deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-45709
Published: 2021-12-27
Description: An issue was discovered in the crypto2 crate through 2021-10-08 for Rust. During Chacha20 encryption and decryption, an unaligned read of a u32 may occur.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/crypto2/RUSTSEC-2021-0121.md; https://rustsec.org/advisories/RUSTSEC-2021-0121.html; https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/crypto2/RUSTSEC-2021-0121.md
CVE: CVE-2021-45710
Published: 2021-12-27
Description: An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption.
CVSS Score: 8.1 (HIGH)
CWE: CWE-362
References: https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tokio/RUSTSEC-2021-0124.md; https://rustsec.org/advisories/RUSTSEC-2021-0124.html; https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tokio/RUSTSEC-2021-0124.md
CVE: CVE-2021-45711
Published: 2021-12-27
Description: An issue was discovered in the simple_asn1 crate 0.6.0 before 0.6.1 for Rust. There is a panic if UTCTime data, supplied by a remote attacker, has a second character greater than 0x7f.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/simple_asn1/RUSTSEC-2021-0125.md; https://rustsec.org/advisories/RUSTSEC-2021-0125.html; https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/simple_asn1/RUSTSEC-2021-0125.md
CVE: CVE-2021-24753
Published: 2021-12-27
Description: The Rich Reviews by Starfish WordPress plugin before 1.9.6 does not properly validate the orderby GET parameter of the pending reviews page before using it in a SQL statement, leading to an authenticated SQL injection issue
CVSS Score: 7.2 (HIGH)
CWE: CWE-89, CWE-89
References: https://plugins.trac.wordpress.org/changeset/2624882/; https://wpscan.com/vulnerability/be7b102f-3982-46bd-a79c-203498f7c820; https://plugins.trac.wordpress.org/changeset/2624882/
CVE: CVE-2021-24797
Published: 2021-12-27
Description: The Tickera WordPress plugin before 3.4.8.3 does not properly sanitise and escape the Name fields of booked Events before outputting them in the Orders admin dashboard, which could allow unauthenticated users to perform Cross-Site Scripting attacks against admins.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/0eb07cc8-8a19-4e01-ab90[PII_REDACTED]53; https://wpscan.com/vulnerability/0eb07cc8-8a19-4e01-ab90[PII_REDACTED]53
CVE: CVE-2021-24902
Published: 2021-12-27
Description: The Typebot | Build beautiful conversational forms WordPress plugin before 1.4.3 does not sanitise and escape the Publish ID setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/2bde2030-2dfe-4dd3-afc1-36f7031a91ea; https://wpscan.com/vulnerability/2bde2030-2dfe-4dd3-afc1-36f7031a91ea
CVE: CVE-2021-24967
Published: 2021-12-27
Description: The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.6.4 does not sanitise and escape some lead values, which could allow unauthenticated users to perform Cross-Site Scripting attacks against logged in admin viewing the inserted Leads
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/4e[PII_REDACTED]-42de-952e-a3bf51393a74; https://wpscan.com/vulnerability/4e[PII_REDACTED]-42de-952e-a3bf51393a74
CVE: CVE-2021-24969
Published: 2021-12-27
Description: The WordPress Download Manager WordPress plugin before 3.2.22 does not sanitise and escape Template data before outputting it in various pages (such as admin dashboard and frontend). Due to the lack of authorisation and CSRF checks in the wpdm_save_template AJAX action, any authenticated users such as subscriber is able to call it and perform Cross-Site Scripting attacks
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/01144c50-54ca-44d9-9ce8-bf4f659114ee; https://wpscan.com/vulnerability/01144c50-54ca-44d9-9ce8-bf4f659114ee
CVE: CVE-2021-24979
Published: 2021-12-27
Description: The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/2632369/paid-memberships-pro/tags/2.6.6/adminpages/discountcodes.php; https://wpscan.com/vulnerability/fc011990-4ec1-4553-901d-4ff1f482cb79; https://plugins.trac.wordpress.org/changeset/2632369/paid-memberships-pro/tags/2.6.6/adminpages/discountcodes.php
CVE: CVE-2021-24980
Published: 2021-12-27
