rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-27174 
An issue was discovered on FiberHome HG6245D devices through RP2613. wifi_custom.cfg has cleartext passwords and 0644 permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-10T18:34:59.000Z
CVE-2021-27175 
An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_2g.cfg has cleartext passwords and 0644 permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-10T18:34:49.000Z
CVE-2021-27176 
An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_5g.cfg has cleartext passwords and 0644 permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-10T18:34:40.000Z
CVE-2021-27177 
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-10T18:34:30.000Z
CVE-2021-27178 
An issue was discovered on FiberHome HG6245D devices through RP2613. Some passwords are stored in cleartext in nvram.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-10T18:34:16.000Z
CVE-2021-27179 
An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to crash the telnet daemon by sending a certain 0a 65 6e 61 62 6c 65 0a 02 0a 1a 0a string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-10T18:33:53.000Z
CVE-2021-27180 
An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail (aka WorldClient). It can be exploited via a GET request. It allows performing any action with the privileges of the attacked user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T22:26:56.000Z
CVE-2021-27181 
An issue was discovered in MDaemon before 20.0.4. Remote Administration allows an attacker to perform a fixation of the anti-CSRF token. In order to exploit this issue, the user has to click on a malicious URL provided by the attacker and successfully authenticate into the application. Having the value of the anti-CSRF token, the attacker may trick the user into visiting his malicious page and performing any request with the privileges of attacked user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T22:28:29.000Z
CVE-2021-27182 
An issue was discovered in MDaemon before 20.0.4. There is an IFRAME injection vulnerability in Webmail (aka WorldClient). It can be exploited via an email message. It allows an attacker to perform any action with the privileges of the attacked user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T22:29:59.000Z
CVE-2021-27183 
An issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to exploit an Arbitrary File Write vulnerability. An attacker is able to create new files in any location of the filesystem, or he may be able to modify existing files. This vulnerability may directly lead to Remote Code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-14T22:32:08.000Z
CVE-2021-27184 
Pelco Digital Sentry Server 7.18.72.11464 has an XML External Entity vulnerability (exploitable via the DTD parameter entities technique), resulting in disclosure and retrieval of arbitrary data on the affected node via an out-of-band (OOB) attack. The vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the ControlPointCacheShare.xml file (in a %APPDATA%\Pelco directory) when DSControlPoint.exe is executed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-11T05:38:19.000Z
CVE-2021-27185 
The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-10T21:04:28.000Z
CVE-2021-27186 
Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http_server/api/v1/metrics.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-10T21:24:31.000Z
CVE-2021-27187 
The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-12T07:58:37.000Z
CVE-2021-27188 
The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service (access suspended for five hours) by making five invalid login attempts to a victim's account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-12T08:00:11.000Z
CVE-2021-27189 
The CIRA Canadian Shield app before 4.0.13 for iOS lacks SSL Certificate Validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-22T23:16:51.000Z
CVE-2021-27190 
A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING 9.3.0 and 9.4.0, which are publicly available. The user supplied input containing polyglot payload is echoed back in javascript code in HTML response. This allows an attacker to input malicious JavaScript which can steal cookie, redirect them to other malicious website, etc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-12T02:24:50.000Z
CVE-2021-27191 
The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service (DoS) if the range is untrusted input. An attacker could send a large range (such as 128.0.0.0/1) that causes resource exhaustion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-11T16:21:43.000Z
CVE-2021-27192 
Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator privileges whilst using the clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-25T18:29:27.000Z
CVE-2021-27193 
Incorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to read and write files on the remote machine with system privileges resulting in a privilege escalation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-25T18:29:34.000Z
CVE-2021-27194 
Cleartext transmission of sensitive information in Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to gather credentials including Windows login usernames and passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-25T18:29:40.000Z
CVE-2021-27195 
Improper Authorization vulnerability in Netop Vision Pro up to and including to 9.7.1 allows an attacker to replay network traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-25T18:30:44.000Z
CVE-2021-27196 Specially Crafted IEC 61850 Protocol Sequence Vulnerability
