deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-39210
Published: 2021-09-15
Description: GLPI is a free Asset and IT management software package. In versions prior to 9.5.6, the cookie used to store the autologin cookie (when a user uses the "remember me" feature) is accessible by scripts. A malicious plugin that could steal this cookie would be able to use it to autologin. This issue is fixed in version 9.5.6. As a workaround, one may avoid using the "remember me" feature.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1004, CWE-732
References: https://github.com/glpi-project/glpi/releases/tag/9.5.6; https://github.com/glpi-project/glpi/security/advisories/GHSA-hwxq-4c5f-m4v2; https://huntr.dev/bounties/b2e99a41-b904-419f-a274-ae383e4925f2/
CVE: CVE-2021-39211
Published: 2021-09-15
Description: GLPI is a free Asset and IT management software package. Starting in version 9.2 and prior to version 9.5.6, the telemetry endpoint discloses GLPI and server information. This issue is fixed in version 9.5.6. As a workaround, remove the file `ajax/telemetry.php`, which is not needed for usual functions of GLPI.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://github.com/glpi-project/glpi/releases/tag/9.5.6; https://github.com/glpi-project/glpi/security/advisories/GHSA-xx66-v3g5-w825; https://github.com/glpi-project/glpi/releases/tag/9.5.6
CVE: CVE-2021-39213
Published: 2021-09-15
Description: GLPI is a free Asset and IT management software package. Starting in version 9.1 and prior to version 9.5.6, GLPI with API Rest enabled is vulnerable to API bypass with custom header injection. This issue is fixed in version 9.5.6. One may disable API Rest as a workaround.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-74, CWE-74
References: https://github.com/glpi-project/glpi/releases/tag/9.5.6; https://github.com/glpi-project/glpi/security/advisories/GHSA-6w9f-2m6g-5777; https://github.com/glpi-project/glpi/releases/tag/9.5.6
CVE: CVE-2021-39392
Published: 2021-09-15
Description: The management tool in MyLittleBackup up to and including 1.7 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.mylittlebackup.com/mlb/zip/mlb_1.7.zip; https://gist.github.com/omriinbar/65827626e63f15e3e50557e2d9d61281; http://www.mylittlebackup.com/mlb/zip/mlb_1.7.zip
CVE: CVE-2021-3795
Published: 2021-09-15
Description: semver-regex is vulnerable to Inefficient Regular Expression Complexity
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333, CWE-1333
References: https://github.com/sindresorhus/semver-regex/commit/11c66245f4e1976dccc52977ed183696a21a3fd7; https://huntr.dev/bounties/006624e3-35ac-448f-aab9-7b5183f30e28; https://github.com/sindresorhus/semver-regex/commit/11c66245f4e1976dccc52977ed183696a21a3fd7
CVE: CVE-2021-40155
Published: 2021-09-15
Description: A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0009; https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0009
CVE: CVE-2021-40156
Published: 2021-09-15
Description: A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0009; https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0009
CVE: CVE-2021-40238
Published: 2021-09-15
Description: A Cross Site Scriptiong (XSS) vulnerability exists in the admin panel in Webuzo < 2.9.0 via an HTTP request to a non-existent page, which is activated by administrators viewing the "Error Log" page. An attacker can leverage this to achieve Unauthenticated Remote Code Execution via the "Cron Jobs" functionality of Webuzo.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/omriinbar/5a24ccc2127ac61b6d9872c9405ebc8e; https://www.webuzo.com/blog/webuzo-2-9-0-launched/; https://gist.github.com/omriinbar/5a24ccc2127ac61b6d9872c9405ebc8e
CVE: CVE-2021-20433
Published: 2021-09-15
Description: IBM Security Guardium 11.3 could allow a an authenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 196345.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/196345; https://www.ibm.com/support/pages/node/6488941; https://exchange.xforce.ibmcloud.com/vulnerabilities/196345
CVE: CVE-2021-28901
Published: 2021-09-15
Description: Multiple cross-site scripting (XSS) vulnerabilities exist in SITA Software Azur CMS 1.2.3.1 and earlier, which allows remote attackers to inject arbitrary web script or HTML via the (1) NOM_CLI , (2) ADRESSE , (3) ADRESSE2, (4) LOCALITE parameters to /eshop/products/json/aouCustomerAdresse; and the (5) nom_liste parameter to /eshop/products/json/addCustomerFavorite.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE_2021_28901.pdf; https://github.com/post-cyberlabs/CVE-Advisory/blob/main/CVE_2021_28901.pdf
CVE: CVE-2021-29750
Published: 2021-09-15
Description: IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201778.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/201778; https://www.ibm.com/support/pages/node/6488945; https://exchange.xforce.ibmcloud.com/vulnerabilities/201778
CVE: CVE-2021-29773
Published: 2021-09-15
Description: IBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR). IBM X-Force ID: 202865.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-639