Description: The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwolle_gb_user_email parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in an admin page
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/e50bcb39-9a01-433f-81b3-fd4018672b85; https://wpscan.com/vulnerability/e50bcb39-9a01-433f-81b3-fd4018672b85
CVE: CVE-2021-24984
Published: 2021-12-27
Description: The WPFront User Role Editor WordPress plugin before 3.2.1.11184 does not sanitise and escape the changes-saved parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/96bb2fba-4b18-4c29-8344-3ba4d2f06a19; https://wpscan.com/vulnerability/96bb2fba-4b18-4c29-8344-3ba4d2f06a19
CVE: CVE-2021-24988
Published: 2021-12-27
Description: The WP RSS Aggregator WordPress plugin before 4.19.3 does not sanitise and escape data before outputting it in the System Info admin dashboard, which could lead to a Stored XSS issue due to the wprss_dismiss_addon_notice AJAX action missing authorisation and CSRF checks, allowing any authenticated users, such as subscriber to call it and set a malicious payload in the addon parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-352, CWE-862
References: https://wpscan.com/vulnerability/0742483b-6314-451b-a63a-536fd1e14845; https://wpscan.com/vulnerability/0742483b-6314-451b-a63a-536fd1e14845
CVE: CVE-2021-24992
Published: 2021-12-27
Description: The Smart Floating / Sticky Buttons WordPress plugin before 2.5.5 does not sanitise and escape some parameter before outputting them in attributes and page, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://wpscan.com/vulnerability/db0b9480-2ff4-423c-a745-68e983ffa12b; https://wpscan.com/vulnerability/db0b9480-2ff4-423c-a745-68e983ffa12b
CVE: CVE-2021-24997
Published: 2021-12-27
Description: The WP Guppy WordPress plugin before 1.3 does not have any authorisation in some of the REST API endpoints, allowing any user to call them and could lead to sensitive information disclosure, such as usernames and chats between users, as well as be able to send messages as an arbitrary user
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://github.com/Keyvanhardani/WP-Guppy-A-live-chat-WP-JSON-API-Sensitive-Information-Disclosure; https://wpscan.com/vulnerability/747e6c7e-a167-4d82-b6e6-9e8613f0e900; https://github.com/Keyvanhardani/WP-Guppy-A-live-chat-WP-JSON-API-Sensitive-Information-Disclosure
CVE: CVE-2021-24998
Published: 2021-12-27
Description: The Simple JWT Login WordPress plugin before 3.3.0 can be used to create new WordPress user accounts with a randomly generated password. The password is generated using the str_shuffle  PHP function that "does not generate cryptographically secure values, and should not be used for cryptographic purposes" according to PHP's documentation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: https://plugins.trac.wordpress.org/changeset/2613782; https://wpscan.com/vulnerability/1cca404e-766a-43ab-b41f-77d6a3b282fb; https://plugins.trac.wordpress.org/changeset/2613782
CVE: CVE-2021-4173
Published: 2021-12-27
Description: vim is vulnerable to Use After Free
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://seclists.org/fulldisclosure/2022/Jul/14; http://seclists.org/fulldisclosure/2022/Mar/29; http://seclists.org/fulldisclosure/2022/May/35
CVE: CVE-2021-45335
Published: 2021-12-27
Description: Sandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to control the outcome of scans, and therefore evade detection or delete arbitrary system files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-276
References: https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST3%20%26%20CVE-2021-AVST4%20%26%20CVE-2021-AVST5; https://www.avast.com/hacker-hall-of-fame/en/researcher-david-eade-reports-antitrack-bug-to-avast-0; https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST3%20%26%20CVE-2021-AVST4%20%26%20CVE-2021-AVST5
CVE: CVE-2021-45336
Published: 2021-12-27
Description: Privilege escalation vulnerability in the Sandbox component of Avast Antivirus prior to 20.4 allows a local sandboxed code to gain elevated privileges by using system IPC interfaces which could lead to exit the sandbox and acquire SYSTEM privileges.
