rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-22911 
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injection, resulting potentially in RCE.
Problem types: cwe_id: CWE-75
description: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) (CWE-75)
Affected products: vendor: n/a
product: Rocket.Chat server
Published: 2021-05-27T11:14:39.000Z
CVE-2021-22912 
Nextcloud iOS before 3.4.2 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only on the local Nextcloud server unless a global search has been explicitly chosen by the user.
Problem types: cwe_id: CWE-200
description: Information Disclosure (CWE-200)
Affected products: vendor: n/a
product: Nextcloud iOS app (it.twsweb.Nextcloud)
Published: 2021-06-11T15:49:37.000Z
CVE-2021-22913 
Nextcloud Deck before 1.2.7, 1.4.1 suffers from an information disclosure vulnerability when searches for sharees utilize the lookup server by default instead of only the local Nextcloud server unless a global search has been explicitly chosen by the user.
Problem types: cwe_id: CWE-200
description: Information Disclosure (CWE-200)
Affected products: vendor: n/a
product: Nextcloud Deck
Published: 2021-06-11T15:49:37.000Z
CVE-2021-22914 
Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Citrix Cloud Connector installation log files. Such information could be used by an malicious actor to access a Citrix Cloud environment. This issue affects all versions of Citrix Cloud Connector that were installed by passing secure client parameters for installation via the command line. The issue does not affect Citrix Cloud Connector if it was installed using the interactive installer or where a parameter file was used with the command-line installer.
Problem types: cwe_id: CWE-922
description: Insecure Storage of Sensitive Information (CWE-922)
Affected products: vendor: n/a
product: Citrix Cloud Connector
Published: 2021-06-16T13:08:10.000Z
CVE-2021-22915 
Nextcloud server before 19.0.11, 20.0.10, 21.0.2 is vulnerable to brute force attacks due to lack of inclusion of IPv6 subnets in rate-limiting considerations. This could potentially result in an attacker bypassing rate-limit controls such as the Nextcloud brute-force protection.
Problem types: cwe_id: CWE-307
description: Brute Force (CWE-307)
Affected products: vendor: n/a
product: Nextcloud Server
Published: 2021-06-11T15:49:38.000Z
CVE-2021-22916 
In Brave Desktop between versions 1.17 and 1.26.60, when adblocking is enabled and a proxy browser extension is installed, the CNAME adblocking feature issues DNS requests that used the system DNS settings instead of the extension's proxy settings, resulting in possible information disclosure.
Problem types: cwe_id: CWE-200
description: Information Disclosure (CWE-200)
Affected products: vendor: n/a
product: https://github.com/brave/brave-core
Published: 2021-07-12T10:22:31.000Z
CVE-2021-22917 
Brave Browser Desktop between versions 1.17 and 1.20 is vulnerable to information disclosure by way of DNS requests in Tor windows not flowing through Tor if adblocking was enabled.
Problem types: cwe_id: CWE-200
description: Information Disclosure (CWE-200)
Affected products: vendor: n/a
product: https://github.com/brave/brave-core
Published: 2021-07-12T10:22:39.000Z
CVE-2021-22918 
Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII. The pointer p is read and increased without checking whether it is beyond pe, with the latter holding a pointer to the end of the buffer. This can lead to information disclosures or crashes. This function can be triggered via uv_getaddrinfo().
Problem types: cwe_id: CWE-125
description: Out-of-bounds Read (CWE-125)
Affected products: vendor: NodeJS
product: Node
default_status: unaffected
Published: 2021-07-12T00:00:00.000Z
CVE-2021-22919 
A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to the limited available disk space on the appliances being fully consumed.
Problem types: cwe_id: CWE-770
description: Allocation of Resources Without Limits or Throttling (CWE-770)
Affected products: vendor: n/a
product: Citrix ADC, Citrix Gateway, Citrix SD-WAN WANOP
Published: 2021-08-05T20:16:46.000Z
CVE-2021-22920 
A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO. These vulnerabilities, if exploited, could lead to a phishing attack through a SAML authentication hijack to steal a valid user session.
Problem types: cwe_id: CWE-284
description: Improper Access Control - Generic (CWE-284)
Affected products: vendor: n/a
product: Citrix ADC, Citrix Gateway
Published: 2021-08-05T20:16:49.000Z
CVE-2021-22921 
Node.js before 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms. More specifically, improper configuration of permissions in the installation directory allows an attacker to perform two different escalation attacks: PATH and DLL hijacking.