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/202865; https://www.ibm.com/support/pages/node/6488943; https://exchange.xforce.ibmcloud.com/vulnerabilities/202865
CVE: CVE-2021-39205
Published: 2021-09-15
Description: Jitsi Meet is an open source video conferencing application. Versions prior to 2.0.6173 are vulnerable to client-side cross-site scripting via injecting properties into JSON objects that were not properly escaped. There are no known incidents related to this vulnerability being exploited in the wild. This issue is fixed in Jitsi Meet version 2.0.6173. There are no known workarounds aside from upgrading.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79, CWE-1321, CWE-79, CWE-1321
References: https://github.com/jitsi/jitsi-meet/pull/9320; https://github.com/jitsi/jitsi-meet/pull/9404; https://github.com/jitsi/jitsi-meet/security/advisories/GHSA-6582-8v9q-v3fg
CVE: CVE-2021-39215
Published: 2021-09-15
Description: Jitsi Meet is an open source video conferencing application. In versions prior to 2.0.5963, a Prosody module allows the use of symmetrical algorithms to validate JSON web tokens. This means that tokens generated by arbitrary sources can be used to gain authorization to protected rooms. This issue is fixed in Jitsi Meet 2.0.5963. There are no known workarounds aside from updating.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://github.com/jitsi/jitsi-meet/pull/9319; https://github.com/jitsi/jitsi-meet/security/advisories/GHSA-45ff-37jm-xjfx; https://github.com/jitsi/jitsi-meet/pull/9319
CVE: CVE-2021-40964
Published: 2021-09-15
Description: A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file (with Admin credentials or with the CSRF vulnerability) with the "fullpath" parameter containing path traversal strings (../ and ..\) in order to escape the server's intended working directory and write malicious files onto any directory on the computer.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/166330/Tiny-File-Manager-2.4.6-Shell-Upload.html; https://gist.github.com/omriinbar/953368dcdd9e5eeefd[PII_REDACTED]9528; https://github.com/prasathmani/tinyfilemanager
CVE: CVE-2021-40965
Published: 2021-09-15
Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload files and run OS commands by inducing the Administrator user to browse a URL controlled by an attacker.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://gist.github.com/omriinbar/953368dcdd9e5eeefd[PII_REDACTED]9528; https://github.com/prasathmani/tinyfilemanager; https://gist.github.com/omriinbar/953368dcdd9e5eeefd[PII_REDACTED]9528
CVE: CVE-2021-40966
Published: 2021-09-15
Description: A Stored XSS exists in TinyFileManager All version up to and including 2.4.6 in /tinyfilemanager.php when the server is given a file that contains HTML and javascript in its name. A malicious user can upload a file with a malicious filename containing javascript code and it will run on any user browser when they access the server.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/omriinbar/953368dcdd9e5eeefd[PII_REDACTED]9528; https://github.com/prasathmani/tinyfilemanager; https://gist.github.com/omriinbar/953368dcdd9e5eeefd[PII_REDACTED]9528
CVE: CVE-2021-33690
Published: 2021-09-15
Description: Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the server to perform proxy attacks on server by sending crafted queries. Due to this, the threat actor could completely compromise sensitive data residing on the Server and impact its availability.Note: The impact of this vulnerability depends on whether SAP NetWeaver Development Infrastructure (NWDI) runs on the intranet or internet. The CVSS score reflects the impact considering the worst-case scenario that it runs on the internet.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-918
References: https://launchpad.support.sap.com/#/notes/3072955; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806; https://launchpad.support.sap.com/#/notes/3072955
CVE: CVE-2021-33691
Published: 2021-09-15
Description: NWDI Notification Service versions - 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.SAP NetWeaver Development Infrastructure Notification Service allows a threat actor to send crafted scripts to a victim. If the victim has an active session when the crafted script gets executed, the threat actor could compromise information in victims session, and gain access to some sensitive information also.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3073450; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806; https://launchpad.support.sap.com/#/notes/3073450
CVE: CVE-2021-33692
Published: 2021-09-15
Description: SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://launchpad.support.sap.com/#/notes/3058553; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806; https://launchpad.support.sap.com/#/notes/3058553
CVE: CVE-2021-33693
Published: 2021-09-15
Description: SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that could potentially lead to OS command execution.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94, CWE-94
References: https://launchpad.support.sap.com/#/notes/3058553; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806; https://launchpad.support.sap.com/#/notes/3058553
CVE: CVE-2021-33694
Published: 2021-09-15
Description: SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to include malicious codes that get stored in the database, and when accessed, could be executed in the application, resulting in Stored Cross-Site Scripting.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://launchpad.support.sap.com/#/notes/3058553; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806; https://launchpad.support.sap.com/#/notes/3058553
CVE: CVE-2021-33695
Published: 2021-09-15
Description: Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-297, CWE-295
References: https://launchpad.support.sap.com/#/notes/3058553; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806; https://launchpad.support.sap.com/#/notes/3058553
CVE: CVE-2021-33696
Published: 2021-09-15
Description: SAP BusinessObjects Business Intelligence Platform (Crystal Report), versions - 420, 430, does not sufficiently encode user controlled inputs and therefore an authorized attacker can exploit a XSS vulnerability, leading to non-permanently deface or modify displayed content from a Web site.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3062085; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806; https://launchpad.support.sap.com/#/notes/3062085
CVE: CVE-2021-33697
Published: 2021-09-15
Description: Under certain conditions, SAP BusinessObjects Business Intelligence Platform (SAPUI5), versions - 420, 430, can allow an unauthenticated attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1022, CWE-269
References: https://launchpad.support.sap.com/#/notes/3063048; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806; https://launchpad.support.sap.com/#/notes/3063048
CVE: CVE-2021-33698
Published: 2021-09-15
Description: SAP Business One, version - 10.0, allows an attacker with business authorization to upload any files (including script files) without the proper file format validation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434, CWE-434
References: https://launchpad.support.sap.com/#/notes/3071984; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806; https://launchpad.support.sap.com/#/notes/3071984
CVE: CVE-2021-33700
Published: 2021-09-15
Description: SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without knowing his/her password. The attacker could so obtain highly sensitive information which the attacker could use to take substantial control of the vulnerable application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-288, CWE-287
References: https://launchpad.support.sap.com/#/notes/3073325; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806; https://launchpad.support.sap.com/#/notes/3073325
CVE: CVE-2021-33701
Published: 2021-09-15
Description: DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 2011_1_731, 710, 2011_1_752, 2020, SAPSCORE 125, S4CORE 102, 102, 103, 104, 105, allows an attacker with access to highly privileged account to execute manipulated query in NDZT tool to gain access to Superuser account, leading to SQL Injection vulnerability, that highly impacts systems Confidentiality, Integrity and Availability.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://packetstormsecurity.com/files/165303/SAP-Netweaver-IUUC_RECON_RC_COUNT_TABLE_BIG-SQL-Injection.html; http://packetstormsecurity.com/files/165304/SAP-Netweaver-IUUC_RECON_RC_COUNT_TABLE_BIG-ABAP-Code-Injection.html; http://seclists.org/fulldisclosure/2021/Dec/35
CVE: CVE-2021-33704
Published: 2021-09-15
Description: The Service Layer of SAP Business One, version - 10.0, allows an authenticated attacker to invoke certain functions that would otherwise be restricted to specific users. For an attacker to discover the vulnerable function, no in-depth system knowledge is required. Once exploited via Network stack, the attacker may be able to read, modify or delete restricted data. The impact is that missing authorization can result of abuse of functionality usually restricted to specific users.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://launchpad.support.sap.com/#/notes/3078072; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806; https://launchpad.support.sap.com/#/notes/3078072
CVE: CVE-2021-33705
Published: 2021-09-15
Description: The SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews Editor contains a Server-Side Request Forgery (SSRF) vulnerability which allows an unauthenticated attacker to craft a malicious URL which when clicked by a user can make any type of request (e.g. POST, GET) to any internal or external server. This can result in the accessing or modification of data accessible from the Portal but will not affect its availability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-918, CWE-918
References: http://packetstormsecurity.com/files/165743/SAP-Enterprise-Portal-iviewCatcherEditor-Server-Side-Request-Forgery.html; http://seclists.org/fulldisclosure/2022/Jan/72; https://launchpad.support.sap.com/#/notes/3074844
CVE: CVE-2021-37909
Published: 2021-09-15
Description: WriteRegistry function in TSSServiSign component does not filter and verify users’ input, remote attackers can rewrite to the registry without permissions thus perform hijack attacks to execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://www.twcert.org.tw/tw/cp-132-5093-76f04-1.html; https://www.twcert.org.tw/tw/cp-132-5093-76f04-1.html
CVE: CVE-2021-37912
Published: 2021-09-15
Description: The HGiga OAKlouds mobile portal does not filter special characters of the Ethernet number parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.twcert.org.tw/tw/cp-132-5091-7e0c5-1.html; https://www.twcert.org.tw/tw/cp-132-5091-7e0c5-1.html
CVE: CVE-2021-37913
Published: 2021-09-15
Description: The HGiga OAKlouds mobile portal does not filter special characters of the IPv6 Gateway parameter of the network interface card setting page. Remote attackers can use this vulnerability to perform command injection and execute arbitrary commands in the system without logging in.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.twcert.org.tw/tw/cp-132-5092-f88e2-1.html; https://www.twcert.org.tw/tw/cp-132-5092-f88e2-1.html
CVE: CVE-2021-40862
Published: 2021-09-15
Description: HashiCorp Terraform Enterprise up to v202108-1 contained an API endpoint that erroneously disclosed a sensitive URL to authenticated parties, which could be used for privilege escalation or unauthorized modification of a Terraform configuration. Fixed in v202109-1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: https://discuss.hashicorp.com/t/hcsec-2021-25-terraform-enterprise-configuration-versions-api-discloses-sensitive-url/29508; https://discuss.hashicorp.com/t/hcsec-2021-25-terraform-enterprise-configuration-versions-api-discloses-sensitive-url/29508
CVE: CVE-2016-20012
Published: 2021-09-15
Description: OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/openssh/openssh-portable/blob/d0fffc88c8fe90c1815c6f4097bc8cbcabc0f3dd/auth2-pubkey.c#L261-L265; https://github.com/openssh/openssh-portable/pull/270; https://github.com/openssh/openssh-portable/pull/270#issuecomment-920577097
CVE: CVE-2020-21321
Published: 2021-09-15
Description: emlog v6.0 contains a Cross-Site Request Forgery (CSRF) via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/emlog/emlog/issues/50; https://github.com/emlog/emlog/issues/50
CVE: CVE-2020-21322
Published: 2021-09-15
Description: An arbitrary file upload vulnerability in Feehi CMS v2.0.8 and below allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/liufee/cms/issues/44; https://github.com/liufee/cms/issues/44
CVE: CVE-2020-21480
Published: 2021-09-15
Description: An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS Score: 7.2 (HIGH)
References: https://www.porlockz.com/A-arbitrary-file-write-vulnerability-in-RGCMS-V1-06/; https://www.porlockz.com/A-arbitrary-file-write-vulnerability-in-RGCMS-V1-06/
CVE: CVE-2020-21481
Published: 2021-09-15
Description: An arbitrary file upload vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted .txt file which is later changed to a PHP file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://www.porlockz.com/A-arbitrary-file-upload-vulnerability-in-RGCMS-V1-06/; https://www.porlockz.com/A-arbitrary-file-upload-vulnerability-in-RGCMS-V1-06/
CVE: CVE-2020-21482
Published: 2021-09-15
Description: A cross-site scripting (XSS) vulnerability in RGCMS v1.06 allows attackers to obtain the administrator's cookie via a crafted payload in the Name field under the Message Board module
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.porlockz.com/A-xss-vulnerability-in-RGCMS-V1-06/; https://www.porlockz.com/A-xss-vulnerability-in-RGCMS-V1-06/
CVE: CVE-2020-21483
Published: 2021-09-15
Description: An arbitrary file upload vulnerability in Jizhicms v1.5 allows attackers to execute arbitrary code via a crafted .jpg file which is later changed to a PHP file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://www.porlockz.com/A-arbitrary-file-upload-vulnerability-in-jizhicms-v1-5/; https://www.porlockz.com/A-arbitrary-file-upload-vulnerability-in-jizhicms-v1-5/
CVE: CVE-2021-33044
Published: 2021-09-15
Description: The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html; http://seclists.org/fulldisclosure/2021/Oct/13; https://www.dahuasecurity.com/support/cybersecurity/details/957
CVE: CVE-2021-33045
Published: 2021-09-15
Description: The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html; http://seclists.org/fulldisclosure/2021/Oct/13; https://www.dahuasecurity.com/support/cybersecurity/details/957
CVE: CVE-2021-40639
Published: 2021-09-15
Description: Improper access control in Jfinal CMS 5.1.0 allows attackers to access sensitive information via /classes/conf/db.properties&config=filemanager.config.js.
CVSS Score: 7.5 (HIGH)
CWE: CWE-668, CWE-863
References: http://jfinalcms.com; https://github.com/jflyfox/jfinal_cms; https://github.com/jflyfox/jfinal_cms/issues/27