Improper Input Validation vulnerability in Hitachi ABB Power Grids Relion 670 Series, Relion 670/650 Series, Relion 670/650/SAM600-IO, Relion 650, REB500, RTU500 Series, FOX615 (TEGO1), MSM, GMS600, PWC600 allows an attacker with access to the IEC 61850 network with knowledge of how to reproduce the attack, as well as the IP addresses of the different IEC 61850 access points (of IEDs/products), to force the device to reboot, which renders the device inoperable for approximately 60 seconds. This vulnerability affects only products with IEC 61850 interfaces. This issue affects: Hitachi ABB Power Grids Relion 670 Series 1.1; 1.2.3 versions prior to 1.2.3.20; 2.0 versions prior to 2.0.0.13; 2.1; 2.2.2 versions prior to 2.2.2.3; 2.2.3 versions prior to 2.2.3.2. Hitachi ABB Power Grids Relion 670/650 Series 2.2.0 versions prior to 2.2.0.13. Hitachi ABB Power Grids Relion 670/650/SAM600-IO 2.2.1 versions prior to 2.2.1.6. Hitachi ABB Power Grids Relion 650 1.1; 1.2; 1.3 versions prior to 1.3.0.7. Hitachi ABB Power Grids REB500 7.3; 7.4; 7.5; 7.6; 8.2; 8.3. Hitachi ABB Power Grids RTU500 Series 7.x version 7.x and prior versions; 8.x version 8.x and prior versions; 9.x version 9.x and prior versions; 10.x version 10.x and prior versions; 11.x version 11.x and prior versions; 12.x version 12.x and prior versions. Hitachi ABB Power Grids FOX615 (TEGO1) R1D02 version R1D02 and prior versions. Hitachi ABB Power Grids MSM 2.1.0 versions prior to 2.1.0. Hitachi ABB Power Grids GMS600 1.3.0 version 1.3.0 and prior versions. Hitachi ABB Power Grids PWC600 1.0 versions prior to 1.0.1.4; 1.1 versions prior to 1.1.0.1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: Hitachi ABB Power Grids thanks the following for working with us to help protect customers: Markus Mahrla, GAI NetConsult GmbH and Lars Lengersdorf, Amprion GmbH
Published: 2021-06-14T21:20:38.696Z
CVE-2021-27197 
DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write vulnerability. The AppendToTextFile method doesn't check if it's being called from the application or from a malicious user. The vulnerability is triggered when a remote attacker crafts an HTML page (e.g., with "OBJECT classid=" and "<SCRIPT language='vbscript'>") to overwrite arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-12T15:51:13.000Z
CVE-2021-27198 
An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web service when using a myspeed/sf?filename= URI. This application is written in Java and is thus cross-platform. The Windows installation runs as SYSTEM, which means that exploitation gives one Administrator privileges on the target system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-26T22:53:27.000Z
CVE-2021-27200 
In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. The code parameter is easily predicted from the time of day.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-11T17:40:45.000Z
CVE-2021-27201 
Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a backup comment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-15T18:17:00.000Z
CVE-2021-27203 
In Dekart Private Disk 2.15, invalid use of the Type3 user buffer for IOCTL codes using METHOD_NEITHER results in arbitrary memory dereferencing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-16T19:52:37.000Z
CVE-2021-27204 
Telegram before 7.4 (212543) Stable on macOS stores the local passcode in cleartext, leading to information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-12T07:48:51.000Z
CVE-2021-27205 
Telegram before 7.4 (212543) Stable on macOS stores the local copy of self-destructed messages in a sandbox path, leading to sensitive information disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-12T07:48:39.000Z
CVE-2021-27208 
When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code execution. Physical access and modification of the board assembly on which the Zynq-7000 SoC device mounted is needed to replace the original NAND flash memory with a NAND flash emulation device for this attack to be successful.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-15T12:27:26.000Z
CVE-2021-27209 
In the management interface on TP-Link Archer C5v 1.7_181221 devices, credentials are sent in a base64 format over cleartext HTTP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-13T00:05:15.000Z
CVE-2021-27210 
TP-Link Archer C5v 1.7_181221 devices allows remote attackers to retrieve cleartext credentials via [USER_CFG#0,0,0,0,0,0#0,0,0,0,0,0]0,0 to the /cgi?1&5 URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-13T00:04:57.000Z
CVE-2021-27211 
steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-15T18:40:48.000Z
CVE-2021-27212 
In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-14T02:53:26.000Z
CVE-2021-27213 
config.py in pystemon before 2021-02-13 allows code execution via YAML deserialization because SafeLoader and safe_load are not used.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-14T03:05:22.000Z
CVE-2021-27214 
A Server-side request forgery (SSRF) vulnerability in the ProductConfig servlet in Zoho ManageEngine ADSelfService Plus through 6013 allows a remote unauthenticated attacker to perform blind HTTP requests or perform a Cross-site scripting (XSS) attack against the administrative interface via an HTTP request, a different vulnerability than CVE-2019-3905.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-19T18:39:28.000Z
CVE-2021-27215 
An issue was discovered in genua genugate before 9.0 Z p19, 9.1.x through 9.6.x before 9.6 p7, and 10.x before 10.1 p4. The Web Interfaces (Admin, Userweb, Sidechannel) can use different methods to perform the authentication of a user. A specific authentication method during login does not check the provided data (when a certain manipulation occurs) and returns OK for any authentication request. This allows an attacker to login to the admin panel as a user of his choice, e.g., the root user (with highest privileges) or even a non-existing user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-03T15:45:53.000Z