Problem types: cwe_id: CWE-732
description: Incorrect Permission Assignment for Critical Resource (CWE-732)
Affected products: vendor: NodeJS
product: Node
default_status: unaffected
Published: 2021-07-12T10:22:24.000Z
CVE-2021-22922 
When curl is instructed to download content using the metalink feature, thecontents is verified against a hash provided in the metalink XML file.The metalink XML file points out to the client how to get the same contentfrom a set of different URLs, potentially hosted by different servers and theclient can then download the file from one or several of them. In a serial orparallel manner.If one of the servers hosting the contents has been breached and the contentsof the specific file on that server is replaced with a modified payload, curlshould detect this when the hash of the file mismatches after a completeddownload. It should remove the contents and instead try getting the contentsfrom another URL. This is not done, and instead such a hash mismatch is onlymentioned in text and the potentially malicious content is kept in the file ondisk.
Problem types: cwe_id: CWE-840
description: Business Logic Errors (CWE-840)
Affected products: vendor: n/a
product: https://github.com/curl/curl
Published: 2021-08-05T00:00:00.000Z
CVE-2021-22923 
When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from which curl will download or try to download the contents from. Often contrary to the user's expectations and intentions and without telling the user it happened.
Problem types: cwe_id: CWE-319
description: Cleartext Transmission of Sensitive Information (CWE-319)
Affected products: vendor: n/a
product: https://github.com/curl/curl
Published: 2021-08-05T00:00:00.000Z
CVE-2021-22924 
libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*,which could lead to libcurl reusing wrong connections.File paths are, or can be, case sensitive on many systems but not all, and caneven vary depending on used file systems.The comparison also didn't include the 'issuer cert' which a transfer can setto qualify how to verify the server certificate.
Problem types: cwe_id: CWE-20
description: Improper Input Validation (CWE-20)
Affected products: vendor: n/a
product: https://github.com/curl/curl
Published: 2021-08-05T20:16:56.000Z
CVE-2021-22925 
curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending `NEW_ENV` variables, libcurlcould be made to pass on uninitialized data from a stack based buffer to theserver. Therefore potentially revealing sensitive internal information to theserver using a clear-text network protocol.This could happen because curl did not call and use sscanf() correctly whenparsing the string provided by the application.
Problem types: cwe_id: CWE-200
description: Information Disclosure (CWE-200)
Affected products: vendor: n/a
product: https://github.com/curl/curl
Published: 2021-08-05T00:00:00.000Z
CVE-2021-22926 
libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with the command line tool).When libcurl is built to use the macOS native TLS library Secure Transport, an application can ask for the client certificate by name or with a file name - using the same option. If the name exists as a file, it will be used instead of by name.If the appliction runs with a current working directory that is writable by other users (like `/tmp`), a malicious user can create a file name with the same name as the app wants to use by name, and thereby trick the application to use the file based cert instead of the one referred to by name making libcurl send the wrong client certificate in the TLS connection handshake.
Problem types: cwe_id: CWE-840
description: Business Logic Errors (CWE-840)
Affected products: vendor: n/a
product: https://github.com/curl/curl
Published: 2021-08-05T00:00:00.000Z
CVE-2021-22927 
A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow an attacker to hijack a session.
Problem types: cwe_id: CWE-384
description: Session Fixation (CWE-384)
Affected products: vendor: n/a
product: Citrix ADC, Citrix Gateway
Published: 2021-08-05T20:16:42.000Z
CVE-2021-22928 
A vulnerability has been identified in Citrix Virtual Apps and Desktops that could, if exploited, allow a user of a Windows VDA that has either Citrix Profile Management or Citrix Profile Management WMI Plugin installed to escalate their privilege level on that Windows VDA to SYSTEM.
Problem types: description: Privilege Escalation (CAPEC-233)
Affected products: vendor: n/a
product: Citrix Virtual Apps and Desktops
Published: 2021-08-05T20:16:39.000Z
CVE-2021-22929 
An information disclosure exists in Brave Browser Desktop prior to version 1.28.62, where logged warning messages that included timestamps of connections to V2 onion domains in tor.log.
Problem types: cwe_id: CWE-312
description: Cleartext Storage of Sensitive Information (CWE-312)
Affected products: vendor: n/a
product: https://github.com/brave/brave-core
Published: 2021-08-31T16:53:26.000Z
CVE-2021-22930 
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.
Problem types: cwe_id: CWE-416
description: Use After Free (CWE-416)
Affected products: vendor: NodeJS
product: Node
default_status: unaffected
Published: 2021-10-07T00:00:00.000Z
CVE-2021-22931 
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library.
Problem types: cwe_id: CWE-170
description: Improper Null Termination (CWE-170)
Affected products: vendor: NodeJS
product: Node
default_status: unaffected
Published: 2021-08-16T00:00:00.000Z
CVE-2021-22932 
An issue has been identified in the CTX269106 mitigation tool for Citrix ShareFile storage zones controller which causes the ShareFile file encryption option to become disabled if it had previously been enabled. Customers are only affected by this issue if they previously selected “Enable Encryption” in the ShareFile configuration page and did not re-select this setting after running the CTX269106 mitigation tool. ShareFile customers who have not run the CTX269106 mitigation tool or who re-selected “Enable Encryption” immediately after running the tool are unaffected by this issue.