CVSS Score: 8.8 (HIGH)
References: https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST3%20%26%20CVE-2021-AVST4%20%26%20CVE-2021-AVST5; https://www.avast.com/hacker-hall-of-fame/en/researcher-david-eade-reports-antitrack-bug-to-avast-0; https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST3%20%26%20CVE-2021-AVST4%20%26%20CVE-2021-AVST5
CVE: CVE-2021-45337
Published: 2021-12-27
Description: Privilege escalation vulnerability in the Self-Defense driver of Avast Antivirus prior to 20.8 allows a local user with SYSTEM privileges to gain elevated privileges by "hollowing" process wsc_proxy.exe which could lead to acquire antimalware (AM-PPL) protection.
CVSS Score: 8.8 (HIGH)
References: https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST3%20%26%20CVE-2021-AVST4%20%26%20CVE-2021-AVST5; https://www.avast.com/hacker-hall-of-fame/en/researcher-david-eade-reports-antitrack-bug-to-avast-0; https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST3%20%26%20CVE-2021-AVST4%20%26%20CVE-2021-AVST5
CVE: CVE-2021-45338
Published: 2021-12-27
Description: Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily powerful internal methods of the main antivirus service which could lead to the (1) arbitrary file delete, (2) write and (3) reset security.
CVSS Score: 7.8 (HIGH)
References: https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST1.1; https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST1.2; https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST1.3
CVE: CVE-2021-45339
Published: 2021-12-27
Description: Privilege escalation vulnerability in Avast Antivirus prior to 20.4 allows a local user to gain elevated privileges by "hollowing" trusted process which could lead to the bypassing of Avast self-defense.
CVSS Score: 7.8 (HIGH)
CWE: CWE-863
References: https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST0; https://www.avast.com/hacker-hall-of-fame/en/researcher-david-eade-reports-antitrack-bug-to-avast-0; https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST0
CVE: CVE-2021-45232
Published: 2021-12-27
Description: In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework `droplet` on the basis of framework `gin`, all APIs and authentication middleware are developed based on framework `droplet`, but some API directly use the interface of framework `gin` thus bypassing the authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: http://www.openwall.com/lists/oss-security/2021/12/27/1; https://lists.apache.org/thread/979qbl6vlm8269fopfyygnxofgqyn6k5; http://www.openwall.com/lists/oss-security/2021/12/27/1
CVE: CVE-2021-38961
Published: 2021-12-27
Description: IBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212049.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/212049; https://www.ibm.com/support/pages/node/6536720; https://exchange.xforce.ibmcloud.com/vulnerabilities/212049
CVE: CVE-2021-43845
Published: 2021-12-27
Description: PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA and RTCP XR. A malicious actor can send a RTCP XR message with an invalid packet size.
CVSS Score: 8.2 (HIGH)
CWE: CWE-125, CWE-125
References: https://github.com/pjsip/pjproject/commit/f74c1fc22b760d2a24369aa72c74c4a9ab985859; https://github.com/pjsip/pjproject/pull/2924; https://github.com/pjsip/pjproject/security/advisories/GHSA-r374-qrwv-86hh
CVE: CVE-2021-43855
Published: 2021-12-27
Description: Wiki.js is a wiki app built on node.js. Wiki.js 2.5.263 and earlier is vulnerable to stored cross-site scripting through a SVG file upload made via a custom request with a fake MIME type. By creating a crafted SVG file, a malicious Wiki.js user may stage a stored cross-site scripting attack. This allows the attacker to execute malicious JavaScript when the SVG is viewed directly by other users. Scripts do not execute when loaded inside a page via normal `<img>` tags. The malicious SVG can only be uploaded by crafting a custom request to the server with a fake MIME type. A patch in version 2.5.264 fixes this vulnerability by adding an additional file extension verification check to the optional (enabled by default) SVG sanitization step to all file uploads that match the SVG mime type. As a workaround, disable file upload for all non-trusted users.
