deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-34714
Published: 2021-09-23
Description: A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software, Cisco IOS XE Software, Cisco IOS XR Software, and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. This vulnerability is due to improper input validation of the UDLD packets. An attacker could exploit this vulnerability by sending specifically crafted UDLD packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The UDLD feature is disabled by default, and the conditions to exploit this vulnerability are strict. An attacker must have full control of a directly connected device. On Cisco IOS XR devices, the impact is limited to the reload of the UDLD process.
CVSS Score: 7.4 (HIGH)
CWE: CWE-20, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-nxos-xr-udld-dos-W5hGHgtQ; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-nxos-xr-udld-dos-W5hGHgtQ
CVE: CVE-2021-34723
Published: 2021-09-23
Description: A vulnerability in a specific CLI command that is run on Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the configuration database of an affected device. This vulnerability is due to insufficient validation of specific CLI command parameters. An attacker could exploit this vulnerability by issuing that command with specific parameters. A successful exploit could allow the attacker to overwrite the content of the configuration database and gain root-level access to an affected device.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-668, CWE-668
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxesdwan-arbfileov-MVOF3ZZn; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxesdwan-arbfileov-MVOF3ZZn
CVE: CVE-2021-34724
Published: 2021-09-23
Description: A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated, local attacker to elevate privileges and execute arbitrary code on the underlying operating system as the root user. An attacker must be authenticated on an affected device as a PRIV15 user. This vulnerability is due to insufficient file system protection and the presence of a sensitive file in the bootflash directory on an affected device. An attacker could exploit this vulnerability by overwriting an installer file stored in the bootflash directory with arbitrary commands that can be executed with root-level privileges. A successful exploit could allow the attacker to read and write changes to the configuration database on the affected device.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-284
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxesdwan-privesc-VP4FG3jD; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxesdwan-privesc-VP4FG3jD
CVE: CVE-2021-34725
Published: 2021-09-23
Description: A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An attacker could exploit this vulnerability by authenticating to an affected device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to execute commands with root-level privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-privesc-KSUg7QSS; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-privesc-KSUg7QSS
CVE: CVE-2021-34726
Published: 2021-09-23
Description: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root-level privileges on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation on certain CLI commands. An attacker could exploit this vulnerability by authenticating to an affected device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to execute commands with root-level privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-cmdinjec-znUYTuC; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-maapi-cmdinjec-znUYTuC
CVE: CVE-2021-34727
Published: 2021-09-23
Description: A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to insufficient bounds checking when an affected device processes traffic. An attacker could exploit this vulnerability by sending crafted traffic to the device. A successful exploit could allow the attacker to cause a buffer overflow and possibly execute arbitrary commands with root-level privileges, or cause the device to reload, which could result in a denial of service condition.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxesdwan-rbuffover-vE2OB6tp; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxesdwan-rbuffover-vE2OB6tp
CVE: CVE-2021-34729
Published: 2021-09-23
Description: A vulnerability in the CLI of Cisco IOS XE SD-WAN Software and Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input in the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands with elevated privileges on the underlying operating system. An attacker would need valid user credentials to exploit this vulnerability.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-77, CWE-78
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ioxesdwan-clicmdinj-7bYX5k3; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ioxesdwan-clicmdinj-7bYX5k3
CVE: CVE-2021-34740
Published: 2021-09-23
Description: A vulnerability in the WLAN Control Protocol (WCP) implementation for Cisco Aironet Access Point (AP) software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to incorrect error handling when an affected device receives an unexpected 802.11 frame. An attacker could exploit this vulnerability by sending certain 802.11 frames over the wireless network to an interface on an affected AP. A successful exploit could allow the attacker to cause a packet buffer leak. This could eventually result in buffer allocation failures, which would trigger a reload of the affected device.