Problem types: cwe_id: CWE-311
description: Missing Encryption of Sensitive Data (CWE-311)
Affected products: vendor: n/a
product: Citrix ShareFile Storage Zones Controller
Published: 2021-08-16T18:38:51.000Z
CVE-2021-22933 
A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform an arbitrary file delete via a maliciously crafted web request.
Problem types: cwe_id: CWE-22
description: Path Traversal (CWE-22)
Affected products: vendor: n/a
product: Pulse Connect Secure
Published: 2021-08-16T18:38:41.000Z
CVE-2021-22934 
A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator or compromised Pulse Connect Secure device in a load-balanced configuration to perform a buffer overflow via a malicious crafted web request.
Problem types: cwe_id: CWE-120
description: Classic Buffer Overflow (CWE-120)
Affected products: vendor: n/a
product: Pulse Connect Secure
Published: 2021-08-16T18:38:45.000Z
CVE-2021-22935 
A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter.
Problem types: cwe_id: CWE-77
description: Command Injection - Generic (CWE-77)
Affected products: vendor: n/a
product: Pulse Connect Secure
Published: 2021-08-16T18:38:49.000Z
CVE-2021-22936 
A vulnerability in Pulse Connect Secure before 9.1R12 could allow a threat actor to perform a cross-site script attack against an authenticated administrator via an unsanitized web parameter.
Problem types: cwe_id: CWE-79
description: Cross-site Scripting (XSS) - Reflected (CWE-79)
Affected products: vendor: n/a
product: Pulse Connect Secure
Published: 2021-08-16T18:38:52.000Z
CVE-2021-22937 
A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write via a maliciously crafted archive uploaded in the administrator web interface.
Problem types: cwe_id: CWE-434
description: Unrestricted Upload of File with Dangerous Type (CWE-434)
Affected products: vendor: n/a
product: Pulse Connect Secure
Published: 2021-08-16T18:38:54.000Z
CVE-2021-22938 
A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform command injection via an unsanitized web parameter in the administrator web console.
Problem types: cwe_id: CWE-77
description: Command Injection - Generic (CWE-77)
Affected products: vendor: n/a
product: Pulse Connect Secure
Published: 2021-08-16T18:38:43.000Z
CVE-2021-22939 
If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted.
Problem types: cwe_id: CWE-295
description: Improper Certificate Validation (CWE-295)
Affected products: vendor: NodeJS
product: Node
default_status: unaffected
Published: 2021-08-16T00:00:00.000Z
CVE-2021-22940 
Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.
Problem types: cwe_id: CWE-416
description: Use After Free (CWE-416)
Affected products: vendor: NodeJS
product: Node
default_status: unaffected
Published: 2021-08-16T00:00:00.000Z
CVE-2021-22941 
Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.
Problem types: cwe_id: CWE-284
description: Improper Access Control - Generic (CWE-284)
Affected products: vendor: n/a
product: Citrix ShareFile storage zones controller
Published: 2021-09-23T12:44:31.000Z
CVE-2021-22942 
A possible open redirect vulnerability in the Host Authorization middleware in Action Pack >= 6.0.0 that could allow attackers to redirect users to a malicious website.
Problem types: cwe_id: CWE-601
description: Open Redirect (CWE-601)
Affected products: vendor: n/a
product: https://github.com/rails/rails
Published: 2021-10-18T00:00:00.000Z
CVE-2021-22943 
A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subsequently control the Protect camera(s) assigned to said network. This vulnerability is fixed in UniFi Protect application V1.19.0 and later.
Problem types: cwe_id: CWE-287
description: Improper Authentication - Generic (CWE-287)
Affected products: vendor: n/a
product: UniFi Protect application
Published: 2021-08-31T16:53:19.000Z
CVE-2021-22944 
A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor with a view-only role and network access to gain the same privileges as the owner of the UniFi Protect application. This vulnerability is fixed in UniFi Protect application V1.19.0 and later.
Problem types: description: Privilege Escalation (CAPEC-233)
Affected products: vendor: n/a
product: UniFi Protect application
Published: 2021-08-31T16:53:08.000Z
CVE-2021-22945 
When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it *again*.
Problem types: cwe_id: CWE-415
description: Double Free (CWE-415)
Affected products: vendor: n/a
product: https://github.com/curl/curl
Published: 2021-09-23T00:00:00.000Z
CVE-2021-22946 
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line or`CURLOPT_USE_SSL` set to `CURLUSESSL_CONTROL` or `CURLUSESSL_ALL` withlibcurl). This requirement could be bypassed if the server would return a properly crafted but perfectly legitimate response.This flaw would then make curl silently continue its operations **withoutTLS** contrary to the instructions and expectations, exposing possibly sensitive data in clear text over the network.