CVSS Score: 8.2 (HIGH)
CWE: CWE-79
References: https://github.com/Requarks/wiki/commit/57b56d3a5b9c00358814e76f3ee5b4bb353ad62f; https://github.com/Requarks/wiki/releases/tag/2.5.264; https://github.com/Requarks/wiki/security/advisories/GHSA-4893-pj5w-3hq9
CVE: CVE-2021-43856
Published: 2021-12-27
Description: Wiki.js is a wiki app built on Node.js. Wiki.js 2.5.263 and earlier is vulnerable to stored cross-site scripting through non-image file uploads for file types that can be viewed directly inline in the browser. By creating a malicious file which can execute inline JS when viewed in the browser (e.g. XML files), a malicious Wiki.js user may stage a stored cross-site scripting attack. This allows the attacker to execute malicious JavaScript when the file is viewed directly by other users. The file must be opened directly by the user and will not trigger directly in a normal Wiki.js page. A patch in version 2.5.264 fixes this vulnerability by adding an optional (enabled by default) force download flag to all non-image file types, preventing the file from being viewed inline in the browser. As a workaround, disable file upload for all non-trusted users. --- Thanks to @Haxatron for reporting this vulnerability. Initially reported via https://huntr.dev/bounties/266bff09-00d9-43ca-a4bb-bb540642811f/
CVSS Score: 8.2 (HIGH)
CWE: CWE-79, CWE-79
References: https://github.com/Requarks/wiki/commit/79bdd4409316adf649806de3e22352297f85cee0; https://github.com/Requarks/wiki/releases/tag/2.5.264; https://github.com/Requarks/wiki/security/advisories/GHSA-rhpf-929m-7fm2
CVE: CVE-2021-21750
Published: 2021-12-27
Description: ZTE BigVideo Analysis product has a privilege escalation vulnerability. Due to improper management of the timed task modification privilege, an attacker with ordinary user permissions could exploit this vulnerability to gain unauthorized access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1021884; https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1021884
CVE: CVE-2021-21751
Published: 2021-12-27
Description: ZTE BigVideo analysis product has an input verification vulnerability. Due to the inconsistency between the front and back verifications when configuring the large screen page, an attacker with high privileges could exploit this vulnerability to tamper with the URL and cause service exception.
CVSS Score: 8.1 (HIGH)
References: https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1021884; https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1021884
CVE: CVE-2021-23244
Published: 2021-12-27
Description: ColorOS pregrant dangerous permissions to apps which are listed in a whitelist xml named default-grant-permissions.But some apps in whitelist is not installed, attacker can disguise app with the same package name to obtain dangerous permission.
CVSS Score: 7.8 (HIGH)
References: https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE[PII_REDACTED]353342976; https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE[PII_REDACTED]353342976
CVE: CVE-2021-32993
Published: 2021-12-27
Description: IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
CVSS Score: 8.1 (HIGH)
CWE: CWE-798
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-01; https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-01
CVE: CVE-2021-33017
Published: 2021-12-27
Description: The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel that does not require authentication.
