rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-28052 Hitachi Content Platform Information Disclosure Vulnerability
A tenant administrator Hitachi Content Platform (HCP) may modify the configuration in another tenant without authorization, potentially allowing unauthorized access to data in the other tenant. Also, a tenant user (non-administrator) may view configuration in another tenant without authorization. This issue affects: Hitachi Vantara Hitachi Content Platform versions prior to 8.3.7; 9.0.0 versions prior to 9.2.3.
Problem types: cwe_id: CWE-264
description: CWE-264 Permissions, Privileges, and Access Controls
Affected products: vendor: Hitachi Vantara
product: Hitachi Content Platform
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2022-09-26T15:10:26.000Z
CVE-2021-28053 
An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in "Configuration > Users > Contacts / Users" allows remote authenticated users to execute arbitrary SQL commands via the Additional Information parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-16T15:07:26.000Z
CVE-2021-28054 
An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A Stored Cross-Site Scripting (XSS) issue in "Configuration > Hosts" allows remote authenticated users to inject arbitrary web script or HTML via the Alias parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-16T14:57:03.000Z
CVE-2021-28055 
An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. The anti-CSRF token generation is predictable, which might allow CSRF attacks that add an admin user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-15T18:29:19.000Z
CVE-2021-28060 
A Server-Side Request Forgery (SSRF) vulnerability in Group Office 6.4.196 allows a remote attacker to forge GET requests to arbitrary URLs via the url parameter to group/api/upload.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T16:11:18.000Z
CVE-2021-28070 
Cross Site Request Forgery (CSRF) vulnerability exist in PopojiCMS 2.0.1 in po-admin/route.php?mod=user&act=multidelete.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-25T19:47:56.000Z
CVE-2021-28075 
iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T12:08:32.000Z
CVE-2021-28079 
Jamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability. The column-name is vulnerable to XSS in the ElectronJS Framework. An attacker can make a .omv (Jamovi) document containing a payload. When opened by victim, the payload is triggered.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-26T11:24:28.000Z
CVE-2021-28088 
Cross-site scripting (XSS) in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web script or HTML parameters through the "Display Name" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-11T16:23:22.000Z
CVE-2021-28089 
Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU resources on a target, aka TROVE-2021-001.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-19T04:18:41.000Z
CVE-2021-28090 
Tor before 0.4.5.7 allows a remote attacker to cause Tor directory authorities to exit with an assertion failure, aka TROVE-2021-002.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-19T04:19:06.000Z
CVE-2021-28091 
Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-04T14:39:14.000Z
CVE-2021-28092 
The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker provides a malicious string, is-svg will get stuck processing the input for a very long time.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-12T21:31:35.000Z
CVE-2021-28093 
OX Documents before 7.10.5-rev5 has Incorrect Access Control of converted images because hash collisions can occur, due to use of Adler32.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T05:09:13.000Z
CVE-2021-28094 
OX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash collisions can occur, due to use of CRC32.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T05:08:53.000Z
CVE-2021-28095 
OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash collisions can occur, due to use of CRC32.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-27T05:12:19.000Z
CVE-2021-28096 
An issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used). An attacker can saturate the proxy connection table. This would result in the proxy denying any new connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T14:00:07.000Z
CVE-2021-28098 
An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in the logging function. SecureConnector runs with administrative privileges and writes logs entries to a file in %PROGRAMDATA%\ForeScout SecureConnector\ that has full permissions for the Everyone group. Using a symbolic link allows an attacker to point the log file to a privileged location such as %WINDIR%\System32. The resulting log file adopts the file permissions of the source of the symbolic link (in this case, the Everyone group). The log file in System32 can be replaced and renamed with a malicious DLL for DLL hijacking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T14:56:29.000Z
CVE-2021-28099 
In Netflix OSS Hollow, since the Files.exists(parent) is run before creating the directories, an attacker can pre-create these directories with wide permissions. Additionally, since an insecure source of randomness is used, the file names to be created can be deterministically calculated.
Problem types: description: Local Information Disclosure
Affected products: vendor: n/a
product: Netflix OSS Hollow
Published: 2021-03-23T20:28:52.000Z
CVE-2021-28100 
Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the local filesystem can read anything written there by the Priam process.
Problem types: description: Local Information Disclosure
Affected products: vendor: n/a
product: Netflix OSS Priam
Published: 2021-03-23T20:26:01.000Z
CVE-2021-28109 
TranzWare (POI) FIMI before 4.2.20.4.2 allows login_tw.php reflected Cross-Site Scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-19T02:56:58.000Z
CVE-2021-28110 
/exec in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a vulnerability in its XML parser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-19T03:01:19.000Z
CVE-2021-28111 
Draeger X-Dock Firmware before 03.00.13 has Hard-Coded Credentials, leading to remote code execution by an authenticated attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-20T13:29:47.000Z
CVE-2021-28112 
Draeger X-Dock Firmware before 03.00.13 has Active Debug Code on a debug port, leading to remote code execution by an authenticated attacker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-20T13:32:40.000Z
CVE-2021-28113 
A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (with admin access to the Okta Access Gateway UI) to execute OS commands as a privileged system account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:H/S:U/UI:N
version: 3.1
Published: 2021-04-02T14:26:52.000Z
CVE-2021-28114 
Froala WYSIWYG Editor 3.2.6-1 is affected by XSS due to a namespace confusion during parsing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-16T12:16:18.000Z
CVE-2021-28115 
The OUGC Feedback plugin before 1.8.23 for MyBB allows XSS via the comment field of feedback during an edit operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-09T21:33:41.000Z
CVE-2021-28116 
Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.7
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:H/AV:N/A:N/C:L/I:N/PR:N/S:U/UI:N
version: 3.1
Published: 2021-03-09T21:44:58.000Z
CVE-2021-28117 
libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially dangerous URLs (that are neither https:// nor http://) based on the content of the store.kde.org web site. (5.18.7 is also a fixed version.)
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-20T00:00:00.000Z
CVE-2021-28119 
Twinkle Tray (aka twinkle-tray) through 1.13.3 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-09T22:14:39.000Z
CVE-2021-28121 
Virtual Robots.txt before 1.10 does not block HTML tags in the robots.txt field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T22:00:07.000Z
CVE-2021-28122 
A request-validation issue was discovered in Open5GS 2.1.3 through 2.2.x before 2.2.1. The WebUI component allows an unauthenticated user to use a crafted HTTP API request to create, read, update, or delete entries in the subscriber database. For example, new administrative users can be added. The issue occurs because Express is not set up to require authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-10T14:34:45.000Z
CVE-2021-28123 
Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. The ssh key can provide an attacker access to the linux system in the affected version.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-02T14:46:17.000Z
CVE-2021-28124 
A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. Missing server authentication in impacted versions can allow an attacker to Man-in-the-middle (MITM) support channel UI session to Cohesity DataPlatform cluster.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-02T14:50:54.000Z
CVE-2021-28125 Apache Superset Open Redirect
Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link.
Problem types: cwe_id: CWE-601
description: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
Affected products: vendor: Apache Software Foundation
product: Apache Superset
Credits: lang: en
value: Found and reported by Gianluca Veltri, Dario Castrogiovanni
Published: 2021-04-27T09:27:22.000Z
CVE-2021-28126 
index.jsp in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a Stored cross-site scripting (XSS) vulnerability
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-19T03:07:53.000Z
CVE-2021-28127 
An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-01T14:01:34.000Z
CVE-2021-28128 
In Strapi through 3.6.0, the admin panel allows the changing of one's own password without entering the current password. An attacker who gains access to a valid session can use this to take over an account by changing the password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-06T13:49:30.000Z
CVE-2021-28129 DEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid
While working on Apache OpenOffice 4.1.8 a developer discovered that the DEB package did not install using root, but instead used a userid and groupid of 500. This both caused issues with desktop integration and could allow a crafted attack on files owned by that user or group if they exist. Users who installed the Apache OpenOffice 4.1.8 DEB packaging should upgrade to the latest version of Apache OpenOffice.
Problem types: cwe_id: CWE-284
description: CWE-284 Improper Access Control
Affected products: vendor: Apache Software Foundation
product: Apache OpenOffice
Credits: lang: en
value: Arrigo Marchiori
Published: 2021-10-07T15:50:11.000Z
CVE-2021-28130 
Dr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web. A DLL for a custom payload within a legitimate binary (e.g., frwl_svc.exe) bypasses firewall filters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-24T15:27:56.000Z
CVE-2021-28131 Impala logs contain secrets
Impala sessions use a 16 byte secret to verify that the session is not being hijacked by another user. However, these secrets appear in the Impala logs, therefore Impala users with access to the logs can use another authenticated user's sessions with specially constructed requests. This means the attacker is able to execute statements for which they don't have the necessary privileges otherwise. Impala deployments with Apache Sentry or Apache Ranger authorization enabled may be vulnerable to privilege escalation if an authenticated attacker is able to hijack a session or query from another authenticated user with privileges not assigned to the attacker. Impala deployments with audit logging enabled may be vulnerable to incorrect audit logging as a user could undertake actions that were logged under the name of a different authenticated user. Constructing an attack requires a high degree of technical sophistication and access to the Impala system as an authenticated user. Mitigation: If an Impala deployment uses Apache Sentry, Apache Ranger or audit logging, then users should upgrade to a version of Impala with the fix for IMPALA-10600. The Impala 4.0 release includes this fix. This hides session secrets from the logs to eliminate the risk of any attack using this mechanism. In lieu of an upgrade, restricting access to logs that expose secrets will reduce the risk of an attack. Restricting access to the Impala deployment to trusted users will also reduce the risk of an attack. Log redaction techniques can be used to redact secrets from the logs.
Problem types: cwe_id: CWE-288
description: CWE-288 Authentication Bypass Using an Alternate Path or Channel
Affected products: vendor: Apache Software Foundation
product: Apache Impala
Published: 2021-07-22T10:05:13.000Z
CVE-2021-28132 
LUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because the Migration Tool (in the Support section) allows upload of .php files within a system.tar.gz file. The .php file becomes accessible with a public/system/static URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-11T06:33:40.000Z
CVE-2021-28133 
Zoom through 5.5.4 sometimes allows attackers to read private information on a participant's screen, even though the participant never attempted to share the private part of their screen. When a user shares a specific application window via the Share Screen functionality, other meeting participants can briefly see contents of other application windows that were explicitly not shared. The contents of these other windows can (for instance) be seen for a short period of time when they overlay the shared window and get into focus. (An attacker can, of course, use a separate screen-recorder application, unsupported by Zoom, to save all such contents for later replays and analysis.) Depending on the unintentionally shared data, this short exposure of screen contents may be a more or less severe security issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-18T13:59:36.000Z
CVE-2021-28134 
Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-11T00:00:22.000Z
CVE-2021-28135 
The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (crash) in ESP32 by flooding the target device with LMP Feature Response data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T05:56:29.000Z
CVE-2021-28136 
The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO Capability Request packets during the pairing process, allowing attackers in radio range to trigger memory corruption (and consequently a crash) in ESP32 via a replayed (duplicated) LMP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T05:52:46.000Z
CVE-2021-28139 
The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LMP Feature Response Extended packet, allowing attackers in radio range to trigger arbitrary code execution in ESP32 via a crafted Extended Features bitfield payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-09-07T06:27:53.000Z
CVE-2021-28141 
An issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows unauthorized access to MicrosoftAjax.js through the Telerik.Web.UI.WebResource.axd file. This may allow the attacker to gain unauthorized access to the server and execute code. To exploit, one must use the parameter _TSM_HiddenField_ and inject a command at the end of the URI. NOTE: the vendor states that this is not a vulnerability. The request's output does not indicate that a "true" command was executed on the server, and the request's output does not leak any private source code or data from the server
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-11T16:25:57.000Z
CVE-2021-28142 
CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-06T14:07:23.000Z
CVE-2021-28143 
/jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-11T21:45:55.000Z
CVE-2021-28144 
prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in an admin or root context because SetVirtualServerSettings calls CheckArpTables, which calls popen unsafely.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-11T16:02:05.000Z
CVE-2021-28145 
Concrete CMS (formerly concrete5) before 8.5.5 allows remote authenticated users to conduct XSS attacks via a crafted survey block. This requires at least Editor privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-18T15:44:02.000Z
CVE-2021-28146 
The team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service, this vulnerability allows any authenticated user to add external groups to existing teams. This can be used to grant a user team permissions that the user isn't supposed to have.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-22T14:00:36.000Z
CVE-2021-28147 
The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service and having the EditorsCanAdmin feature enabled, this vulnerability allows any authenticated user to add external groups to any existing team. This can be used to grant a user team permissions that the user isn't supposed to have.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-22T14:03:53.000Z
CVE-2021-28148 
One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service (DoS) attack against a Grafana Enterprise instance.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-22T14:06:40.000Z
CVE-2021-28149 
Hongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ (e.g., ../../etc/passwd) This can be carried out with a web browser by changing the file name accordingly. Upon visiting log_download.cgi?type=../../etc/passwd and logging in, the web server will allow a download of the contents of the /etc/passwd file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-06T15:12:30.000Z
CVE-2021-28150 
Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-06T15:12:09.000Z