Problem types: cwe_id: CWE-325
description: Missing Required Cryptographic Step (CWE-325)
Affected products: vendor: n/a
product: https://github.com/curl/curl
Published: 2021-09-29T00:00:00.000Z
CVE-2021-22947 
When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that curl caches. curl would then upgrade to TLS but not flush the in-queue of cached responses but instead continue using and trustingthe responses it got *before* the TLS handshake as if they were authenticated.Using this flaw, it allows a Man-In-The-Middle attacker to first inject the fake responses, then pass-through the TLS traffic from the legitimate server and trick curl into sending data back to the user thinking the attacker's injected data comes from the TLS-protected server.
Problem types: cwe_id: CWE-310
description: Cryptographic Issues - Generic (CWE-310)
Affected products: vendor: n/a
product: https://github.com/curl/curl
Published: 2021-09-29T00:00:00.000Z
CVE-2021-22948 
Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqid() PHP function. Under some circumstances, an attacker could theoretically be able to brute force session IDs in order to take over a specific account.
Problem types: cwe_id: CWE-79
description: Cross-site Scripting (XSS) - Reflected (CWE-79)
Affected products: vendor: n/a
product: https://github.com/revive-adserver/revive-adserver
Published: 2021-09-23T12:44:20.000Z
CVE-2021-22949 
A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to duplicate files which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: "Solar Security CMS Research Team"
Problem types: cwe_id: CWE-352
description: Cross-Site Request Forgery (CSRF) (CWE-352)
Affected products: vendor: n/a
product: https://github.com/concrete5/concrete5
Published: 2021-09-23T12:40:45.000Z
CVE-2021-22950 
Concrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachments to comments in the conversation section to be deleted.Credit for discovery: "Solar Security Research Team"
Problem types: cwe_id: CWE-352
description: Cross-Site Request Forgery (CSRF) (CWE-352)
Affected products: vendor: n/a
product: https://github.com/concrete5/concrete5
Published: 2021-09-23T12:40:52.000Z
CVE-2021-22951 
Unauthorized individuals could view password protected files using view_inline in Concrete CMS (previously concrete 5) prior to version 8.5.7. Concrete CMS now checks to see if a file has a password in view_inline and, if it does, the file is not rendered.For version 8.5.6, the following mitigations were put in place a. restricting file types for view_inline to images only b. putting a warning in the file manager to advise users.Credit for discovery: "Solar Security Research Team"Concrete CMS security team CVSS scoring is 5.3: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NThis fix is also in Concrete version 9.0.0
Problem types: cwe_id: CWE-639
description: Insecure Direct Object Reference (IDOR) (CWE-639)
Affected products: vendor: n/a
product: https://github.com/concrete5/concrete5
Published: 2021-11-19T18:10:14.000Z
CVE-2021-22952 
A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained access to a network to subsequently control Talk device(s) assigned to said network if they are not yet adopted. This vulnerability is fixed in UniFi Talk application V1.12.5 and later.
Problem types: cwe_id: CWE-94
description: Code Injection (CWE-94)
Affected products: vendor: n/a
product: UniFi Talk application
Published: 2021-09-23T12:41:07.000Z
CVE-2021-22953 
A CSRF in Concrete CMS version 8.5.5 and below allows an attacker to clone topics which can lead to UI inconvenience, and exhaustion of disk space.Credit for discovery: "Solar Security Research Team"
Problem types: cwe_id: CWE-352
description: Cross-Site Request Forgery (CSRF) (CWE-352)
Affected products: vendor: n/a
product: https://github.com/concrete5/concrete5
Published: 2021-09-23T12:42:12.000Z
CVE-2021-22954 
A cross-site request forgery vulnerability exists in Concrete CMS <v9 that could allow an attacker to make requests on behalf of other users.
Problem types: cwe_id: CWE-352
description: Cross-Site Request Forgery (CSRF) (CWE-352)
Affected products: vendor: n/a
product: https://github.com/concrete5/concrete5
Published: 2022-02-09T22:05:55.000Z
CVE-2021-22955 
A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN (Gateway) or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication.
Problem types: cwe_id: CWE-400
description: Denial of Service (CWE-400)
Affected products: vendor: n/a
product: Citrix ADC, Citrix Gateway
Published: 2021-12-07T13:12:33.000Z
CVE-2021-22956 
An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication.
Problem types: cwe_id: CWE-400
description: Denial of Service (CWE-400)
Affected products: vendor: n/a
product: Citrix ADC, Citrix Gateway, Citrix SDWAN
Published: 2021-12-07T13:12:38.000Z