CVSS Score: 7.4 (HIGH)
CWE: CWE-401, CWE-401
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-wpa-pktleak-dos-uSTyGrL; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-airo-wpa-pktleak-dos-uSTyGrL
CVE: CVE-2021-34767
Published: 2021-09-23
Description: A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a Layer 2 (L2) loop in a configured VLAN, resulting in a denial of service (DoS) condition for that VLAN. The vulnerability is due to a logic error when processing specific link-local IPv6 traffic. An attacker could exploit this vulnerability by sending a crafted IPv6 packet that would flow inbound through the wired interface of an affected device. A successful exploit could allow the attacker to cause traffic drops in the affected VLAN, thus triggering the DoS condition.
CVSS Score: 7.4 (HIGH)
CWE: CWE-670, CWE-670
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-ipv6-dos-NMYeCnZv; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-ipv6-dos-NMYeCnZv
CVE: CVE-2021-34768
Published: 2021-09-23
Description: Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. These vulnerabilities are due to insufficient validation of CAPWAP packets. An attacker could exploit the vulnerabilities by sending a malformed CAPWAP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition.
CVSS Score: 8.6 (HIGH)
CWE: CWE-415, CWE-415
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-capwap-dos-gmNjdKOY; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-capwap-dos-gmNjdKOY
CVE: CVE-2021-34769
Published: 2021-09-23
Description: Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. These vulnerabilities are due to insufficient validation of CAPWAP packets. An attacker could exploit the vulnerabilities by sending a malformed CAPWAP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition.
CVSS Score: 8.6 (HIGH)
CWE: CWE-415, CWE-415
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-capwap-dos-gmNjdKOY; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-capwap-dos-gmNjdKOY
CVE: CVE-2021-34770
Published: 2021-09-23
Description: A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to execute arbitrary code with administrative privileges or cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a logic error that occurs during the validation of CAPWAP packets. An attacker could exploit this vulnerability by sending a crafted CAPWAP packet to an affected device. A successful exploit could allow the attacker to execute arbitrary code with administrative privileges or cause the affected device to crash and reload, resulting in a DoS condition.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-122, CWE-787
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-capwap-rce-LYgj8Kf; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-capwap-rce-LYgj8Kf
CVE: CVE-2021-33035
Published: 2021-09-23
Description: Apache OpenOffice opens dBase/DBF documents and shows the contents as spreadsheets. DBF are database files with data organized in fields. When reading DBF data the size of certain fields is not checked: the data is just copied into local variables. A carefully crafted document could overflow the allocated space, leading to the execution of arbitrary code by altering the contents of the program stack. This issue affects Apache OpenOffice up to and including version 4.1.10
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: http://www.openwall.com/lists/oss-security/2021/10/07/3; https://github.com/apache/openoffice/commit/efddaef0151af3be16078cc4d88c6bae0f911e56#diff-ea66e734dd358922aba12ad4ba39c96bdc6cbde587d07dbc63d04daa0a30e90f; https://lists.apache.org/thread.html/r1ab8532e11f41bc7ca057ac7e39cab25f2e1f9d5f4929788ae21c8b9%40%3Cusers.openoffice.apache.org%3E
CVE: CVE-2021-21993
Published: 2021-09-23
Description: The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library may exploit this issue by sending a POST request to vCenter Server leading to information disclosure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE: CVE-2021-22005
Published: 2021-09-23
Description: The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: http://packetstormsecurity.com/files/164439/VMware-vCenter-Server-Analytics-CEIP-Service-File-Upload.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html; http://packetstormsecurity.com/files/164439/VMware-vCenter-Server-Analytics-CEIP-Service-File-Upload.html
CVE: CVE-2021-22006
Published: 2021-09-23
Description: The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to access restricted endpoints.
CVSS Score: 7.5 (HIGH)
References: https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE: CVE-2021-22007
Published: 2021-09-23
Description: The vCenter Server contains a local information disclosure vulnerability in the Analytics service. An authenticated user with non-administrative privilege may exploit this issue to gain access to sensitive information.
CVSS Score: 5.5 (MEDIUM)
References: https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE: CVE-2021-22008
Published: 2021-09-23
Description: The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue by sending a specially crafted json-rpc message to gain access to sensitive information.