CVE-2021-27216 
Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-06T04:44:50.000Z
CVE-2021-27217 
An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3. The function does not correctly validate the embedded length field of an authenticated message received from the device. Out-of-bounds reads performed by aes_remove_padding() can crash the running process, depending on the memory layout. This could be used by an attacker to cause a client-side denial of service. The yubihsm-shell project is included in the YubiHSM 2 SDK product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-04T17:45:33.000Z
CVE-2021-27218 
An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-15T16:27:20.000Z
CVE-2021-27219 
An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-15T16:27:38.000Z
CVE-2021-27220 
An issue was discovered in PRTG Network Monitor before 21.1.66.1623. By invoking the screenshot functionality with prepared context paths, an attacker is able to verify the existence of certain files on the filesystem of the PRTG's Web server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-31T21:50:56.000Z
CVE-2021-27221 
MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /export command. NOTE: the vendor's position is that this is intended behavior because of how user policies work
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-19T02:28:41.000Z
CVE-2021-27222 
In the "Time in Status" app before 4.13.0 for Jira, remote authenticated attackers can cause Stored XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-08T14:01:02.000Z
CVE-2021-27223 
A denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security. A local user could cause Windows crash by running a specially crafted binary module. The fix was delivered automatically. Credits: (Straghkov Denis, Kurmangaleev Shamil, Fedotov Andrey, Kuts Daniil, Mishechkin Maxim, Akolzin Vitaliy) @ ISPRAS
Problem types: description: Denial-of-Service (DoS)
Affected products: vendor: n/a
product: Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security
Published: 2022-04-01T22:17:48.000Z
CVE-2021-27224 
The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-17T15:44:24.000Z
CVE-2021-27225 
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have coding permissions) to read and overwrite notebooks in projects that they are not authorized to access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.4
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:N
version: 3.1
Published: 2021-03-01T00:24:18.000Z
CVE-2021-27228 
An issue was discovered in Shinobi through ocean version 1. lib/auth.js has Incorrect Access Control. Valid API Keys are held in an internal JS Object. Therefore an attacker can use JS Proto Method names (such as constructor or hasOwnProperty) to convince the System that the supplied API Key exists in the underlying JS object, and consequently achieve complete access to User/Admin/Super API functions, as demonstrated by a /super/constructor/accounts/list URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-22T16:16:53.000Z
CVE-2021-27229 
Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-16T03:04:01.000Z
CVE-2021-27230 
ExpressionEngine before 5.4.2 and 6.x before 6.0.3 allows PHP Code Injection by certain authenticated users who can leverage Translate::save() to write to an _lang.php file under the system/user/language directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-03-15T22:52:42.000Z
CVE-2021-27231 
Hestia Control Panel 1.3.5 and below, in a shared-hosting environment, sometimes allows remote authenticated users to create a subdomain for a different customer's domain name, leading to spoofing of services or email messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-16T03:19:56.000Z
CVE-2021-27232 
The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage using Internet Explorer where the exploit could be triggered.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-16T14:28:40.000Z
CVE-2021-27233 
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web application, password information for external systems is visible in cleartext. The Settings.asp page is affected by this issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-16T03:44:04.000Z
CVE-2021-27234 
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. The web application suffers from SQL injection on Adminlog.asp, Archivemsgs.asp, Deletelog.asp, Eventlog.asp, and Evmlog.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-16T03:43:52.000Z
CVE-2021-27235 
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web application, there is a functionality at diagzip.asp that allows anyone to export tables of a database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-16T03:43:36.000Z
CVE-2021-27236 
An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows Unauthenticated Local File Inclusion, which can be leveraged to achieve Remote Code Execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-16T03:43:23.000Z
CVE-2021-27237 
The admin panel in BlackCat CMS 1.3.6 allows stored XSS (by an admin) via the Display Name field to backend/preferences/ajax_save.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-02-16T18:23:00.000Z
CVE-2021-27239 
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upnpd service, which listens on UDP port 1900 by default. A crafted MX header field in an SSDP message can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11851.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: NETGEAR
product: Multiple Routers
Credits: lang: en
value: Anonymous
Published: 2021-03-29T21:05:29.000Z