-2021-36966
Published: 2021-09-15
Description: Windows Subsystem for Linux Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36966; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36966
CVE: CVE-2021-36967
Published: 2021-09-15
Description: Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36967; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36967
CVE: CVE-2021-36968
Published: 2021-09-15
Description: Windows DNS Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36968; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36968
CVE: CVE-2021-36969
Published: 2021-09-15
Description: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36969; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36969
CVE: CVE-2021-36972
Published: 2021-09-15
Description: Windows SMB Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36972; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36972
CVE: CVE-2021-36973
Published: 2021-09-15
Description: Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36973; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36973
CVE: CVE-2021-36974
Published: 2021-09-15
Description: Windows SMB Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36974; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36974
CVE: CVE-2021-36975
Published: 2021-09-15
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36975; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36975
CVE: CVE-2021-38624
Published: 2021-09-15
Description: Windows Key Storage Provider Security Feature Bypass Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38624; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38624
CVE: CVE-2021-38625
Published: 2021-09-15
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38625; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38625
CVE: CVE-2021-38626
Published: 2021-09-15
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38626; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38626
CVE: CVE-2021-38628
Published: 2021-09-15
Description: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38628; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38628
CVE: CVE-2021-38629
Published: 2021-09-15
Description: Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38629; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38629
CVE: CVE-2021-38630
Published: 2021-09-15
Description: Windows Event Tracing Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38630; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38630
CVE: CVE-2021-38632
Published: 2021-09-15
Description: BitLocker Security Feature Bypass Vulnerability
CVSS Score: 5.7 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38632; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38632
CVE: CVE-2021-38633
Published: 2021-09-15
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38633; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38633
CVE: CVE-2021-38634
Published: 2021-09-15
Description: Microsoft Windows Update Client Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38634; https://www.zerodayinitiative.com/advisories/ZDI-21-1075/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38634
CVE: CVE-2021-38635
Published: 2021-09-15
Description: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38635; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38635
CVE: CVE-2021-38636
Published: 2021-09-15
Description: Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38636; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38636
CVE: CVE-2021-38637
Published: 2021-09-15
Description: Windows Storage Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38637; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38637
CVE: CVE-2021-38638
Published: 2021-09-15
Description: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38638; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38638
CVE: CVE-2021-38639
Published: 2021-09-15
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38639; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38639
CVE: CVE-2021-38644
Published: 2021-09-15
Description: Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38644; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38644
CVE: CVE-2021-38645
Published: 2021-09-15
Description: Open Management Infrastructure Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38645; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38645; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38645
CVE: CVE-2021-38646
Published: 2021-09-15
Description: Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38646; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38646; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38646
CVE: CVE-2021-38647
Published: 2021-09-15
Description: Open Management Infrastructure Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
References: http://packetstormsecurity.com/files/164694/Microsoft-OMI-Management-Interface-Authentication-Bypass.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38647; http://packetstormsecurity.com/files/164694/Microsoft-OMI-Management-Interface-Authentication-Bypass.html
CVE: CVE-2021-38648
Published: 2021-09-15
Description: Open Management Infrastructure Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: http://packetstormsecurity.com/files/164925/Microsoft-OMI-Management-Interface-Authentication-Bypass.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38648; http://packetstormsecurity.com/files/164925/Microsoft-OMI-Management-Interface-Authentication-Bypass.html
CVE: CVE-2021-38649
Published: 2021-09-15
Description: Open Management Infrastructure Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38649; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38649; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38649
CVE: CVE-2021-38650
Published: 2021-09-15
Description: Microsoft Office Spoofing Vulnerability
CVSS Score: 7.6 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38650; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38650
CVE: CVE-2021-38651
Published: 2021-09-15
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 7.6 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38651; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38651
CVE: CVE-2021-38652
Published: 2021-09-15
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 7.6 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38652; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38652
CVE: CVE-2021-38653
Published: 2021-09-15
Description: Microsoft Office Visio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38653; https://www.zerodayinitiative.com/advisories/ZDI-21-1079/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38653
CVE: CVE-2021-38654
Published: 2021-09-15
Description: Microsoft Office Visio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38654; https://www.zerodayinitiative.com/advisories/ZDI-21-1081/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38654