CVSS Score: 7.5 (HIGH)
References: https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE: CVE-2021-22009
Published: 2021-09-23
Description: The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit these issues to create a denial of service condition due to excessive memory consumption by VAPI service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668
References: https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE: CVE-2021-22010
Published: 2021-09-23
Description: The vCenter Server contains a denial-of-service vulnerability in VPXD service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to create a denial of service condition due to excessive memory consumption by VPXD service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE: CVE-2021-22011
Published: 2021-09-23
Description: vCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content Library. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to perform unauthenticated VM network setting manipulation.
CVSS Score: 5.3 (MEDIUM)
References: https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE: CVE-2021-22012
Published: 2021-09-23
Description: The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE: CVE-2021-22013
Published: 2021-09-23
Description: The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance management API. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE: CVE-2021-22014
Published: 2021-09-23
Description: The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure). An authenticated VAMI user with network access to port 5480 on vCenter Server may exploit this issue to execute code on the underlying operating system that hosts vCenter Server.
CVSS Score: 7.2 (HIGH)
References: https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE: CVE-2021-22015
Published: 2021-09-23
Description: The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and directories. An authenticated local user with non-administrative privilege may exploit these issues to elevate their privileges to root on vCenter Server Appliance.
CVSS Score: 7.8 (HIGH)
CWE: CWE-552
References: http://packetstormsecurity.com/files/170116/VMware-vCenter-vScalation-Privilege-Escalation.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html; http://packetstormsecurity.com/files/170116/VMware-vCenter-vScalation-Privilege-Escalation.html
CVE: CVE-2021-22016
Published: 2021-09-23
Description: The vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input sanitization. An attacker may exploit this issue to execute malicious scripts by tricking a victim into clicking a malicious link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE: CVE-2021-22017
Published: 2021-09-23
Description: Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed.
CVSS Score: 5.3 (MEDIUM)
References: https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22017
CVE: CVE-2021-22018
Published: 2021-09-23
Description: The vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life-cycle Manager plug-in. A malicious actor with network access to port 9087 on vCenter Server may exploit this issue to delete non critical files.
CVSS Score: 6.5 (MEDIUM)
References: https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE: CVE-2021-22019
Published: 2021-09-23
Description: The vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 5480 on vCenter Server may exploit this issue by sending a specially crafted jsonrpc message to create a denial of service condition.
CVSS Score: 7.5 (HIGH)
References: https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE: CVE-2021-22020
Published: 2021-09-23
Description: The vCenter Server contains a denial-of-service vulnerability in the Analytics service. Successful exploitation of this issue may allow an attacker to create a denial-of-service condition on vCenter Server.
CVSS Score: 5.5 (MEDIUM)
References: https://www.vmware.com/security/advisories/VMSA-2021-0020.html; https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE: CVE-2021-22941
Published: 2021-09-23
Description: Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: https://support.citrix.com/article/CTX328123; https://support.citrix.com/article/CTX328123; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22941
CVE: CVE-2021-22945
Published: 2021-09-23
Description: When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-415, CWE-415, CWE-415
References: http://seclists.org/fulldisclosure/2022/Mar/29; https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://hackerone.com/reports/1269242
CVE: CVE-2021-22948
Published: 2021-09-23
Description: Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqid() PHP function. Under some circumstances, an attacker could theoretically be able to brute force session IDs in order to take over a specific account.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79, CWE-338
References: https://hackerone.com/reports/1187820; https://www.revive-adserver.com/security/revive-sa-2021-005/; https://hackerone.com/reports/1187820
CVE: CVE-2021-22949
Published: 2021-09-23
Description: A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to duplicate files which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: "Solar Security CMS Research Team"
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes; https://hackerone.com/reports/1102225; https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes
CVE: CVE-2021-22950
Published: 2021-09-23
Description: Concrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachments to comments in the conversation section to be deleted.Credit for discovery: "Solar Security Research Team"
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes; https://hackerone.com/reports/1102177; https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes