deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-24741
Published: 2022-03-09
Description: Nextcloud server is an open source, self hosted cloud style services platform. In affected versions an attacker can cause a denial of service by uploading specially crafted files which will cause the server to allocate too much memory / CPU. It is recommended that the Nextcloud Server is upgraded to 21.0.8 , 22.2.4 or 23.0.1. Users unable to upgrade should disable preview generation with the `'enable_previews'` config flag.
CVSS Score: 3.5 (LOW)
CWE: CWE-400, CWE-770
References: https://github.com/nextcloud/security-advisories/security/advisories/GHSA-jf3h-xf4q-mh89; https://github.com/nextcloud/server/pull/30291; https://hackerone.com/reports/1261225
CVE: CVE-2021-22783
Published: 2022-03-09
Description: A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communicating with the door. Affected Product: Ritto Wiser Door (All versions)
CVSS Score: 8.8 (HIGH)
CWE: CWE-200
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-067-03; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-067-03
CVE: CVE-2022-24322
Published: 2022-03-09
Description: A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product: EcoStruxure Control Expert (V15.0 SP1 and prior)
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-119
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-067-01; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-067-01
CVE: CVE-2022-24323
Published: 2022-03-09
Description: A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product: EcoStruxure Process Expert (V2021 and prior), EcoStruxure Control Expert (V15.0 SP1 and prior)
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-754, CWE-754
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-067-01; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-067-01
CVE: CVE-2022-24744
Published: 2022-03-09
Description: Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions user sessions are not logged out if the password is reset via password recovery. This issue has been resolved in version 6.4.8.1. For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin.
CVSS Score: 2.6 (LOW)
CWE: CWE-613
References: https://github.com/shopware/platform/security/advisories/GHSA-w267-m9c4-8555; https://github.com/shopware/platform/security/advisories/GHSA-w267-m9c4-8555
CVE: CVE-2022-24745
Published: 2022-03-09
Description: Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions guest sessions are shared between customers when HTTP cache is enabled. This can lead to inconsistent experiences for guest users. Setups with Varnish are not affected by this issue. This issue has been resolved in version 6.4.8.2. Users unable to upgrade should disable the HTTP Cache.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-384
References: https://github.com/shopware/platform/security/advisories/GHSA-jp6h-mxhx-pgqh; https://github.com/shopware/platform/security/advisories/GHSA-jp6h-mxhx-pgqh
CVE: CVE-2022-24746
Published: 2022-03-09
Description: Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions it is possible to inject code via the voucher code form. This issue has been patched in version 6.4.8.1. There are no known workarounds for this issue.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-02-2022; https://github.com/shopware/platform/commit/651598a61073cbe59368e311817bdc6e7fb349c6; https://github.com/shopware/platform/security/advisories/GHSA-952p-fqcp-g8pc
CVE: CVE-2022-24747
Published: 2022-03-09
Description: Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. Affected versions of shopware do no properly set sensitive HTTP headers to be non-cacheable. If there is an HTTP cache between the server and client then headers may be exposed via HTTP caches. This issue has been resolved in version 6.4.8.2. There are no known workarounds.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-200, CWE-668
References: https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-03-2022; https://github.com/shopware/platform/commit/d51863148f32306aafdbc7f9f48887c69fce206f; https://github.com/shopware/platform/security/advisories/GHSA-6wrh-279j-6hvw
CVE: CVE-2022-24748
Published: 2022-03-09
Description: Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In versions prior to 6.4.8.2 it is possible to modify customers and to create orders without App Permission. This issue is a result of improper api route checking. Users are advised to upgrade to version 6.4.8.2. There are no known workarounds.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287, CWE-863
References: https://github.com/shopware/core/commit/329e4d7e028dd8081496cf8bd3acc822000b0ec0; https://github.com/shopware/platform/security/advisories/GHSA-83vp-6jqg-6cmr; https://github.com/shopware/core/commit/329e4d7e028dd8081496cf8bd3acc822000b0ec0
CVE: CVE-2022-24753
Published: 2022-03-09
Description: Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are `stripe login`, `stripe config -e`, `stripe community`, and `stripe open`. MacOS and Linux are unaffected. An attacker who successfully exploits the vulnerability can run arbitrary code in the context of the current user. The update addresses the vulnerability by throwing an error in these situations before the code can run.Users are advised to upgrade to version 1.7.13. There are no known workarounds for this issue.
CVSS Score: 7.7 (HIGH)
CWE: CWE-78
References: https://github.com/stripe/stripe-cli/commit/be38da5c0191adb77f661f769ffff2fbc7ddf6cd; https://github.com/stripe/stripe-cli/security/advisories/GHSA-4cx6-fj7j-pjx9; https://github.com/stripe/stripe-cli/commit/be38da5c0191adb77f661f769ffff2fbc7ddf6cd
CVE: CVE-2022-0890
Published: 2022-03-10
Description: NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://github.com/mruby/mruby/commit/da48e7dbb20024c198493b8724adae1b842083aa; https://huntr.dev/bounties/68e09ec1-6cc7-48b8-981d-30f478c70276; https://github.com/mruby/mruby/commit/da48e7dbb20024c198493b8724adae1b842083aa
CVE: CVE-2021-38296
Published: 2022-03-10
Description: Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" and "spark.network.crypto.enabled". In versions 3.1.2 and earlier, it uses a bespoke mutual authentication protocol that allows for full encryption key recovery. After an initial interactive attack, this would allow someone to decrypt plaintext traffic offline. Note that this does not affect security mechanisms controlled by "spark.authenticate.enableSaslEncryption", "spark.io.encryption.enabled", "spark.ssl", "spark.ui.strictTransportSecurity". Update to Apache Spark 3.1.3 or later
CVSS Score: 7.5 (HIGH)
CWE: CWE-294, CWE-294
References: https://lists.apache.org/thread/70x8fw2gx3g9ty7yk0f2f1dlpqml2smd; https://www.oracle.com/security-alerts/cpujul2022.html; https://lists.apache.org/thread/70x8fw2gx3g9ty7yk0f2f1dlpqml2smd
CVE: CVE-2022-0895
Published: 2022-03-10
Description: Static Code Injection in GitHub repository microweber/microweber prior to 1.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-96
References: https://github.com/microweber/microweber/commit/b2baab6e582b2efe63788d367a2bb61a2fa26470; https://huntr.dev/bounties/3c070828-fd00-476c-be33-9c877172363d; https://github.com/microweber/microweber/commit/b2baab6e582b2efe63788d367a2bb61a2fa26470
CVE: CVE-2022-0905
Published: 2022-03-10
Description: Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4.
CVSS Score: 7.1 (HIGH)
CWE: CWE-862, CWE-862
References: https://github.com/go-gitea/gitea/commit/1314f38b59748397b3429fb9bc9f9d6bac85d2f2; https://huntr.dev/bounties/8d221f92-b2b1-4878-bc31-66ff272e5ceb; https://github.com/go-gitea/gitea/commit/1314f38b59748397b3429fb9bc9f9d6bac85d2f2
CVE: CVE-2022-0906
Published: 2022-03-10
Description: Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/microweber/microweber/commit/d9bae9df873c2d2a13a2eb08d512019d49ebca68; https://huntr.dev/bounties/87ed3b42-9824-49b0-91a5-fd908a0601e8; https://github.com/microweber/microweber/commit/d9bae9df873c2d2a13a2eb08d512019d49ebca68
CVE: CVE-2020-14111
Published: 2022-03-10
Description: A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-345
References: https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=18; https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=18
CVE: CVE-2020-14112
Published: 2022-03-10
Description: Information Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by incorrect routing configuration. Attackers can exploit this vulnerability to download part of the files in Xiaomi Router AX6000.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=34; https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=34
CVE: CVE-2020-14115
Published: 2022-03-10
Description: A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-345
References: https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=37; https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=37
CVE: CVE-2020-36123
Published: 2022-03-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2020-36517
Published: 2022-03-10
Description: An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS operator to gain knowledge about internal network resources via the hardcoded DNS resolver configuration.
CVSS Score: 7.5 (HIGH)
CWE: CWE-203
References: https://community.home-assistant.io/t/ha-os-dns-setting-configuration-not-respected/356572; https://github.com/home-assistant/plugin-dns/issues/17; https://github.com/home-assistant/plugin-dns/issues/20
CVE: CVE-2021-20269
Published: 2022-03-10
Description: A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://bugzilla.redhat.com/show_bug.cgi?id=1934261; https://bugzilla.redhat.com/show_bug.cgi?id=1934261
CVE: CVE-2021-28488
Published: 2022-03-10
Description: Ericsson Network Manager (ENM) before 21.2 has incorrect access-control behavior (that only affects the level of access available to persons who were already granted a highly privileged role). Users in the same AMOS authorization group can retrieve managed-network data that was not set to be accessible to the entire group (i.e., was only set to be accessible to a subset of that group).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-668
References: https://www.ericsson.com; https://www.ericsson.com/en/about-us/enterprise-security/psirt; https://www.gruppotim.it/it/footer/red-team.html
CVE: CVE-2021-32005
Published: 2022-03-10
Description: Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.secomea.com/support/cybersecurity-advisory/#5017; https://www.secomea.com/support/cybersecurity-advisory/#5017
CVE: CVE-2021-32006
Published: 2022-03-10
Description: This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-274, CWE-275, CWE-276
References: https://www.secomea.com/support/cybersecurity-advisory/; https://www.secomea.com/support/cybersecurity-advisory/
CVE: CVE-2021-32025
Published: 2022-03-10
Description: An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0, QNX Momentics all 6.3.x versions, QNX OS for Safety versions 1.0.0 to 1.0.2, QNX OS for Safety versions 2.0.0 to 2.0.1, QNX for Medical versions 1.0.0 to 1.1.1, and QNX OS for Medical version 2.0.0 could allow an attacker to potentially access data, modify behavior, or permanently crash the system.
CVSS Score: 8.1 (HIGH)
CWE: CWE-368
References: http://support.blackberry.com/kb/articleDetail?articleNumber=000090868; http://support.blackberry.com/kb/articleDetail?articleNumber=000090868
CVE: CVE-2021-32434
Published: 2022-03-10
Description: abcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculate_beam at draw.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/leesavide/abcm2ps/commit/2f56e1179cab6affeb8afa9d6c324008fe40d8e3; https://github.com/leesavide/abcm2ps/issues/83; https://lists.debian.org/debian-lts-announce/2022/04/msg00015.html
CVE: CVE-2021-32435
Published: 2022-03-10
Description: Stack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/leesavide/abcm2ps/commit/3169ace6d63f6f517a64e8df0298f44a490c4a15; https://github.com/leesavide/abcm2ps/issues/84; https://lists.debian.org/debian-lts-announce/2022/04/msg00015.html
CVE: CVE-2021-32436
Published: 2022-03-10
Description: An out-of-bounds read in the function write_title() in subs.c of abcm2ps v8.14.11 allows remote attackers to cause a Denial of Service (DoS) via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://github.com/leesavide/abcm2ps/commit/2f56e1179cab6affeb8afa9d6c324008fe40d8e3; https://github.com/leesavide/abcm2ps/issues/85; https://lists.debian.org/debian-lts-announce/2022/04/msg00015.html
CVE: CVE-2021-32501
Published: 2022-03-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-32502
Published: 2022-03-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-32505
Published: 2022-03-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none
CVE: CVE-2021-33293
Published: 2022-03-10
Description: Panorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function panoParserFindOLine() in parser.c.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://groups.google.com/u/1/g/hugin-ptx/c/gLtz2vweD74; https://lists.debian.org/debian-lts-announce/2022/03/msg00029.html; https://sourceforge.net/p/panotools/libpano13/ci/62aa7eed8fae5d8f247a2508a757f31000de386f/
CVE: CVE-2021-33851
Published: 2022-03-10
Description: A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack. The XSS payload given in the "Custom logo link" executes whenever the user opens the Settings Page of the "Customize Login Image" Plugin.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2021-33851-stored-cross-site-scripting-in-wordpress-customize-login-image.html; https://cybersecurityworks.com/zerodays/cve-2021-33851-stored-cross-site-scripting-in-wordpress-customize-login-image.html
CVE: CVE-2021-33852
Published: 2022-03-10
Description: A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicle for the attack. The XSS payload given in the "Duplicate Title" text box executes whenever the user opens the Settings Page of the Post Duplicator Plugin or the application root page after duplicating any of the existing posts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cybersecurityworks.com/zerodays/cve-2021-33852-stored-cross-site-scripting-in-wordpress-post-duplicator-plugin-2-23.html; https://cybersecurityworks.com/zerodays/cve-2021-33852-stored-cross-site-scripting-in-wordpress-post-duplicator-plugin-2-23.html
CVE: CVE-2021-34122
Published: 2022-03-10
Description: The function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/rockcarry/ffjpeg/issues/36; https://github.com/rockcarry/ffjpeg/pull/37; https://github.com/rockcarry/ffjpeg/issues/36
CVE: CVE-2021-34338
Published: 2022-03-10
Description: Ming 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1969616; https://github.com/libming/libming/issues/201; https://bugzilla.redhat.com/show_bug.cgi?id=1969616
CVE: CVE-2021-34339
Published: 2022-03-10
Description: Ming 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1969607; https://github.com/libming/libming/issues/202; https://bugzilla.redhat.com/show_bug.cgi?id=1969607
CVE: CVE-2021-34340
Published: 2022-03-10
Description: Ming 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in decompiler.c file that causes a direct segmentation fault and leads to denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-787
References: https://bugzilla.redhat.com/show_bug.cgi?id=1969612; https://github.com/libming/libming/issues/203; https://bugzilla.redhat.com/show_bug.cgi?id=1969612
CVE: CVE-2021-34341
Published: 2022-03-10
Description: Ming 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF() in the decompile.c file that causes a direct segmentation fault and leads to denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1969628; https://github.com/libming/libming/issues/204; https://bugzilla.redhat.com/show_bug.cgi?id=1969628
CVE: CVE-2021-34342
Published: 2022-03-10
Description: Ming 0.4.8 has an out-of-bounds read vulnerability in the function newVar_N() in decompile.c which causes a huge information leak.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1969619; https://github.com/libming/libming/issues/205; https://bugzilla.redhat.com/show_bug.cgi?id=1969619
CVE: CVE-2021-35251
Published: 2022-03-10
Description: Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details about the Web Help Desk installation.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-7-8_release_notes.htm; https://www.solarwinds.com/trust-center/security-advisories/CVE-2021-35251; https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-7-8_release_notes.htm
CVE: CVE-2021-3558
Published: 2022-03-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2021-3660
Published: 2022-03-10
Description: Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an <iFrame> HTML entry. This may be used by a malicious website in clickjacking or similar attacks.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-1021, CWE-1021
References: https://bugzilla.redhat.com/show_bug.cgi?id=1980688; https://github.com/cockpit-project/cockpit/commit/8d9bc10d8128aae03dfde62fd00075fe492ead10; https://github.com/cockpit-project/cockpit/issues/16122
CVE: CVE-2021-3698
Published: 2022-03-10
Description: A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD). This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List (CRL) configuration or the certificate status. The highest threat from this vulnerability is to confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-295, CWE-295
References: https://bugzilla.redhat.com/show_bug.cgi?id=1992149; https://bugzilla.redhat.com/show_bug.cgi?id=1992149
CVE: CVE-2021-3732
Published: 2022-03-10
Description: A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with OverlayFS. This flaw allows a local user to gain access to hidden files that should not be accessible.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://bugzilla.redhat.com/show_bug.cgi?id=1995249; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=427215d85e8d1476da1a86b8d67aceb485eb3631; https://github.com/torvalds/linux/commit/427215d85e8d1476da1a86b8d67aceb485eb3631
CVE: CVE-2021-3733
Published: 2022-03-10
Description: There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://bugs.python.org/issue43075; https://bugzilla.redhat.com/show_bug.cgi?id=1995234; https://github.com/python/cpython/commit/7215d1ae25525c92b026166f9d5cac85fb