CVSS Score: 8.1 (HIGH)
CWE: CWE-288
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-01; https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-01
CVE: CVE-2021-35232
Published: 2021-12-27
Description: Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web Help Desk host machine allows to execute arbitrary HQL queries against the database and leverage the vulnerability to steal the password hashes of the users or insert arbitrary data into the database.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-798, CWE-798
References: https://support.solarwinds.com/SuccessCenter/s/article/Web-Help-Desk-12-7-7-Hotfix-1-Release-Notes?language=en_US; https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35232; https://support.solarwinds.com/SuccessCenter/s/article/Web-Help-Desk-12-7-7-Hotfix-1-Release-Notes?language=en_US
CVE: CVE-2021-43548
Published: 2021-12-27
Description: Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02; https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02
CVE: CVE-2021-43550
Published: 2021-12-27
Description: The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX (PIC iX) Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-327, CWE-327
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02; https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02
CVE: CVE-2021-43552
Published: 2021-12-27
Description: The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX (PIC iX) Versions B.02, C.02, and C.03.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-321
References: https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02; https://www.cisa.gov/uscert/ics/advisories/icsma-21-322-02
CVE: CVE-2021-43857
Published: 2021-12-27
Description: Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://packetstormsecurity.com/files/165459/Gerapy-0.9.7-Remote-Code-Execution.html; https://github.com/Gerapy/Gerapy/commit/49bcb19be5e0320e7e1535f34fe00f16a3cf3b28; https://github.com/Gerapy/Gerapy/issues/219
CVE: CVE-2021-4161
Published: 2021-12-27
Description: The affected products contain vulnerable firmware, which could allow an attacker to sniff the traffic and decrypt login credential details. This could give an attacker admin rights through the HTTP web server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-319
References: https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01; https://www.cisa.gov/uscert/ics/advisories/icsa-21-357-01
CVE: CVE-2021-45890
Published: 2021-12-27
Description: basic/BasicAuthProvider.java in AuthGuard before 0.9.0 allows authentication via an inactive identifier.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://github.com/AuthGuard/AuthGuard/commit/9783b1143da6576028de23e15a1f198b1f937b82; https://github.com/AuthGuard/AuthGuard/compare/v0.8.0...v0.9.0; https://github.com/AuthGuard/AuthGuard/issues/166
CVE: CVE-2020-20943
Published: 2021-12-27
Description: A Cross-Site Request Forgery (CSRF) in /member/post.php?job=postnew&step=post of Qibosoft v7 allows attackers to force victim users into arbitrarily publishing new articles via a crafted URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://blog.csdn.net/he_and/article/details/102698171; https://blog.csdn.net/he_and/article/details/102698171
CVE: CVE-2020-20944
Published: 2021-12-27
Description: An issue in /admin/index.php?lfj=mysql&action=del of Qibosoft v7 allows attackers to arbitrarily delete files.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: http://www.qibosoft.com/downloadProduction.htm; https://blog.csdn.net/he_and/article/details/102698171; https://cwe.mitre.org/data/definitions/23.html
CVE: CVE-2020-20945
Published: 2021-12-27
Description: A Cross-Site Request Forgery (CSRF) in /admin/index.php?lfj=member&action=editmember of Qibosoft v7 allows attackers to arbitrarily add administrator accounts.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.qibosoft.com/downloadProduction.htm; https://blog.csdn.net/he_and/article/details/102698171; http://www.qibosoft.com/downloadProduction.htm
CVE: CVE-2020-20946
Published: 2021-12-27
Description: Qibosoft v7 contains a stored cross-site scripting (XSS) vulnerability in the component /admin/index.php?lfj=friendlink&action=add.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.qibosoft.com/downloadProduction.htm; https://blog.csdn.net/he_and/article/details/102698171; http://www.qibosoft.com/downloadProduction.htm
CVE: CVE-2020-20948
Published: 2021-12-27
Description: An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: https://github.com/zhangdaiscott/jeecg/issues/50; https://github.com/zhangdaiscott/jeecg/issues/50
CVE: CVE-2021-45895
Published: 2021-12-27
Description: Netgen Tags Bundle 3.4.x before 3.4.11 and 4.0.x before 4.0.15 allows XSS in the Tags Admin interface.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/netgen/TagsBundle/releases/tag/3.4.11; https://github.com/netgen/TagsBundle/releases/tag/4.0.15; https://github.com/netgen/TagsBundle/releases/tag/3.4.11